'
metaflows logo
Category Started On Completed On Duration Cuckoo Version
FILE 2016-11-08 13:12:14.545356 2016-11-08 13:15:29.947434 195 seconds 2.0-dev
Machine Label Manager Started On Shutdown On
win7cuckoo win7 Clone 1 VirtualBox 2016-11-08 13:12:16 2016-11-08 13:15:29

File Details

File name a279089216a17509dc673513755a46c095b268cf.zip
File size 1102 bytes
File type Zip archive data, at least v2.0 to extract
CRC32 FFC1BBF8
MD5 db2fdbc32738350890c32b3e41d2bcfc
SHA1 a279089216a17509dc673513755a46c095b268cf
SHA256 f8c0f88714eb2ace759a989f36d4fdf776fe34f1d911fc7eee644e89fe8e8216
SHA512 14c471b789e537d0c7c249d134ce7b215719cc986a807462fe0277c0657300c44fb5229dc40e9e1731956374602a0f72c39c05df3846818a8c8e9a5da1572253
Ssdeep 24:9OrGLvSsx1zivM5db2PbJWHncnvth/lPqFlpqarLVWD4gUkUNRX13tLOnTGN:9cMSAdiQxHcnlFOlFEDmbMC
PEiD None matched
Yara
  • PM_Zip_with_js ()
VirusTotal Permalink
VirusTotal Scan Date: 2016-11-08 12:59:27
Detection Rate: 7/56 (Expand)

MetaFlows Scores

Metaflows Analysis Results (Signatures=125, Anomalies=0, PEiD=0, Yara=2, VT[1478610969]=100): Snort Events=0, AV Events=2
Total Score=125

CLAMAV DETECTED:
Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND
DROPPED FILE - NRV_63EF1_.js: Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND

Dropped File/Buffer Yara Signatures:
4793cb553dfaef1d7b9718dd860d5b71a7024856 [BUFFER]: Str_Win32_Http_API
4f7b444ad1aa659d0fa79bb89e51ff4027609cf9 [BUFFER]: shellcode

Signatures

antivm_queries_computername details
recon_fingerprint details
antivm_memory_available details
dumped_buffer details
creates_doc details
antivm_network_adapters details
dumped_buffer2 details
antivm_vbox_files details
Windows_Proxy_Tinkering details
network_wscript_downloader details
persistence_ads details
antiav_detectfile details
exploit_heapspray details
malicious_document_urls details
network_document_file details
network_downloader_exe details
antivm_vbox_devices details
antivm_vbox_files details
modifies_files details

Screenshots

No screenshots available.

Static Analysis

Nothing to display.

Dropped Files

b99d188e88d235ff_gizcrygx-7am0-fmm8-3f29-41ba530c38e5.thor

2dfeae300d6c5159_gizcrygx-7am0-fmm8-cc36-1057cefb205b.thor

dbe5d18c56ba7c02_gizcrygx-7am0-fmm8-7ea7-7ea98d1a619f.thor

d7e095b16bd21f96_gizcrygx-7am0-fmm8-1d5b-83835057dd4e.thor

86a4b7181093ced6__52_what_is.html

ee3285408eac99fc_gizcrygx-7am0-fmm8-a27a-1538d1d33c17.thor

a545c10ecda2e34f_gizcrygx-7am0-fmm8-f189-47db2267fb48.thor

faf021b3c06abc41_tasks.xml

a5c3274a6be4307a_gizcrygx-7am0-fmm8-a8b4-f019512cf99c.thor

96b4d693e19fc5af_gizcrygx-7am0-fmm8-a167-ba6b2945ed8b.thor

1bd09038fe2b0e5a_gizcrygx-7am0-fmm8-4780-4ad0cc57246a.thor

6726c8936fe46e59_gizcrygx-7am0-fmm8-7b8b-a3b04a97f850.thor

5a145fa0beb3df33_gizcrygx-7am0-fmm8-5fde-1cefba453899.thor

1a4cb5f2e1fd4158_gizcrygx-7am0-fmm8-436e-62a81d73ba98.thor

c693e0bde51895ce_gizcrygx-7am0-fmm8-020b-22b457011236.thor

d69b8b4151fb6e53_gizcrygx-7am0-fmm8-dff9-81006123ae3f.thor

4d6a6030a87ac308_gizcrygx-7am0-fmm8-0e4f-5f90ec564035.thor

26a31d77267db6b1_gizcrygx-7am0-fmm8-4bd1-ddedf08c73b7.thor

e535aaabb231acc3_gizcrygx-7am0-fmm8-a181-25564c791d4a.thor

6185edb7ba3b775e_gizcrygx-7am0-fmm8-9d94-88d05959b3bf.thor

d1764f2cc44a02c8_gizcrygx-7am0-fmm8-09aa-1c5857043960.thor

fd5f68b59aa2b3e8_resource.xml

177c775fb9d0531a_gizcrygx-7am0-fmm8-1299-72d5817a6ef9.thor

c14940087df3dbd9_gizcrygx-7am0-fmm8-c87d-795168c77fe4.thor

29f0edf273a12908_gizcrygx-7am0-fmm8-a4a2-05cba8edec2e.thor

70a41c4503e3b4be_gizcrygx-7am0-fmm8-87a9-18ff23c050a5.thor

56fb146d95a4e790_gizcrygx-7am0-fmm8-b20f-16b33f687390.thor

0d70b2014938b5b1_gizcrygx-7am0-fmm8-2d41-4d5ff008ed1c.thor

005eefefd6972419_gizcrygx-7am0-fmm8-dd44-1a5ce841d1ea.thor

bfbfea147a0adf0a_gizcrygx-7am0-fmm8-f246-f8a0e7db9110.thor

26eecbaf504431f8_gizcrygx-7am0-fmm8-e0fb-23a5b57a12b9.thor

c9ecbf2c7cfeb850_gizcrygx-7am0-fmm8-ec01-18b844cf4f2b.thor

d8c69c28991a8ebd_gizcrygx-7am0-fmm8-f142-548d3d2754df.thor

2bdbe018f442412c_gizcrygx-7am0-fmm8-8bd5-7c7e4d2645a2.thor

94586b14f5d1bbb8_gizcrygx-7am0-fmm8-b316-33ef450df461.thor

c3cc1f943814a827_gizcrygx-7am0-fmm8-f85a-dc3e72cbd91d.thor

eed75c098f3f0ba6_gizcrygx-7am0-fmm8-9dd3-21c8a8c19bda.thor

75859699f9e6baab_gizcrygx-7am0-fmm8-d642-d909e4ddd653.thor

df7313ec809fa1bd_gizcrygx-7am0-fmm8-8e73-5719df0b89b7.thor

af7a12135db48bf2_resource.xml

7b12f467d0046edf_gizcrygx-7am0-fmm8-54c0-7b1587c7b552.thor

43e7b996cd729a3a_gizcrygx-7am0-fmm8-6816-ca9f9f14bd6f.thor

c3dc6dc2eb9ba9e0_gizcrygx-7am0-fmm8-39c5-b23d6152b12a.thor

4c660a51e5ce4777_gizcrygx-7am0-fmm8-eaaa-e9de084efae9.thor

5a67619ef7f52038_gizcrygx-7am0-fmm8-b940-42c45c8158cd.thor

d1b77411945028f5_gizcrygx-7am0-fmm8-65fc-454352cae19c.thor

0b9f4d4efbf06da9_gizcrygx-7am0-fmm8-483c-755e3256512b.thor

988614eef4989a3a_gizcrygx-7am0-fmm8-fb48-e26cc726aaf8.thor

a1c0a7ff28e5720c_gizcrygx-7am0-fmm8-a6b0-dffba77c88c1.thor

a806c479984ddebb_gizcrygx-7am0-fmm8-575f-5fd166570164.thor

c7cbf6fb4f9561a8_gizcrygx-7am0-fmm8-a341-ae470f2a14fb.thor

b69e64c4917a5702_gizcrygx-7am0-fmm8-a95b-4247b35b7c0b.thor

f5fce09851934a01_gizcrygx-7am0-fmm8-c1fa-9c264174a194.thor

9d78eeff76998012_gizcrygx-7am0-fmm8-3c99-3343b5d3585e.thor

6dd37f62f86c366a_gizcrygx-7am0-fmm8-82cd-75c464260740.thor

5e6fbcea8b3812a6_gizcrygx-7am0-fmm8-5320-e2701463faa9.thor

ca544ef9ec3f5df1_gizcrygx-7am0-fmm8-f58e-4f654d3bed18.thor

4499365e0d2dcaa1_gizcrygx-7am0-fmm8-f1f6-4ab39acfabb0.thor

a5c807bd66bce22c_gizcrygx-7am0-fmm8-2abd-046475b0fe22.thor

31ba14501f802d19_gizcrygx-7am0-fmm8-7fc7-afd9896a143a.thor

b7b1228f80b0dd3d_gizcrygx-7am0-fmm8-6d1d-05af060b8d64.thor

11ee96fdbd4bc65d_gizcrygx-7am0-fmm8-039a-f0e09ea0381b.thor

8204b2ad141469a7_gizcrygx-7am0-fmm8-2cf5-b11a385715e6.thor

d846ab913a85ad9f_gizcrygx-7am0-fmm8-7b71-3865348bd425.thor

86c05252eacc2b5d_tasks.xml

88d4cce20092bcc0_gizcrygx-7am0-fmm8-b52a-c743cff16db2.thor

d870f7304e01217b_gizcrygx-7am0-fmm8-997d-9ad133cb7188.thor

2d93485856ac01b2_gizcrygx-7am0-fmm8-c5a2-b80773042613.thor

674202179c53f9b0_gizcrygx-7am0-fmm8-0070-fc33ba2f8ace.thor

9c6e3c3d85afe1bc_gizcrygx-7am0-fmm8-f06d-63ccb317b305.thor

476d4a40734ca15c_gizcrygx-7am0-fmm8-d97f-68e495c57ef8.thor

d759c2eccec067b2_gizcrygx-7am0-fmm8-edc6-c102f6624abd.thor

eb462a42a94908e5_gizcrygx-7am0-fmm8-8d81-111d0824a593.thor

26c81e70b8af14dc_gizcrygx-7am0-fmm8-6463-13d21d17521d.thor

e9b82793b751b20e_gizcrygx-7am0-fmm8-f5e7-e60b484ab1db.thor

e4ae15cbebda0542_gizcrygx-7am0-fmm8-2049-9a63e0d2288f.thor

1e1dcfcf025cfbe2_gizcrygx-7am0-fmm8-aca3-cb2c2afe7345.thor

92394f7cb6bb7a78_gizcrygx-7am0-fmm8-f3ae-931e87a1fc89.thor

63c156fa9fd25328_gizcrygx-7am0-fmm8-7d8a-88d339d3f715.thor

ecd8be6b897a947e_gizcrygx-7am0-fmm8-bfe2-b30bd775d2d5.thor

6d50fb09f84c378e_gizcrygx-7am0-fmm8-b47c-3c4376a15db1.thor

e8178c28da5eee35_gizcrygx-7am0-fmm8-6669-a3421a2ce676.thor

02f8c860d9c2f3e8_gizcrygx-7am0-fmm8-3f6d-7c05fb34e335.thor

337f8c389b904ff4_gizcrygx-7am0-fmm8-85cb-a9edb0fce936.thor

3c0d0286d0ea055d_gizcrygx-7am0-fmm8-ca42-70d06a4975fb.thor

45e490b93fb179a2_gizcrygx-7am0-fmm8-f877-33b237271f46.thor

d48b71d676ed0e81_gizcrygx-7am0-fmm8-5f80-97ae4886ef99.thor

7cfe5fd8d4f337e0_gizcrygx-7am0-fmm8-db1f-49b09f3421ea.thor

d684aabbe176db83_gizcrygx-7am0-fmm8-a3a6-93fe090aae96.thor

05c59be0bb236b9b_gizcrygx-7am0-fmm8-5e83-ef2d330df770.thor

563b55e038903ec4_gizcrygx-7am0-fmm8-c53c-a0766bf08b13.thor

ad4f0177542ba7c0_gizcrygx-7am0-fmm8-1fbb-c5237e23d423.thor

896f73e6c9f1a5ca_gizcrygx-7am0-fmm8-895c-3ee637dc83a7.thor

fdac60f15ef53385_gizcrygx-7am0-fmm8-87ee-93dfc5196f1e.thor

1a8b885724c1f6ef_gizcrygx-7am0-fmm8-ecab-1e02f48c72ca.thor

a8f5390736dcd213_gizcrygx-7am0-fmm8-d03d-20a6b1580234.thor

db8451e071e5984e_gizcrygx-7am0-fmm8-9f88-19aa8a9b5638.thor

94e0d5ba889679e5_gizcrygx-7am0-fmm8-f9e1-ac26e1aab9a5.thor

86dfd028153eeb98_gizcrygx-7am0-fmm8-61e8-03c90ea156eb.thor

9944a40a28442e00_gizcrygx-7am0-fmm8-7286-5ff39caab24f.thor

5aa5fbf1d8f0eb04_gizcrygx-7am0-fmm8-e5d9-93b58602963c.thor

7785e884ad52387f_gizcrygx-7am0-fmm8-743d-833eae5b07b1.thor

e197a50cde771b51_gizcrygx-7am0-fmm8-ac51-6c6600ccc4b5.thor

d3e5ad32a19e3747_gizcrygx-7am0-fmm8-b7d5-d263a43aec2a.thor

f7981788d3574b81_gizcrygx-7am0-fmm8-be8a-736e24d6ddf3.thor

0251c9820f4f9d60_gizcrygx-7am0-fmm8-3a25-aa59f5aca86c.thor

220cc3374293ae1b_gizcrygx-7am0-fmm8-8027-c965addec7b9.thor

24f8fc24d9a6a323_gizcrygx-7am0-fmm8-3fba-5e9d02ca22ce.thor

2339f31ac2cb1b8d_gizcrygx-7am0-fmm8-cd99-a5ad9c1d0286.thor

27db42751a10ea28_gizcrygx-7am0-fmm8-2347-c634b85e472f.thor

26a4857345924511_gizcrygx-7am0-fmm8-8e5a-e1a2b49c9f6c.thor

12adb5c1cb70d17d_gizcrygx-7am0-fmm8-6a39-f835f795be8c.thor

7c3cb40727979057_gizcrygx-7am0-fmm8-f20f-c2996b5f396c.thor

1c2a9717b5f6966e_gizcrygx-7am0-fmm8-766d-9f4bb2275459.thor

8fd6974d1be8f357_gizcrygx-7am0-fmm8-1bf2-570db300cc19.thor

c854545616b187cd_gizcrygx-7am0-fmm8-f4ac-d21f21dad22b.thor

007fcf5fbf001f33_gizcrygx-7am0-fmm8-51f1-4cd6ea812aa6.thor

67cb211cf11eb04d_gizcrygx-7am0-fmm8-a80a-e4eac6b9488e.thor

a52e6ffe4a9dec8d_gizcrygx-7am0-fmm8-fa0d-93a84e6dedb8.thor

05dde2e40c87223f_gizcrygx-7am0-fmm8-7b10-1fb43ee13bd3.thor

3f1ecd8ebf384008_gizcrygx-7am0-fmm8-2bb8-a6f8922f5263.thor

d775f570546cc5b9_gizcrygx-7am0-fmm8-04f8-0d66445bfc2c.thor

2df86779472946f3_gizcrygx-7am0-fmm8-310d-90db79448d92.thor

54c13c49dc7143e1_gizcrygx-7am0-fmm8-792f-41b6c1d4787c.thor

a63703547d2dfc3c_gizcrygx-7am0-fmm8-e13f-fb66f4a2dae6.thor

6f902374884f4c8a_gizcrygx-7am0-fmm8-26bb-ccfbf5b5820b.thor

e50541ec18756ada_gizcrygx-7am0-fmm8-7a6b-d6f3e40c9f19.thor

ced9090ba5f18a36_gizcrygx-7am0-fmm8-7a68-73c6bbd28a4a.thor

ac665f789d21613b_gizcrygx-7am0-fmm8-bae0-15fcb0e0ba93.thor

729be041f9b5772f_gizcrygx-7am0-fmm8-883d-ff6fb9446af4.thor

fcfc20a91447d386_gizcrygx-7am0-fmm8-9113-70cdf428a1f0.thor

b62053eb2badca06_gizcrygx-7am0-fmm8-29ab-f49296941c79.thor

20600763bf278689_gizcrygx-7am0-fmm8-5c3c-2e378d1abbd8.thor

d2b1ca871c992572_gizcrygx-7am0-fmm8-f03c-c6ad680d2d71.thor

73132f2d046e7d6b_gizcrygx-7am0-fmm8-77cb-b86561ad6e5a.thor

e51a12d1f42a627e_gizcrygx-7am0-fmm8-85fe-d83e05be36c1.thor

5fc91b627e4ca092_gizcrygx-7am0-fmm8-33b9-afb212dfd950.thor

3e4774e60b303556_gizcrygx-7am0-fmm8-8bcc-2402ad675816.thor

64e6daaa8c6af03d_gizcrygx-7am0-fmm8-b078-cbbdd4aac586.thor

a515246890a331da_gizcrygx-7am0-fmm8-d68b-c7d2e347af69.thor

2fce5903a729746c_gizcrygx-7am0-fmm8-c66e-baea04a9d415.thor

283e15ffa386798b_gizcrygx-7am0-fmm8-1b34-04970cb2f291.thor

ee9925c44ce139a0_gizcrygx-7am0-fmm8-176a-7cca565d62a6.thor

cfdee715bdfb162a_gizcrygx-7am0-fmm8-2ccf-177abba19768.thor

3308ba190c8ee0f4_gizcrygx-7am0-fmm8-fb67-9e3fffe4780d.thor

39498a4ae1f218ce_gizcrygx-7am0-fmm8-af78-ad0212ef5536.thor

65b33b82b22d10f4_gizcrygx-7am0-fmm8-0494-a014f19a4568.thor

40deded0e181749a_gizcrygx-7am0-fmm8-6c6c-bbe209c25c06.thor

5bc9868a71465f48_gizcrygx-7am0-fmm8-6ebc-78ad6835eac4.thor

7fb6e4966e9a1d9b_gizcrygx-7am0-fmm8-6ba8-afb4252a24a4.thor

18058bad4932d136_gizcrygx-7am0-fmm8-f756-cde1fbe8840b.thor

39ce5b98eaefb84f_gizcrygx-7am0-fmm8-1c7d-2c06671c7438.thor

b5c7e53268ae7990_gizcrygx-7am0-fmm8-430d-cf7a98d6cf1c.thor

d87c7aa768542dd9_gizcrygx-7am0-fmm8-397c-deacdcb72ff1.thor

e626cd2d5c0c995e_gizcrygx-7am0-fmm8-db58-970cc45aa79d.thor

d82556c9cb074ede_gizcrygx-7am0-fmm8-707d-316460ba1f13.thor

7c89827036d1cd79_gizcrygx-7am0-fmm8-d6b5-ea0c0decd1a2.thor

99a3cbf57d6ad3e0_gizcrygx-7am0-fmm8-190d-a913690a4c9e.thor

54d8520f24c62461_gizcrygx-7am0-fmm8-86f1-7f72766c46f9.thor

81ab2b410a00089e_gizcrygx-7am0-fmm8-453f-fef0ed1ff872.thor

ba47e0cf294a62a6_gizcrygx-7am0-fmm8-425f-f9df05693e21.thor

ad42756416a4f9a7_gizcrygx-7am0-fmm8-fc1f-487afedf775d.thor

dee3776fa8f6ab12_gizcrygx-7am0-fmm8-93c7-faf67a98828f.thor

246008fbf6bca2e4_gizcrygx-7am0-fmm8-0738-51a8360d93bb.thor

ff077022fb89788f_gizcrygx-7am0-fmm8-9b17-f5cf00f2312f.thor

3155535b52ae15d8_gizcrygx-7am0-fmm8-1a8d-de098307acf7.thor

dd2ebe90f52f570e_gizcrygx-7am0-fmm8-0932-197b20cc2fc3.thor

8931d34acc2d60b8_behavior.xml

85fda64faaf54449_gizcrygx-7am0-fmm8-019c-9d73d4a60556.thor

efbbd832fa586708_gizcrygx-7am0-fmm8-f698-d60dd20e62d5.thor

392b0f86d1d76d54_gizcrygx-7am0-fmm8-2089-a90b5777b567.thor

ec4b9651b4902fc7_gizcrygx-7am0-fmm8-a532-f079be8c97f5.thor

2d4b7c304f3829fa_gizcrygx-7am0-fmm8-d4a8-15f41226a6b1.thor

6b6a62eeb9b555d6_gizcrygx-7am0-fmm8-d01e-3fa302c94726.thor

2ad1353345aab408_gizcrygx-7am0-fmm8-a779-6bbf90429e3e.thor

73c406a27d57e3ba_gizcrygx-7am0-fmm8-2a74-5490eba786f7.thor

9e72a4b31bb4ef50_gizcrygx-7am0-fmm8-b724-0271fe50b55b.thor

6db53ca6f44a4525_gizcrygx-7am0-fmm8-0f99-e3b169ae993d.thor

c7efc08c95887a1c_gizcrygx-7am0-fmm8-306c-7768f61319e8.thor

8ede2e9f8c154b9c_gizcrygx-7am0-fmm8-6498-4a8def8e7864.thor

e9292b22a009a0d6_gizcrygx-7am0-fmm8-d96c-c78aed834d37.thor

f0b1eb0f99df6487_gizcrygx-7am0-fmm8-1112-c6798f7eb627.thor

aba512a27c360b83_gizcrygx-7am0-fmm8-313c-984f2f35d3fa.thor

fbc45f105a2325ed_gizcrygx-7am0-fmm8-eee9-461d60fd9bf9.thor

0dcea754a54bdb44_gizcrygx-7am0-fmm8-8745-08e0d35af866.thor

f08c0aa17496ce32_gizcrygx-7am0-fmm8-75e0-667d83fb9186.thor

fc64d661193d9a5d_gizcrygx-7am0-fmm8-df2d-ddb4826a0f84.thor

4f408499b0d315d5_gizcrygx-7am0-fmm8-0e79-c689d1e4f295.thor

3847b8a58983b804_gizcrygx-7am0-fmm8-40e9-3d2649430a63.thor

004dfce91a2868bd_gizcrygx-7am0-fmm8-6a3b-559028200fde.thor

a1df364a2c81b5e8_gizcrygx-7am0-fmm8-76f2-59374d039b29.thor

0065ed96d2b23fdf_gizcrygx-7am0-fmm8-adc8-e6c206b0da5d.thor

0e16586048bc70a3_gizcrygx-7am0-fmm8-9ae4-fbabdbfd65c8.thor

8d49dc9f6a90d44d_gizcrygx-7am0-fmm8-1663-1c3d16c19ff1.thor

74768a76c024c7bc_gizcrygx-7am0-fmm8-9bb3-4b0ccd110a6a.thor

f723008da298650f_gizcrygx-7am0-fmm8-1ecd-e1d4fd1dd17c.thor

94d295b265b99b61_gizcrygx-7am0-fmm8-7090-4572b5b68dc5.thor

a8944f5769dd47fd_gizcrygx-7am0-fmm8-ff47-be840f90852b.thor

4722cda1ecf209b7_gizcrygx-7am0-fmm8-5822-98a50f281c67.thor

c907d7a74e7170d7_gizcrygx-7am0-fmm8-778a-47e3f187a952.thor

88b2c64262c67d0d_gizcrygx-7am0-fmm8-b8ef-edcbc54de868.thor

bd39c196f7068a65_gizcrygx-7am0-fmm8-ca84-ea09f2645eaa.thor

98e527eac328c4e8_gizcrygx-7am0-fmm8-2748-493695b67782.thor

e9f14e02c5d66df9_gizcrygx-7am0-fmm8-3e60-21f499b8af8f.thor

0b87a1f10b31b003_gizcrygx-7am0-fmm8-3192-55f7b3748cc6.thor

bb0131eb26d11da1_gizcrygx-7am0-fmm8-01e8-113ad2cb22c6.thor

44238a5a44024514_gizcrygx-7am0-fmm8-d6f6-5c9d9d64e2ab.thor

dbd9363f46a18794_gizcrygx-7am0-fmm8-2ffa-f923a91560cf.thor

57ca7fcda8a018e8_gizcrygx-7am0-fmm8-30ec-53ded4066235.thor

ea693a14113c30b7_gizcrygx-7am0-fmm8-bcf2-d1e98b917dd8.thor

6a0ebf03433a9f30_gizcrygx-7am0-fmm8-e28b-7b02e5e940b7.thor

604a9c4dc778fca1_gizcrygx-7am0-fmm8-90fc-ca6257fdb8b6.thor

78f9a1b50c97a7aa_gizcrygx-7am0-fmm8-5d02-26d842ca8fed.thor

459cdeadde97ab05_gizcrygx-7am0-fmm8-243c-4f8c3bf3a12f.thor

4ecbd08f52dc5263_gizcrygx-7am0-fmm8-dceb-bca52c237efd.thor

db9614c70575e126_gizcrygx-7am0-fmm8-1ceb-cd432409f8db.thor

53837da31c22db8b_gizcrygx-7am0-fmm8-8fcb-5d1c6dbea6df.thor

213b9107c4b7422e_gizcrygx-7am0-fmm8-7d66-565926ecb2f3.thor

96d9f9ac4018cd63_gizcrygx-7am0-fmm8-5539-f974744862e5.thor

f0572b5708c83015_behavior.xml

406d4086e36cf82d_gizcrygx-7am0-fmm8-3ef0-c316cb24072e.thor

dd1c6e9d79312b41_gizcrygx-7am0-fmm8-f2e4-4f7da1ffc7b3.thor

d17e647c9afbe8f1_gizcrygx-7am0-fmm8-0857-88a80c55469d.thor

8f669ac8820860a9_gizcrygx-7am0-fmm8-0146-183598ac6e7d.thor

c0ad038f3370eefe_gizcrygx-7am0-fmm8-792e-48e20ec7120e.thor

5acaaf5c4a0eddcb_gizcrygx-7am0-fmm8-9bc9-5dd7fd20f71d.thor

6c86457b3e363f5e_lqwdo5z8v7.dll

cffe5f2f0fbf78b4_gizcrygx-7am0-fmm8-d922-9096960104ea.thor

c5cb4594c4d2fcd5_gizcrygx-7am0-fmm8-c1e8-929888e29fa4.thor

43edc92aa910985b_gizcrygx-7am0-fmm8-98b2-4e0ada61fc2d.thor

a58ff72aab583bdb_gizcrygx-7am0-fmm8-5c53-5eda575646dc.thor

797150b0587331eb_gizcrygx-7am0-fmm8-22d1-28f0e3f68ccc.thor

b27852bbbd973239_gizcrygx-7am0-fmm8-7327-67edc49411e1.thor

c338758953ada107_gizcrygx-7am0-fmm8-c902-ab852362bb82.thor

51d8002c3dc7e518_gizcrygx-7am0-fmm8-caba-01ad8efcd277.thor

002c397a835b2806_gizcrygx-7am0-fmm8-4b24-ccd5dd4e270e.thor

348580b46a5418cb_gizcrygx-7am0-fmm8-260e-6b14f191adcf.thor

813bb1dd7b000bb3_gizcrygx-7am0-fmm8-52bc-4bd4869059ea.thor

5f093d240911ebea_gizcrygx-7am0-fmm8-22be-cb843d19583f.thor

36cdfa4d4681d80b_gizcrygx-7am0-fmm8-2461-afadb30d2f50.thor

eb4736e7ccd93cdb_gizcrygx-7am0-fmm8-df17-9405dca7184e.thor

88110acbca826692_gizcrygx-7am0-fmm8-dec1-74f37ec06179.thor

c937c553b5d84664_gizcrygx-7am0-fmm8-48ab-261820fa06e4.thor

2a34a44028f11e60_gizcrygx-7am0-fmm8-56f0-9f5e884797d5.thor

529212572c537456_gizcrygx-7am0-fmm8-4ba7-f6ee6019eb15.thor

79c5875ae0246e2f_gizcrygx-7am0-fmm8-4e4c-2d8cb3b1774d.thor

587308cb1267b30f_gizcrygx-7am0-fmm8-a9e1-a04f43d142a6.thor

3cfa5ebd5960ac8e_gizcrygx-7am0-fmm8-62db-34ae863a75f1.thor

65f489aeec94facb_gizcrygx-7am0-fmm8-0b8d-a1e3a3df6a80.thor

c3d5a2575319bb46_gizcrygx-7am0-fmm8-d74a-20b7f38bdbed.thor

7d0f89964595d3ff_gizcrygx-7am0-fmm8-f18f-2e4a89f68947.thor

afc83a1c904a7434_gizcrygx-7am0-fmm8-b774-3650179a0c8a.thor

548c7c608e429033_gizcrygx-7am0-fmm8-ff9b-18fbb7b9f136.thor

3ddf81b21380f6c0_gizcrygx-7am0-fmm8-260f-b21e02a6da37.thor

26204652549d7938_gizcrygx-7am0-fmm8-da1f-4ad1b64ec12f.thor

88d2b4616d212db5_gizcrygx-7am0-fmm8-987a-df9a514931e0.thor

9ec74ef65cd620c5_gizcrygx-7am0-fmm8-fc47-a6efbafe65b8.thor

ddeaa3c58c76ec13_gizcrygx-7am0-fmm8-8cc2-a1fbb2678991.thor

28e9a3dee6434097_gizcrygx-7am0-fmm8-1a9c-9f42af7ca037.thor

6bab278173d249e4_gizcrygx-7am0-fmm8-803d-5c89ff0c77ad.thor

b8ddbec0090de301_gizcrygx-7am0-fmm8-28ec-5ac9ec5f1a9e.thor

e84162c0b9625a59_gizcrygx-7am0-fmm8-eba1-68e9267f01cf.thor

65fe42d83b1f21f6_gizcrygx-7am0-fmm8-4503-0cce68b9c6be.thor

17e8a65fb996ecb8_gizcrygx-7am0-fmm8-4725-2030cb87c6cf.thor

946ef859f031b1f9_gizcrygx-7am0-fmm8-3900-7c7952fc3d68.thor

62c635947affe2e1_gizcrygx-7am0-fmm8-e709-d87ac9abfdde.thor

4b5036dde6a0caa8_gizcrygx-7am0-fmm8-0f83-06dfb863968a.thor

6bbabcea772a2e28_gizcrygx-7am0-fmm8-d941-3269746f5e8f.thor

84d13a64d4d7695c_gizcrygx-7am0-fmm8-d924-a189044d8b4b.thor

95ae2769c4982d06_gizcrygx-7am0-fmm8-cb3a-d9832b38ba62.thor

2b43de82ccfdcb19_gizcrygx-7am0-fmm8-0ecb-887fd4fc3ae9.thor

81055dad512cebb7_gizcrygx-7am0-fmm8-c66b-5e4f42b4fd7c.thor

f5573d3469b0514c_gizcrygx-7am0-fmm8-1d91-d827da2cbc9c.thor

4bcc2e179e6068b4_gizcrygx-7am0-fmm8-d94a-4335e69f35cb.thor

e037bd354960d7ec_gizcrygx-7am0-fmm8-9244-d7862dba4337.thor

842e2ed1d3270db3_gizcrygx-7am0-fmm8-c47e-e8b7e3e792ad.thor

a437756f0d6d7d23_gizcrygx-7am0-fmm8-d8cf-97d24094fa9a.thor

05029d97a182b391_gizcrygx-7am0-fmm8-939f-7f1f40705f2a.thor

3fd555f1722653ee_gizcrygx-7am0-fmm8-26b1-f10bcdf6ccbc.thor

5d85237bde52c364_gizcrygx-7am0-fmm8-99b8-147dc18701e3.thor

f94bd7b044ac75b7_gizcrygx-7am0-fmm8-cf63-537425448c41.thor

NRV_63EF1_.js

Network Analysis

Hosts Involved

DNS Requests

HTTP Requests

Behavior Summary

File-Read
  • C:\Users\Harry Dresden\Desktop\desktop.ini
  • C:\Windows\System32\wshom.ocx
  • C:\Users\Harry Dresden\AppData\Local\Temp\NRV_63EF1_.js
  • C:\Windows\System32\wscript.exe
  • C:\Windows\System32\msxml3.dll
  • c:\Python27\include\pyexpat.h
  • c:\Python27\Lib\email\test\data\msg_45.txt
  • c:\Python27\Lib\email\test\data\msg_06.txt
  • c:\Python27\include\ast.h
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\Python27\include\tupleobject.h
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp
  • c:\Python27\include\descrobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Python27\include\grammar.h
  • c:\Python27\include\import.h
  • \\?\PIPE\browser
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1032\LocalizedData.xml
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Penguins.jpg
  • c:\Python27\Lib\idlelib\TODO.txt
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\FljypKPhErg.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\Python27\include\marshal.h
  • c:\Python27\Lib\email\test\data\msg_23.txt
  • c:\Python27\Lib\email\test\data\msg_19.txt
  • c:\Python27\Lib\idlelib\extend.txt
  • c:\Python27\Lib\test\badcert.pem
  • c:\Python27\Lib\test\cjkencodings\euc_kr.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css
  • c:\Python27\include\pgen.h
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\Python27\include\objimpl.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp
  • c:\Python27\Lib\idlelib\idle_test\README.txt
  • c:\Python27\include\abstract.h
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\Python27\Lib\test\keycert.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png
  • c:\Python27\Lib\test\cjkencodings\gb18030-utf8.txt
  • c:\Python27\include\object.h
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • c:\Python27\Lib\test\cjkencodings\euc_jisx0213.txt
  • c:\Python27\tcl\tclConfig.sh
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css
  • c:\Python27\include\pyport.h
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml
  • c:\Python27\include\code.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\Python27\include\dtoa.h
  • c:\Python27\include\asdl.h
  • c:\Python27\Lib\test\empty.vbs
  • c:\6cdeacda242012e0e5b593e657\1030\LocalizedData.xml
  • c:\ProgramData\Microsoft\IlsCache\ilrcache.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png
  • c:\Python27\include\complexobject.h
  • c:\Python27\Lib\email\test\data\msg_13.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1031\LocalizedData.xml
  • c:\Python27\Lib\lib2to3\Grammar.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect Sensitive PDF Documents.bmp
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • c:\Python27\include\intobject.h
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\Python27\include\pyctype.h
  • c:\Python27\Lib\email\test\data\msg_02.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html
  • c:\Python27\Lib\test\nokia.pem
  • c:\Python27\include\pydebug.h
  • c:\Python27\include\structmember.h
  • c:\Python27\Lib\email\test\data\msg_14.txt
  • c:\Python27\include\fileobject.h
  • c:\Python27\Lib\email\test\data\msg_11.txt
  • c:\Python27\include\enumobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • c:\Python27\include\metagrammar.h
  • c:\Python27\include\pyfpe.h
  • c:\Python27\include\compile.h
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\config.css
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\resource.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect your PDF files with AD RMS.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_over_bg.jpg
  • c:\Python27\Lib\email\test\data\msg_22.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css
  • c:\Python27\include\pgenheaders.h
  • c:\Python27\include\pythread.h
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Koala.jpg
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\VVDFgBJvdR.txt
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\nHTJYAetow.docm
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\Python27\Lib\site-packages\setuptools\command\launcher manifest.xml
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index.html
  • c:\Python27\include\opcode.h
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\include\memoryobject.h
  • c:\Python27\include\moduleobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Kalimba.mp3
  • c:\Python27\Lib\email\test\data\msg_25.txt
  • c:\Python27\include\boolobject.h
  • c:\Python27\Lib\email\test\data\msg_12.txt
  • c:\Python27\include\token.h
  • c:\Python27\include\bitset.h
  • c:\Python27\include\warnings.h
  • c:\Python27\include\pycapsule.h
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\MasterDescriptor.en-us.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_27.txt
  • c:\Python27\Lib\idlelib\NEWS.txt
  • c:\Python27\Lib\email\test\data\msg_42.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp
  • c:\Python27\include\modsupport.h
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • c:\Python27\Lib\idlelib\help.txt
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • c:\Python27\include\ucnhash.h
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\keycert4.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp
  • c:\Python27\Lib\test\cjkencodings\cp949-utf8.txt
  • c:\Python27\Lib\email\test\data\msg_16.txt
  • c:\Python27\include\symtable.h
  • c:\Python27\include\node.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_move_bg.jpg
  • c:\Python27\Lib\idlelib\HISTORY.txt
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\big-hero-6-2.jpg
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Tulips.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Fastest PDF Search and Index.bmp
  • c:\Python27\include\setobject.h
  • c:\Python27\include\cStringIO.h
  • c:\Python27\include\cobject.h
  • c:\Python27\Lib\test\cjkencodings\euc_jp.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml
  • c:\ProgramData\Sun\Java\Java Update\jaureglist.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Design form fields easily.bmp
  • c:\Python27\Lib\email\test\data\msg_29.txt
  • c:\Python27\Lib\email\test\data\msg_01.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\skin.css
  • \\?\PIPE\lsarpc
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg
  • c:\Python27\Lib\test\sha256.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_s.png
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
  • c:\Python27\include\classobject.h
  • c:\Python27\include\datetime.h
  • c:\6cdeacda242012e0e5b593e657\1028\LocalizedData.xml
  • c:\Python27\Lib\email\test\data\msg_18.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your application.bmp
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml
  • c:\Python27\include\errcode.h
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\top_level.txt
  • c:\Python27\Lib\test\keycert3.pem
  • c:\Python27\Lib\email\test\data\msg_09.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Fastest PDF Search and Index.bmp
  • c:\Python27\include\pyerrors.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml
  • c:\Python27\include\Python-ast.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\blank.gif
  • c:\Python27\Lib\email\test\data\msg_21.txt
  • c:\Python27\include\ceval.h
  • c:\Python27\Lib\lib2to3\PatternGrammar.txt
  • c:\Python27\Lib\email\test\data\msg_07.txt
  • c:\Python27\include\pythonrun.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16.png
  • c:\Python27\Lib\idlelib\README.txt
  • c:\Python27\include\pygetopt.h
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\gqireOVGRy.ppt
  • c:\Python27\include\codecs.h
  • c:\Python27\Lib\email\test\data\msg_10.txt
  • c:\Python27\Lib\email\test\data\msg_33.txt
  • c:\Python27\Lib\test\cjkencodings\euc_jisx0213-utf8.txt
  • c:\kgxnnbvvo\bin\cert.p12
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\Profile.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index_ori.html
  • c:\Python27\include\patchlevel.h
  • c:\Python27\include\bytes_methods.h
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf
  • c:\Python27\Lib\test\cjkencodings\cp949.txt
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf
  • c:\Python27\Lib\test\keycert.pem
  • c:\Python27\include\traceback.h
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Powerful Word Processor.bmp
  • c:\Python27\include\longintrepr.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\buy_phantom.png
  • c:\Python27\include\parsetok.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml
  • c:\Python27\include\Python.h
  • c:\Python27\Lib\email\test\data\msg_34.txt
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\entry_points.txt
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View PDFs on mobile devices.bmp
  • c:\Python27\include\pystate.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\version.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_b.png
  • c:\Python27\include\pymacconfig.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml
  • c:\Python27\include\bufferobject.h
  • c:\Python27\include\timefuncs.h
  • c:\Python27\Lib\email\test\data\msg_37.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1037\eula.rtf
  • c:\Python27\include\pystrcmp.h
  • c:\Python27\include\floatobject.h
  • UNC\SHARDREALM\Users\Default\NTUSER.DAT.LOG
  • c:\Python27\Lib\email\test\data\msg_26.txt
  • c:\Python27\Lib\test\pycacert.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\top_tb_bg.jpg
  • c:\Python27\Lib\test\badkey.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Powerful Word Processor.bmp
  • c:\Python27\Lib\test\cjkencodings\big5.txt
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt
  • c:\Python27\Lib\test\cjkencodings\euc_jp-utf8.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml
  • UNC\SHARDREALM\Users\Public\Videos\Sample Videos\Wildlife.wmv
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • c:\Python27\include\bytesobject.h
  • c:\Python27\include\sysmodule.h
  • c:\Python27\include\pymactoolbox.h
  • c:\Python27\Lib\email\test\data\msg_35.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect Sensitive PDF Documents.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml
  • c:\Python27\Lib\test\185test.db
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\Lib\email\test\data\msg_08.txt
  • c:\Python27\include\eval.h
  • c:\Python27\Lib\email\test\data\msg_15.txt
  • c:\Python27\Lib\site-packages\README.txt
  • c:\Python27\include\genobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\cleandesktop.py.txt
  • c:\6cdeacda242012e0e5b593e657\1029\LocalizedData.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Desert.jpg
  • c:\Python27\Lib\test\cjkencodings\big5hkscs.txt
  • c:\Python27\Lib\email\test\data\msg_28.txt
  • c:\Python27\Lib\test\ssl_cert.pem
  • c:\Python27\Lib\email\test\data\msg_17.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\osdefs.h
  • c:\6cdeacda242012e0e5b593e657\1025\LocalizedData.xml
  • \\?\PIPE\wkssvc
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\fOKrJStSeZAZfY.docm
  • c:\Python27\include\pymem.h
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\cacert.pem
  • c:\Python27\include\pyarena.h
  • c:\6cdeacda242012e0e5b593e657\1033\eula.rtf
  • c:\Python27\Lib\test\selfsigned_pythontestdotnet.pem
  • c:\Python27\Lib\email\test\data\msg_46.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Create PDF from Office-convert PDF to office.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your application.bmp
  • c:\Python27\include\rangeobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\body_bg.jpg
  • c:\6cdeacda242012e0e5b593e657\2070\eula.rtf
  • c:\Python27\include\iterobject.h
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf
  • c:\Python27\include\funcobject.h
  • c:\Python27\include\listobject.h
  • c:\Python27\Lib\email\test\data\msg_44.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16-open.png
  • c:\Python27\include\frameobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • c:\Python27\include\sliceobject.h
  • c:\Python27\tcl\tix8.4.3\pref\TK.cs
  • c:\Python27\Lib\email\test\data\msg_43.txt
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml
  • c:\Python27\include\stringobject.h
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts\Harry Dresden.contact
  • c:\Python27\Lib\email\test\data\msg_20.txt
  • c:\Python27\tcl\tix8.4.3\pref\Gray.cs
  • c:\Python27\Lib\test\ssl_key.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • c:\Python27\include\methodobject.h
  • c:\Python27\include\pyconfig.h
  • c:\Python27\include\structseq.h
  • c:\Python27\Lib\test\cjkencodings\gb18030.txt
  • c:\Python27\include\pymath.h
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Sleep Away.mp3
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_32.txt
  • c:\Python27\Lib\email\test\data\msg_24.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg
  • c:\Python27\Lib\test\ssl_key.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\Lib\test\keycert2.pem
  • c:\Python27\include\py_curses.h
  • c:\ProgramData\WebEx\WebEx\atsdk.xml
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml
  • c:\Python27\Lib\test\cjkencodings\big5-utf8.txt
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\MasterDescriptor.x-none.xml
  • c:\Python27\include\graminit.h
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\dependency_links.txt
  • c:\6cdeacda242012e0e5b593e657\1049\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View PDFs on mobile devices.bmp
  • c:\Python27\tcl\tix8.4.3\pref\TkWin.cs
  • c:\Python27\include\bytearrayobject.h
  • c:\Python27\Lib\email\test\data\msg_12a.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View and annotate PDFs.bmp
  • c:\Python27\Lib\idlelib\CREDITS.txt
  • c:\Python27\include\dictobject.h
  • c:\Python27\Lib\test\cjkencodings\big5hkscs-utf8.txt
  • c:\Python27\include\intrcheck.h
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_38.txt
  • c:\Python27\Lib\test\cjkencodings\euc_kr-utf8.txt
  • c:\ProgramData\Microsoft\IlsCache\imcrcache.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64mui.msi.16.en-us.xml
  • c:\Python27\Lib\test\nullbytecert.pem
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • c:\Python27\Lib\test\dh1024.pem
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\entry_points.txt
  • c:\Python27\include\weakrefobject.h
  • c:\Python27\Lib\idlelib\idle.bat
  • c:\Python27\include\unicodeobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View and annotate PDFs.bmp
  • c:\Python27\include\cellobject.h
File-Written
  • C:\Users\Harry Dresden\AppData\Local\Temp\LQwdO5z8V7.dll
  • C:\Users\Harry Dresden\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YLC2QM2Y\rq4xoq3[1]
  • c:\Python27\Lib\email\test\data\msg_02.txt
  • c:\Python27\include\pyexpat.h
  • c:\6cdeacda242012e0e5b593e657\1033\_25_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_45.txt
  • c:\Python27\Lib\email\test\data\msg_06.txt
  • c:\Python27\include\ast.h
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\Python27\include\tupleobject.h
  • c:\Python27\tcl\tix8.4.3\pref\_29_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp
  • c:\Python27\include\descrobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg
  • c:\ProgramData\WebEx\WebEx\12_1324\_19_WHAT_is.html
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Python27\include\grammar.h
  • c:\6cdeacda242012e0e5b593e657\1032\LocalizedData.xml
  • c:\Python27\include\import.h
  • \\?\PIPE\browser
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\Python27\Lib\test\nullcert.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • c:\6cdeacda242012e0e5b593e657\1044\_9_WHAT_is.html
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\_42_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Penguins.jpg
  • c:\Python27\Lib\idlelib\TODO.txt
  • c:\6cdeacda242012e0e5b593e657\2070\_16_WHAT_is.html
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\FljypKPhErg.rtf
  • c:\6cdeacda242012e0e5b593e657\1055\_14_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1053\_13_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\Python27\include\marshal.h
  • c:\Python27\Lib\email\test\data\msg_23.txt
  • c:\Python27\Lib\email\test\data\msg_19.txt
  • c:\Python27\Lib\idlelib\extend.txt
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\_1_WHAT_is.html
  • c:\Python27\Lib\test\badcert.pem
  • c:\Python27\Lib\test\cjkencodings\euc_kr.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css
  • c:\Python27\include\pgen.h
  • c:\Python27\include\memoryobject.h
  • c:\Python27\include\objimpl.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\1032\_24_WHAT_is.html
  • c:\Python27\Lib\idlelib\idle_test\README.txt
  • c:\6cdeacda242012e0e5b593e657\1040\_5_WHAT_is.html
  • c:\Python27\include\abstract.h
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\Python27\Lib\test\keycert.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png
  • c:\Python27\Lib\test\cjkencodings\gb18030-utf8.txt
  • c:\Python27\include\object.h
  • c:\Python27\Lib\idlelib\_31_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • c:\Python27\Lib\test\cjkencodings\euc_jisx0213.txt
  • c:\Python27\tcl\tclConfig.sh
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css
  • c:\Python27\include\pyport.h
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\_36_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\_3_WHAT_is.html
  • c:\Python27\Lib\site-packages\setuptools\command\_46_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml
  • c:\Python27\include\code.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\Python27\include\dtoa.h
  • c:\Python27\include\asdl.h
  • c:\Python27\Lib\test\empty.vbs
  • c:\6cdeacda242012e0e5b593e657\1030\LocalizedData.xml
  • c:\ProgramData\Microsoft\IlsCache\ilrcache.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png
  • c:\Python27\include\complexobject.h
  • c:\Python27\Lib\email\test\data\msg_13.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp
  • c:\Python27\Lib\lib2to3\Grammar.txt
  • c:\6cdeacda242012e0e5b593e657\1030\_22_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect Sensitive PDF Documents.bmp
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • c:\6cdeacda242012e0e5b593e657\1035\_26_WHAT_is.html
  • c:\Python27\include\intobject.h
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\_48_WHAT_is.html
  • c:\Python27\include\pyctype.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html
  • c:\Python27\Lib\test\nokia.pem
  • c:\Python27\include\pydebug.h
  • c:\Python27\include\structmember.h
  • c:\Python27\Lib\email\test\data\msg_14.txt
  • c:\Python27\include\fileobject.h
  • c:\Python27\Lib\email\test\data\msg_11.txt
  • c:\Python27\include\enumobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • c:\Python27\include\metagrammar.h
  • c:\Python27\include\pyfpe.h
  • c:\Python27\include\compile.h
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Videos\Sample Videos\_10_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\config.css
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\GIZCRYGX-7AM0-FMM8-82CD-75C464260740.thor
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect your PDF files with AD RMS.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1028\_20_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_over_bg.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\_8_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_22.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css
  • c:\Python27\include\pgenheaders.h
  • c:\Python27\include\pythread.h
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Koala.jpg
  • c:\6cdeacda242012e0e5b593e657\1043\_8_WHAT_is.html
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\VVDFgBJvdR.txt
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\nHTJYAetow.docm
  • c:\kgxnnbvvo\bin\_0_WHAT_is.html
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts\_12_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\GIZCRYGX-7AM0-FMM8-7B10-1FB43EE13BD3.thor
  • c:\Python27\Lib\site-packages\setuptools\command\launcher manifest.xml
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\_1_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index.html
  • c:\Python27\include\opcode.h
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\Python27\include\moduleobject.h
  • c:\Python27\include\_4_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Kalimba.mp3
  • c:\Python27\Lib\email\test\data\msg_25.txt
  • c:\Python27\include\boolobject.h
  • c:\Python27\Lib\email\test\data\msg_12.txt
  • c:\Python27\include\token.h
  • c:\Python27\include\bitset.h
  • c:\Python27\include\warnings.h
  • c:\Python27\include\pycapsule.h
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\MasterDescriptor.en-us.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_27.txt
  • c:\Python27\Lib\idlelib\NEWS.txt
  • c:\Python27\Lib\email\test\data\msg_42.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp
  • c:\Python27\include\modsupport.h
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\GIZCRYGX-7AM0-FMM8-7EA7-7EA98D1A619F.thor
  • c:\Python27\Lib\idlelib\help.txt
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • c:\Python27\include\ucnhash.h
  • c:\6cdeacda242012e0e5b593e657\1049\_12_WHAT_is.html
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\keycert4.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp
  • c:\6cdeacda242012e0e5b593e657\1038\_3_WHAT_is.html
  • c:\Python27\Lib\test\cjkencodings\cp949-utf8.txt
  • c:\Python27\Lib\email\test\data\msg_16.txt
  • c:\Python27\include\symtable.h
  • c:\Python27\include\node.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_move_bg.jpg
  • c:\Python27\Lib\idlelib\HISTORY.txt
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\big-hero-6-2.jpg
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Tulips.jpg
  • c:\6cdeacda242012e0e5b593e657\2052\_15_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Fastest PDF Search and Index.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\_5_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\_6_WHAT_is.html
  • c:\Python27\include\setobject.h
  • c:\Python27\include\cStringIO.h
  • c:\Python27\include\cobject.h
  • c:\Python27\Lib\site-packages\_47_WHAT_is.html
  • c:\Python27\Lib\test\cjkencodings\euc_jp.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml
  • c:\ProgramData\Sun\Java\Java Update\jaureglist.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Design form fields easily.bmp
  • c:\Python27\Lib\email\test\data\msg_29.txt
  • c:\Python27\Lib\email\test\data\msg_01.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\skin.css
  • \\?\PIPE\lsarpc
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg
  • c:\Python27\tcl\_30_WHAT_is.html
  • c:\Python27\Lib\test\sha256.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_s.png
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\test\cjkencodings\_53_WHAT_is.html
  • c:\Python27\include\classobject.h
  • c:\Python27\include\datetime.h
  • c:\6cdeacda242012e0e5b593e657\1045\_10_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1028\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1041\_6_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_18.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your application.bmp
  • c:\Python27\include\errcode.h
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\top_level.txt
  • c:\Python27\Lib\test\keycert3.pem
  • c:\Python27\Lib\email\test\data\msg_09.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Fastest PDF Search and Index.bmp
  • c:\Python27\include\pyerrors.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml
  • c:\Python27\include\Python-ast.h
  • c:\6cdeacda242012e0e5b593e657\1042\_7_WHAT_is.html
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\GIZCRYGX-7AM0-FMM8-7D66-565926ECB2F3.thor
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\blank.gif
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\_35_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_21.txt
  • c:\Python27\include\ceval.h
  • c:\Python27\Lib\lib2to3\PatternGrammar.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\_41_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_07.txt
  • c:\Python27\include\pythonrun.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16.png
  • c:\Python27\Lib\idlelib\README.txt
  • c:\Python27\include\pygetopt.h
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\gqireOVGRy.ppt
  • c:\Python27\include\codecs.h
  • c:\Python27\Lib\email\test\data\msg_10.txt
  • c:\Python27\Lib\email\test\data\msg_33.txt
  • c:\Python27\Lib\test\cjkencodings\euc_jisx0213-utf8.txt
  • c:\kgxnnbvvo\bin\cert.p12
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\Profile.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index_ori.html
  • c:\Python27\Lib\test\_2_WHAT_is.html
  • c:\Python27\include\patchlevel.h
  • c:\Python27\include\bytes_methods.h
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\_34_WHAT_is.html
  • c:\Python27\Lib\test\cjkencodings\cp949.txt
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf
  • c:\Python27\Lib\test\keycert.pem
  • c:\6cdeacda242012e0e5b593e657\1029\_21_WHAT_is.html
  • c:\Python27\include\traceback.h
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\_13_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Powerful Word Processor.bmp
  • c:\Python27\include\longintrepr.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\buy_phantom.png
  • c:\Python27\include\parsetok.h
  • c:\6cdeacda242012e0e5b593e657\1036\_27_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml
  • c:\Python27\include\Python.h
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\_0_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_34.txt
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\entry_points.txt
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View PDFs on mobile devices.bmp
  • c:\ProgramData\Microsoft\ClickToRun\_33_WHAT_is.html
  • c:\Python27\include\pystate.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\_44_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\version.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_b.png
  • c:\Python27\include\pymacconfig.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml
  • c:\ProgramData\Microsoft\IlsCache\_45_WHAT_is.html
  • c:\Python27\include\bufferobject.h
  • c:\Python27\include\timefuncs.h
  • c:\Python27\Lib\email\test\data\msg_37.txt
  • c:\Python27\include\graminit.h
  • c:\6cdeacda242012e0e5b593e657\1037\eula.rtf
  • c:\Python27\include\pystrcmp.h
  • c:\Python27\include\floatobject.h
  • UNC\SHARDREALM\Users\Default\NTUSER.DAT.LOG
  • c:\Python27\Lib\email\test\data\msg_26.txt
  • c:\Python27\Lib\test\pycacert.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\top_tb_bg.jpg
  • c:\Python27\Lib\test\badkey.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Powerful Word Processor.bmp
  • c:\Python27\Lib\test\cjkencodings\big5.txt
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt
  • c:\ProgramData\WebEx\WebEx\_52_WHAT_is.html
  • c:\Python27\Lib\test\cjkencodings\euc_jp-utf8.txt
  • c:\Python27\Lib\email\test\data\_32_WHAT_is.html
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\_40_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Videos\Sample Videos\Wildlife.wmv
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • c:\Python27\include\bytesobject.h
  • c:\Python27\include\sysmodule.h
  • c:\Python27\include\pymactoolbox.h
  • c:\Python27\Lib\email\test\data\msg_35.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\_4_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect Sensitive PDF Documents.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\GIZCRYGX-7AM0-FMM8-1663-1C3D16C19FF1.thor
  • c:\6cdeacda242012e0e5b593e657\1031\LocalizedData.xml
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\_39_WHAT_is.html
  • c:\Python27\Lib\test\185test.db
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\cacert.pem
  • c:\Python27\Lib\email\test\data\msg_08.txt
  • c:\Python27\include\eval.h
  • c:\Python27\Lib\email\test\data\msg_15.txt
  • c:\Python27\Lib\idlelib\idle_test\_49_WHAT_is.html
  • c:\Python27\Lib\site-packages\README.txt
  • c:\Python27\include\genobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\cleandesktop.py.txt
  • c:\6cdeacda242012e0e5b593e657\1029\LocalizedData.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Desert.jpg
  • c:\Python27\Lib\test\cjkencodings\big5hkscs.txt
  • c:\Python27\Lib\email\test\data\msg_28.txt
  • c:\Python27\Lib\test\ssl_cert.pem
  • c:\Python27\Lib\email\test\data\msg_17.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect your PDF files with AD RMS.bmp
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\_43_WHAT_is.html
  • c:\Python27\include\osdefs.h
  • c:\6cdeacda242012e0e5b593e657\1025\LocalizedData.xml
  • \\?\PIPE\wkssvc
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\_2_WHAT_is.html
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\fOKrJStSeZAZfY.docm
  • c:\Python27\include\pymem.h
  • c:\6cdeacda242012e0e5b593e657\1037\_28_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\include\pyarena.h
  • c:\6cdeacda242012e0e5b593e657\1033\eula.rtf
  • c:\Python27\Lib\test\selfsigned_pythontestdotnet.pem
  • c:\Python27\Lib\email\test\data\msg_46.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Create PDF from Office-convert PDF to office.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your application.bmp
  • c:\Python27\include\rangeobject.h
  • c:\ProgramData\Microsoft\IlsCache\imcrcache.xml
  • c:\6cdeacda242012e0e5b593e657\2070\eula.rtf
  • c:\Python27\include\iterobject.h
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf
  • c:\Python27\include\funcobject.h
  • c:\Python27\include\listobject.h
  • c:\Python27\Lib\email\test\data\msg_44.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16-open.png
  • c:\Python27\include\frameobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\_7_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\_9_WHAT_is.html
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\GIZCRYGX-7AM0-FMM8-A9E1-A04F43D142A6.thor
  • c:\Python27\include\sliceobject.h
  • c:\Python27\tcl\tix8.4.3\pref\TK.cs
  • c:\Python27\Lib\email\test\data\msg_43.txt
  • c:\6cdeacda242012e0e5b593e657\3082\_17_WHAT_is.html
  • c:\Python27\include\stringobject.h
  • UNC\SHARDREALM\Users\Default\_11_WHAT_is.html
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts\Harry Dresden.contact
  • c:\Python27\Lib\email\test\data\msg_20.txt
  • c:\Python27\tcl\tix8.4.3\pref\Gray.cs
  • c:\Python27\Lib\test\ssl_key.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • c:\Python27\include\methodobject.h
  • c:\Python27\include\pyconfig.h
  • c:\Python27\include\structseq.h
  • c:\Python27\Lib\test\cjkencodings\gb18030.txt
  • c:\Python27\include\pymath.h
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Sleep Away.mp3
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_32.txt
  • c:\Python27\Lib\email\test\data\msg_24.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\_37_WHAT_is.html
  • c:\Python27\Lib\test\ssl_key.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\Lib\test\keycert2.pem
  • c:\Python27\include\py_curses.h
  • c:\ProgramData\WebEx\WebEx\atsdk.xml
  • c:\6cdeacda242012e0e5b593e657\1025\_18_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • c:\Python27\Lib\test\cjkencodings\big5-utf8.txt
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\MasterDescriptor.x-none.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\dependency_links.txt
  • c:\6cdeacda242012e0e5b593e657\1049\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View PDFs on mobile devices.bmp
  • c:\Python27\tcl\tix8.4.3\pref\TkWin.cs
  • c:\Python27\include\bytearrayobject.h
  • c:\Python27\Lib\lib2to3\_50_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1031\_23_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_12a.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View and annotate PDFs.bmp
  • c:\Python27\Lib\idlelib\CREDITS.txt
  • c:\Python27\include\dictobject.h
  • c:\Python27\Lib\test\cjkencodings\big5hkscs-utf8.txt
  • c:\Python27\include\intrcheck.h
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\_38_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_38.txt
  • c:\Python27\Lib\test\cjkencodings\euc_kr-utf8.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\body_bg.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64mui.msi.16.en-us.xml
  • c:\Python27\Lib\test\nullbytecert.pem
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • c:\Python27\Lib\test\dh1024.pem
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml
  • c:\ProgramData\Sun\Java\Java Update\_51_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\GIZCRYGX-7AM0-FMM8-5539-F974744862E5.thor
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\entry_points.txt
  • c:\Python27\include\weakrefobject.h
  • c:\Python27\Lib\idlelib\idle.bat
  • c:\Python27\include\unicodeobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View and annotate PDFs.bmp
  • c:\Python27\include\cellobject.h
File-Deleted
  • C:\Users\Harry Dresden\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000000.db
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\resource.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml
File-Opened
  • C:\Windows\System32\wshqos.dll
  • C:\Windows\System32\wshom.ocx
  • C:\
  • C:\Windows\Globalization\Sorting\sortdefault.nls
  • C:\Users\
  • C:\Users\Harry Dresden\
  • C:\Users\Harry Dresden\AppData\
  • C:\Users\Harry Dresden\AppData\Local\
  • C:\Windows\
  • C:\Windows\System32\en-US\wshqos.dll.mui
  • C:\Users\Harry Dresden\Desktop\desktop.ini
  • C:\Users\Harry Dresden\AppData\Local\Temp\NRV_63EF1_.js
  • C:\Windows\SysWOW64\rundll32.exe
  • C:\Windows\System32\rsaenh.dll
  • C:\Windows\System32\msxml3.dll
  • C:\Windows\System32\en-US\wship6.dll.mui
  • C:\Windows\System32\wscript.exe
  • C:\Windows\System32\en-US\wshtcpip.dll.mui
  • C:\Windows\SysWOW64\
  • c:\Python27\Lib\email\test\data\msg_02.txt
  • c:\Python27\include\frameobject.h
  • c:\Python27\include\pyexpat.h
  • c:\Python27\Lib\ctypes
  • UNC\SHARDREALM\Users\Harry Dresden\Documents
  • c:\Users\Default\Links
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • c:\Python27\include\pymacconfig.h
  • c:\Python27\include\ast.h
  • c:\Python27\include\memoryobject.h
  • c:\Python27\Lib\site-packages\pip\_vendor\colorama
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources
  • c:\Python27\DLLs
  • c:\Python27\Lib\site-packages\pip\_vendor\cachecontrol
  • c:\Python27\include\tupleobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Favorites\Links for United States
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
  • c:\ProgramData\Microsoft\Event Viewer\Views\ApplicationViewsRootNode
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp
  • c:\ProgramData\Adobe\Setup
  • c:\Python27\Lib\test\empty.vbs
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg
  • c:\6cdeacda242012e0e5b593e657\1030\LocalizedData.xml
  • c:\ProgramData\Microsoft\Assistance\Client\1.0\en-US
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\packages
  • UNC\SHARDREALM\Users\Harry Dresden\OneDrive
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Users\Harry Dresden\OneDrive
  • c:\Python27\include\grammar.h
  • c:\ProgramData\Microsoft\PlayReady\Cache\S-1-5-21-3416602863-1947377224-293699093-1001
  • c:\6cdeacda242012e0e5b593e657\1032\LocalizedData.xml
  • c:\Python27\include\import.h
  • c:\Users\Public\Libraries
  • \\?\PIPE\browser
  • c:\Python27\Lib\test\tracedmodules
  • c:\ProgramData\Adobe\ARM
  • c:\Python27\tcl\tcl8.5\tzdata\Indian
  • c:\Users\Public
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Queue
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource
  • c:\Python27\Lib
  • \??\VBoxMiniRdrDN
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • c:\ProgramData
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
  • c:\Python27\Lib\site-packages\pip
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\A5
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\A6
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\Python27\Lib\ctypes\macholib
  • c:\kgxnnbvvo\lib\core
  • c:\ProgramData\Adobe\Acrobat\11.0\Replicate\Security
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • c:\inetpub\history\CFGHISTORY_0000000004\schema
  • c:\Python27\Lib\unittest\test
  • c:\ProgramData\Microsoft\PlayReady
  • c:\Python27\Lib\xml\dom
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\FljypKPhErg.rtf
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00
  • c:\Python27\Lib\site-packages\pip\models
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\Python27\include\marshal.h
  • UNC\SHARDREALM\Users\Public\Foxit Software
  • c:\ProgramData\Adobe\Acrobat\11.0\Replicate
  • c:\Python27\Tools\i18n
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp
  • c:\Python27\tcl\tcl8\8.4
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog
  • c:\ProgramData\Microsoft\Crypto\Keys
  • UNC\SHARDREALM\Users\Public\Music\Sample Music
  • c:\Python27\Lib\email\test\data\msg_19.txt
  • c:\inetpub\wwwroot\aspnet_client\system_web\4_0_30319
  • c:\Python27\Lib\ctypes\test
  • c:\Python27\Lib\idlelib\extend.txt
  • c:\Users\Harry Dresden\Searches
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml
  • c:\Python27\Lib\test\badcert.pem
  • c:\ProgramData\Adobe\ARM\S
  • c:\Python27\Lib\test\cjkencodings\euc_kr.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css
  • c:\Python27\Lib\ensurepip
  • c:\Python27\include\pgen.h
  • UNC\SHARDREALM\Users
  • c:\Python27\tcl\tcl8.5\tzdata\Canada
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\Users\Harry Dresden\Downloads
  • c:\Python27\include\objimpl.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • c:\ProgramData\Microsoft\eHome
  • c:\Python27\tcl\tk8.5\demos\images
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images
  • c:\Python27\Lib\test\cjkencodings
  • c:\inetpub\wwwroot\aspnet_client\system_web
  • UNC\SHARDREALM\Users\Public\Music
  • c:\Python27\tcl\tcl8.5\tzdata\America\Kentucky
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US
  • c:\Python27\include\abstract.h
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\Python27\Lib\test\keycert.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png
  • c:\Python27\Lib\test\cjkencodings\gb18030-utf8.txt
  • c:\ProgramData\Microsoft\Windows NT
  • c:\Python27\include\object.h
  • c:\Python27\tcl\tix8.4.3
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • c:\ProgramData\Microsoft\RAC\PublishedData
  • UNC\SHARDREALM\Users\Harry Dresden\Links
  • c:\inetpub\history\CFGHISTORY_0000000005
  • c:\inetpub\history\CFGHISTORY_0000000004
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml
  • c:\inetpub\history\CFGHISTORY_0000000001
  • c:\Python27\include\pydebug.h
  • c:\inetpub\history\CFGHISTORY_0000000003
  • c:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204
  • c:\Users\Harry Dresden\Favorites\Links for United States
  • c:\Python27\Lib\lib2to3\tests\data\fixers
  • c:\Python27\Lib\email\test\data\msg_14.txt
  • c:\Python27\tcl\tcl8.5\tzdata\US
  • c:\Python27\tcl\tcl8.5\tzdata
  • UNC\SHARDREALM\Users\Public\Videos
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css
  • c:\Python27\include\pyport.h
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • UNC\SHARDREALM\Users\Public\Documents
  • c:\Python27\include\pymactoolbox.h
  • c:\Python27\Lib\email
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Kalimba.mp3
  • c:\Python27\tcl\tix8.4.3\demos\samples
  • c:\Python27\Lib\email\test\data\msg_15.txt
  • c:\Python27\Lib\lib-tk\test\test_tkinter
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • UNC\SHARDREALM\Users\Harry Dresden\Music
  • c:\Python27\Tools\webchecker
  • c:\Python27\tcl\tcl8.5\tzdata\America\North_Dakota
  • c:\Python27\Lib\test\crashers
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\ProgramData\Microsoft\Windows Defender\LocalCopy
  • c:\Python27\include\dtoa.h
  • c:\Python27\include\asdl.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml
  • c:\Users\Harry Dresden\Contacts
  • c:\ProgramData\Microsoft\IlsCache\ilrcache.xml
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\E0
  • c:\PerfLogs
  • UNC\SHARDREALM\Users\Public\Libraries
  • c:\
  • c:\Python27\include\complexobject.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Entries
  • c:\Python27\Lib\email\test\data\msg_13.txt
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\treebuilders
  • c:\Python27\tcl\tcl8\8.5
  • UNC\SHARDREALM\Users\Default\Desktop
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • c:\Python27\libs
  • c:\ProgramData\Microsoft\ClickToRun\MachineData
  • c:\Python27\Lib\lib2to3\Grammar.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect Sensitive PDF Documents.bmp
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts\Harry Dresden.contact
  • c:\Python27\Lib\email\test\data\msg_12.txt
  • c:\ProgramData\Microsoft\Assistance
  • c:\Python27\include\bytesobject.h
  • c:\Python27\include\pyctype.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Results
  • c:\Users\Harry Dresden\Videos
  • c:\Python27\Lib\pydoc_data
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html
  • UNC\SHARDREALM\Users\Default\Music
  • c:\ProgramData\Microsoft\Crypto\DSS
  • c:\ProgramData\Adobe\Acrobat
  • c:\Python27\tcl\tcl8.5\tzdata\Atlantic
  • c:\ProgramData\NovaTech Network\NovaBench\3.0.2.0
  • c:\ProgramData\Microsoft\Network
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\1A
  • c:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger
  • c:\Users\Default\Downloads
  • c:\Python27\include\structmember.h
  • c:\Python27\Lib\xml
  • c:\Python27\tcl\tcl8.5\tzdata\Australia
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\17
  • c:\Python27\include\fileobject.h
  • c:\Python27\tcl\tk8.5
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • c:\ProgramData\Microsoft\PlayReady\Cache
  • c:\6cdeacda242012e0e5b593e657\3082
  • c:\Python27\Lib\site-packages\pip\compat
  • c:\Python27\Lib\test\leakers
  • c:\Python27\tcl\tcl8\8.4\platform
  • c:\Python27\include\modsupport.h
  • c:\ProgramData\regid.1991-06.com.microsoft
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\filters
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\DD
  • c:\Python27\Tools\pynche\X
  • c:\Python27\include\bufferobject.h
  • c:\Python27\Tools\Scripts
  • c:\Python27\include\cellobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\35
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore
  • c:\Python27\Lib\test\nokia.pem
  • c:\Python27\Lib\distutils\tests
  • c:\Python27\include\compile.h
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • C:\Users\Harry Dresden\AppData\Local\Temp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg
  • c:\Python27\tcl\tk8.5\images
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\config.css
  • c:\ProgramData\Microsoft\DRM
  • UNC\SHARDREALM\Users\Harry Dresden\Videos
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages\en-US
  • c:\Python27\Lib\idlelib\idle_test
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\Python27\include
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • c:\Python27\Lib\test\nullcert.pem
  • c:\Python27\Lib\site-packages\setuptools
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\structseq.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\1029
  • c:\6cdeacda242012e0e5b593e657\1028
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}
  • c:\Python27\Lib\site-packages\pip\commands
  • c:\Python27\Lib\lib2to3\tests\data\fixers\myfixes
  • c:\6cdeacda242012e0e5b593e657\1025
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us
  • c:\ProgramData\Adobe\ARM\S\5521
  • c:\Python27\Lib\email\test\data
  • c:\ProgramData\Microsoft\Windows Defender\Support
  • c:\ProgramData\WebEx\WebEx
  • c:\ProgramData\Microsoft\IlsCache\imcrcache.xml
  • c:\Users\Default\Videos
  • c:\6cdeacda242012e0e5b593e657\2052
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Sleep Away.mp3
  • c:\Python27\Lib\email\test\data\msg_22.txt
  • c:\Python27\Lib\email\test\data\msg_44.txt
  • c:\Python27\Lib\email\test\data\msg_12a.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css
  • UNC\SHARDREALM\Users\Default\Saved Games
  • c:\Python27\tcl\tcl8.5\opt0.4
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases
  • c:\Python27\include\pgenheaders.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US
  • c:\Python27\tcl\tcl8.5\encoding
  • c:\ProgramData\Microsoft\Diagnosis\ETLLogs
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • c:\Python27\Lib\msilib
  • c:\ProgramData\Microsoft\WwanSvc\Profiles
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts
  • c:\Python27\Lib\encodings
  • c:\Python27\Lib\site-packages\pip\_vendor\distlib\_backport
  • c:\ProgramData\Microsoft\Assistance\Client
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\nHTJYAetow.docm
  • UNC\SHARDREALM\Users\Default\Pictures
  • c:\kgxnnbvvo\bin\cert.p12
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\95
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_42.txt
  • c:\Python27\Lib\site-packages\_markerlib