'
metaflows logo
Category Started On Completed On Duration Cuckoo Version
FILE 2016-11-08 15:11:10.393730 2016-11-08 15:14:27.925197 197 seconds 2.0-dev
Machine Label Manager Started On Shutdown On
win7cuckoo win7 Clone 1 VirtualBox 2016-11-08 15:11:10 2016-11-08 15:14:27

File Details

File name 5f8785b6914cbc718a69c37957e7e9829270e393.zip
File size 1100 bytes
File type Zip archive data, at least v2.0 to extract
CRC32 D7B28ED2
MD5 9bfbf208074775c2a23d5fbf574b7d4b
SHA1 5f8785b6914cbc718a69c37957e7e9829270e393
SHA256 a976d64ea6066f6d034cbee611e39a6a9488dc02aea9381683de25bb3dc123ef
SHA512 60bef451227000de628020275be48b65361fd3a5e9f04e391294e99c2fb4fd8de6495fbcf2ecc39b1de78718455688329c7729c6840090e3ba4759a7c4f7ff55
Ssdeep 24:9gEBXe/l/LoY43Y3QcEOO8IIydc7szEA0ykt1FWIe/FF6VHaRLSjtqhEBxGn:9tBu/ls53Lc7EIOcNoktuIetcVHMGs26
PEiD None matched
Yara
  • PM_Zip_with_js ()
VirusTotal Permalink
VirusTotal Scan Date: 2016-11-08 13:33:31
Detection Rate: 7/56 (Expand)

MetaFlows Scores

Metaflows Analysis Results (Signatures=125, Anomalies=0, PEiD=0, Yara=2, VT[1478618110]=100): Snort Events=1, AV Events=2
Total Score=125

SNORT EVENTS:
ET POLICY PE EXE or DLL Windows file download HTTP

CLAMAV DETECTED:
Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND
DROPPED FILE - NRV_08PEC30_.js: Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND

Dropped File/Buffer Yara Signatures:
02a3c39d4987ca98b97d841db6f637441f8e2c8c [BUFFER]: Str_Win32_Http_API
30d93d698bb32f09172d788036c48f3e70d1dee5 [BUFFER]: shellcode

Signatures

antivm_queries_computername details
recon_fingerprint details
antivm_memory_available details
dumped_buffer details
creates_doc details
antivm_network_adapters details
dumped_buffer2 details
antivm_vbox_files details
Windows_Proxy_Tinkering details
network_wscript_downloader details
persistence_ads details
antiav_detectfile details
exploit_heapspray details
malicious_document_urls details
network_document_file details
network_downloader_exe details
antivm_vbox_devices details
antivm_vbox_files details
modifies_files details

Screenshots

No screenshots available.

Static Analysis

Nothing to display.

Dropped Files

2e499f69035fe5a6_gizcryf0-7am0-ficb-5186-d2e3545d62ea.thor

75ed7320aac50d47_gizcryf0-7am0-ficb-1ce1-afccbc9765b0.thor

be7668465252f200_gizcryf0-7am0-ficb-8ba0-d1accde6c7a8.thor

5e709335045c59cb_gizcryf0-7am0-ficb-16b5-b58edb32f7ff.thor

27eafd3f0d9cbc81_gizcryf0-7am0-ficb-d19e-4c60049628fc.thor

cec66686ac5a1e17_gizcryf0-7am0-ficb-d318-35e40293a2b4.thor

7d070c3d2ef50854_gizcryf0-7am0-ficb-36de-6e6d2efcfe37.thor

faf021b3c06abc41_tasks.xml

1c32d18571633391_gizcryf0-7am0-ficb-2268-a9cea5d123df.thor

16c0355ad673360d_gizcryf0-7am0-ficb-dc6f-ba6c470f9085.thor

d6fb0a4ace88bc28_gizcryf0-7am0-ficb-45bf-f0bdad317aff.thor

23ba19f72b9c411e_gizcryf0-7am0-ficb-f299-f3e2e000cbae.thor

cea50a39d62325b5_gizcryf0-7am0-ficb-87e4-990927deb9b5.thor

e3a1e845dfa75875_gizcryf0-7am0-ficb-cbe6-ee29d3c344b9.thor

180157fecefc5401_gizcryf0-7am0-ficb-6617-9ce6ccaca47f.thor

fe2dbb6dff6988ad_gizcryf0-7am0-ficb-eb52-8c4be6800688.thor

341992ef98c4c57e_gizcryf0-7am0-ficb-c1d4-740ae83a91fa.thor

85763cfc59607b32_gizcryf0-7am0-ficb-d01d-5397e3bb0804.thor

61dd701bae28b374_gizcryf0-7am0-ficb-41f6-22c4e8ef95f7.thor

027abb0209d9a95d_gizcryf0-7am0-ficb-a8eb-539621ef0b63.thor

d14d7915f368f5f8_gizcryf0-7am0-ficb-48a8-5941a41f5207.thor

1c9d2fba54521e97_gizcryf0-7am0-ficb-6cee-a42317712cf9.thor

4b68834445b3dc93_gizcryf0-7am0-ficb-ccfb-22c339e6395b.thor

2634fbbe76609d27_gizcryf0-7am0-ficb-d641-c32b76a841ab.thor

fd5f68b59aa2b3e8_resource.xml

776530670979d6cb_gizcryf0-7am0-ficb-52c6-161d4173600b.thor

58ad27c5b2792525_gizcryf0-7am0-ficb-2d14-1f8a0953b66f.thor

5df1b9c24a32d481_gizcryf0-7am0-ficb-3cd3-6de3f0599861.thor

cd08578977182661_gizcryf0-7am0-ficb-25cb-a267e3927e9f.thor

79d55f57640d1e90_gizcryf0-7am0-ficb-ed70-49f0c46bb680.thor

82c4d41eb99f2014_gizcryf0-7am0-ficb-4192-8221530df012.thor

cd71b7e5a2a4d597_gizcryf0-7am0-ficb-f9bf-397df7a9d077.thor

af7a12135db48bf2_resource.xml

07270fcee22d141b_gizcryf0-7am0-ficb-3c08-6110f594112c.thor

6128901d9655e571_gizcryf0-7am0-ficb-df9c-b2521cde07c7.thor

4bbe9bdb474a232f_gizcryf0-7am0-ficb-ca38-8e2409a26d3b.thor

2131b809e65ac509_gizcryf0-7am0-ficb-abf9-4aff95497150.thor

c56d3fb7a5bc5de5_gizcryf0-7am0-ficb-1efc-18b64f9c2fbe.thor

7839eed454060a35_gizcryf0-7am0-ficb-dd63-056d505cb997.thor

4d0cd80cd8350418_gizcryf0-7am0-ficb-dc2c-e69b5f562be4.thor

4b765b77b0af55a3_gizcryf0-7am0-ficb-4ca7-621ec276c5f5.thor

790ac0755a4d0123_gizcryf0-7am0-ficb-db7b-a192a7549279.thor

0b313d24fc3fabc8_gizcryf0-7am0-ficb-188c-314b5c1037d7.thor

cac72e1f01a0f56e_gizcryf0-7am0-ficb-e8cb-8ebd1cf93a44.thor

8e48fcfde9e72939_gizcryf0-7am0-ficb-d925-71161ff7b688.thor

3d39c8e954bc85c9_gizcryf0-7am0-ficb-3204-171cb2b2eb88.thor

86c05252eacc2b5d_tasks.xml

f96e0aedae01e522_gizcryf0-7am0-ficb-df2a-6b7d84c27bdd.thor

0a8438b57e9bb858_gizcryf0-7am0-ficb-e3c2-156672b80dd3.thor

88df0519ce4a87cc_gizcryf0-7am0-ficb-d471-a9ed6a95dd6a.thor

401c613f772f7cd9_gizcryf0-7am0-ficb-6f28-0f5659f87485.thor

90c0721870a959a3_gizcryf0-7am0-ficb-d50b-c1e7bc6c7ca9.thor

2ca48d56f5ef2d2f_gizcryf0-7am0-ficb-f0a2-6573562995b1.thor

b0e3720ff62bf06f_gizcryf0-7am0-ficb-05df-5911a0390ac0.thor

a22246a6b82ded51_gizcryf0-7am0-ficb-ef2f-c8f0c0145fee.thor

7c98f10f75f397f3_gizcryf0-7am0-ficb-b90d-38749d43e08a.thor

c5640298cf2844da_gizcryf0-7am0-ficb-3661-15e2bdc12ce4.thor

b6a802670a16bafc_gizcryf0-7am0-ficb-26ae-52132732a3aa.thor

f6e1b5053bdd7211_gizcryf0-7am0-ficb-d427-690f99bf255e.thor

2e28527f2282d306_gizcryf0-7am0-ficb-3b75-00fbf4b65825.thor

b1f9181b36f8a288_gizcryf0-7am0-ficb-5180-25277d4e2476.thor

b1658ad13b294258_gizcryf0-7am0-ficb-4f99-e5afc8c05fff.thor

dd15312008b421fd_gizcryf0-7am0-ficb-6b29-a9f5a2b0e90d.thor

eb996392a0bba9cb_gizcryf0-7am0-ficb-6247-5f66cd922840.thor

080563b618079a03_gizcryf0-7am0-ficb-89a1-e9102e0f8148.thor

949602e2b8d98a75_gizcryf0-7am0-ficb-3c72-a9b03f6a029a.thor

4ca49fe4cb6ede79_gizcryf0-7am0-ficb-7aa7-bae6a1c9fb08.thor

3648869928ad8f1b_gizcryf0-7am0-ficb-6736-242dffd45367.thor

c26be045acf189c5_gizcryf0-7am0-ficb-3eee-bb707d20cf8c.thor

395516d4223dd085_gizcryf0-7am0-ficb-4e26-680ca76d0579.thor

13eca2a2e0eedd1d_gizcryf0-7am0-ficb-966f-68e1c01f2b18.thor

17bca33cb6125fb6_gizcryf0-7am0-ficb-5efb-a3d03474d87c.thor

1d100f6ce099a741_gizcryf0-7am0-ficb-5dda-a983fb559ffb.thor

8d17c27fea1590c2_gizcryf0-7am0-ficb-99f4-c41eede59a83.thor

6fd3be31480c7bdd_gizcryf0-7am0-ficb-21a4-aabc40ae0abc.thor

c138074ec8cdc1d0_gizcryf0-7am0-ficb-f9ce-dccb0dcc2b4a.thor

b41f7342850e8239_gizcryf0-7am0-ficb-4846-43c46595e13b.thor

46cd042369efc37e_gizcryf0-7am0-ficb-7c30-dd69cb9726ae.thor

4b1ffa41395308a5_gizcryf0-7am0-ficb-d8de-37f2af0d3cb8.thor

ecd2e41704fe1ecc_gizcryf0-7am0-ficb-e05b-46a89b389bdf.thor

acf51eaf119b24d8_gizcryf0-7am0-ficb-531c-41b6a1b464d3.thor

ec05828656ead55f_gizcryf0-7am0-ficb-dbec-df0264978f79.thor

11cbea78ddc70c31_gizcryf0-7am0-ficb-658e-e3dd98ce555c.thor

98249f70b8889eef_gizcryf0-7am0-ficb-97f7-07954b6e83c5.thor

d761a4644af904b5_gizcryf0-7am0-ficb-d96f-ab2f18932023.thor

2a2f1815578e553a_gizcryf0-7am0-ficb-da99-ee147a81e20d.thor

160d3302a57a6b2e_gizcryf0-7am0-ficb-3d55-4e915818290f.thor

c6940dbe94378db7_gizcryf0-7am0-ficb-afde-dd313a8f821c.thor

7fc84f02722e284f_gizcryf0-7am0-ficb-6024-0cff8e5d898a.thor

0f38865769a6c935_gizcryf0-7am0-ficb-313e-aab3a3ea46b2.thor

fef0a43d155a7c15_gizcryf0-7am0-ficb-4eff-49ed2f1bf757.thor

64a947fb1c615b98_gizcryf0-7am0-ficb-b769-b2bdfd39458a.thor

0844c615e29284a9_gizcryf0-7am0-ficb-999a-eb0a05913603.thor

a863c26dea4f999d_gizcryf0-7am0-ficb-5309-d7ef59b13258.thor

f986bd7b6dc5b93a_gizcryf0-7am0-ficb-c37e-2e824f5a3717.thor

4172ec35511ef5e0_gizcryf0-7am0-ficb-bf04-b55d0ed4c5d4.thor

bc35cb4899acd90b_gizcryf0-7am0-ficb-49e4-ccfe33d3f945.thor

2b2abd848f7094a0_gizcryf0-7am0-ficb-2730-95c9e9b4acef.thor

7b1aa278e3491123_gizcryf0-7am0-ficb-0a5c-7421e832f975.thor

45e3fc9263668ec4_57evyr[1]

272e9b2f9d4c4e83_gizcryf0-7am0-ficb-e60a-47b3e8c6c318.thor

b3d1ce351007338c_gizcryf0-7am0-ficb-e2d1-6b9e4fdb0b5e.thor

44e130ec4b273e72_gizcryf0-7am0-ficb-7ca3-4a3a27483a9d.thor

cb1e7b33c38c8adf_gizcryf0-7am0-ficb-dcaf-845a56c2d720.thor

167741929489f776_gizcryf0-7am0-ficb-9e00-d504742fbd5f.thor

190f6987d916762b_gizcryf0-7am0-ficb-24cc-645b37bc98ed.thor

0263bb5559971b7e_gizcryf0-7am0-ficb-c015-3e95a00defc3.thor

20fd25a7b40f1c3e_gizcryf0-7am0-ficb-15b2-1bf063f193ea.thor

93c105a3012c8b8d_gizcryf0-7am0-ficb-a64a-b0cdd21ca72d.thor

15aa41ff3fed33f1_gizcryf0-7am0-ficb-5e16-8bf704936759.thor

ee041e0af6b4a6dc_gizcryf0-7am0-ficb-8f75-b8ef313d0d38.thor

57560436920d01b2_gizcryf0-7am0-ficb-9122-62f693545610.thor

624b95a45b81ed83_gizcryf0-7am0-ficb-e175-7e4feeb9a390.thor

d9d36bb73a706be3_gizcryf0-7am0-ficb-ac7e-29d7137f081a.thor

25a4337444cf70a9_gizcryf0-7am0-ficb-766a-04371dcce7f7.thor

050fe94cb86d4c71_gizcryf0-7am0-ficb-8586-af6a26e54df4.thor

0dda93dc99be8dd0_gizcryf0-7am0-ficb-8cff-5c80b3e1ee38.thor

54c45c57ba4e97a5_gizcryf0-7am0-ficb-df82-39830e2b33d9.thor

50a9a19445ec1a56_gizcryf0-7am0-ficb-0aa1-cd2b4aa39815.thor

bbb37f524d15f1f9_gizcryf0-7am0-ficb-ece2-d9f7ea5bdaf3.thor

15e94cd2cb6d24e0_gizcryf0-7am0-ficb-8103-e93d956a3768.thor

56c332a73c7b6315_gizcryf0-7am0-ficb-f624-5134e11d8b5f.thor

11d49711d2f91d14_gizcryf0-7am0-ficb-c835-643e666b862a.thor

d471a6736aea1d75_gizcryf0-7am0-ficb-470c-96805bfae473.thor

f1d878cb8f3fe7bd_gizcryf0-7am0-ficb-b0a3-05a82521d3a7.thor

e51adfdc50634d63_gizcryf0-7am0-ficb-a7cd-82dd9e17ab56.thor

6b962bec4d4e56e1_gizcryf0-7am0-ficb-2dde-a456c27c3ee2.thor

4f3a5b7a15cda829_gizcryf0-7am0-ficb-a70a-57f602f817d7.thor

0d62f5432601516c_gizcryf0-7am0-ficb-2562-b2c0554ca544.thor

80d8e797801103d4_gizcryf0-7am0-ficb-cee5-e9fbc7a8f903.thor

3546c113b2807b92_gizcryf0-7am0-ficb-8483-2b278b870f64.thor

1acacad66d44fac1_gizcryf0-7am0-ficb-e6eb-e86327bba859.thor

a01a0892e02b1e21_gizcryf0-7am0-ficb-e7e1-e151d59bbd56.thor

a9c5f20e07413829_gizcryf0-7am0-ficb-e9d2-409e78b02fd5.thor

98aadb92f93eb83a_gizcryf0-7am0-ficb-e106-21360286d346.thor

75d53c3b114cff2b_gizcryf0-7am0-ficb-e278-ff3a2e7ea2ce.thor

320712477d9a8873_gizcryf0-7am0-ficb-9be8-410a0fb42d9e.thor

cd875c9f0194d896_gizcryf0-7am0-ficb-724f-bd352d2ecf94.thor

33bf19c12ed46681_gizcryf0-7am0-ficb-9adf-e59b5a485856.thor

b356d16ca8a401ff_gizcryf0-7am0-ficb-2f81-948a569f6dc0.thor

025f86f5b27a0eae_gizcryf0-7am0-ficb-42bc-d80d5d6b3d54.thor

a17f724fc3e292cb_gizcryf0-7am0-ficb-58b9-e351709da2b4.thor

81d279787ead9a51__9_what_is.html

e096aac6f4e35470_gizcryf0-7am0-ficb-570c-7a5d3008d0dd.thor

50f4121329adedb0_gizcryf0-7am0-ficb-a50b-a8f101bf07e1.thor

867654a3545b0d68_gizcryf0-7am0-ficb-be0d-9aaddc55abf4.thor

115fb093e6b5c1a0_gizcryf0-7am0-ficb-dfd2-a7a235260ad1.thor

e44455c533ee6786_gizcryf0-7am0-ficb-d408-382489cdbdfe.thor

710a8c53a97dce63_gizcryf0-7am0-ficb-e3d4-08932fae56e2.thor

a8219a8505e3731f_gizcryf0-7am0-ficb-b877-fe4dcabc5e5f.thor

9b11a9f569411211_gizcryf0-7am0-ficb-11cf-3d20fac01c68.thor

10ea773e8b6777cd_gizcryf0-7am0-ficb-f4d3-87f587890e96.thor

5cc65730bf610e64_gizcryf0-7am0-ficb-33d3-408fb8999d50.thor

3ac53d4b3580f587_gizcryf0-7am0-ficb-3c8b-fd2b522a2b2b.thor

48eec6d972182551_gizcryf0-7am0-ficb-8a45-99bc6d7df36a.thor

3e97980703541476_gizcryf0-7am0-ficb-a3c1-321e85316653.thor

8931d34acc2d60b8_behavior.xml

d53dbbd28bb7373c_gizcryf0-7am0-ficb-e8ca-b018ab1d8d26.thor

77f657e682503ecd_gizcryf0-7am0-ficb-e062-aa1bf2711b24.thor

83c5e8b727afc567_gizcryf0-7am0-ficb-b416-8fdf4decd5a1.thor

57f0e2b189eb647d_gizcryf0-7am0-ficb-71ad-2ac495bf67a0.thor

15d2fcaa24e2bb24_gizcryf0-7am0-ficb-1cea-9c3d4bd06dcf.thor

f70cf42f1199d22a_gizcryf0-7am0-ficb-d1e3-ae7aa091c716.thor

c05a00dbbdc6b89c_gizcryf0-7am0-ficb-9362-0569a8fcc479.thor

beca62a559f24c4d_gizcryf0-7am0-ficb-a3b2-f3e0b49a9850.thor

e452ee63c27c2509_gizcryf0-7am0-ficb-78b1-8e30bfa90378.thor

71f61d4fb7154db2_gizcryf0-7am0-ficb-321c-cb5bbbb0b660.thor

f0b8e9fef906d2ff_gizcryf0-7am0-ficb-05cd-d02e63afd7ce.thor

d8a2c400a7b8dc0c_gizcryf0-7am0-ficb-3b63-b071d862a657.thor

bf7479ecbc8f9252_gizcryf0-7am0-ficb-e436-9b19b8dd321c.thor

d552f4a9c4dabd01_gizcryf0-7am0-ficb-cef4-56191f23f926.thor

edabc56984d43999_gizcryf0-7am0-ficb-dfcd-16b92e6a6d5e.thor

2cc8b0d427892fb2_gizcryf0-7am0-ficb-60e5-11f00f353bff.thor

acf0ec656c9d4c86_gizcryf0-7am0-ficb-de4a-440a463d0379.thor

fa8bf7397a313ec0_gizcryf0-7am0-ficb-2869-8ba2253003e5.thor

0d9f7c4db7bfb927_gizcryf0-7am0-ficb-6dc2-344e0670001e.thor

9b855c41f5c60950_gizcryf0-7am0-ficb-d319-8ec94e8b9a5b.thor

c1f7f4f6ae903953_gizcryf0-7am0-ficb-4f6e-bff7de14cf06.thor

6cfa20f682fd6971_gizcryf0-7am0-ficb-aeab-6c65185c9e96.thor

a47e0cfe7559b978_gizcryf0-7am0-ficb-1723-8344388323f5.thor

0fc5a62d5e3f52f0_gizcryf0-7am0-ficb-a1a6-b2f485e620a8.thor

79a91410494752b0_gizcryf0-7am0-ficb-33ab-9164532b249d.thor

2f18187556e43f1e_gizcryf0-7am0-ficb-5be5-6b270a21cede.thor

594c0a68887f9dcb_gizcryf0-7am0-ficb-7398-bab4b742885b.thor

85f83b8ceb0a2798_gizcryf0-7am0-ficb-1fe6-037a6e898120.thor

c848cbfcadbfa7a6_gizcryf0-7am0-ficb-cdd6-bbe7d019a2d0.thor

180dad9435e947ff_gizcryf0-7am0-ficb-a466-b5d370d43ed6.thor

b9c9925a5fb226b4_gizcryf0-7am0-ficb-49e8-c93fa830dd42.thor

19c330d5995a07bc_gizcryf0-7am0-ficb-48ad-23320d0f2ff9.thor

854fcf258d18db03_gizcryf0-7am0-ficb-7040-09b316ffc813.thor

67eeec14b441cdee_gizcryf0-7am0-ficb-97ca-2272ece33965.thor

fe886162ae839ce7_gizcryf0-7am0-ficb-baac-0aa4c44cb8fb.thor

fc9219adfb88d802_gizcryf0-7am0-ficb-68d5-83569c711523.thor

76b131e5921190b0_gizcryf0-7am0-ficb-f1ea-9ae3bda11f34.thor

dafe549604cdefc4_gizcryf0-7am0-ficb-af39-a4760aa81daa.thor

92c2ac2a6f585a0e_gizcryf0-7am0-ficb-6204-e29a97c25015.thor

c81537c930adc246_gizcryf0-7am0-ficb-f854-37811103f44d.thor

81396b03f48b6b51_gizcryf0-7am0-ficb-4e00-a7249f336a8e.thor

5f1687a26af6860c_gizcryf0-7am0-ficb-6d57-32e8abd75d21.thor

5802577ad03e18a3_gizcryf0-7am0-ficb-8eeb-ad5b39bc21fc.thor

f0572b5708c83015_behavior.xml

1dd61732be940e94_gizcryf0-7am0-ficb-ad35-d01e1ba17e1d.thor

0bfa31359168fcfb_gizcryf0-7am0-ficb-54dc-8da725ec2a18.thor

d2143abefaba3eee_gizcryf0-7am0-ficb-8399-663cc55353c6.thor

ee93bb26ca1cc652_gizcryf0-7am0-ficb-7cfc-f60ef9d223e4.thor

50e44daacbd13388_gizcryf0-7am0-ficb-706e-9d2d6938dc34.thor

0e817764f7fba7c5_gizcryf0-7am0-ficb-0c40-fdc2883fe4a9.thor

d603bb0d76b7b401_gizcryf0-7am0-ficb-d2d1-6044471c1aba.thor

3e66c0f918ae348f_gizcryf0-7am0-ficb-5809-36ab8bcfd392.thor

fb777aefaaebd9b9_gizcryf0-7am0-ficb-7b4a-7c08fcce938a.thor

28568a8d2c1ae5f5_gizcryf0-7am0-ficb-78a8-56acaa45ba4f.thor

d0ca69bd02a39cea_gizcryf0-7am0-ficb-bef7-6c56d18ddf0d.thor

940860bdbb4e39e4_gizcryf0-7am0-ficb-e950-9ad4b9fd03b3.thor

a39d7e3578e1b0ba_gizcryf0-7am0-ficb-caf1-45dae649f2a3.thor

79413cb2683e5ff9_gizcryf0-7am0-ficb-4ab5-aae69cc74772.thor

b1e7abb5a2f27bf7_gizcryf0-7am0-ficb-67bf-dfcc0d1c5afb.thor

3b0a71b34dadec8f_gizcryf0-7am0-ficb-287f-4b8141c7ebaf.thor

0d27d1c3fc015ab6_gizcryf0-7am0-ficb-700a-b689fd4debc8.thor

19a030d6b547413d_gizcryf0-7am0-ficb-ed23-407fe39a0e88.thor

9697ccdf2fc1b3db_gizcryf0-7am0-ficb-adb0-dce222ade28b.thor

49d89b188c09c2be_gizcryf0-7am0-ficb-3b2a-5dcb653d8bd7.thor

243ca55d4ec7493c_gizcryf0-7am0-ficb-41e1-a6268637cac7.thor

ed2364194094b101_gizcryf0-7am0-ficb-6fd7-0d8d7cbab277.thor

6c1147482911150f_gizcryf0-7am0-ficb-d57e-374e6db7b719.thor

d49ea1a2364f0564_gizcryf0-7am0-ficb-2319-3b4d432fb2f7.thor

95f5f9618e5dccd6_gizcryf0-7am0-ficb-00e2-5cbfd355f4c9.thor

83ea6aa232a552e5_gizcryf0-7am0-ficb-6b64-41cc0e8b80cd.thor

92448bbf76535bd9_gizcryf0-7am0-ficb-34a5-83ccb256e904.thor

cb018f8e34047b09_gizcryf0-7am0-ficb-b839-b391a8581a4f.thor

d576ee67e7661d97_gizcryf0-7am0-ficb-95e0-7c10698882d6.thor

789d770c3079686e_gizcryf0-7am0-ficb-dbcd-afd307267ede.thor

285ffbc63ef36b68_gizcryf0-7am0-ficb-9894-b884c0f49464.thor

60ba09074302ba52_gizcryf0-7am0-ficb-d83b-2278ed547ff8.thor

50bbd60a76c81477_gizcryf0-7am0-ficb-952c-54694f98b3d6.thor

34d08d6804a1c155_gizcryf0-7am0-ficb-1245-b012aa2f3712.thor

48cbebe607d4f2ff_gizcryf0-7am0-ficb-2c90-4e72dd1c98cb.thor

0f4c3a04093f72da_gizcryf0-7am0-ficb-d2ce-92710e6e1f00.thor

4360ebee31b66090_gizcryf0-7am0-ficb-7767-46ea2945df14.thor

537ea08d9e07b208_gizcryf0-7am0-ficb-2fea-b367a44ac355.thor

661011acd0cea736_gizcryf0-7am0-ficb-85ac-b6846fc3e643.thor

9d03169e8088a27e_gizcryf0-7am0-ficb-7243-7e8c7be020fa.thor

2f0e5c56066d66c5_gizcryf0-7am0-ficb-c11a-c6d50d72a769.thor

NRV_08PEC30_.js

Network Analysis

Hosts Involved

DNS Requests

HTTP Requests

Behavior Summary

File-Read
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\cleandesktop.py.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml
  • c:\Python27\include\pyexpat.h
  • c:\Python27\include\object.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\gdwiRrurBc.docx
  • c:\Python27\include\errcode.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg
  • c:\Python27\Lib\email\test\data\msg_45.txt
  • c:\Python27\Lib\test\keycert3.pem
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Desert.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\config.css
  • c:\Python27\include\intrcheck.h
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\Python27\Lib\test\ssl_cert.pem
  • c:\Python27\include\tupleobject.h
  • c:\Python27\include\pyconfig.h
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
  • c:\Python27\include\warnings.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Fastest PDF Search and Index.bmp
  • c:\Python27\include\pyerrors.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect your PDF files with AD RMS.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect your PDF files with AD RMS.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml
  • c:\Python27\include\cobject.h
  • c:\Python27\include\floatobject.h
  • c:\Python27\include\Python-ast.h
  • c:\Python27\include\osdefs.h
  • c:\Python27\Lib\test\empty.vbs
  • c:\Python27\Lib\email\test\data\msg_34.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\blank.gif
  • c:\Python27\include\pymacconfig.h
  • c:\6cdeacda242012e0e5b593e657\1055\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Python27\include\ceval.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • c:\Python27\include\grammar.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml
  • c:\vbhdzmbvlw\bin\cert.p12
  • c:\Python27\include\import.h
  • \\?\PIPE\browser
  • c:\Python27\include\pythonrun.h
  • c:\Python27\include\structmember.h
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\cacert.pem
  • c:\Python27\include\pyarena.h
  • c:\Python27\include\pygetopt.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_over_bg.jpg
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1033\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_33.txt
  • c:\Python27\Lib\test\selfsigned_pythontestdotnet.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Create PDF from Office-convert PDF to office.bmp
  • c:\Python27\include\ast.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your application.bmp
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\Profile.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Powerful Word Processor.bmp
  • c:\Python27\include\pgenheaders.h
  • c:\Python27\include\pythread.h
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\vqNnvPiEZBqsfyJ.docm
  • c:\ProgramData\Microsoft\IlsCache\imcrcache.xml
  • c:\6cdeacda242012e0e5b593e657\1038\LocalizedData.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png
  • c:\Python27\include\patchlevel.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\3082\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\2070\eula.rtf
  • c:\Python27\include\iterobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts\Harry Dresden.contact
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\vUZLmwYjRYxKUMnzUoQ.rtf
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx40_IIS_schema_update.xml
  • c:\6cdeacda242012e0e5b593e657\UiInfo.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Penguins.jpg
  • c:\Python27\include\structseq.h
  • c:\Python27\include\listobject.h
  • c:\Python27\Lib\test\keycert.pem
  • c:\Python27\Lib\email\test\data\msg_44.txt
  • c:\Python27\Lib\email\test\data\msg_42.txt
  • c:\Python27\include\traceback.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\Python27\include\rangeobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16-open.png
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_46.txt
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_37.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index_ori.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Powerful Word Processor.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml
  • c:\Python27\include\frameobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index.html
  • c:\Python27\include\longintrepr.h
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx40_IIS_schema_update.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\buy_phantom.png
  • c:\Python27\include\opcode.h
  • c:\Python27\include\parsetok.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css
  • c:\Python27\Lib\test\badcert.pem
  • c:\6cdeacda242012e0e5b593e657\1041\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1043\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1046\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\tcl\tix8.4.3\pref\TK.cs
  • c:\Python27\include\sliceobject.h
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • c:\Python27\include\pgen.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\6cdeacda242012e0e5b593e657\1040\LocalizedData.xml
  • c:\Python27\Lib\email\test\data\msg_43.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View PDFs on mobile devices.bmp
  • c:\Python27\include\moduleobject.h
  • c:\Python27\include\memoryobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\IeIAmTyDmV.ppt
  • c:\Python27\tcl\tix8.4.3\pref\TkWin.cs
  • c:\Python27\include\objimpl.h
  • c:\Python27\include\Python.h
  • c:\Python27\include\fileobject.h
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Kalimba.mp3
  • c:\Python27\include\stringobject.h
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\resource.xml
  • c:\ProgramData\Microsoft\IlsCache\ilrcache.xml
  • c:\Python27\include\token.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View PDFs on mobile devices.bmp
  • c:\Python27\include\bitset.h
  • c:\Python27\include\intobject.h
  • c:\Python27\include\bytes_methods.h
  • c:\Python27\include\dictobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp
  • c:\Python27\include\abstract.h
  • c:\Python27\include\pystate.h
  • c:\Python27\Lib\test\ssl_key.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_s.png
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png
  • c:\Python27\Lib\email\test\data\msg_35.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\version.xml
  • c:\Python27\include\descrobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_b.png
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • \\?\PIPE\wkssvc
  • c:\6cdeacda242012e0e5b593e657\1044\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml
  • c:\Python27\include\pymath.h
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Sleep Away.mp3
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Koala.jpg
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf
  • c:\Python27\include\timefuncs.h
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • c:\Python27\Lib\site-packages\setuptools\command\launcher manifest.xml
  • c:\Python27\tcl\tclConfig.sh
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml
  • c:\Python27\Lib\idlelib\help.txt
  • c:\Python27\Lib\email\test\data\msg_32.txt
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml
  • c:\Python27\Lib\test\185test.db
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1045\LocalizedData.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg
  • c:\6cdeacda242012e0e5b593e657\1037\LocalizedData.xml
  • c:\Python27\include\ucnhash.h
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\ssl_key.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\Lib\test\keycert2.pem
  • c:\Python27\include\py_curses.h
  • c:\Python27\Lib\test\keycert4.pem
  • c:\Python27\include\pyport.h
  • c:\6cdeacda242012e0e5b593e657\1042\LocalizedData.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_move_bg.jpg
  • c:\6cdeacda242012e0e5b593e657\1037\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\Strings.xml
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\entry_points.txt
  • c:\Python27\include\pystrcmp.h
  • c:\Python27\include\symtable.h
  • c:\Python27\include\setobject.h
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • c:\Python27\include\boolobject.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml
  • c:\6cdeacda242012e0e5b593e657\1053\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\MasterDescriptor.x-none.xml
  • c:\Python27\Lib\test\pycacert.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\top_tb_bg.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml
  • c:\Python27\include\code.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\uCYhgxOijycZ.txt
  • c:\Python27\include\dtoa.h
  • c:\Python27\include\graminit.h
  • c:\Python27\include\eval.h
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\Python27\include\funcobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml
  • c:\Python27\include\pydebug.h
  • c:\Python27\Lib\idlelib\idle.bat
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\big-hero-6-2.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png
  • c:\Python27\include\complexobject.h
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\dependency_links.txt
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Tulips.jpg
  • c:\6cdeacda242012e0e5b593e657\1049\eula.rtf
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx45_IIS_schema_update.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml
  • c:\Python27\include\methodobject.h
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Fastest PDF Search and Index.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp
  • c:\Python27\include\bytearrayobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect Sensitive PDF Documents.bmp
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • UNC\SHARDREALM\Users\Public\Videos\Sample Videos\Wildlife.wmv
  • c:\Python27\include\node.h
  • c:\Python27\Lib\test\badkey.pem
  • c:\Python27\include\cStringIO.h
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\jLzCtzglOAnbxSF.docx
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View and annotate PDFs.bmp
  • c:\Python27\include\bytesobject.h
  • c:\Python27\include\pyctype.h
  • c:\6cdeacda242012e0e5b593e657\1049\LocalizedData.xml
  • c:\Python27\include\unicodeobject.h
  • c:\Python27\include\sysmodule.h
  • c:\Python27\include\pymactoolbox.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Design form fields easily.bmp
  • c:\Python27\include\marshal.h
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\MasterDescriptor.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html
  • c:\6cdeacda242012e0e5b593e657\2070\LocalizedData.xml
  • c:\Python27\Lib\test\nokia.pem
  • UNC\SHARDREALM\Users\Default\NTUSER.DAT.LOG
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\skin.css
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect Sensitive PDF Documents.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp
  • \\?\PIPE\lsarpc
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml
  • c:\Python27\tcl\tix8.4.3\pref\Gray.cs
  • c:\Python27\Lib\email\test\data\msg_38.txt
  • c:\6cdeacda242012e0e5b593e657\2052\LocalizedData.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\body_bg.jpg
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\Python27\Lib\test\nullbytecert.pem
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • c:\Python27\include\pymem.h
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • c:\Python27\Lib\test\dh1024.pem
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\Lib\test\sha256.pem
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\NTYUpkRHRb.doc
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml
  • c:\Python27\include\pycapsule.h
  • c:\Python27\include\modsupport.h
  • c:\Python27\include\enumobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64mui.msi.16.en-us.xml
  • c:\Python27\include\classobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • c:\Python27\include\weakrefobject.h
  • c:\Python27\include\bufferobject.h
  • c:\Python27\include\datetime.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx45_IIS_schema_update.xml
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
  • c:\Python27\include\cellobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16.png
  • c:\Python27\include\metagrammar.h
  • c:\Python27\include\pyfpe.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View and annotate PDFs.bmp
  • c:\Python27\include\compile.h
  • c:\Python27\include\genobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your application.bmp
  • c:\Python27\include\codecs.h
  • C:\Users\Harry Dresden\Desktop\desktop.ini
  • C:\Users\Harry Dresden\AppData\Local\Temp\NRV_08PEC30_.js
  • C:\Windows\System32\wscript.exe
  • C:\Windows\System32\msxml3.dll
  • C:\Windows\System32\wshom.ocx
File-Written
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\_44_WHAT_is.html
  • c:\Python27\include\pyexpat.h
  • c:\Python27\Lib\email\test\data\msg_45.txt
  • c:\Python27\include\ast.h
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\_34_WHAT_is.html
  • c:\Python27\include\tupleobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp
  • c:\Python27\include\descrobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg
  • c:\6cdeacda242012e0e5b593e657\1037\_6_WHAT_is.html
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Python27\include\grammar.h
  • c:\Python27\include\import.h
  • \\?\PIPE\browser
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\Python27\Lib\test\nullcert.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • c:\ProgramData\WebEx\WebEx\12_1324\_21_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\UiInfo.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Penguins.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\Python27\include\marshal.h
  • c:\6cdeacda242012e0e5b593e657\2052\LocalizedData.xml
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\_43_WHAT_is.html
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\_1_WHAT_is.html
  • c:\Python27\Lib\test\badcert.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css
  • c:\Python27\include\pgen.h
  • c:\Python27\include\memoryobject.h
  • c:\Python27\include\objimpl.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx45_IIS_schema_update.xml
  • c:\Python27\include\abstract.h
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\6cdeacda242012e0e5b593e657\1042\LocalizedData.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png
  • c:\Python27\include\object.h
  • c:\Python27\Lib\idlelib\_31_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\LocalizedData.xml
  • c:\Python27\tcl\tclConfig.sh
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css
  • c:\Python27\include\pyport.h
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1040\_8_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\_3_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml
  • c:\Python27\include\code.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\Python27\include\dtoa.h
  • c:\Python27\Lib\test\empty.vbs
  • c:\ProgramData\Microsoft\IlsCache\ilrcache.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png
  • c:\Python27\include\complexobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect Sensitive PDF Documents.bmp
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • c:\Python27\include\intobject.h
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\Python27\include\pyctype.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html
  • c:\Python27\Lib\test\nokia.pem
  • c:\Python27\include\pydebug.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16.png
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\_40_WHAT_is.html
  • c:\Python27\include\fileobject.h
  • c:\Python27\include\modsupport.h
  • c:\Python27\include\enumobject.h
  • c:\Python27\Lib\test\ssl_key.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • c:\Python27\include\metagrammar.h
  • c:\Python27\include\pyfpe.h
  • c:\Python27\include\compile.h
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts\_11_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Videos\Sample Videos\_10_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg
  • c:\Python27\tcl\tix8.4.3\pref\_28_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1038\_7_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\config.css
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\structseq.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • c:\6cdeacda242012e0e5b593e657\1032\_27_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_over_bg.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\_8_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css
  • c:\Python27\include\pgenheaders.h
  • c:\Python27\include\pythread.h
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\_12_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Koala.jpg
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\vUZLmwYjRYxKUMnzUoQ.rtf
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\GIZCRYF0-7AM0-FICB-E950-9AD4B9FD03B3.thor
  • c:\6cdeacda242012e0e5b593e657\2052\_18_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\6cdeacda242012e0e5b593e657\1036\_5_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\_1_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index.html
  • c:\Python27\Lib\test\_0_WHAT_is.html
  • c:\Python27\include\opcode.h
  • c:\6cdeacda242012e0e5b593e657\1046\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\Python27\include\moduleobject.h
  • c:\Python27\Lib\email\test\data\msg_46.txt
  • c:\Python27\include\_4_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Kalimba.mp3
  • c:\Python27\include\boolobject.h
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\dependency_links.txt
  • c:\Python27\include\token.h
  • c:\Python27\include\bitset.h
  • c:\Python27\include\warnings.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\GIZCRYF0-7AM0-FICB-313E-AAB3A3EA46B2.thor
  • c:\Python27\include\pycapsule.h
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\MasterDescriptor.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1025\_22_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_42.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\GIZCRYF0-7AM0-FICB-1CEA-9C3D4BD06DCF.thor
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • c:\ProgramData\Microsoft\IlsCache\_48_WHAT_is.html
  • c:\Python27\Lib\idlelib\help.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\GIZCRYF0-7AM0-FICB-966F-68E1C01F2B18.thor
  • c:\6cdeacda242012e0e5b593e657\1046\_14_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\_47_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • c:\Python27\include\ucnhash.h
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\keycert4.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp
  • c:\6cdeacda242012e0e5b593e657\1028\_23_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_move_bg.jpg
  • c:\Python27\include\symtable.h
  • c:\Python27\include\node.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_b.png
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx40_IIS_schema_update.xml
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\_35_WHAT_is.html
  • UNC\SHARDREALM\Users\Default\_13_WHAT_is.html
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\GIZCRYF0-7AM0-FICB-D471-A9ED6A95DD6A.thor
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\big-hero-6-2.jpg
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Tulips.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Fastest PDF Search and Index.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\_5_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\_6_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • c:\Python27\include\cStringIO.h
  • c:\Python27\include\cobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\_42_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Design form fields easily.bmp
  • c:\6cdeacda242012e0e5b593e657\2070\LocalizedData.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\skin.css
  • \\?\PIPE\lsarpc
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg
  • c:\6cdeacda242012e0e5b593e657\2070\_19_WHAT_is.html
  • c:\Python27\tcl\_30_WHAT_is.html
  • c:\Python27\Lib\test\sha256.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_s.png
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
  • c:\Python27\include\classobject.h
  • c:\Python27\include\datetime.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your application.bmp
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\gdwiRrurBc.docx
  • c:\Python27\include\errcode.h
  • c:\Python27\Lib\test\keycert3.pem
  • c:\6cdeacda242012e0e5b593e657\1035\_3_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Fastest PDF Search and Index.bmp
  • c:\Python27\include\pyerrors.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml
  • c:\Python27\include\Python-ast.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\blank.gif
  • c:\6cdeacda242012e0e5b593e657\1055\LocalizedData.xml
  • c:\Python27\include\ceval.h
  • c:\Python27\include\pythonrun.h
  • c:\Python27\include\structmember.h
  • c:\Python27\include\pygetopt.h
  • c:\Python27\include\codecs.h
  • c:\6cdeacda242012e0e5b593e657\3082\_20_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_33.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\Profile.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index_ori.html
  • c:\6cdeacda242012e0e5b593e657\1038\LocalizedData.xml
  • c:\Python27\include\patchlevel.h
  • c:\Python27\include\bytes_methods.h
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx40_IIS_schema_update.xml
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf
  • c:\Python27\Lib\test\keycert.pem
  • c:\Python27\include\traceback.h
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1041\_9_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Powerful Word Processor.bmp
  • c:\Python27\include\longintrepr.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\buy_phantom.png
  • c:\6cdeacda242012e0e5b593e657\1041\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1053\_16_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml
  • c:\6cdeacda242012e0e5b593e657\1040\LocalizedData.xml
  • c:\Python27\include\Python.h
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\_0_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_34.txt
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\entry_points.txt
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View PDFs on mobile devices.bmp
  • c:\Python27\include\pystate.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\version.xml
  • c:\6cdeacda242012e0e5b593e657\1042\_10_WHAT_is.html
  • c:\Python27\include\pyconfig.h
  • c:\Python27\include\pymacconfig.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\1031\_26_WHAT_is.html
  • c:\Python27\include\bufferobject.h
  • c:\Python27\include\timefuncs.h
  • c:\6cdeacda242012e0e5b593e657\_33_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1049\_15_WHAT_is.html
  • c:\vbhdzmbvlw\bin\_2_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_37.txt
  • c:\Python27\include\graminit.h
  • c:\6cdeacda242012e0e5b593e657\1037\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\Strings.xml
  • c:\Python27\include\pystrcmp.h
  • c:\Python27\include\floatobject.h
  • UNC\SHARDREALM\Users\Default\NTUSER.DAT.LOG
  • c:\Python27\Lib\test\pycacert.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\top_tb_bg.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Powerful Word Processor.bmp
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\GIZCRYF0-7AM0-FICB-A50B-A8F101BF07E1.thor
  • c:\6cdeacda242012e0e5b593e657\1043\_11_WHAT_is.html
  • c:\Python27\Lib\email\test\data\_32_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Videos\Sample Videos\Wildlife.wmv
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\jLzCtzglOAnbxSF.docx
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • c:\Python27\include\bytesobject.h
  • c:\6cdeacda242012e0e5b593e657\1049\LocalizedData.xml
  • c:\Python27\include\sysmodule.h
  • c:\Python27\include\pymactoolbox.h
  • c:\Python27\Lib\email\test\data\msg_35.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\_4_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect Sensitive PDF Documents.bmp
  • c:\6cdeacda242012e0e5b593e657\1044\_12_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1045\_13_WHAT_is.html
  • c:\Python27\Lib\test\185test.db
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\cacert.pem
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\NTYUpkRHRb.doc
  • c:\Python27\include\eval.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\_41_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1033\_29_WHAT_is.html
  • c:\Python27\include\genobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\cleandesktop.py.txt
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Desert.jpg
  • c:\Python27\Lib\test\ssl_cert.pem
  • c:\Python27\include\parsetok.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\osdefs.h
  • \\?\PIPE\wkssvc
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\_2_WHAT_is.html
  • c:\vbhdzmbvlw\bin\cert.p12
  • c:\6cdeacda242012e0e5b593e657\1055\_17_WHAT_is.html
  • c:\Python27\Lib\site-packages\setuptools\command\_49_WHAT_is.html
  • c:\Python27\include\pymem.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\include\pyarena.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\_45_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1033\eula.rtf
  • c:\Python27\Lib\test\selfsigned_pythontestdotnet.pem
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\_46_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Create PDF from Office-convert PDF to office.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your application.bmp
  • c:\Python27\include\rangeobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\vqNnvPiEZBqsfyJ.docm
  • c:\ProgramData\Microsoft\IlsCache\imcrcache.xml
  • c:\6cdeacda242012e0e5b593e657\2070\eula.rtf
  • c:\Python27\include\iterobject.h
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf
  • c:\Python27\include\funcobject.h
  • c:\Python27\include\listobject.h
  • c:\Python27\Lib\email\test\data\msg_44.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16-open.png
  • c:\Python27\include\frameobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\_7_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\_9_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1043\LocalizedData.xml
  • c:\Python27\include\sliceobject.h
  • c:\Python27\tcl\tix8.4.3\pref\TK.cs
  • c:\Python27\Lib\email\test\data\msg_43.txt
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\IeIAmTyDmV.ppt
  • c:\Python27\include\stringobject.h
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts\Harry Dresden.contact
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\_38_WHAT_is.html
  • c:\Python27\tcl\tix8.4.3\pref\Gray.cs
  • c:\Python27\Lib\test\ssl_key.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • c:\Python27\include\methodobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp
  • c:\6cdeacda242012e0e5b593e657\1029\_24_WHAT_is.html
  • c:\Python27\include\pymath.h
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Sleep Away.mp3
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1030\_25_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_32.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg
  • c:\6cdeacda242012e0e5b593e657\1037\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1045\LocalizedData.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\Lib\test\keycert2.pem
  • c:\Python27\include\py_curses.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\GIZCRYF0-7AM0-FICB-D50B-C1E7BC6C7CA9.thor
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\_37_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\Python27\include\setobject.h
  • c:\6cdeacda242012e0e5b593e657\1053\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\MasterDescriptor.x-none.xml
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\uCYhgxOijycZ.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1049\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\_36_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View PDFs on mobile devices.bmp
  • c:\Python27\tcl\tix8.4.3\pref\TkWin.cs
  • c:\Python27\include\bytearrayobject.h
  • c:\Python27\Lib\test\badkey.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml
  • c:\6cdeacda242012e0e5b593e657\3082\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\_39_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View and annotate PDFs.bmp
  • c:\Python27\include\dictobject.h
  • c:\Python27\include\intrcheck.h
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_38.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\body_bg.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64mui.msi.16.en-us.xml
  • c:\Python27\Lib\test\nullbytecert.pem
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • c:\Python27\Lib\test\dh1024.pem
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml
  • c:\Python27\Lib\site-packages\setuptools\command\launcher manifest.xml
  • c:\Python27\include\weakrefobject.h
  • c:\Python27\Lib\idlelib\idle.bat
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx45_IIS_schema_update.xml
  • c:\Python27\include\unicodeobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View and annotate PDFs.bmp
  • c:\Python27\include\cellobject.h
  • C:\Users\Harry Dresden\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YLC2QM2Y\57evyr[1]
  • C:\Users\Harry Dresden\AppData\Local\Temp\Zcpr3kZIb.dll
File-Deleted
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\resource.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml
  • C:\Users\Harry Dresden\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000000.db
File-Opened
  • c:\Python27\include\frameobject.h
  • c:\Python27\include\pyexpat.h
  • c:\Python27\Lib\ctypes
  • UNC\SHARDREALM\Users\Harry Dresden\Documents
  • c:\Users\Default\Links
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages
  • c:\Python27\include\pymacconfig.h
  • c:\Python27\include\ast.h
  • c:\Python27\include\memoryobject.h
  • c:\Python27\Lib\site-packages\pip\_vendor\colorama
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources
  • c:\Python27\DLLs
  • c:\Python27\Lib\site-packages\pip\_vendor\cachecontrol
  • c:\Python27\include\tupleobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Favorites\Links for United States
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
  • c:\ProgramData\Microsoft\Event Viewer\Views\ApplicationViewsRootNode
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp
  • c:\ProgramData\Adobe\Setup
  • c:\Python27\Lib\test\empty.vbs
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg
  • c:\ProgramData\Microsoft\Assistance\Client\1.0\en-US
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\packages
  • UNC\SHARDREALM\Users\Harry Dresden\OneDrive
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Users\Harry Dresden\OneDrive
  • c:\Python27\include\grammar.h
  • c:\ProgramData\Microsoft\PlayReady\Cache\S-1-5-21-3416602863-1947377224-293699093-1001
  • c:\Python27\include\import.h
  • c:\Users\Public\Libraries
  • \\?\PIPE\browser
  • c:\Python27\Lib\test\tracedmodules
  • c:\ProgramData\Adobe\ARM
  • c:\Python27\tcl\tcl8.5\tzdata\Indian
  • c:\Users\Public
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Queue
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource
  • c:\Python27\Lib
  • \??\VBoxMiniRdrDN
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • c:\ProgramData
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • c:\6cdeacda242012e0e5b593e657\2052\LocalizedData.xml
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
  • c:\Python27\Lib\site-packages\pip
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\A5
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\A6
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\Python27\Lib\ctypes\macholib
  • c:\ProgramData\Adobe\Acrobat\11.0\Replicate\Security
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\UiInfo.xml
  • c:\inetpub\history\CFGHISTORY_0000000004\schema
  • c:\Python27\Lib\unittest\test
  • c:\ProgramData\Microsoft\PlayReady
  • c:\Python27\Lib\xml\dom
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00
  • c:\Python27\Lib\site-packages\pip\models
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\Python27\include\marshal.h
  • UNC\SHARDREALM\Users\Public\Foxit Software
  • c:\ProgramData\Adobe\Acrobat\11.0\Replicate
  • c:\Python27\Tools\i18n
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp
  • c:\Python27\tcl\tcl8\8.4
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog
  • c:\ProgramData\Microsoft\Crypto\Keys
  • UNC\SHARDREALM\Users\Public\Music\Sample Music
  • c:\inetpub\wwwroot\aspnet_client\system_web\4_0_30319
  • c:\Python27\Lib\ctypes\test
  • c:\Users\Harry Dresden\Searches
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml
  • c:\Python27\Lib\test\badcert.pem
  • c:\ProgramData\Adobe\ARM\S
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css
  • c:\Python27\Lib\ensurepip
  • c:\Python27\include\pgen.h
  • UNC\SHARDREALM\Users
  • c:\Python27\tcl\tcl8.5\tzdata\Canada
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\Users\Harry Dresden\Downloads
  • c:\Python27\include\objimpl.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • c:\ProgramData\Microsoft\eHome
  • c:\Python27\tcl\tk8.5\demos\images
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images
  • c:\Python27\Lib\test\cjkencodings
  • c:\inetpub\wwwroot\aspnet_client\system_web
  • UNC\SHARDREALM\Users\Public\Music
  • c:\Python27\tcl\tcl8.5\tzdata\America\Kentucky
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US
  • c:\Python27\include\abstract.h
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\Python27\Lib\test\keycert.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png
  • c:\vbhdzmbvlw\lib
  • c:\Python27\include\object.h
  • c:\Python27\tcl\tix8.4.3
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\LocalizedData.xml
  • c:\ProgramData\Microsoft\RAC\PublishedData
  • UNC\SHARDREALM\Users\Harry Dresden\Links
  • c:\inetpub\history\CFGHISTORY_0000000005
  • c:\inetpub\history\CFGHISTORY_0000000004
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml
  • c:\inetpub\history\CFGHISTORY_0000000001
  • c:\Python27\include\pydebug.h
  • c:\inetpub\history\CFGHISTORY_0000000003
  • c:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204
  • c:\Users\Harry Dresden\Favorites\Links for United States
  • c:\Python27\Lib\lib2to3\tests\data\fixers
  • c:\vbhdzmbvlw\lib\core
  • c:\Python27\tcl\tcl8.5\tzdata\US
  • c:\Python27\tcl\tcl8.5\tzdata
  • UNC\SHARDREALM\Users\Public\Videos
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css
  • c:\Python27\include\pyport.h
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • UNC\SHARDREALM\Users\Public\Documents
  • c:\Python27\Lib\email
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Kalimba.mp3
  • c:\Python27\tcl\tix8.4.3\demos\samples
  • c:\Python27\Lib\lib-tk\test\test_tkinter
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • UNC\SHARDREALM\Users\Harry Dresden\Music
  • c:\Python27\Tools\webchecker
  • c:\Python27\tcl\tcl8.5\tzdata\America\North_Dakota
  • c:\Python27\Lib\test\crashers
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\ProgramData\Microsoft\Windows Defender\LocalCopy
  • c:\6cdeacda242012e0e5b593e657\1037\LocalizedData.xml
  • c:\Python27\include\dtoa.h
  • c:\6cdeacda242012e0e5b593e657\1055\LocalizedData.xml
  • c:\Python27\include\asdl.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml
  • c:\Users\Harry Dresden\Contacts
  • c:\ProgramData\Microsoft\IlsCache\ilrcache.xml
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\E0
  • c:\PerfLogs
  • UNC\SHARDREALM\Users\Public\Libraries
  • c:\
  • c:\Python27\include\complexobject.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Entries
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\treebuilders
  • c:\Python27\tcl\tcl8\8.5
  • UNC\SHARDREALM\Users\Default\Desktop
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • c:\Python27\libs
  • c:\ProgramData\Microsoft\ClickToRun\MachineData
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect Sensitive PDF Documents.bmp
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts\Harry Dresden.contact
  • c:\ProgramData\Microsoft\Assistance
  • c:\Python27\include\bytesobject.h
  • c:\Python27\include\pyctype.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Results
  • c:\Users\Harry Dresden\Videos
  • c:\Python27\Lib\pydoc_data
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html
  • UNC\SHARDREALM\Users\Default\Music
  • c:\ProgramData\Microsoft\Crypto\DSS
  • c:\ProgramData\Adobe\Acrobat
  • c:\Python27\tcl\tcl8.5\tzdata\Atlantic
  • c:\ProgramData\NovaTech Network\NovaBench\3.0.2.0
  • c:\ProgramData\Microsoft\Network
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\1A
  • c:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger
  • c:\Users\Default\Downloads
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16.png
  • c:\Python27\Lib\xml
  • c:\Python27\tcl\tcl8.5\tzdata\Australia
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\17
  • c:\Python27\include\fileobject.h
  • c:\Python27\tcl\tk8.5
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • c:\ProgramData\Microsoft\PlayReady\Cache
  • c:\6cdeacda242012e0e5b593e657\3082
  • c:\Python27\Lib\site-packages\pip\compat
  • c:\Python27\Lib\test\leakers
  • c:\Python27\tcl\tcl8\8.4\platform
  • c:\Python27\include\modsupport.h
  • c:\ProgramData\regid.1991-06.com.microsoft
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\filters
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\DD
  • c:\Python27\Tools\pynche\X
  • c:\Python27\include\bufferobject.h
  • c:\Python27\Tools\Scripts
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\35
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore
  • c:\Python27\Lib\test\nokia.pem
  • c:\Python27\include\compile.h
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • C:\Users\Harry Dresden\AppData\Local\Temp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg
  • c:\Python27\tcl\tk8.5\images
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\config.css
  • c:\ProgramData\Microsoft\DRM
  • UNC\SHARDREALM\Users\Harry Dresden\Videos
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages\en-US
  • c:\Python27\Lib\idlelib\idle_test
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\Python27\include
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • c:\Python27\Lib\test\nullcert.pem
  • c:\Python27\Lib\site-packages\setuptools
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\cobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\1029
  • c:\6cdeacda242012e0e5b593e657\1028
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}
  • c:\Python27\Lib\site-packages\pip\commands
  • c:\Python27\Lib\lib2to3\tests\data\fixers\myfixes
  • c:\vbhdzmbvlw\modules\packages
  • c:\6cdeacda242012e0e5b593e657\1025
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us
  • c:\ProgramData\Adobe\ARM\S\5521
  • c:\Python27\Lib\email\test\data
  • c:\ProgramData\Microsoft\Windows Defender\Support
  • c:\ProgramData\WebEx\WebEx
  • c:\ProgramData\Microsoft\IlsCache\imcrcache.xml
  • c:\6cdeacda242012e0e5b593e657\2052
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Sleep Away.mp3
  • c:\Python27\Lib\email\test\data\msg_44.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css
  • UNC\SHARDREALM\Users\Default\Saved Games
  • c:\Python27\tcl\tcl8.5\opt0.4
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases
  • c:\Python27\include\pgenheaders.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US
  • c:\Python27\tcl\tcl8.5\encoding
  • c:\ProgramData\Microsoft\Diagnosis\ETLLogs
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • c:\Python27\Lib\msilib
  • c:\ProgramData\Microsoft\WwanSvc\Profiles
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts
  • c:\Python27\Lib\encodings
  • c:\Python27\Lib\site-packages\pip\_vendor\distlib\_backport
  • c:\ProgramData\Microsoft\Assistance\Client
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\vUZLmwYjRYxKUMnzUoQ.rtf
  • UNC\SHARDREALM\Users\Default\Pictures
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\95
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_42.txt
  • c:\Python27\Lib\site-packages\_markerlib
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\ProgramData\Microsoft\Diagnosis\LocalTraceStore
  • c:\Python27\Lib\site-packages\setuptools\command\launcher manifest.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index_ori.html
  • c:\inetpub\custerr
  • c:\Python27\include\longintrepr.h
  • c:\inetpub\custerr\en-US
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index.html
  • c:\Python27\Lib\site-packages\pip\_vendor\cachecontrol\caches
  • c:\Python27\Lib\test\185test.db
  • c:\Python27\include\opcode.h
  • c:\ProgramData\Microsoft\Crypto\RSA
  • c:\6cdeacda242012e0e5b593e657\1046\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\tcl\tk8.5\ttk
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\01
  • c:\Users\Default\Favorites
  • c:\inetpub\history
  • c:\Python27\include\moduleobject.h
  • c:\ProgramData\Microsoft\Windows NT
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\chardet
  • c:\ProgramData\Microsoft\Vault
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData
  • UNC\SHARDREALM\Users\Harry Dresden\Pictures
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\Python27\include\boolobject.h
  • C:\Windows\SysWOW64\en-US\VssTrace.DLL.mui
  • c:\Python27\include\token.h
  • UNC\SHARDREALM\Users\Default\Videos
  • c:\Python27\include\bitset.h
  • c:\Python27\include\warnings.h
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages
  • UNC\SHARDREALM\Users\Harry Dresden
  • c:\ProgramData\Mozilla\logs
  • c:\ProgramData\Microsoft\Search\Data\Applications
  • c:\Python27\include\pycapsule.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\70
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\MasterDescriptor.en-us.xml
  • c:\Python27\tcl\tcl8.5\tzdata\Mexico
  • c:\Python27\Lib\importlib
  • c:\ProgramData\Microsoft\Crypto
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\ProgramData\NovaTech Network\NovaBench\3.0.2.0\media
  • c:\Python27\tcl\tcl8.5
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Koala.jpg
  • c:\Python27\tcl\tcl8.5\tzdata\Africa
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • c:\ProgramData\McAfee
  • c:\Python27\include\enumobject.h
  • c:\Python27\Lib\idlelib\help.txt
  • c:\Python27\Lib\site-packages\pip\vcs
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\Lib\bsddb\test
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\43
  • c:\Python27\Lib\test\keycert2.pem
  • UNC\SHARDREALM\Users\Public\Recorded TV
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\F7
  • c:\Python27\include\ucnhash.h
  • c:\Python27\include\py_curses.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\F3
  • c:\Python27\Lib\xml\parsers
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\keycert4.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp
  • c:\Python27\tcl\tcl8.5\msgs
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_move_bg.jpg
  • c:\vbhdzmbvlw\modules
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Inbox
  • c:\Users\Harry Dresden
  • c:\ProgramData\Microsoft\Windows Defender
  • c:\Python27\include\node.h
  • c:\ProgramData\McAfee\MCLOGS\Common\jxpiinstall
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx40_IIS_schema_update.xml
  • c:\ProgramData\Microsoft\Windows Defender\Quarantine
  • c:\Users\Public\Favorites
  • c:\Python27\Lib\site-packages\pkg_resources\_vendor
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Penguins.jpg
  • c:\Python27\Lib\email\test\data\msg_43.txt
  • c:\ProgramData\Microsoft\Office
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\big-hero-6-2.jpg
  • UNC\SHARDREALM\Users\Public
  • c:\ProgramData\NovaTech Network\NovaBench
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Tulips.jpg
  • c:\Python27\Lib\site-packages\pip\_vendor\_markerlib
  • c:\Python27\tcl\reg1.2
  • c:\Users\ruiner
  • c:\Python27\Lib\xml\etree
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Fastest PDF Search and Index.bmp
  • c:\ProgramData\Microsoft\Media Player
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl
  • c:\Users\Public\Videos\Sample Videos
  • UNC\SHARDREALM\Users\Harry Dresden\Favorites
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\01
  • c:\Python27\include\symtable.h
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • c:\Python27\include\cStringIO.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\util
  • c:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Design form fields easily.bmp
  • c:\Python27\tcl\tcl8.5\tzdata\Antarctica
  • c:\Python27\Lib\xml\sax
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\trie
  • c:\Users\Harry Dresden\Desktop
  • c:\Users\Public\Recorded TV
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\skin.css
  • c:\ProgramData\Microsoft\Office\Heartbeat
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\42
  • c:\Python27\tcl\tcl8.5\tzdata\Etc
  • c:\Python27\Lib\bsddb
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\47
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\95
  • c:\vbhdzmbvlw\bin
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Integration\ShortcutBackups
  • c:\6cdeacda242012e0e5b593e657\1053\LocalizedData.xml
  • c:\Python27\Lib\wsgiref
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\contrib
  • c:\Python27\include\pyfpe.h
  • c:\ProgramData\Microsoft\User Account Pictures
  • c:\ProgramData\Sun\Java\Java Update
  • c:\Python27\Lib\test\sha256.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_s.png
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
  • c:\Users
  • c:\Users\Default\Saved Games
  • c:\Python27\Lib\site-packages\pip\_vendor\pkg_resources
  • c:\inetpub\history\CFGHISTORY_0000000005\schema
  • c:\Python27\include\datetime.h
  • c:\inetpub
  • c:\Users\Default
  • c:\Python27\tcl\tcl8.5\tzdata\Pacific
  • c:\ProgramData\Microsoft\Windows NT\MSFax\ActivityLog
  • c:\Python27\tcl\tk8.5\msgs
  • c:\Python27\tcl\tcl8.5\tzdata\America
  • c:\ProgramData\Microsoft\Diagnosis\DownloadedSettings
  • c:\ProgramData\Microsoft\Windows Defender\Definition Updates\{98101498-C465-4F51-8751-D1919E97D29D}
  • c:\inetpub\wwwroot
  • c:\Python27\Lib\multiprocessing\dummy
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your application.bmp
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml
  • c:\ProgramData\Microsoft\MF
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\gdwiRrurBc.docx
  • c:\Python27\include\errcode.h
  • c:\Python27\Lib\test
  • c:\Python27\Lib\test\keycert3.pem
  • c:\Users\Public\Downloads
  • c:\Python27\Lib\site-packages
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage
  • c:\ProgramData\Microsoft\Device Stage\Task
  • c:\6cdeacda242012e0e5b593e657\1045\LocalizedData.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Fastest PDF Search and Index.bmp
  • c:\Python27\include\pyerrors.h
  • c:\Python27\Lib\unittest
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\Graphics
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}
  • c:\Python27\Lib\test\capath
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\blank.gif
  • c:\Recovery
  • c:\ProgramData\Microsoft\Device Stage
  • c:\Python27\tcl\tk8.5\demos
  • c:\Python27\include\ceval.h
  • c:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18
  • UNC\SHARDREALM\Users\Public\Desktop
  • c:\ProgramData\Microsoft\Assistance\Client\1.0
  • c:\Python27\include\pythonrun.h
  • c:\Python27\include\structmember.h
  • c:\ProgramData\Oracle
  • c:\Python27\include\pygetopt.h
  • c:\Python27\Lib\distutils\tests
  • c:\Python27\include\codecs.h
  • c:\Python27\Lib\logging
  • c:\ProgramData\Microsoft\RAC
  • c:\Python27\Lib\site-packages\pip\req
  • c:\Users\Harry Dresden\Links
  • c:\ProgramData\Microsoft\DeviceSync
  • c:\Python27\Doc
  • c:\Python27\Lib\email\test\data\msg_33.txt
  • c:\Users\Public\Pictures
  • c:\Python27\tcl\tix8.4.3\demos\bitmaps
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\Profile.xml
  • c:\Python27\Lib\site-packages\pip\_vendor\requests
  • c:\6cdeacda242012e0e5b593e657\1038\LocalizedData.xml
  • c:\Python27\include\patchlevel.h
  • c:\Python27\include\bytes_methods.h
  • c:\Python27\Lib\compiler
  • c:\Python27\Scripts
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\47
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\42
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\17
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx40_IIS_schema_update.xml
  • c:\vbhdzmbvlw\modules\auxiliary
  • c:\Users\Public\Recorded TV\Sample Media
  • c:\Python27\include\structseq.h
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf
  • c:\Python27\Lib\test\keycert.pem
  • c:\Python27\include\traceback.h
  • c:\Python27\tcl\dde1.3
  • c:\Python27\tcl\tcl8.5\tzdata\SystemV
  • c:\ProgramData\NovaTech Network
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf
  • \\?\PIPE\lsarpc
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Powerful Word Processor.bmp
  • UNC\SHARDREALM\Users\ruiner
  • c:\ProgramData\Sun\Java
  • c:\Python27\Lib\test\ssl_cert.pem
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js
  • c:\ProgramData\Microsoft\Diagnosis\AsimovUploader
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\buy_phantom.png
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images
  • c:\6cdeacda242012e0e5b593e657\1041\LocalizedData.xml
  • c:\Python27\tcl\tcl8.5\tzdata\Chile
  • c:\ProgramData\Microsoft\ClickToRun\UserData
  • c:\Python27\Lib\test\xmltestdata
  • c:\ProgramData\Microsoft\WPD
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml
  • c:\6cdeacda242012e0e5b593e657\1040\LocalizedData.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View PDFs on mobile devices.bmp
  • c:\Python27\Lib\site-packages\pip\_vendor
  • c:\ProgramData\Sun
  • c:\Python27\include\Python.h
  • c:\vbhdzmbvlw\lib\common
  • UNC\SHARDREALM\Users\Default\Documents
  • c:\Python27\Lib\email\test\data\msg_34.txt
  • c:\Python27\tcl\tclConfig.sh
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\entry_points.txt
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf
  • c:\ProgramData\Microsoft\Diagnosis\ETLLogs\ShutdownLogger
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\resource.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View PDFs on mobile devices.bmp
  • c:\Python27\include\metagrammar.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\pystate.h
  • c:\Users\Default\Desktop
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\1A
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\treewalkers
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\version.xml
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}
  • c:\ProgramData\Microsoft\WwanSvc
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_b.png
  • \\?\PIPE\wkssvc
  • c:\ProgramData\Microsoft\Event Viewer\Views
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\json\tests
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\serializer
  • c:\Python27\Lib\email\test\data\msg_45.txt
  • c:\Python27\include\osdefs.h
  • c:\Python27\Tools
  • c:\Python27\include\timefuncs.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css
  • c:\ProgramData\Microsoft\IlsCache
  • c:\Python27\Lib\lib-tk
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Store
  • c:\ProgramData\Microsoft\Windows NT\MSFax\SentItems
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx45_IIS_schema_update.xml
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16
  • c:\Python27\Lib\site-packages\pip\operations
  • c:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox
  • c:\Python27\Lib\site-packages\pip\_vendor\lockfile
  • c:\Python27\Lib\curses
  • c:\6cdeacda242012e0e5b593e657\1037\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures
  • c:\Python27\include\pystrcmp.h
  • c:\Python27\include\floatobject.h
  • UNC\SHARDREALM\Users\Default\NTUSER.DAT.LOG
  • c:\Python27\Lib\test\pycacert.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\top_tb_bg.jpg
  • c:\Python27\include\pymactoolbox.h
  • c:\Python27\Lib\test\badkey.pem
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Integration
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Powerful Word Processor.bmp
  • c:\Users\Default\Music
  • c:\Python27\Lib\email\mime
  • c:\Users\Harry Dresden\Music
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt
  • c:\6cdeacda242012e0e5b593e657\1053
  • c:\6cdeacda242012e0e5b593e657\1055
  • UNC\SHARDREALM\Users\Public\Favorites
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3
  • c:\Python27\tcl\tcl8.5\tzdata\Asia
  • UNC\SHARDREALM\Users\Public\Downloads
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css
  • c:\Python27\Lib\multiprocessing
  • c:\Users\Default\Documents
  • UNC\SHARDREALM\Users\Public\Videos\Sample Videos\Wildlife.wmv
  • c:\Python27\Tools\pynche
  • c:\Users\Public\Desktop
  • c:\ProgramData\Microsoft\User Account Pictures\Default Pictures
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\jLzCtzglOAnbxSF.docx
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads
  • c:\Python27\Lib\lib-tk\test\test_ttk
  • c:\Users\Harry Dresden\Documents
  • c:\6cdeacda242012e0e5b593e657\1049\LocalizedData.xml
  • c:\Python27\include\sysmodule.h
  • c:\ProgramData\McAfee\MCLOGS\Common
  • c:\Python27\Lib\email\test\data\msg_35.txt
  • c:\vbhdzmbvlw
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml
  • UNC\SHARDREALM\Users\Harry Dresden\Favorites\Links
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect Sensitive PDF Documents.bmp
  • c:\ProgramData\Microsoft\IdentityCRL
  • c:\ProgramData\WebEx\WebEx\12_1324
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml
  • c:\Python27\Lib\site-packages\pip\utils
  • c:\Python27\Lib\distutils\command
  • c:\Users\Harry Dresden\Saved Games
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Edit and reflow paragraphs in PDF files.bmp
  • UNC\SHARDREALM\Users\Default
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\NTYUpkRHRb.doc
  • c:\6cdeacda242012e0e5b593e657\1042\LocalizedData.xml
  • c:\Python27\include\pyarena.h
  • UNC\SHARDREALM\Users\Public\Recorded TV\Sample Media
  • c:\Python27\include\eval.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_over_bg.jpg
  • c:\6cdeacda242012e0e5b593e657\2070\LocalizedData.xml
  • c:\Python27
  • c:\Python27\Lib\hotshot
  • c:\Python27\include\genobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\cleandesktop.py.txt
  • c:\Python27\Tools\versioncheck
  • c:\Python27\tcl\tcl8.5\tzdata\Arctic
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\F7
  • c:\Users\Public\Music
  • c:\6cdeacda242012e0e5b593e657\1033\eula.rtf
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\F3
  • c:\Python27\Lib\test\audiodata
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Desert.jpg
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\treeadapters
  • c:\Python27\include\intrcheck.h
  • c:\ProgramData\Microsoft\Network\Connections
  • c:\Python27\Lib\sqlite3
  • c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys
  • UNC\SHARDREALM\Users\Public\Pictures
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\43
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js
  • UNC\SHARDREALM\Users\Default\Downloads
  • UNC\SHARDREALM\Users\Default\Links
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg
  • c:\ProgramData\Microsoft\Diagnosis
  • c:\Python27\Lib\distutils
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
  • c:\Python27\Lib\site-packages\pip\_vendor\pkg_resources\tests
  • c:\Python27\Lib\idlelib\Icons
  • c:\ProgramData\Microsoft\Device Stage\Device
  • c:\Python27\Lib\site-packages\pip\_vendor\distlib
  • c:\Python27\Lib\test\subprocessdata
  • c:\vbhdzmbvlw\bin\cert.p12
  • c:\Python27\Lib\email\test\data\msg_46.txt
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\35
  • c:\Python27\include\pymem.h
  • c:\inetpub\wwwroot\aspnet_client
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\cacert.pem
  • c:\ProgramData\Microsoft\Network\Downloader
  • c:\Users\Public\Foxit Software
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick
  • c:\ProgramData\Microsoft\Windows NT\MSScan
  • c:\Python27\Lib\lib2to3\tests
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Create PDF from Office-convert PDF to office.bmp
  • c:\Python27\Lib\test\selfsigned_pythontestdotnet.pem
  • c:\ProgramData\Microsoft OneDrive\setup
  • c:\ProgramData\Microsoft\Crypto\DSS\MachineKeys
  • c:\6cdeacda242012e0e5b593e657\2070\eula.rtf
  • c:\Python27\Lib\site-packages\pkg_resources
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info
  • c:\Python27\include\Python-ast.h
  • c:\Python27\include\rangeobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\vqNnvPiEZBqsfyJ.docm
  • c:\Python27\tcl\tcl8.5\tzdata\Brazil
  • c:\Users\Harry Dresden\Favorites\Links
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64mui.msi.16.en-us.xml
  • c:\Python27\Lib\test\imghdrdata
  • c:\Python27\include\iterobject.h
  • c:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates
  • UNC\SHARDREALM\Users\Harry Dresden\Saved Games
  • c:\ProgramData\Microsoft\RAC\Outbound
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your application.bmp
  • c:\inetpub\history\CFGHISTORY_0000000002
  • c:\Python27\include\funcobject.h
  • c:\Python27\include\listobject.h
  • c:\ProgramData\Microsoft\NetFramework
  • c:\ProgramData\Adobe\ARM\Reader_11.0.10
  • c:\ProgramData\Microsoft
  • c:\Users\Public\Pictures\Sample Pictures
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Service
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16-open.png
  • c:\Users\Default\Videos
  • c:\ProgramData\Microsoft\Search\Data
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml
  • c:\Python27\tcl
  • c:\Python27\Lib\json
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • c:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\en-US
  • c:\Python27\include\pythread.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement
  • c:\Python27\Lib\lib2to3\fixes
  • c:\Python27\tcl\tix8.4.3\bitmaps
  • c:\Python27\Lib\site-packages\setuptools\command
  • c:\6cdeacda242012e0e5b593e657
  • c:\6cdeacda242012e0e5b593e657\1043\LocalizedData.xml
  • c:\Python27\tcl\tcl8.5\tzdata\America\Indiana
  • c:\6cdeacda242012e0e5b593e657\2070
  • c:\Python27\include\sliceobject.h
  • c:\Python27\tcl\tix8.4.3\pref\TK.cs
  • c:\Users\Public\Videos
  • c:\Python27\Lib\test\decimaltestdata
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\IeIAmTyDmV.ppt
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\DD
  • c:\Python27\include\descrobject.h
  • c:\ProgramData\Microsoft\Diagnosis\UIF
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\A6
  • c:\Python27\tcl\tcl8.5\tzdata\Europe
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\A5
  • c:\Python27\include\stringobject.h
  • c:\Python27\Lib\lib2to3
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default
  • c:\Python27\include\intobject.h
  • c:\ProgramData\Microsoft\Event Viewer
  • c:\ProgramData\Adobe\Setup\{AC76BA86-7AD7-1033-7B44-AB0000000001}
  • c:\Python27\tcl\tix8.4.3\pref\Gray.cs
  • c:\Python27\Lib\test\ssl_key.pem
  • c:\ProgramData\Microsoft\ClickToRun
  • c:\Python27\tcl\tix8.4.3\pref
  • c:\Python27\include\methodobject.h
  • c:\Python27\include\pyconfig.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp
  • UNC\SHARDREALM\Users\Default\Favorites
  • c:\Python27\tcl\tcl8.5\http1.0
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml
  • c:\Python27\include\pymath.h
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf
  • c:\Python27\include\parsetok.h
  • c:\ProgramData\Adobe\Acrobat\11.0
  • c:\Python27\Lib\email\test\data\msg_32.txt
  • c:\Python27\Lib\ensurepip\_bundled
  • c:\Python27\Lib\email\test\data\msg_37.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg
  • c:\Python27\include\classobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us
  • c:\Python27\Lib\test\ssl_key.passwd.pem
  • c:\Users\Public\Music\Sample Music
  • c:\Python27\tcl\tcl8
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager
  • c:\Python27\Lib\lib2to3\tests\data
  • c:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\Cache
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\70
  • c:\ProgramData\Microsoft OneDrive
  • UNC\SHARDREALM\Users\Harry Dresden\Searches
  • c:\Python27\tcl\tcl8.5\tzdata\America\Argentina
  • c:\Python27\include\setobject.h
  • c:\Recovery\015e7760-d44b-11e0-8947-954f09601788
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml
  • c:\Python27\Lib\idlelib
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\MasterDescriptor.x-none.xml
  • c:\PerfLogs\Admin
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\uCYhgxOijycZ.txt
  • c:\Python27\include\graminit.h
  • c:\Python27\Lib\site-packages\pip\_vendor\progress
  • c:\Users\Harry Dresden\Pictures
  • c:\ProgramData\Microsoft\Diagnosis\Sideload
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\packages\ssl_match_hostname
  • c:\Users\Harry Dresden\Favorites
  • c:\ProgramData\Passmark
  • c:\Python27\Lib\lib-tk\test
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\dependency_links.txt
  • c:\6cdeacda242012e0e5b593e657\Strings.xml
  • c:\6cdeacda242012e0e5b593e657\1049\eula.rtf
  • c:\ProgramData\Adobe
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • c:\Users\Public\Foxit Software\Foxit Reader
  • c:\ProgramData\Microsoft\Search
  • c:\ProgramData\Passmark\PerformanceTest
  • c:\Python27\tcl\tix8.4.3\pref\TkWin.cs
  • UNC\SHARDREALM\Users\Public\Videos\Sample Videos
  • c:\Python27\include\bytearrayobject.h
  • c:\ProgramData\Microsoft\NetFramework\BreadcrumbStore
  • c:\Python27\Lib\email\test
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}
  • c:\ProgramData\WebEx
  • c:\inetpub\wwwroot\msmq
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml
  • c:\Python27\tcl\tix8.4.3\demos
  • c:\6cdeacda242012e0e5b593e657\3082\LocalizedData.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View and annotate PDFs.bmp
  • c:\Python27\include\dictobject.h
  • c:\Python27\include\unicodeobject.h
  • c:\Python27\Lib\site-packages\pkg_resources\_vendor\packaging
  • c:\ProgramData\McAfee\MCLOGS
  • c:\Users\Default\Pictures
  • c:\6cdeacda242012e0e5b593e657\1049
  • c:\Users\Public\Documents
  • c:\6cdeacda242012e0e5b593e657\1046
  • c:\6cdeacda242012e0e5b593e657\1045
  • c:\6cdeacda242012e0e5b593e657\1044
  • c:\6cdeacda242012e0e5b593e657\1043
  • c:\6cdeacda242012e0e5b593e657\1042
  • c:\6cdeacda242012e0e5b593e657\1041
  • c:\6cdeacda242012e0e5b593e657\1040
  • c:\Python27\Lib\site-packages\pip\_vendor\packaging
  • c:\ProgramData\Microsoft\eHome\logs
  • c:\ProgramData\Microsoft\Windows Defender\Scans
  • c:\ProgramData\Microsoft\Windows NT\MSFax
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_38.txt
  • c:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\body_bg.jpg
  • c:\vbhdzmbvlw\lib\api
  • c:\Python27\Lib\test\nullbytecert.pem
  • c:\Python27\Lib\sqlite3\test
  • c:\Python27\Lib\test\dh1024.pem
  • c:\ProgramData\Mozilla
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\E0
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View and annotate PDFs.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml
  • c:\ProgramData\Microsoft\Windows Defender\Definition Updates
  • c:\Python27\include\weakrefobject.h
  • c:\Python27\Lib\lib2to3\pgen2
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History
  • c:\Python27\Lib\idlelib\idle.bat
  • c:\Python27\include\code.h
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx45_IIS_schema_update.xml
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • c:\Python27\include\cellobject.h
  • c:\ProgramData\Microsoft\RAC\StateData
  • c:\6cdeacda242012e0e5b593e657\1038
  • c:\ProgramData\Microsoft\DRM\Server
  • c:\6cdeacda242012e0e5b593e657\1032
  • c:\6cdeacda242012e0e5b593e657\1033
  • c:\6cdeacda242012e0e5b593e657\1030
  • c:\6cdeacda242012e0e5b593e657\1031
  • c:\6cdeacda242012e0e5b593e657\1036
  • c:\6cdeacda242012e0e5b593e657\1037
  • c:\6cdeacda242012e0e5b593e657\1035
  • C:\Windows\System32\wshqos.dll
  • C:\Windows\System32\wshom.ocx
  • C:\Windows\System32\en-US\wshqos.dll.mui
  • C:\
  • C:\Windows\Globalization\Sorting\sortdefault.nls
  • C:\Users\
  • C:\Users\Harry Dresden\
  • C:\Users\Harry Dresden\AppData\
  • C:\Users\Harry Dresden\AppData\Local\
  • C:\Windows\SysWOW64\rundll32.exe
  • C:\Users\Harry Dresden\AppData\Local\Temp\NRV_08PEC30_.js
  • C:\Users\Harry Dresden\Desktop\desktop.ini
  • C:\Windows\System32\en-US\wshtcpip.dll.mui
  • C:\Windows\System32\rsaenh.dll
  • C:\Windows\System32\msxml3.dll
  • C:\Windows\System32\en-US\wship6.dll.mui
  • C:\Windows\System32\wscript.exe
  • C:\Windows\
  • C:\Windows\SysWOW64\
File-Moved
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\GIZCRYF0-7AM0-FICB-D906-2F41C502B166.thor
  • c:\Python27\include\pyconfig.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-60E5-11F00F353BFF.thor
  • c:\Python27\Lib\email\test\data\msg_39.txt -> c:\Python27\Lib\email\test\data\GIZCRYF0-7AM0-FICB-48A8-5941A41F5207.thor
  • \\SHARDREALM\Users\Public\Music\Sample Music\Kalimba.mp3 -> \\SHARDREALM\Users\Public\Music\Sample Music\GIZCRYF0-7AM0-FICB-D4FD-9446148DEAC9.thor
  • c:\Python27\include\methodobject.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-67BF-DFCC0D1C5AFB.thor
  • c:\Python27\include\timefuncs.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-D57E-374E6DB7B719.thor
  • c:\Python27\include\intobject.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-2C90-4E72DD1C98CB.thor
  • c:\Python27\Lib\test\keycert4.pem -> c:\Python27\Lib\test\GIZCRYF0-7AM0-FICB-B839-B391A8581A4F.thor
  • \\SHARDREALM\Users\Public\Music\Sample Music\Sleep Away.mp3 -> \\SHARDREALM\Users\Public\Music\Sample Music\GIZCRYF0-7AM0-FICB-1CF3-D784EEF6993E.thor
  • c:\Python27\include\pystate.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-6B29-A9F5A2B0E90D.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYF0-7AM0-FICB-7850-303DEF1BAD3D.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your application.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYF0-7AM0-FICB-50B9-739A1D3BEE3A.thor
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt -> c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\GIZCRYF0-7AM0-FICB-4E26-680CA76D0579.thor
  • c:\Python27\include\abstract.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-5309-D7EF59B13258.thor
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx40_IIS_schema_update.xml -> c:\inetpub\history\CFGHISTORY_0000000005\schema\GIZCRYF0-7AM0-FICB-724F-BD352D2ECF94.thor
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs -> c:\Python27\tcl\tix8.4.3\pref\GIZCRYF0-7AM0-FICB-F9CE-DCCB0DCC2B4A.thor
  • c:\Python27\include\longintrepr.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-2319-3B4D432FB2F7.thor
  • c:\Python27\include\code.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-D319-8EC94E8B9A5B.thor
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml -> c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\GIZCRYF0-7AM0-FICB-3C72-A9B03F6A029A.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYF0-7AM0-FICB-1245-B012AA2F3712.thor
  • c:\Python27\include\weakrefobject.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-8103-E93D956A3768.thor
  • c:\Python27\include\pystrtod.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-5809-36AB8BCFD392.thor
  • c:\Python27\Lib\email\test\data\msg_32.txt -> c:\Python27\Lib\email\test\data\GIZCRYF0-7AM0-FICB-71AD-2AC495BF67A0.thor
  • c:\Python27\include\pystrcmp.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-0AA1-CD2B4AA39815.thor
  • c:\ProgramData\Microsoft\IlsCache\ilrcache.xml -> c:\ProgramData\Microsoft\IlsCache\GIZCRYF0-7AM0-FICB-7AA7-BAE6A1C9FB08.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYF0-7AM0-FICB-6024-0CFF8E5D898A.thor
  • c:\Python27\include\unicodeobject.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-AD35-D01E1BA17E1D.thor
  • c:\Python27\Lib\email\test\data\msg_40.txt -> c:\Python27\Lib\email\test\data\GIZCRYF0-7AM0-FICB-9362-0569A8FCC479.thor
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs -> c:\Python27\tcl\tix8.4.3\pref\GIZCRYF0-7AM0-FICB-E60A-47B3E8C6C318.thor
  • c:\6cdeacda242012e0e5b593e657\1043\LocalizedData.xml -> c:\6cdeacda242012e0e5b593e657\1043\GIZCRYF0-7AM0-FICB-F624-5134E11D8B5F.thor
  • c:\Python27\include\pymactoolbox.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-0C40-FDC2883FE4A9.thor
  • c:\Python27\include\modsupport.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-D2D1-6044471C1ABA.thor
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx45_IIS_schema_update.xml -> c:\inetpub\history\CFGHISTORY_0000000005\schema\GIZCRYF0-7AM0-FICB-9BE8-410A0FB42D9E.thor
  • c:\6cdeacda242012e0e5b593e657\3082\LocalizedData.xml -> c:\6cdeacda242012e0e5b593e657\3082\GIZCRYF0-7AM0-FICB-E8CA-B018AB1D8D26.thor
  • c:\6cdeacda242012e0e5b593e657\Strings.xml -> c:\6cdeacda242012e0e5b593e657\GIZCRYF0-7AM0-FICB-5E16-8BF704936759.thor
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml -> c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\F5188CE9E338BE48AA48E16619D16A66.tmp
  • c:\Python27\include\complexobject.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-DF9C-B2521CDE07C7.thor
  • \\SHARDREALM\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg -> \\SHARDREALM\Users\Public\Pictures\Sample Pictures\GIZCRYF0-7AM0-FICB-FB31-15FB5A410C9B.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYF0-7AM0-FICB-AFDE-DD313A8F821C.thor
  • c:\6cdeacda242012e0e5b593e657\1045\LocalizedData.xml -> c:\6cdeacda242012e0e5b593e657\1045\GIZCRYF0-7AM0-FICB-3C08-6110F594112C.thor
  • \\SHARDREALM\Users\Harry Dresden\Desktop\vqNnvPiEZBqsfyJ.docm -> \\SHARDREALM\Users\Harry Dresden\Desktop\GIZCRYF0-7AM0-FICB-9C3B-E4990AA0607B.thor
  • c:\Python27\include\Python.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-9122-62F693545610.thor
  • c:\Python27\include\descrobject.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-EB52-8C4BE6800688.thor
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx40_IIS_schema_update.xml -> c:\inetpub\history\CFGHISTORY_0000000004\schema\GIZCRYF0-7AM0-FICB-DC6F-BA6C470F9085.thor
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1038\GIZCRYF0-7AM0-FICB-8EEB-AD5B39BC21FC.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index_ori.html -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\GIZCRYF0-7AM0-FICB-A14F-4A80862969D6.thor
  • c:\Python27\include\enumobject.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-2FEA-B367A44AC355.thor
  • c:\Python27\Lib\email\test\data\msg_44.txt -> c:\Python27\Lib\email\test\data\GIZCRYF0-7AM0-FICB-AEAB-6C65185C9E96.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\buy_phantom.png -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\GIZCRYF0-7AM0-FICB-F986-E10225C85D34.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\Profile.xml -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYF0-7AM0-FICB-528D-55A4628A2D64.thor
  • c:\Python27\include\rangeobject.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-DF2A-6B7D84C27BDD.thor
  • c:\Python27\include\pymem.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-9E00-D504742FBD5F.thor
  • c:\Python27\include\pgen.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-B0A3-05A82521D3A7.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Edit and reflow paragraphs in PDF files.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYF0-7AM0-FICB-08B8-CB4F7B526086.thor
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1055\GIZCRYF0-7AM0-FICB-8A45-99BC6D7DF36A.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYF0-7AM0-FICB-50E7-0AEBDE1366F2.thor
  • c:\Python27\include\patchlevel.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-41E1-A6268637CAC7.thor
  • c:\Python27\include\pymacconfig.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-F9BF-397DF7A9D077.thor
  • c:\Python27\include\grammar.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-6617-9CE6CCACA47F.thor
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx45_IIS_schema_update.xml -> c:\inetpub\history\CFGHISTORY_0000000004\schema\GIZCRYF0-7AM0-FICB-97F7-07954B6E83C5.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index.html -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\GIZCRYF0-7AM0-FICB-73F8-452204B7E4AD.thor
  • c:\Python27\include\traceback.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-C835-643E666B862A.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Powerful Word Processor.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYF0-7AM0-FICB-B236-C3BD60B0EB67.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYF0-7AM0-FICB-B416-8FDF4DECD5A1.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View PDFs on mobile devices.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYF0-7AM0-FICB-F74E-4ED8F58DEA5F.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\GIZCRYF0-7AM0-FICB-6B16-77FC184EEAB2.thor
  • c:\Python27\Lib\test\keycert.pem -> c:\Python27\Lib\test\GIZCRYF0-7AM0-FICB-F4D3-87F587890E96.thor
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1053\GIZCRYF0-7AM0-FICB-87E4-990927DEB9B5.thor
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml -> c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\942C675B5B4EA6BED7BA01F425559D50.tmp
  • \\SHARDREALM\Users\Public\Videos\Sample Videos\Wildlife.wmv -> \\SHARDREALM\Users\Public\Videos\Sample Videos\GIZCRYF0-7AM0-FICB-9B20-73D73BA53C0B.thor
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf -> c:\6cdeacda242012e0e5b593e657\2052\GIZCRYF0-7AM0-FICB-F1EA-9AE3BDA11F34.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\GIZCRYF0-7AM0-FICB-8E6C-3B32E7E891EC.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYF0-7AM0-FICB-2562-B2C0554CA544.thor
  • c:\Python27\Lib\test\keycert2.pem -> c:\Python27\Lib\test\GIZCRYF0-7AM0-FICB-BEF7-6C56D18DDF0D.thor
  • c:\Python27\Lib\test\dh1024.pem -> c:\Python27\Lib\test\GIZCRYF0-7AM0-FICB-2268-A9CEA5D123DF.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYF0-7AM0-FICB-6AC5-2791D53F936D.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYF0-7AM0-FICB-34A5-83CCB256E904.thor
  • c:\Python27\include\bytearrayobject.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-706E-9D2D6938DC34.thor
  • \\SHARDREALM\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg -> \\SHARDREALM\Users\Public\Pictures\Sample Pictures\GIZCRYF0-7AM0-FICB-1943-6EAE0B1FC1E5.thor
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml -> c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\3A5320FEA68D7C814B6057429822DCB5.tmp
  • c:\Python27\Lib\idlelib\idle.bat -> c:\Python27\Lib\idlelib\GIZCRYF0-7AM0-FICB-A1A6-B2F485E620A8.thor
  • c:\Python27\include\marshal.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-3CD3-6DE3F0599861.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYF0-7AM0-FICB-E05B-46A89B389BDF.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYF0-7AM0-FICB-6CEE-A42317712CF9.thor
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\MasterDescriptor.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\GIZCRYF0-7AM0-FICB-05CD-D02E63AFD7CE.thor
  • c:\Python27\include\listobject.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-A64A-B0CDD21CA72D.thor
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\MasterDescriptor.x-none.xml -> c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\GIZCRYF0-7AM0-FICB-DFD2-A7A235260AD1.thor
  • c:\6cdeacda242012e0e5b593e657\1055\LocalizedData.xml -> c:\6cdeacda242012e0e5b593e657\1055\GIZCRYF0-7AM0-FICB-ADB0-DCE222ADE28B.thor
  • c:\Python27\include\ucnhash.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-A3B2-F3E0B49A9850.thor
  • c:\Python27\tcl\tix8.4.3\pref\Gray.cs -> c:\Python27\tcl\tix8.4.3\pref\GIZCRYF0-7AM0-FICB-E8CB-8EBD1CF93A44.thor
  • c:\Python27\include\memoryobject.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-95E0-7C10698882D6.thor
  • c:\Python27\include\import.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-287F-4B8141C7EBAF.thor
  • c:\Python27\include\Python-ast.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-C11A-C6D50D72A769.thor
  • c:\6cdeacda242012e0e5b593e657\1033\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1033\GIZCRYF0-7AM0-FICB-DBCD-AFD307267EDE.thor
  • c:\Python27\include\cobject.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-CCFB-22C339E6395B.thor
  • c:\Python27\include\funcobject.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-A3C1-321E85316653.thor
  • c:\Python27\Lib\email\test\data\msg_36.txt -> c:\Python27\Lib\email\test\data\GIZCRYF0-7AM0-FICB-BE0D-9AADDC55ABF4.thor
  • c:\Python27\Lib\test\keycert.passwd.pem -> c:\Python27\Lib\test\GIZCRYF0-7AM0-FICB-11CF-3D20FAC01C68.thor
  • c:\Python27\include\graminit.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-ECE2-D9F7EA5BDAF3.thor
  • c:\Python27\include\codecs.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-BF04-B55D0ED4C5D4.thor
  • \\SHARDREALM\Users\Harry Dresden\Contacts\Harry Dresden.contact -> \\SHARDREALM\Users\Harry Dresden\Contacts\GIZCRYF0-7AM0-FICB-B03E-7006027C29A4.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYF0-7AM0-FICB-35D0-C508BB1539F1.thor
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs -> c:\Python27\tcl\tix8.4.3\pref\GIZCRYF0-7AM0-FICB-5DDA-A983FB559FFB.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect Sensitive PDF Documents.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYF0-7AM0-FICB-505B-5630887202F0.thor
  • c:\Python27\Lib\email\test\data\msg_34.txt -> c:\Python27\Lib\email\test\data\GIZCRYF0-7AM0-FICB-4F99-E5AFC8C05FFF.thor
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1035\GIZCRYF0-7AM0-FICB-BAAC-0AA4C44CB8FB.thor
  • \\SHARDREALM\Users\Public\Pictures\Sample Pictures\Penguins.jpg -> \\SHARDREALM\Users\Public\Pictures\Sample Pictures\GIZCRYF0-7AM0-FICB-DD62-A5848B41BFB7.thor
  • c:\Python27\Lib\email\test\data\msg_35.txt -> c:\Python27\Lib\email\test\data\GIZCRYF0-7AM0-FICB-6B64-41CC0E8B80CD.thor
  • c:\Python27\include\pycapsule.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-E436-9B19B8DD321C.thor
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1028\GIZCRYF0-7AM0-FICB-DC2C-E69B5F562BE4.thor
  • c:\Python27\Lib\email\test\data\msg_30.txt -> c:\Python27\Lib\email\test\data\GIZCRYF0-7AM0-FICB-4AB5-AAE69CC74772.thor
  • c:\6cdeacda242012e0e5b593e657\1038\LocalizedData.xml -> c:\6cdeacda242012e0e5b593e657\1038\GIZCRYF0-7AM0-FICB-5186-D2E3545D62EA.thor
  • \\SHARDREALM\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg -> \\SHARDREALM\Users\Public\Pictures\Sample Pictures\GIZCRYF0-7AM0-FICB-EC29-D31DED16C4E6.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYF0-7AM0-FICB-E062-AA1BF2711B24.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Design form fields easily.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYF0-7AM0-FICB-705B-C00D8B8804AA.thor
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1040\GIZCRYF0-7AM0-FICB-F854-37811103F44D.thor
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\entry_points.txt -> c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\GIZCRYF0-7AM0-FICB-658E-E3DD98CE555C.thor
  • c:\Python27\include\dictobject.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-54DC-8DA725EC2A18.thor
  • c:\Python27\include\node.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-DBEC-DF0264978F79.thor
  • c:\Python27\include\pyarena.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-8F75-B8EF313D0D38.thor
  • c:\6cdeacda242012e0e5b593e657\2070\LocalizedData.xml -> c:\6cdeacda242012e0e5b593e657\2070\GIZCRYF0-7AM0-FICB-DE4A-440A463D0379.thor
  • c:\Python27\Lib\email\test\data\msg_38.txt -> c:\Python27\Lib\email\test\data\GIZCRYF0-7AM0-FICB-49E4-CCFE33D3F945.thor
  • c:\6cdeacda242012e0e5b593e657\1041\LocalizedData.xml -> c:\6cdeacda242012e0e5b593e657\1041\GIZCRYF0-7AM0-FICB-D408-382489CDBDFE.thor
  • c:\Python27\include\pythread.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-3C8B-FD2B522A2B2B.thor
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf -> c:\6cdeacda242012e0e5b593e657\3082\GIZCRYF0-7AM0-FICB-D96F-AB2F18932023.thor
  • c:\Python27\Lib\test\pycacert.pem -> c:\Python27\Lib\test\GIZCRYF0-7AM0-FICB-5BE5-6B270A21CEDE.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View and annotate PDFs.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYF0-7AM0-FICB-61AE-42C9070460ED.thor
  • c:\Python27\Lib\idlelib\help.txt -> c:\Python27\Lib\idlelib\GIZCRYF0-7AM0-FICB-DCAF-845A56C2D720.thor
  • \\SHARDREALM\Users\Harry Dresden\Desktop\jLzCtzglOAnbxSF.docx -> \\SHARDREALM\Users\Harry Dresden\Desktop\GIZCRYF0-7AM0-FICB-4C6E-63659CA607C0.thor
  • c:\6cdeacda242012e0e5b593e657\2052\LocalizedData.xml -> c:\6cdeacda242012e0e5b593e657\2052\GIZCRYF0-7AM0-FICB-ED23-407FE39A0E88.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\GIZCRYF0-7AM0-FICB-7273-E42312247D6D.thor
  • c:\Python27\include\intrcheck.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-1CE1-AFCCBC9765B0.thor
  • c:\Python27\include\pygetopt.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-4846-43C46595E13B.thor
  • c:\Python27\Lib\test\ssl_key.pem -> c:\Python27\Lib\test\GIZCRYF0-7AM0-FICB-CEE5-E9FBC7A8F903.thor
  • \\SHARDREALM\Users\Harry Dresden\Desktop\IeIAmTyDmV.ppt -> \\SHARDREALM\Users\Harry Dresden\Desktop\GIZCRYF0-7AM0-FICB-BCFD-3534633A22D2.thor
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1041\GIZCRYF0-7AM0-FICB-7243-7E8C7BE020FA.thor
  • \\SHARDREALM\Users\Public\Pictures\Sample Pictures\Desert.jpg -> \\SHARDREALM\Users\Public\Pictures\Sample Pictures\GIZCRYF0-7AM0-FICB-B388-13BED8BB0345.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_b.png -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\GIZCRYF0-7AM0-FICB-BC55-FC0424ECA9CE.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYF0-7AM0-FICB-BFE3-551F34FBEEA5.thor
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\dependency_links.txt -> c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\GIZCRYF0-7AM0-FICB-00E2-5CBFD355F4C9.thor
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml -> c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\2AE77126EA94A327475813D655A6D4BF.tmp
  • c:\Python27\Lib\test\https_svn_python_org_root.pem -> c:\Python27\Lib\test\GIZCRYF0-7AM0-FICB-41F6-22C4E8EF95F7.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Fastest PDF Search and Index.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYF0-7AM0-FICB-818E-9FBCABEED15B.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\GIZCRYF0-7AM0-FICB-B488-335D1ED2C40E.thor
  • c:\Python27\include\structseq.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-2DDE-A456C27C3EE2.thor
  • c:\Python27\include\pyport.h -> c:\Python27\include\GIZCRYF0-7AM0-FICB-6F28-0F5659F87485.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Powerful Word Processor.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYF0-7AM0-FICB-9FC8-3BF0AE1A8E1E.thor
  • c:\Python27\Lib\test\check_soundcard.vbs -> c:\Python27\Lib\test\GIZCRYF0-7AM0-FICB-7398-BAB4B742885B.thor
  • c:\Python27\Lib\test\wrongcert.pem -> c:\Python27\Lib\test\GIZCRYF0-7AM0-FICB-1723-8344388323F5.thor
  • \\SHARDREALM\Users\Public\Pictures\Sample Pictures\Tulips.jpg -> \\SHARDREALM\Users\Public\Pictures\Sample Pictures\GIZCRYF0-7AM0-FICB-0E4D-6779C137FF2B.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYF0-7AM0-FICB-2F81-948A569F6DC0.thor
  • c:\6cdeacda242012e0e5b593e657\2070\eula.rtf -> c:\6cdeacda242012e0e5b593e657\2070\GIZCRYF0-7AM0-FICB-45BF-F0BDAD317AFF.thor
  • c:\vbhdzmbvlw\bin\cert.p12 -> c:\vbhdzmbvlw\bin\GIZCRYF0-7AM0-FICB-ABF9-4AFF95497150.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml -> c:\ProgramData\Mic