'
metaflows logo
Category Started On Completed On Duration Cuckoo Version
FILE 2016-11-08 18:22:19.248896 2016-11-08 18:25:31.269917 192 seconds 2.0-dev
Machine Label Manager Started On Shutdown On
win7cuckoo2 win7 Clone 2 VirtualBox 2016-11-08 18:22:19 2016-11-08 18:25:30

File Details

File name 91e79878bd09e5180d700ca74842259528fc9979.zip
File size 1107 bytes
File type Zip archive data, at least v2.0 to extract
CRC32 E773D41A
MD5 b2c18b8d2484658f505487ca26bf387c
SHA1 91e79878bd09e5180d700ca74842259528fc9979
SHA256 da46be9cbb9a850858ebabdffdc89d159894ecd47dce3e0fdfddc84506a94bb0
SHA512 9046e710281ce313252240f86a953db81d418d8950124ce0a0eecccc19a15f8b78b96739295cfce6ac3a5c78e57d9d6f31250821e75d01e7c5f2ea12793dcd58
Ssdeep 24:9TpIZ2jVMKPw21NpYDRvRarHMlCOSNclZ6HMlN5MC9nXDKyckAxI:9C45zoQeparHlnWZJlMCZXDKyckR
PEiD None matched
Yara
  • PM_Zip_with_js ()
VirusTotal Permalink
VirusTotal Scan Date: 2016-11-08 14:14:38
Detection Rate: 7/56 (Expand)

MetaFlows Scores

Metaflows Analysis Results (Signatures=125, Anomalies=0, PEiD=0, Yara=2, VT[1478629572]=100): Snort Events=1, AV Events=2
Total Score=125

SNORT EVENTS:
ET POLICY PE EXE or DLL Windows file download HTTP

CLAMAV DETECTED:
Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND
DROPPED FILE - NRV_A3D9300_.js: Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND

Dropped File/Buffer Yara Signatures:
3d10231f18806c7142daf7a3ff5e32c53fede547 [BUFFER]: shellcode
c5f0a0d9e3df9a9de1ed92187ae8629bfab9d3f7 [BUFFER]: Str_Win32_Http_API

Signatures

antivm_queries_computername details
recon_fingerprint details
antivm_memory_available details
dumped_buffer details
creates_doc details
antivm_network_adapters details
dumped_buffer2 details
antivm_vbox_files details
Windows_Proxy_Tinkering details
network_wscript_downloader details
persistence_ads details
antiav_detectfile details
exploit_heapspray details
malicious_document_urls details
network_document_file details
network_downloader_exe details
antivm_vbox_devices details
antivm_vbox_files details
modifies_files details

Screenshots

No screenshots available.

Static Analysis

Nothing to display.

Dropped Files

acf358481471df1e_gizcryfu-7am0-fdxy-50fd-2b7ce1f3fb1f.thor

1e6ef89538662039_gizcryfu-7am0-fdxy-2d5b-5e921b73f760.thor

ca5106ebb6b950fe_gizcryfu-7am0-fdxy-e161-bf972c989ef5.thor

f65cb10ded2a75a9_gizcryfu-7am0-fdxy-51e4-275f9d44413c.thor

4146a1e90583c0f5_gizcryfu-7am0-fdxy-94db-f290b6f0432c.thor

faf021b3c06abc41_tasks.xml

926bb6e8ec210bc9_gizcryfu-7am0-fdxy-e0ea-6c7f744679d5.thor

bf5f93ec064fab77_gizcryfu-7am0-fdxy-8ae2-be49e9622ae3.thor

51e144f2fc8121f8_gizcryfu-7am0-fdxy-23c5-9584ea8e0182.thor

9892fbcea559f018_gizcryfu-7am0-fdxy-24df-88c238a5ec13.thor

9660dd8c92b4a393_gizcryfu-7am0-fdxy-cc8a-834aca502829.thor

bb9ac30411a0c3cb_gizcryfu-7am0-fdxy-e026-4a3966eb170a.thor

04a6bf3f8e523e8a_gizcryfu-7am0-fdxy-b87d-ddca42054ba2.thor

331ca56fab4fcb13_gizcryfu-7am0-fdxy-fd60-0ecbdec581c1.thor

08ce9f28fef38914_gizcryfu-7am0-fdxy-9537-086d839031f0.thor

51ce45c0a8d3eed0_gizcryfu-7am0-fdxy-19b3-1b9800827a0e.thor

8b373ed4c6543f75_gizcryfu-7am0-fdxy-3342-b64f94fbb492.thor

fb36ff9ed92dfc0c_gizcryfu-7am0-fdxy-507c-1c3ed48b26e4.thor

b591f7bab49d8976_gizcryfu-7am0-fdxy-fbd9-9d6a9aa91f93.thor

a6fcc193cbc6920a_gizcryfu-7am0-fdxy-142d-162e36b409e4.thor

c8d76d4630e3efb9_gizcryfu-7am0-fdxy-1c67-88c11e782659.thor

b0e73d713a8a4da2_gizcryfu-7am0-fdxy-8487-f60d1358e1eb.thor

93721717cf5af678_gizcryfu-7am0-fdxy-39b3-681972ad62a1.thor

52e5cdd799990e5e_gizcryfu-7am0-fdxy-fe92-a822cb9fc12f.thor

e55fb67a9eab69d1_gizcryfu-7am0-fdxy-45fe-2863141d49d7.thor

04e08436cd17f870_gizcryfu-7am0-fdxy-e05b-ba978688a51d.thor

fd5f68b59aa2b3e8_resource.xml

b090ddde729dc931_gizcryfu-7am0-fdxy-ffbb-93c1e1f4c8c9.thor

f02a7f10893a24f4_gizcryfu-7am0-fdxy-1b5a-195078bf1f89.thor

8df7326cc541a441_gizcryfu-7am0-fdxy-76f1-814c63e9bc71.thor

13ca3c040332d27a_gizcryfu-7am0-fdxy-316a-07635b3f07c2.thor

fd39e91a34b0d31a_gizcryfu-7am0-fdxy-e6fa-6e03bffdcf07.thor

97867388bca230b8_gizcryfu-7am0-fdxy-2e3a-de3da1100f64.thor

3dee8081222e0654_gizcryfu-7am0-fdxy-8e02-609e97508eb2.thor

19ea98679d4b01fc_gizcryfu-7am0-fdxy-b1da-b796b0d68e59.thor

090f61c4fb8ab70c_gizcryfu-7am0-fdxy-1f70-96c0d7327d07.thor

a2c2586040a37e02_gizcryfu-7am0-fdxy-45f7-8b487cfb6136.thor

6d300b3f31d463e9_gizcryfu-7am0-fdxy-440f-6d283e5aaaba.thor

7fef49c6e8942e95_gizcryfu-7am0-fdxy-90ca-2e92e2e28b1e.thor

811fd9dc8db6ddac_gizcryfu-7am0-fdxy-b3ff-dff59b04d8f5.thor

aa57c597def68c92_gizcryfu-7am0-fdxy-d566-f829681d4b44.thor

52cf48d6de6f82a8_gizcryfu-7am0-fdxy-6458-f1b2c9a85484.thor

015fe0db6e073c8a_gizcryfu-7am0-fdxy-6adf-3cd456e64442.thor

af7a12135db48bf2_resource.xml

0bb0d83d4fc2d010_gizcryfu-7am0-fdxy-ee82-e932597ba5eb.thor

4a4945499edb8418_gizcryfu-7am0-fdxy-f4d7-135e54a167e6.thor

fe548e1b7ec0b0cb_gizcryfu-7am0-fdxy-d35b-81d50f2ff673.thor

116bf2498c6acaa2_gizcryfu-7am0-fdxy-868c-2bd314d42618.thor

b230ef2b130e601f_gizcryfu-7am0-fdxy-3b2c-a832eca01a63.thor

ab399263c1dcfd90_gizcryfu-7am0-fdxy-f157-f901c53cc5da.thor

ecf9b01a033b4b7f_gizcryfu-7am0-fdxy-13f5-e3a20cf7a1c6.thor

e384873607a08719_gizcryfu-7am0-fdxy-f7e0-4d47bc0b47bc.thor

eec1b115454ba4a0_gizcryfu-7am0-fdxy-16e4-ac73f96db4ff.thor

222d6fc1111f58b7_gizcryfu-7am0-fdxy-58fd-6c01be775aed.thor

d74336791db14eaa_gizcryfu-7am0-fdxy-1426-f9b8e651bf65.thor

7aae97ae0cf88cee_gizcryfu-7am0-fdxy-9823-94a678bad938.thor

5dbfd244708ec0f2_gizcryfu-7am0-fdxy-00e4-e7512f5b4352.thor

8e944ac2c81d4397_gizcryfu-7am0-fdxy-414a-0ff150058853.thor

3fa6c0782d1f032c_gizcryfu-7am0-fdxy-a298-ec83fb7eb563.thor

711673bc057f5f96_gizcryfu-7am0-fdxy-9c58-c02f6e7f2727.thor

5471fce57c01db99_gizcryfu-7am0-fdxy-7929-c84e8de9fa95.thor

de1f15e06359dce3_gizcryfu-7am0-fdxy-619e-e87b8b73c7e7.thor

3ee419b8b998d3b2_gizcryfu-7am0-fdxy-2c8b-974ba2176ca1.thor

0989857bd4970fc1_gizcryfu-7am0-fdxy-1859-15df1b4f2f6c.thor

7790cf7bd1268040_gizcryfu-7am0-fdxy-e6bd-b5ded7070892.thor

e3c53664c285a1dc_gizcryfu-7am0-fdxy-41a8-672f45f41baa.thor

57ebeaf63925f3a1_gizcryfu-7am0-fdxy-2d06-0f6728e6a40e.thor

86c05252eacc2b5d_tasks.xml

7d6e302ca71e412d_gizcryfu-7am0-fdxy-5ff3-916e6db8115b.thor

e927124c94423d6c_gizcryfu-7am0-fdxy-d2ff-4507cc23dd46.thor

fdb407a8e537209b_gizcryfu-7am0-fdxy-f8ad-977f19f06f2e.thor

625bf85ad8200ded_gizcryfu-7am0-fdxy-e361-c0d020affc74.thor

7ed5cea00f7a330a_gizcryfu-7am0-fdxy-f2ef-ce2c48957c01.thor

7ffaaf388f7b887c_gizcryfu-7am0-fdxy-1ec9-dc148fc3249f.thor

4e32c271f1d7e7b2_gizcryfu-7am0-fdxy-0fe4-e251fc8dc41c.thor

c9d8aaa4b2574e9b_gizcryfu-7am0-fdxy-cde9-0d77098cf20d.thor

e8c3d83579d273f5_gizcryfu-7am0-fdxy-ed23-1dea0be22c57.thor

cf4236e2988e101c_gizcryfu-7am0-fdxy-c459-e951ed0fe8d5.thor

fb646f4b080ea2f7_gizcryfu-7am0-fdxy-04f8-ee5d008d36f5.thor

30d418c45e3e88fe_gizcryfu-7am0-fdxy-5631-cd5b746ee3f6.thor

22323e7ebd9695c2_gizcryfu-7am0-fdxy-e632-195a16361bfa.thor

a3aacd349cb2f0d8_gizcryfu-7am0-fdxy-14ad-2bafc35bd938.thor

66a39f270499781f_gizcryfu-7am0-fdxy-63b0-ab2730ed6a7d.thor

36f04ae63138250d_gizcryfu-7am0-fdxy-af24-963e26cc8e39.thor

a835f2a93d5aac20_gizcryfu-7am0-fdxy-de61-ca037fdf2ae9.thor

6c4a75669327e368_gizcryfu-7am0-fdxy-7926-c51e66694dcb.thor

3f375581c1da16a2_gizcryfu-7am0-fdxy-c7d7-7249dd00174e.thor

a3031c2de69dec47_gizcryfu-7am0-fdxy-7f68-ffb80766cf5d.thor

4f57c2a4c9334f25_gizcryfu-7am0-fdxy-f05c-46ab19566d38.thor

d6912079f3c9dba4_gizcryfu-7am0-fdxy-b7fd-2d89a0a18b02.thor

15c78be0bc271a10_gizcryfu-7am0-fdxy-10c5-646186769234.thor

2f0d472aec38f900_gizcryfu-7am0-fdxy-28cd-bf7af06f64a1.thor

2e4b95df6ddbafa9_gizcryfu-7am0-fdxy-33ff-15b6a428e0d3.thor

fb4fee23f0e92a5b_gizcryfu-7am0-fdxy-3622-087a6981f4ff.thor

7695896af69e7919_gizcryfu-7am0-fdxy-6912-55851b86b5a6.thor

192240bd3c939fa9_gizcryfu-7am0-fdxy-a5da-13c5d8f6bcc3.thor

df0ca2d212f375c3_gizcryfu-7am0-fdxy-4573-17aa38d83c8d.thor

fb4dfad82689e9e0_gizcryfu-7am0-fdxy-277c-440b53117725.thor

af11ab8404557518_gizcryfu-7am0-fdxy-f601-53907d82f9d0.thor

b36d2cbbf6a8aff9_gizcryfu-7am0-fdxy-55bf-74a0aae10a47.thor

49633d0986a6df80_gizcryfu-7am0-fdxy-a3fd-70812484e1b5.thor

2deec8e6735a56ca_gizcryfu-7am0-fdxy-017a-227717260553.thor

160a80c8bc45b7cc_gizcryfu-7am0-fdxy-7448-5340ca95a69c.thor

d250f9c0f90eff52_gizcryfu-7am0-fdxy-612f-f439fe1e8228.thor

28676919aba7f9d2_gizcryfu-7am0-fdxy-7bf4-447e22f969e0.thor

8bce70763947968c_gizcryfu-7am0-fdxy-0cb5-192d07cc5937.thor

0bac659785b06eaf_gizcryfu-7am0-fdxy-4aa7-39377eeb5d17.thor

2b1aed97cf6473e2_gizcryfu-7am0-fdxy-a65f-4f41cbf3144a.thor

9251084e9a2097e2_gizcryfu-7am0-fdxy-c66f-c158a37946d8.thor

b322f81e78ada389_gizcryfu-7am0-fdxy-fa53-af7699901bdb.thor

bb5ff0dcea1fda85_gizcryfu-7am0-fdxy-7b26-c6d59885317f.thor

9ebb92345a39841c_gizcryfu-7am0-fdxy-8fda-d2ccfb5c394c.thor

7c8606fef20bad3c_gizcryfu-7am0-fdxy-dd52-bfd1c778b776.thor

bec4f62fa9094318_gizcryfu-7am0-fdxy-54c2-110f6c569125.thor

d04652f66e2d8941_gizcryfu-7am0-fdxy-7b4c-44130fd16875.thor

f915b33d38edc0ef_gizcryfu-7am0-fdxy-68fa-c0fb6605111a.thor

4f5a325e3059271f_gizcryfu-7am0-fdxy-b756-e97bc14d9c83.thor

e6e3115987d9f7a4_gizcryfu-7am0-fdxy-d787-98db8193567b.thor

46207e324f2bfc59_gizcryfu-7am0-fdxy-8091-1bb6ec517078.thor

535ae814507444d5_gizcryfu-7am0-fdxy-1224-105644daa83f.thor

f12833eaf24af502_gizcryfu-7am0-fdxy-6699-b2e6ad27e971.thor

d6edabd0e4ba038b_gizcryfu-7am0-fdxy-690e-e796d96b74c9.thor

0c48b01204eef891_gizcryfu-7am0-fdxy-bb6e-6c4abe4c2b0e.thor

ce7d618454776d1c_gizcryfu-7am0-fdxy-26e7-05e98b25f0eb.thor

7c4e3da7baea6d48_gizcryfu-7am0-fdxy-896f-2941dce29dcb.thor

d9aaa763aae1e013_gizcryfu-7am0-fdxy-11e4-fa73e0182316.thor

d9608d869d84f5d8_gizcryfu-7am0-fdxy-1eca-6437caa0a12f.thor

f056791d92ae48ec_gizcryfu-7am0-fdxy-ee95-46e4d96fb615.thor

a9884e2a8daf1faf_gizcryfu-7am0-fdxy-d1f8-83099f6a61c6.thor

ca94073189f6d74e_gizcryfu-7am0-fdxy-9592-a821496d8df9.thor

f30cbd8bf0b1243d_gizcryfu-7am0-fdxy-29de-6fb4e2786933.thor

59fd9c5f7949f271_gizcryfu-7am0-fdxy-330c-5c1cd42e55c8.thor

c250b1405d97b2c2_gizcryfu-7am0-fdxy-72e3-88e9b6997d4f.thor

e9805eeeb2e2bc5c_gizcryfu-7am0-fdxy-7832-dca24b75e4cc.thor

1e751ef434c27d9d_gizcryfu-7am0-fdxy-d6f8-10b018198fc6.thor

6c118d0880475f68_gizcryfu-7am0-fdxy-57e3-083095af3658.thor

691e62098631d2fd_gizcryfu-7am0-fdxy-dc9e-c8d239588bfd.thor

7c0f218f16982076_gizcryfu-7am0-fdxy-57e0-de36d53d387e.thor

f74923dcc2593257_gizcryfu-7am0-fdxy-2b89-a9588ac54725.thor

7e5b71506ed610ea_gizcryfu-7am0-fdxy-5f79-3e0b0a5f9572.thor

a31049a79a770c17_gizcryfu-7am0-fdxy-18fe-2df558dca56e.thor

792d053fbf4ea388_gizcryfu-7am0-fdxy-97e6-fcc2942800db.thor

fe0241d79112f607_gizcryfu-7am0-fdxy-3428-a4558b24ca1c.thor

b6fdbd8062c297fb_gizcryfu-7am0-fdxy-9d6b-a4977552148d.thor

5b3e86c7a4820c28_gizcryfu-7am0-fdxy-1332-0ce9f6267829.thor

1a00c4def577d451_gizcryfu-7am0-fdxy-e342-6cd3f7f352bb.thor

8da5d5fd328ef7f1_gizcryfu-7am0-fdxy-7da2-154dcb1406c8.thor

eb823ef4b975ff90_gizcryfu-7am0-fdxy-844a-7db6014d7b4a.thor

a4c18a2b53f33c2b_gizcryfu-7am0-fdxy-1042-fe231169b5b9.thor

51ec8f01d5156a88_gizcryfu-7am0-fdxy-bf26-a673a32c55f2.thor

74d8aff805224a14_gizcryfu-7am0-fdxy-3f43-b5a3831338f9.thor

0e0cfd65154ce3fe_gizcryfu-7am0-fdxy-5ed7-32d9a5644365.thor

e174dc3e2f036ebe_gizcryfu-7am0-fdxy-c6fb-2a0a133dc394.thor

6c2e66bc402c6a8d_gizcryfu-7am0-fdxy-5058-97962898febd.thor

1b4c2179ed463f05_gizcryfu-7am0-fdxy-d16d-ea872ef5b786.thor

6b87e6b35d5d170c_gizcryfu-7am0-fdxy-47d2-2f260667647e.thor

1c73d8c229af7ae3_gizcryfu-7am0-fdxy-5919-e5561ff5a41f.thor

2785b9a87684ffc4_gizcryfu-7am0-fdxy-be80-5c3700ef61ef.thor

cd1c637eb70ddae1_gizcryfu-7am0-fdxy-7346-dfbc92f4ce1c.thor

aefe5213b696b0c9_gizcryfu-7am0-fdxy-299f-f49c1a182185.thor

efca40a2ab2c5a56_gizcryfu-7am0-fdxy-215d-fdcbe6b7306e.thor

edcf92958a418c20__56_what_is.html

7acf2e54f1b0dc6a_gizcryfu-7am0-fdxy-8f86-8491cb89529f.thor

37f2d9fbcebc7c37_gizcryfu-7am0-fdxy-6e66-328bdc30f6f3.thor

a76d552c373e6315_gizcryfu-7am0-fdxy-3b3a-8440e5f4fdf1.thor

5990c50a3480fe9c_gizcryfu-7am0-fdxy-b26c-6cb64510a23c.thor

d11269464fc6a566_gizcryfu-7am0-fdxy-4255-240cafc28637.thor

ba5d154cf835fa6d_gizcryfu-7am0-fdxy-db23-91c001a67efb.thor

d88576bacfd022d0_gizcryfu-7am0-fdxy-6237-94bee70f2854.thor

2a01d071e5057afa_gizcryfu-7am0-fdxy-e6d8-fee7fba509e5.thor

20fecca07afce2c1_gizcryfu-7am0-fdxy-f74a-07f47a7d4e9c.thor

19d7f361d6adb5ae_gizcryfu-7am0-fdxy-5121-f14bc6aa9fd7.thor

b7e01edd579595fd_gizcryfu-7am0-fdxy-0981-1b34305c9319.thor

e7e431a0150941fe_gizcryfu-7am0-fdxy-6ad2-0784101df0d6.thor

7e528deae28ddaee_gizcryfu-7am0-fdxy-380b-a799aeedc267.thor

c8688ae44d062e21_gizcryfu-7am0-fdxy-2286-52c5e8ef5015.thor

e6f2c7ac080485f7_gizcryfu-7am0-fdxy-8fce-a6e2f5af0f07.thor

34021fee9c5a8c8c_gizcryfu-7am0-fdxy-a369-34849fc637a0.thor

ec5b7766eaf7426c_gizcryfu-7am0-fdxy-e51c-cfb1c8406be7.thor

cbef4fbf22e72f3e_gizcryfu-7am0-fdxy-12c8-971665532a3d.thor

71696836104e997f_gizcryfu-7am0-fdxy-3802-317161a7190a.thor

146c48e9b246eb16_gizcryfu-7am0-fdxy-7ca8-2b598489aaee.thor

026c57a0f68aeb75_gizcryfu-7am0-fdxy-a0ac-fbf1a4196adb.thor

440bdf93e04c2549_gizcryfu-7am0-fdxy-ff79-ab65ea6b85ef.thor

578bee370eaeaa9b_gizcryfu-7am0-fdxy-31e6-a18fac5cbce2.thor

64b8c183680c08d9_gizcryfu-7am0-fdxy-658c-ffc274159af4.thor

5f5e1f1960d9a4d6_gizcryfu-7am0-fdxy-7638-866dd5d45866.thor

362da1544af41f08_gizcryfu-7am0-fdxy-e4c9-cf1e4b75101f.thor

3de88bc1aa39a4a6_gizcryfu-7am0-fdxy-2e7a-b66660443e4d.thor

9c3061056baf011e_gizcryfu-7am0-fdxy-0be2-0e3e54766d60.thor

310c3d2cce774970_gizcryfu-7am0-fdxy-7f5b-b13c7967fb95.thor

b761a2ac22315d81_gizcryfu-7am0-fdxy-426a-d0dc84f3e786.thor

6ef9ada5f81431ac_gizcryfu-7am0-fdxy-ffe5-62c1cf767ae9.thor

532bc0e1a0c16204_gizcryfu-7am0-fdxy-a8c7-6aa46e39718c.thor

386910538c397663_gizcryfu-7am0-fdxy-2a39-149993025462.thor

c00dab296d38c44e_gizcryfu-7am0-fdxy-1f43-8c8150791d99.thor

8931d34acc2d60b8_behavior.xml

cab85cc33ed21755_9ca0ynrlq2phn.dll

73d2ae271a89911a_gizcryfu-7am0-fdxy-53fd-07d6e5760d51.thor

37e7abc9039fc573_gizcryfu-7am0-fdxy-ed1a-896a930667d1.thor

7046e35eac7fa7b1_gizcryfu-7am0-fdxy-a59a-a508a77fd4ac.thor

a8631fc4592f7e0a_gizcryfu-7am0-fdxy-2490-4b8af1c188dc.thor

2d12897b54b8feb4_gizcryfu-7am0-fdxy-bc02-aa1e99429251.thor

605b0b6d3b5e4872_gizcryfu-7am0-fdxy-57bb-8c05392abfe3.thor

d230b6e43ada755d_gizcryfu-7am0-fdxy-e08b-44395936c407.thor

bc3118b65e6ed84d_gizcryfu-7am0-fdxy-6ce7-9c766eecc65c.thor

ec9818c8b1124d05_gizcryfu-7am0-fdxy-143c-494ebdd7fae2.thor

e497309b9fef8497_gizcryfu-7am0-fdxy-479e-b2fb0dac4563.thor

ef3ba718843097a8_gizcryfu-7am0-fdxy-8b65-93ceed93fe56.thor

f2bef8ce27632486_gizcryfu-7am0-fdxy-8038-62183d513bf4.thor

ad8e191a16458cc0_gizcryfu-7am0-fdxy-f27e-4a55c873c119.thor

cd83238b9d0c983f_gizcryfu-7am0-fdxy-887a-79b0aa091592.thor

52cd4713213b2742_gizcryfu-7am0-fdxy-a362-69a83be14b95.thor

e4480ae79bd4203a_gizcryfu-7am0-fdxy-69e2-b5708ac53fed.thor

af242e1acdb08011_gizcryfu-7am0-fdxy-2de1-4915efacbf11.thor

598779f6180a7d7f_gizcryfu-7am0-fdxy-9576-c42c9aaeb101.thor

d917fdcc3bf15ba7_gizcryfu-7am0-fdxy-b3a8-acce88cbd723.thor

ea0d33cf9dd60bbb_gizcryfu-7am0-fdxy-0eb3-d824b18e1100.thor

06e219796f434ef7_gizcryfu-7am0-fdxy-1242-09b3b9c40e85.thor

e6f7e785e390db18_gizcryfu-7am0-fdxy-547e-fe96b32322ca.thor

7fb690db66aa0330_gizcryfu-7am0-fdxy-e5e2-7bafcf75364b.thor

45428129a5826482_gizcryfu-7am0-fdxy-31cd-6257214dff9e.thor

a45aba77e81a9dbf_gizcryfu-7am0-fdxy-7ed3-2db3147917bf.thor

f5dfdc3a070ddf3f_gizcryfu-7am0-fdxy-f775-59c09bdf27d4.thor

679ed5ee8bb75cdd_gizcryfu-7am0-fdxy-79c1-d19181a5d420.thor

f3498ee75534c5dc_gizcryfu-7am0-fdxy-5e11-261c65fd43ce.thor

6133ae93e220cb3b_gizcryfu-7am0-fdxy-9e1e-5a0b9668d999.thor

87752835a8a5e9f2_gizcryfu-7am0-fdxy-8d78-1320a5cd582c.thor

c137bbcf6039573a_gizcryfu-7am0-fdxy-f782-b71ed2882e36.thor

6a33a0c217f7a359_gizcryfu-7am0-fdxy-6308-9a35471d8d05.thor

ad35fd0a47265f08_gizcryfu-7am0-fdxy-c89b-03b8cb49f67a.thor

81421501b0aa0b24_gizcryfu-7am0-fdxy-078f-907567d47c93.thor

aa0f92b84ab3d40b_gizcryfu-7am0-fdxy-ed25-64c7b6f2dd47.thor

c65b672b665aa508_gizcryfu-7am0-fdxy-f522-a813db03d958.thor

98854404efedaccc_gizcryfu-7am0-fdxy-e7af-63ab1b958a5a.thor

615bce486f993f91_gizcryfu-7am0-fdxy-8c72-d208ecbef616.thor

87d48cb1f17f878b_gizcryfu-7am0-fdxy-7725-cd456716f64f.thor

df509d7f231f5758_gizcryfu-7am0-fdxy-8ac7-7f5dd5e257ad.thor

5f0edbeed40c5abc_gizcryfu-7am0-fdxy-2d22-9337db47ea92.thor

f0572b5708c83015_behavior.xml

e6e45c9de924028f_gizcryfu-7am0-fdxy-6560-5d0377eb0b49.thor

f3820e6be42d40e8_gizcryfu-7am0-fdxy-82c6-6ed6757f5885.thor

3cb38706090c4382_gizcryfu-7am0-fdxy-15c3-4deb7afc3e4f.thor

daf196884842da5c_gizcryfu-7am0-fdxy-03be-6e3fa90bb19a.thor

05d320a62f53dbac_gizcryfu-7am0-fdxy-8680-5480d2a6e960.thor

604694629250dc6b_gizcryfu-7am0-fdxy-ba37-9ea9b0496c27.thor

62839aa7cc9c5c67_gizcryfu-7am0-fdxy-d84b-d800e16ec3d4.thor

a35d4046152e3529_gizcryfu-7am0-fdxy-6903-a16dafcf8d56.thor

9f3a13c4a770866f_gizcryfu-7am0-fdxy-5b2e-9c3791ec24f7.thor

47fff0f61a6130a4_gizcryfu-7am0-fdxy-f2da-58618aefde7d.thor

545920b525d9675e_gizcryfu-7am0-fdxy-edf4-8f0556a62dbc.thor

809cfc8345b0c1ad_gizcryfu-7am0-fdxy-e7f1-d05ec302864e.thor

5e857d0051c22579_gizcryfu-7am0-fdxy-633a-94957d4ae4c6.thor

8dcbb75ef2cdfc13_gizcryfu-7am0-fdxy-baa8-caf6c1432cf8.thor

375989d3bc400d76_gizcryfu-7am0-fdxy-b046-4707891c32b7.thor

b8dcb5e0dce756e9_gizcryfu-7am0-fdxy-a75a-12dcd9092367.thor

6f2fb31545378996_gizcryfu-7am0-fdxy-6acc-d612a6255583.thor

f7deadc628b39a5f_gizcryfu-7am0-fdxy-0ac7-1073c41893b2.thor

6fa9a8d608543243_gizcryfu-7am0-fdxy-b1fc-e9c15634023d.thor

dc96e6667771e12e_gizcryfu-7am0-fdxy-7bde-ad59d882cb40.thor

66acd3aa74741cf0_gizcryfu-7am0-fdxy-2574-043887975fea.thor

0f7c29a0182240e4_gizcryfu-7am0-fdxy-f503-81a9665a8853.thor

fe5409ca787e6e3d_gizcryfu-7am0-fdxy-fe7c-3ce141c31aa8.thor

a53457544b2e8a1f_gizcryfu-7am0-fdxy-8324-6225af7a24c4.thor

58edc1f951e70320_gizcryfu-7am0-fdxy-3f41-a86a0338893b.thor

e1ca53c881250921_gizcryfu-7am0-fdxy-7acb-0ece06af79a3.thor

62a5ecc0c425875b_gizcryfu-7am0-fdxy-fa52-8bf015ce5617.thor

d8ee3cd02a8beee5_gizcryfu-7am0-fdxy-84b7-cc56faaf6b90.thor

586e3385e732ad8c_gizcryfu-7am0-fdxy-dd3e-2043ce5ddfad.thor

8a292a7dbf1609f3_gizcryfu-7am0-fdxy-b2eb-92cae34edd76.thor

493a518f2ff021df_gizcryfu-7am0-fdxy-1416-22e7b8aefa39.thor

060652d1ba03c9ef_gizcryfu-7am0-fdxy-01ab-14aa3fe3cffb.thor

8eb5e15a9788e3ea_gizcryfu-7am0-fdxy-8ed1-7015b12c9eb1.thor

9cb4be2b78f84aae_gizcryfu-7am0-fdxy-670f-d512fe24a800.thor

ccce86034b987b1f_gizcryfu-7am0-fdxy-93a1-0ab33077b8ba.thor

59f06db7c5e933ae_gizcryfu-7am0-fdxy-2027-ba9d4d4ed216.thor

bf2555b571e8b07d_gizcryfu-7am0-fdxy-8eb3-2b8770311da2.thor

1ba8ee05031f7b72_gizcryfu-7am0-fdxy-d6f2-7160e85dea25.thor

270f619c0078ee22_gizcryfu-7am0-fdxy-d746-7adaf934ef3a.thor

a62dd3801c1a8dbc_gizcryfu-7am0-fdxy-e669-9660a7994a82.thor

db4e70e7b3761891_gizcryfu-7am0-fdxy-f716-f2ee4868caf1.thor

bbad38b500a1632a_gizcryfu-7am0-fdxy-991b-c08283c64eb2.thor

82628ead67f98a5f_gizcryfu-7am0-fdxy-336f-49406e2453a4.thor

43f11c8fbf11846e_gizcryfu-7am0-fdxy-93bb-7e96f5ea0318.thor

d88e257d65080ce3_gizcryfu-7am0-fdxy-5883-9dbf1b44518d.thor

cbf4f4e7dfbad007_gizcryfu-7am0-fdxy-58d0-28f2781543ed.thor

967ed9a6536ab534_gizcryfu-7am0-fdxy-2fcb-34eb82e46426.thor

a01d968dffdd028b_gizcryfu-7am0-fdxy-374d-2050fe823d93.thor

c4cf266dbc28d425_gizcryfu-7am0-fdxy-d48c-a92093765669.thor

b4fdd956b4ace914_gizcryfu-7am0-fdxy-43fe-3adc6216103e.thor

163a767af754a0f6_gizcryfu-7am0-fdxy-7225-f584f1b0876a.thor

60ad60ac9ae2889b_gizcryfu-7am0-fdxy-168d-b38af4b95f54.thor

67e77886686aa8c5_gizcryfu-7am0-fdxy-8cab-e85fe42ffb5d.thor

882e6f1ccbe5c759_gizcryfu-7am0-fdxy-6cea-64d0727be4ba.thor

746e5f2498928200_gizcryfu-7am0-fdxy-0605-aa0188b85935.thor

be41eeab86fbfcac_gizcryfu-7am0-fdxy-a3d1-830d5a08517f.thor

bb15cde46cc30466_gizcryfu-7am0-fdxy-80b0-dbe21f843284.thor

adce5a5df75e32bd_gizcryfu-7am0-fdxy-bc98-3353763a6e3a.thor

03e0e095795ec4b8_gizcryfu-7am0-fdxy-e478-3b04ca723447.thor

4e39f027dd77771e_gizcryfu-7am0-fdxy-3399-80ba4fee8a0f.thor

2e19712c15b8c408_gizcryfu-7am0-fdxy-7dc3-1aa22031dd39.thor

dd60c8e50bbc89ad_gizcryfu-7am0-fdxy-a3b5-32c7706e5a81.thor

6925f46a027ff2a3_gizcryfu-7am0-fdxy-1314-fd5f743e170a.thor

NRV_A3D9300_.js

Network Analysis

Hosts Involved

DNS Requests

HTTP Requests

Behavior Summary

File-Read
  • C:\Users\Harry Dresden\Desktop\desktop.ini
  • C:\Windows\System32\wshom.ocx
  • C:\Windows\System32\wscript.exe
  • C:\Users\Harry Dresden\AppData\Local\Temp\NRV_A3D9300_.js
  • C:\Windows\System32\msxml3.dll
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\OLKauUKeldyU.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\Lib\email\test\data\msg_06.txt
  • c:\Python27\include\ast.h
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\Python27\include\pyexpat.h
  • c:\Python27\include\tupleobject.h
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
  • c:\Python27\include\descrobject.h
  • c:\Python27\Lib\test\cjkencodings\iso2022_kr.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16.png
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\body_bg.jpg
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Python27\include\grammar.h
  • c:\Python27\include\import.h
  • \\?\PIPE\browser
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Create PDF from Office-convert PDF to office.bmp
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1032\LocalizedData.xml
  • c:\Python27\include\complexobject.h
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • c:\Python27\Lib\test\xmltestdata\simple.xml
  • c:\Python27\Lib\test\test_doctest2.txt
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\6cdeacda242012e0e5b593e657\1038\LocalizedData.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\UiInfo.xml
  • c:\Python27\Lib\test\cjkencodings\johab.txt
  • c:\Python27\Lib\idlelib\TODO.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\Profile.xml
  • c:\Python27\include\marshal.h
  • c:\Python27\Lib\email\test\data\msg_23.txt
  • c:\6cdeacda242012e0e5b593e657\2052\LocalizedData.xml
  • UNC\KIDSROOM\Users\Public\Videos\Sample Videos\Wildlife.wmv
  • c:\Python27\Lib\email\test\data\msg_19.txt
  • c:\Python27\Lib\idlelib\extend.txt
  • c:\Python27\Lib\test\badcert.pem
  • c:\Python27\include\pgen.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\Python27\include\objimpl.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx45_IIS_schema_update.xml
  • c:\Python27\include\abstract.h
  • c:\6cdeacda242012e0e5b593e657\1033\LocalizedData.xml
  • c:\Python27\Lib\test\keycert.passwd.pem
  • c:\Python27\include\object.h
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\LocalizedData.xml
  • c:\Python27\Lib\test\cjkencodings\shift_jis.txt
  • c:\Python27\tcl\tclConfig.sh
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16-open.png
  • c:\Python27\include\pyport.h
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\skin.css
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • c:\Python27\include\code.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\Python27\Lib\test\exception_hierarchy.txt
  • c:\Python27\include\dtoa.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css
  • c:\Python27\include\asdl.h
  • c:\Python27\Lib\test\empty.vbs
  • c:\6cdeacda242012e0e5b593e657\1030\LocalizedData.xml
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Desert.jpg
  • c:\Python27\Lib\email\test\data\msg_13.txt
  • c:\Python27\Lib\test\tokenize_tests.txt
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1031\LocalizedData.xml
  • c:\Python27\Lib\lib2to3\Grammar.txt
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\jxEFDWTlYjr.txt
  • c:\Python27\include\pyctype.h
  • c:\Python27\Lib\email\test\data\msg_02.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_s.png
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your application.bmp
  • c:\Python27\Lib\test\nokia.pem
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_b.png
  • c:\Python27\include\pydebug.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_over_bg.jpg
  • c:\Python27\LICENSE.txt
  • c:\Python27\README.txt
  • c:\Python27\include\fileobject.h
  • c:\Python27\Lib\email\test\data\msg_11.txt
  • c:\Python27\include\enumobject.h
  • c:\Python27\Tools\pynche\X\xlicense.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp
  • c:\Python27\include\metagrammar.h
  • UNC\KIDSROOM\Users\Default\NTUSER.DAT.LOG
  • c:\Python27\include\pyfpe.h
  • c:\Python27\include\compile.h
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • c:\Python27\Lib\test\cjkencodings\shift_jisx0213-utf8.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\version.xml
  • c:\Python27\include\cobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • c:\Python27\Lib\test\test_doctest.txt
  • c:\Python27\Lib\test\test_doctest4.txt
  • c:\Python27\Lib\email\test\data\msg_22.txt
  • c:\Python27\include\pgenheaders.h
  • c:\Python27\include\pythread.h
  • c:\Python27\NEWS.txt
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • c:\Python27\Lib\email\test\data\msg_14.txt
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • c:\Python27\include\opcode.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg
  • UNC\KIDSROOM\Users\Public\Music\Sample Music\Sleep Away.mp3
  • c:\6cdeacda242012e0e5b593e657\1046\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\en-us.16\MasterDescriptor.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\include\memoryobject.h
  • c:\Python27\include\moduleobject.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_04.txt
  • c:\Python27\Lib\email\test\data\msg_25.txt
  • c:\Python27\include\boolobject.h
  • c:\Python27\Lib\email\test\data\msg_12.txt
  • c:\Python27\include\token.h
  • c:\Python27\include\bitset.h
  • c:\Python27\include\warnings.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg
  • c:\Python27\include\pycapsule.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_27.txt
  • c:\Python27\Lib\idlelib\NEWS.txt
  • c:\Python27\include\modsupport.h
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\Python27\Lib\idlelib\help.txt
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • c:\Python27\include\ucnhash.h
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\keycert4.pem
  • c:\Python27\Lib\email\test\data\msg_16.txt
  • c:\Python27\include\symtable.h
  • c:\Python27\include\node.h
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx40_IIS_schema_update.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\eOUUmnxRDQrRa.docm
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View and annotate PDFs.bmp
  • c:\Python27\Lib\idlelib\HISTORY.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\top_tb_bg.jpg
  • UNC\KIDSROOM\Users\Harry Dresden\Contacts\Harry Dresden.contact
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\blank.gif
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg
  • c:\Python27\include\setobject.h
  • c:\Python27\include\cStringIO.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png
  • c:\Python27\Lib\email\test\data\msg_29.txt
  • c:\Python27\Lib\email\test\data\msg_01.txt
  • c:\6cdeacda242012e0e5b593e657\2070\LocalizedData.xml
  • \\?\PIPE\lsarpc
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp
  • c:\Python27\Lib\test\formatfloat_testcases.txt
  • c:\Python27\Lib\test\test_doctest3.txt
  • c:\Python27\Lib\test\sha256.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
  • c:\Python27\include\classobject.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg
  • c:\Python27\include\datetime.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • c:\6cdeacda242012e0e5b593e657\1028\LocalizedData.xml
  • c:\Python27\Lib\email\test\data\msg_18.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml
  • c:\Python27\include\errcode.h
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\top_level.txt
  • c:\Python27\Lib\test\keycert3.pem
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\yfXnuSMrCR.doc
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\buy_phantom.png
  • c:\Python27\Lib\email\test\data\msg_09.txt
  • c:\Python27\include\pyerrors.h
  • c:\Python27\include\Python-ast.h
  • c:\6cdeacda242012e0e5b593e657\1055\LocalizedData.xml
  • c:\Python27\Lib\email\test\data\msg_21.txt
  • c:\Python27\include\ceval.h
  • c:\Python27\Lib\lib2to3\PatternGrammar.txt
  • c:\Python27\Lib\email\test\data\msg_07.txt
  • c:\Python27\include\pythonrun.h
  • c:\Python27\include\structmember.h
  • c:\Python27\Lib\idlelib\README.txt
  • c:\Python27\include\pygetopt.h
  • UNC\KIDSROOM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
  • c:\Python27\include\codecs.h
  • c:\Python27\Lib\email\test\data\msg_10.txt
  • c:\Python27\Lib\email\test\data\msg_33.txt
  • UNC\KIDSROOM\Users\Harry Dresden\Downloads\big-hero-6-2.jpg
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\XIWXennLtTitTOI.pptx
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your application.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Powerful Word Processor.bmp
  • c:\Python27\include\patchlevel.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png
  • c:\Python27\include\bytes_methods.h
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx40_IIS_schema_update.xml
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf
  • c:\Python27\Lib\test\keycert.pem
  • c:\Python27\include\traceback.h
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\longintrepr.h
  • c:\Python27\Lib\email\test\data\msg_17.txt
  • c:\6cdeacda242012e0e5b593e657\1041\LocalizedData.xml
  • c:\jsdfh\bin\cert.p12
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml
  • c:\Python27\Lib\test\cjkencodings\shift_jis-utf8.txt
  • c:\6cdeacda242012e0e5b593e657\1040\LocalizedData.xml
  • c:\Python27\include\Python.h
  • c:\Python27\Lib\email\test\data\msg_34.txt
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\resource.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html
  • c:\Python27\include\pystate.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Fastest PDF Search and Index.bmp
  • c:\Python27\Lib\test\ieee754.txt
  • c:\Python27\Lib\test\cjkencodings\shift_jisx0213.txt
  • c:\Python27\include\pyconfig.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\iypLPSRiGl.rtf
  • c:\Python27\include\pymacconfig.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml
  • c:\Python27\include\bufferobject.h
  • c:\Python27\include\timefuncs.h
  • c:\Python27\Lib\email\test\data\msg_37.txt
  • c:\Python27\include\graminit.h
  • c:\6cdeacda242012e0e5b593e657\1037\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\Strings.xml
  • c:\Python27\include\pystrcmp.h
  • c:\Python27\include\floatobject.h
  • c:\Python27\Lib\email\test\data\msg_26.txt
  • c:\Python27\Lib\test\pycacert.pem
  • c:\Python27\Lib\test\badkey.pem
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Design form fields easily.bmp
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt
  • c:\Python27\Lib\test\math_testcases.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Penguins.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml
  • c:\ProgramData\Sun\Java\Java Update\jaureglist.xml
  • c:\Python27\include\bytesobject.h
  • c:\6cdeacda242012e0e5b593e657\1049\LocalizedData.xml
  • c:\Python27\include\sysmodule.h
  • c:\Python27\include\pymactoolbox.h
  • c:\Python27\Lib\email\test\data\msg_35.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View PDFs on mobile devices.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_move_bg.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\TqtgidzesHe.docm
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\Python27\Lib\test\185test.db
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View PDFs on mobile devices.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg
  • c:\6cdeacda242012e0e5b593e657\1042\LocalizedData.xml
  • UNC\KIDSROOM\Users\Public\Music\Sample Music\Kalimba.mp3
  • c:\Python27\Lib\email\test\data\msg_05.txt
  • c:\Python27\Lib\email\test\data\msg_08.txt
  • c:\Python27\include\eval.h
  • c:\Python27\Lib\test\xmltestdata\simple-ns.xml
  • c:\Python27\Lib\email\test\data\msg_15.txt
  • c:\Python27\Lib\site-packages\README.txt
  • c:\Python27\include\genobject.h
  • c:\6cdeacda242012e0e5b593e657\1029\LocalizedData.xml
  • c:\Python27\Lib\email\test\data\msg_28.txt
  • c:\Python27\Lib\test\xmltestdata\test.xml
  • c:\Python27\Lib\test\ssl_cert.pem
  • c:\Python27\include\parsetok.h
  • c:\Python27\include\osdefs.h
  • c:\6cdeacda242012e0e5b593e657\1025\LocalizedData.xml
  • \\?\PIPE\wkssvc
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png
  • c:\Python27\include\pymem.h
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\cacert.pem
  • c:\Python27\include\pyarena.h
  • c:\6cdeacda242012e0e5b593e657\1033\eula.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect Sensitive PDF Documents.bmp
  • c:\Python27\Lib\test\selfsigned_pythontestdotnet.pem
  • c:\Python27\Lib\test\leakers\README.txt
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\pOQRTJrgzAOkiur.rtf
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf
  • c:\Python27\include\rangeobject.h
  • c:\6cdeacda242012e0e5b593e657\2070\eula.rtf
  • c:\Python27\include\iterobject.h
  • c:\Python27\include\funcobject.h
  • c:\Python27\include\listobject.h
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\config.css
  • c:\Python27\include\frameobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Koala.jpg
  • c:\6cdeacda242012e0e5b593e657\1043\LocalizedData.xml
  • c:\Python27\include\sliceobject.h
  • c:\Python27\tcl\tix8.4.3\pref\TK.cs
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect Sensitive PDF Documents.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml
  • c:\Python27\include\stringobject.h
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • c:\Python27\include\intobject.h
  • c:\Python27\Lib\email\test\data\msg_20.txt
  • c:\Python27\tcl\tix8.4.3\pref\Gray.cs
  • c:\Python27\Lib\test\cjkencodings\johab-utf8.txt
  • c:\Python27\Lib\test\ssl_key.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • c:\Python27\include\methodobject.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\include\structseq.h
  • c:\Python27\Lib\test\cmath_testcases.txt
  • c:\Python27\include\pymath.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Fastest PDF Search and Index.bmp
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\tAEHADkkzSOLA.txt
  • c:\Python27\Lib\email\test\data\msg_32.txt
  • c:\Python27\Lib\email\test\data\msg_03.txt
  • c:\Python27\Lib\email\test\data\msg_24.txt
  • c:\Python27\Lib\test\ssl_key.passwd.pem
  • c:\Python27\Lib\test\keycert2.pem
  • c:\Python27\include\py_curses.h
  • c:\ProgramData\WebEx\WebEx\atsdk.xml
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml
  • c:\6cdeacda242012e0e5b593e657\1053\LocalizedData.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect your PDF files with AD RMS.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1049\eula.rtf
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Tulips.jpg
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp
  • c:\Python27\tcl\tix8.4.3\pref\TkWin.cs
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Powerful Word Processor.bmp
  • c:\6cdeacda242012e0e5b593e657\1035\LocalizedData.xml
  • c:\Python27\include\bytearrayobject.h
  • c:\Python27\Lib\email\test\data\msg_12a.txt
  • UNC\KIDSROOM\Users\Harry Dresden\Downloads\cleandesktop.py.txt
  • c:\6cdeacda242012e0e5b593e657\3082\LocalizedData.xml
  • c:\Python27\Lib\idlelib\CREDITS.txt
  • c:\Python27\include\dictobject.h
  • c:\Python27\include\intrcheck.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_38.txt
  • c:\ProgramData\Microsoft\IlsCache\imcrcache.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64mui.msi.16.en-us.xml
  • c:\Python27\Lib\test\nullbytecert.pem
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\x-none.16\MasterDescriptor.x-none.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index_ori.html
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View and annotate PDFs.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\entry_points.txt
  • c:\Python27\include\weakrefobject.h
  • c:\Python27\Lib\idlelib\idle.bat
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx45_IIS_schema_update.xml
  • c:\Python27\include\unicodeobject.h
  • c:\Python27\include\cellobject.h
File-Written
  • C:\Users\Harry Dresden\AppData\Local\Temp\9CA0YnRlQ2phN.dll
  • C:\Users\Harry Dresden\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YLC2QM2Y\0d08tp[1]
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\OLKauUKeldyU.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Edit and reflow paragraphs in PDF files.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • c:\Python27\include\ast.h
  • c:\6cdeacda242012e0e5b593e657\1032\_9_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\Python27\include\pyexpat.h
  • c:\Python27\include\tupleobject.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\_7_WHAT_is.html
  • c:\Python27\include\descrobject.h
  • c:\Python27\Lib\test\cjkencodings\iso2022_kr.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16.png
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\body_bg.jpg
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\6cdeacda242012e0e5b593e657\1029\_6_WHAT_is.html
  • c:\Python27\include\grammar.h
  • c:\Python27\include\import.h
  • \\?\PIPE\browser
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\_52_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Create PDF from Office-convert PDF to office.bmp
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\Python27\Lib\test\nullcert.pem
  • c:\6cdeacda242012e0e5b593e657\1032\LocalizedData.xml
  • c:\Python27\include\complexobject.h
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • c:\Python27\Lib\test\xmltestdata\simple.xml
  • c:\6cdeacda242012e0e5b593e657\1043\_20_WHAT_is.html
  • c:\Python27\Lib\test\test_doctest2.txt
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\6cdeacda242012e0e5b593e657\1038\LocalizedData.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\UiInfo.xml
  • c:\Python27\Lib\test\cjkencodings\johab.txt
  • c:\Python27\Lib\idlelib\TODO.txt
  • c:\6cdeacda242012e0e5b593e657\1044\_21_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\_5_WHAT_is.html
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\_34_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\Profile.xml
  • c:\Python27\include\marshal.h
  • c:\Python27\Lib\email\test\data\msg_23.txt
  • c:\6cdeacda242012e0e5b593e657\2052\LocalizedData.xml
  • UNC\KIDSROOM\Users\Public\Videos\Sample Videos\Wildlife.wmv
  • c:\Python27\Lib\lib2to3\_43_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_19.txt
  • c:\Python27\Lib\idlelib\extend.txt
  • c:\Python27\Lib\test\badcert.pem
  • c:\Python27\include\pgen.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\ProgramData\Microsoft\ClickToRun\_37_WHAT_is.html
  • c:\Python27\include\objimpl.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx45_IIS_schema_update.xml
  • c:\Python27\include\abstract.h
  • c:\6cdeacda242012e0e5b593e657\1033\LocalizedData.xml
  • c:\Python27\Lib\test\keycert.passwd.pem
  • c:\6cdeacda242012e0e5b593e657\1041\_18_WHAT_is.html
  • c:\Python27\include\object.h
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\LocalizedData.xml
  • c:\Python27\Lib\test\cjkencodings\shift_jis.txt
  • c:\ProgramData\Sun\Java\Java Update\_45_WHAT_is.html
  • c:\Python27\tcl\tclConfig.sh
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16-open.png
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\_3_WHAT_is.html
  • c:\Python27\include\pyport.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\skin.css
  • c:\Python27\Lib\test\cjkencodings\_32_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1028\_5_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • c:\Python27\include\code.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\Python27\Lib\test\exception_hierarchy.txt
  • c:\Python27\include\dtoa.h
  • UNC\KIDSROOM\Users\Public\Videos\Sample Videos\_10_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css
  • c:\Python27\include\asdl.h
  • c:\Python27\Lib\test\empty.vbs
  • c:\6cdeacda242012e0e5b593e657\1030\LocalizedData.xml
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Desert.jpg
  • c:\Python27\Lib\email\test\data\msg_13.txt
  • c:\Python27\_57_WHAT_is.html
  • c:\Python27\Lib\test\tokenize_tests.txt
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1031\LocalizedData.xml
  • c:\Python27\Lib\lib2to3\Grammar.txt
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • c:\Python27\Tools\pynche\X\_58_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\x-none.16\_40_WHAT_is.html
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\jxEFDWTlYjr.txt
  • c:\Python27\Lib\email\test\data\msg_02.txt
  • c:\Python27\include\pyctype.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_s.png
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your application.bmp
  • c:\Python27\Lib\test\nokia.pem
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_b.png
  • c:\Python27\include\pydebug.h
  • c:\6cdeacda242012e0e5b593e657\1040\_17_WHAT_is.html
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\GIZCRYFU-7AM0-FDXY-6AD2-0784101DF0D6.thor
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_over_bg.jpg
  • c:\6cdeacda242012e0e5b593e657\3082\_29_WHAT_is.html
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\GIZCRYFU-7AM0-FDXY-51E4-275F9D44413C.thor
  • c:\Python27\LICENSE.txt
  • c:\6cdeacda242012e0e5b593e657\1025\_3_WHAT_is.html
  • c:\Python27\README.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • c:\jsdfh\bin\_1_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_11.txt
  • c:\Python27\include\enumobject.h
  • c:\Python27\Tools\pynche\X\xlicense.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\_1_WHAT_is.html
  • c:\Python27\Lib\email\test\data\_36_WHAT_is.html
  • c:\Python27\include\metagrammar.h
  • UNC\KIDSROOM\Users\Default\NTUSER.DAT.LOG
  • c:\Python27\include\pyfpe.h
  • c:\Python27\include\compile.h
  • c:\6cdeacda242012e0e5b593e657\1033\_11_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\_54_WHAT_is.html
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • c:\Python27\Lib\test\cjkencodings\shift_jisx0213-utf8.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\version.xml
  • c:\Python27\include\cobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\test\xmltestdata\_56_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • c:\Python27\Lib\test\test_doctest.txt
  • c:\Python27\Lib\test\test_doctest4.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\GIZCRYFU-7AM0-FDXY-BC98-3353763A6E3A.thor
  • c:\Python27\Lib\email\test\data\msg_22.txt
  • c:\Python27\include\pgenheaders.h
  • c:\Python27\include\pythread.h
  • c:\Python27\NEWS.txt
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • c:\6cdeacda242012e0e5b593e657\2052\_27_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_14.txt
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • c:\Python27\Lib\test\_0_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1030\_7_WHAT_is.html
  • c:\Python27\include\opcode.h
  • c:\Python27\Lib\email\test\data\msg_32.txt
  • UNC\KIDSROOM\Users\Public\Music\Sample Music\Sleep Away.mp3
  • c:\6cdeacda242012e0e5b593e657\1046\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\en-us.16\MasterDescriptor.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\include\memoryobject.h
  • c:\Python27\include\moduleobject.h
  • c:\Python27\include\_4_WHAT_is.html
  • c:\Python27\include\fileobject.h
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_04.txt
  • c:\Python27\Lib\email\test\data\msg_25.txt
  • c:\Python27\include\boolobject.h
  • c:\Python27\Lib\email\test\data\msg_12.txt
  • c:\Python27\include\token.h
  • c:\Python27\include\bitset.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\_6_WHAT_is.html
  • c:\Python27\include\warnings.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg
  • c:\Python27\include\pycapsule.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\idlelib\_30_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_27.txt
  • c:\Python27\Lib\idlelib\NEWS.txt
  • c:\Python27\include\modsupport.h
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\Python27\Lib\idlelib\help.txt
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\_47_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • c:\Python27\include\ucnhash.h
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\keycert4.pem
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\en-us.16\_39_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_16.txt
  • UNC\KIDSROOM\Users\Default\_12_WHAT_is.html
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\_41_WHAT_is.html
  • c:\Python27\include\symtable.h
  • c:\Python27\include\node.h
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx40_IIS_schema_update.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\_35_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\_38_WHAT_is.html
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\eOUUmnxRDQrRa.docm
  • c:\6cdeacda242012e0e5b593e657\1046\_23_WHAT_is.html
  • c:\Python27\Lib\idlelib\HISTORY.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\top_tb_bg.jpg
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\GIZCRYFU-7AM0-FDXY-6912-55851B86B5A6.thor
  • UNC\KIDSROOM\Users\Harry Dresden\Contacts\Harry Dresden.contact
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\blank.gif
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • c:\Python27\include\cStringIO.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png
  • c:\Python27\Lib\email\test\data\msg_29.txt
  • c:\Python27\Lib\email\test\data\msg_01.txt
  • c:\6cdeacda242012e0e5b593e657\2070\LocalizedData.xml
  • \\?\PIPE\lsarpc
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp
  • c:\6cdeacda242012e0e5b593e657\1038\_16_WHAT_is.html
  • c:\Python27\Lib\test\formatfloat_testcases.txt
  • c:\Python27\Lib\test\test_doctest3.txt
  • c:\Python27\Lib\test\sha256.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\_4_WHAT_is.html
  • c:\Python27\include\classobject.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg
  • c:\Python27\include\datetime.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • c:\ProgramData\WebEx\WebEx\_46_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1028\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1035\_12_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_18.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\_42_WHAT_is.html
  • c:\Python27\include\errcode.h
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\top_level.txt
  • c:\Python27\Lib\test\keycert3.pem
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\GIZCRYFU-7AM0-FDXY-94DB-F290B6F0432C.thor
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\yfXnuSMrCR.doc
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\buy_phantom.png
  • c:\Python27\Lib\email\test\data\msg_09.txt
  • c:\6cdeacda242012e0e5b593e657\1031\_8_WHAT_is.html
  • c:\Python27\include\pyerrors.h
  • c:\Python27\include\Python-ast.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View and annotate PDFs.bmp
  • c:\6cdeacda242012e0e5b593e657\1055\LocalizedData.xml
  • c:\Python27\Lib\email\test\data\msg_21.txt
  • c:\Python27\include\ceval.h
  • c:\Python27\Lib\lib2to3\PatternGrammar.txt
  • c:\Python27\Lib\email\test\data\msg_07.txt
  • c:\Python27\include\pythonrun.h
  • c:\Python27\include\structmember.h
  • c:\Python27\Lib\idlelib\README.txt
  • c:\Python27\include\pygetopt.h
  • UNC\KIDSROOM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
  • c:\Python27\include\codecs.h
  • c:\6cdeacda242012e0e5b593e657\1053\_25_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_10.txt
  • c:\Python27\Lib\email\test\data\msg_33.txt
  • UNC\KIDSROOM\Users\Harry Dresden\Downloads\big-hero-6-2.jpg
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\XIWXennLtTitTOI.pptx
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your application.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Powerful Word Processor.bmp
  • c:\Python27\include\patchlevel.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png
  • c:\Python27\include\bytes_methods.h
  • UNC\KIDSROOM\Users\Public\Music\Sample Music\_9_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx40_IIS_schema_update.xml
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf
  • c:\Python27\Lib\test\keycert.pem
  • c:\Python27\include\traceback.h
  • c:\6cdeacda242012e0e5b593e657\2070\_28_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1036\_14_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index.html
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\_44_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1045\_22_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\longintrepr.h
  • c:\Python27\Lib\email\test\data\msg_17.txt
  • c:\6cdeacda242012e0e5b593e657\1041\LocalizedData.xml
  • c:\jsdfh\bin\cert.p12
  • c:\ProgramData\WebEx\WebEx\12_1324\_10_WHAT_is.html
  • UNC\KIDSROOM\Users\Harry Dresden\Downloads\_2_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml
  • c:\Python27\Lib\test\cjkencodings\shift_jis-utf8.txt
  • c:\6cdeacda242012e0e5b593e657\1040\LocalizedData.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\GIZCRYFU-7AM0-FDXY-6E66-328BDC30F6F3.thor
  • c:\Python27\include\Python.h
  • UNC\KIDSROOM\Users\Harry Dresden\Contacts\_13_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_34.txt
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html
  • c:\Python27\include\pystate.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Fastest PDF Search and Index.bmp
  • c:\Python27\Lib\test\ieee754.txt
  • c:\Python27\Lib\test\cjkencodings\shift_jisx0213.txt
  • c:\Python27\include\pyconfig.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml