'
metaflows logo
Category Started On Completed On Duration Cuckoo Version
FILE 2016-11-08 20:11:26.198567 2016-11-08 20:14:42.701285 196 seconds 2.0-dev
Machine Label Manager Started On Shutdown On
win7cuckoo2 win7 Clone 2 VirtualBox 2016-11-08 20:11:26 2016-11-08 20:14:41

File Details

File name ae02600adf7ab9ce87005c1cc4dfb7a7a771ffbf.zip
File size 1109 bytes
File type Zip archive data, at least v2.0 to extract
CRC32 943870B1
MD5 0aeca27a679f646edfa785327d006284
SHA1 ae02600adf7ab9ce87005c1cc4dfb7a7a771ffbf
SHA256 723c901f0b8b84c49b2eaa752b1ac4e59b4d4c58e7872b24bd55d4c73496ecfe
SHA512 6860e70ce4eda19f07397f56e65cf5e5fe9ba5bf32ec79e865d893da1b128622d79aaf592bf61a35dab7c20c9a3813369408d9e757ed7dc3ef6f80d0948299f5
Ssdeep 24:983p5IsSq4wE2t5alujLVarFmnMClxe0fsrLi23n1MxCU:98L62t5acjLVMFOjlxeIsv5Cxt
PEiD None matched
Yara
  • PM_Zip_with_js ()
VirusTotal File not found on VirusTotal

MetaFlows Scores

Metaflows Analysis Results (Signatures=125, Anomalies=0, PEiD=0, Yara=2, VT[1478636120]=0): Snort Events=1, AV Events=2
Total Score=125

SNORT EVENTS:
ET POLICY PE EXE or DLL Windows file download HTTP

CLAMAV DETECTED:
Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND
DROPPED FILE - NRV_3HE2535_.js: Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND

Dropped File/Buffer Yara Signatures:
036e387d27e61850197d2042a422709a2df73925 [BUFFER]: Str_Win32_Http_API
dfa8fad99c638d6f3941a4c072eb6460d8814622 [BUFFER]: shellcode

Signatures

antivm_queries_computername details
recon_fingerprint details
antivm_memory_available details
dumped_buffer details
creates_doc details
antivm_network_adapters details
dumped_buffer2 details
antivm_vbox_files details
Windows_Proxy_Tinkering details
network_wscript_downloader details
persistence_ads details
antiav_detectfile details
exploit_heapspray details
malicious_document_urls details
network_document_file details
network_downloader_exe details
antivm_vbox_devices details
antivm_vbox_files details
modifies_files details

Screenshots

No screenshots available.

Static Analysis

Nothing to display.

Dropped Files

55f2dcf73e79a9c1_076e35c0-5e29-6be8-6f47-5ac4c2f151c6.thor

0ca4aea9cdb23170_076e35c0-5e29-6be8-5c01-56d7947e1413.thor

ef5a590994d2d652_076e35c0-5e29-6be8-dd40-87572836b62e.thor

d16e878abf677758_076e35c0-5e29-6be8-6d05-c0f71b79b4d5.thor

6ac9f6e0f9c27422_076e35c0-5e29-6be8-78ac-df1f15f7d485.thor

faf021b3c06abc41_tasks.xml

a48521a3c06fae78_076e35c0-5e29-6be8-cd70-2fab861ee762.thor

d489debfb456e420_076e35c0-5e29-6be8-37a9-87a089e2c2cb.thor

76770353e69f7bd5_076e35c0-5e29-6be8-c9f6-5c9ff0008196.thor

39194024bab54f65_076e35c0-5e29-6be8-5c71-ccc559332411.thor

99d56481a53caea0_076e35c0-5e29-6be8-4cf6-3048d400a8ea.thor

7992373dddbc6b15_076e35c0-5e29-6be8-b6cb-8c3623d135b2.thor

8b8c34fa8020ebbf_076e35c0-5e29-6be8-1779-c9c9da0eb6e0.thor

5527a8711431b33c_076e35c0-5e29-6be8-763b-609761d06a09.thor

821d55995dfbdb14_076e35c0-5e29-6be8-aac3-e65cf87d2271.thor

43b53e0f4f4e1618_076e35c0-5e29-6be8-a1e5-105f2a560e49.thor

201c0d63012498ce_076e35c0-5e29-6be8-f0d3-d50efe9cb95a.thor

7ec94697a16307f1_076e35c0-5e29-6be8-03dd-2f7bdcb778db.thor

7bdb79596f177c23_076e35c0-5e29-6be8-e22f-3aad0d746433.thor

a477310403492694_076e35c0-5e29-6be8-fc17-c863255c1fdd.thor

d4e3af041e2fd659_076e35c0-5e29-6be8-2681-75413f4e4ecf.thor

bf1beb23414a6f17_076e35c0-5e29-6be8-119b-6f8e144ae2f6.thor

787e76c0e1c15426_076e35c0-5e29-6be8-215d-47348b3ab138.thor

fd5f68b59aa2b3e8_resource.xml

d9d9686e6709b428_076e35c0-5e29-6be8-124a-e3b63df3eecd.thor

0c3cc267b7939a40_076e35c0-5e29-6be8-2b72-e516c2175057.thor

7b703b39609167aa_076e35c0-5e29-6be8-70f2-b41473dce733.thor

670d82c83effe0a1_076e35c0-5e29-6be8-fd55-0c1495ac850f.thor

33ec6a080b9f3dee_076e35c0-5e29-6be8-55a4-c228f6e37537.thor

16db3953e2435b29_076e35c0-5e29-6be8-6faf-533643ab9a35.thor

40ea2a6e4c0f6a9d_076e35c0-5e29-6be8-7910-1c9bbe78a9a8.thor

3d0d34aec7270770_076e35c0-5e29-6be8-a250-c142c6d684b3.thor

21bc2a639cd4baba_076e35c0-5e29-6be8-12fb-d4a56a3b6a7a.thor

af7a12135db48bf2_resource.xml

619f72b9f5edee33_076e35c0-5e29-6be8-f062-e545dfcbe225.thor

0bb3132d93b68112_076e35c0-5e29-6be8-162f-b3f02b11de6c.thor

de6191f78aad7566_076e35c0-5e29-6be8-d833-e2efbc1b5474.thor

642416c35a5ff944_076e35c0-5e29-6be8-34d4-a132de073cc7.thor

c3ac1ef87bbc34d1_076e35c0-5e29-6be8-76f2-cba227eec2d9.thor

f1bae3fb083152be_076e35c0-5e29-6be8-019a-5249e1888e3a.thor

7fb3d157f6a0cf4e_076e35c0-5e29-6be8-3f37-d4c511d4d8e5.thor

ca5f9f30d6168ace_076e35c0-5e29-6be8-cdd9-ad748d8038f1.thor

cdde70cc67b6415b_076e35c0-5e29-6be8-af3f-7785fcac30c9.thor

bd0fead627ce4815_076e35c0-5e29-6be8-0fb9-9232bd643733.thor

39d0351a0e626a5e_076e35c0-5e29-6be8-5568-859edea367b6.thor

8ead5bc291b5b0cd_076e35c0-5e29-6be8-a671-7de29923da2d.thor

38abc7f1e516e0f1_076e35c0-5e29-6be8-a7c2-a2176de0532d.thor

faed0c10f1c0c099_076e35c0-5e29-6be8-0bc4-73009c825a06.thor

227c7dc3e83f9bb2_076e35c0-5e29-6be8-f623-cdcc17250488.thor

d29cc7ae528f0696_076e35c0-5e29-6be8-a83c-eb722433cb20.thor

154c4aa373545620_076e35c0-5e29-6be8-bad5-2e295a55bfea.thor

fa261169e85970c3_076e35c0-5e29-6be8-be7a-2eafd8d2722f.thor

4633e0fd2b9b6ceb_076e35c0-5e29-6be8-78f6-d217e5b76f90.thor

17d8015078655634_076e35c0-5e29-6be8-e0c4-0d774e32fc36.thor

6d3f31c86780fb5d_076e35c0-5e29-6be8-e43d-08562e2fae22.thor

435bb6f1582d7dc6_076e35c0-5e29-6be8-8797-8ae0cc4f326a.thor

df977e17df16511d_076e35c0-5e29-6be8-579c-ea88f38c3d21.thor

5b217296751863fa_076e35c0-5e29-6be8-99ad-f073b9a00766.thor

99ea608daaa0bf8c_076e35c0-5e29-6be8-5788-653d5f65a0eb.thor

86c05252eacc2b5d_tasks.xml

7cb4434a30da6663_076e35c0-5e29-6be8-6413-7928db8599ad.thor

bdf31f8fdcac0ec7_076e35c0-5e29-6be8-2263-b4b369323ba8.thor

55b555085505cc0a_076e35c0-5e29-6be8-d37f-a340fb0018ce.thor

76609aa5a989b528_076e35c0-5e29-6be8-0fd5-d4a11752bf62.thor

d349f85707e226be_076e35c0-5e29-6be8-73f8-e2951e01f32a.thor

f5c033589ec55514_076e35c0-5e29-6be8-94d7-e3eb05e54123.thor

e702bdd2ad4ad5c6_076e35c0-5e29-6be8-f7c1-3afe4c0186ca.thor

2be570585b7a4a9c_076e35c0-5e29-6be8-8073-9508e811b557.thor

f6bcebbd08a65295_076e35c0-5e29-6be8-78f6-11994f2bbce4.thor

261354e1f5af5289_076e35c0-5e29-6be8-5266-9f6847fcf464.thor

60af287605db70a5_076e35c0-5e29-6be8-2a89-47d24003a62e.thor

cc3986c0f12696b8_076e35c0-5e29-6be8-9246-eba9a170af3f.thor

cb5c84315afcd73d_076e35c0-5e29-6be8-bb5e-b793ffe61958.thor

2793ff5b6f19a08f_076e35c0-5e29-6be8-4826-4a21b3a22d21.thor

d399e167b6ebea23_076e35c0-5e29-6be8-1693-7c72abe17639.thor

8efb6d6b8597cd04_076e35c0-5e29-6be8-525a-f5f3a1840821.thor

8af21b214021b530_076e35c0-5e29-6be8-50ee-ce12244fc9bd.thor

9b8caa930e57c2b3_076e35c0-5e29-6be8-55fc-a2cf727d5705.thor

7e671a811bf9ceb1_076e35c0-5e29-6be8-6663-9d3e7dd2baed.thor

048f34da5810c5c9_076e35c0-5e29-6be8-fe9d-b7601ca748ec.thor

dc788cbf12491bbd_076e35c0-5e29-6be8-a4ce-385783df928f.thor

e782a47e97ff66d4_076e35c0-5e29-6be8-0f98-ea31ef282c55.thor

b548d6db79613530_076e35c0-5e29-6be8-062c-e5b587197b26.thor

cba61e21ee3b9b3a_076e35c0-5e29-6be8-5382-58737133d6ce.thor

60b432df41bfb669_076e35c0-5e29-6be8-190e-eebd0b392d45.thor

ab9366a078832208_076e35c0-5e29-6be8-073e-f66ddbe2f32a.thor

9faa2e19662be9ce_076e35c0-5e29-6be8-dbcb-1af117f2f3d7.thor

d774171c82220dfe_076e35c0-5e29-6be8-3c3f-a6b5dbb75609.thor

5135c61ff5ae5872_076e35c0-5e29-6be8-2f12-46992347ed77.thor

d7b36eed6f557f2a_076e35c0-5e29-6be8-8c5d-24e4ce0c3e14.thor

3217302380b1101d_076e35c0-5e29-6be8-9df4-97b157e701a8.thor

0f0d6496d31c538b_076e35c0-5e29-6be8-15f9-3c8057794d4c.thor

aa21c9dff7094796_076e35c0-5e29-6be8-4177-e976989852a8.thor

f87a43bc3402d241_076e35c0-5e29-6be8-c2aa-e10a43b35cc7.thor

f03e2f47b4b71a19_076e35c0-5e29-6be8-06ba-768c4ebe12a3.thor

2adb8da1ccf8067e_076e35c0-5e29-6be8-7afa-9e2a0dfb405e.thor

5898b1095c71c9b8_076e35c0-5e29-6be8-49f9-db4ac36189a3.thor

35d4d80c193b3820_076e35c0-5e29-6be8-2d23-7c2bc804a331.thor

17733856a94d475e_076e35c0-5e29-6be8-1490-f6656732435f.thor

59829eb7c912bd68_076e35c0-5e29-6be8-d150-a328fb6e238d.thor

b45a28f57a278f39_076e35c0-5e29-6be8-fd56-d0f69e368d58.thor

18a7db3fccf624a5_076e35c0-5e29-6be8-7ecd-cc67a02e7019.thor

4afbd42774e56169_076e35c0-5e29-6be8-34ab-2ccee143c493.thor

128c8852debdd551_076e35c0-5e29-6be8-75ae-0e9947c8f0be.thor

5bd990f0eb55b4d4_076e35c0-5e29-6be8-17a0-033ee3fce963.thor

0126787dcc418502_076e35c0-5e29-6be8-975b-c8fa612d17dc.thor

a95eb24697a951e5_076e35c0-5e29-6be8-211e-2e866a1b878e.thor

0de36b148a7d2fc8_076e35c0-5e29-6be8-e88f-614a7342598c.thor

f2eaf355c4dee06f_076e35c0-5e29-6be8-dc73-5af25e3d175d.thor

912bfc4af701be1e_076e35c0-5e29-6be8-5eb3-be6d2ff86919.thor

dfef0dc81c547c3c_076e35c0-5e29-6be8-bea1-9837d98b1e5c.thor

c4ed8fca8c33bb70_076e35c0-5e29-6be8-0476-4763af46ac55.thor

2e9be57b93fcbe25_076e35c0-5e29-6be8-8646-a5b917394af5.thor

66b26e31848bed8d_076e35c0-5e29-6be8-b9c4-6659671c9f22.thor

b184dde2d0c10a4a_076e35c0-5e29-6be8-956b-0aab40542b76.thor

53d94a0687541a16_076e35c0-5e29-6be8-ad6f-b0f25adbd2ff.thor

ff7c1540e935c62e_076e35c0-5e29-6be8-6250-5786734e5191.thor

ab73c8a64143073d_076e35c0-5e29-6be8-07af-3db36e1e701e.thor

a6935fbd6ab3453d_076e35c0-5e29-6be8-2ff9-b647ed3a9e03.thor

d735f4b6903ec10e_076e35c0-5e29-6be8-6a7b-9bcb3c65462f.thor

240324a6c563a7da_076e35c0-5e29-6be8-7e77-3e8dab1ef81c.thor

e9140d88f5e2d034_076e35c0-5e29-6be8-d57c-50c946f88651.thor

a31aef59d83a37d8_076e35c0-5e29-6be8-7ebd-3f1e49d2427e.thor

6d2b7b2e6c05c25b_076e35c0-5e29-6be8-3a3e-9471f5446b64.thor

4ce49cb11afc8432_076e35c0-5e29-6be8-692c-526f1537c47e.thor

705a26128238b692_076e35c0-5e29-6be8-fd90-243fc73790d4.thor

e2582497feadc568_076e35c0-5e29-6be8-b9c1-cc5b69ac0038.thor

3f9f36ae9ed8c854_076e35c0-5e29-6be8-d6b1-d1cfd6314edd.thor

1ca45f8ed5787330_076e35c0-5e29-6be8-55f4-8fbd909e73d9.thor

e27c01f90e2327bd_076e35c0-5e29-6be8-3f64-f5fb0ab74041.thor

7883b862d4624a76_076e35c0-5e29-6be8-9a02-64e27fee65d6.thor

cb8114368afabb7a_076e35c0-5e29-6be8-10c9-e11448b240be.thor

8e2afe7853d31a41_076e35c0-5e29-6be8-ca7f-ff7f5d51171b.thor

4e99c87f2c83e093_076e35c0-5e29-6be8-1fcc-53d07a8847d2.thor

100a9d489ccc69c9_076e35c0-5e29-6be8-05e6-362fd6ee4c70.thor

570601f091a311f4_076e35c0-5e29-6be8-fd5f-3009f2fffd74.thor

8db9c076c88f7009_076e35c0-5e29-6be8-c967-4d92a0e76e79.thor

f55103a565ab3fcc_076e35c0-5e29-6be8-d077-2e2db61d5e82.thor

44bb639e6684b25e_076e35c0-5e29-6be8-57fb-c6a665e3094e.thor

cbde1252c553a5bb_076e35c0-5e29-6be8-e1f5-77b51a8a4540.thor

ff117b1a72ebbdff_076e35c0-5e29-6be8-d3b4-39247bcccf67.thor

97e18e7e203f079e_076e35c0-5e29-6be8-4072-733e424a507c.thor

0bc481fc4ac01615_076e35c0-5e29-6be8-2c4b-c3ce8abc2c9b.thor

d73ba30cc45625c6_076e35c0-5e29-6be8-d6e0-fa2bfd547a64.thor

276309526fa14429_076e35c0-5e29-6be8-c535-47601721525b.thor

a2621656c0e6d6f4_076e35c0-5e29-6be8-ab26-ea912261d690.thor

b8c641dcb880e980_076e35c0-5e29-6be8-e6c0-7ab4323780f2.thor

8931d34acc2d60b8_behavior.xml

edb3b3ca98007851_076e35c0-5e29-6be8-09e6-e4189a971065.thor

c08ad6999842217f_076e35c0-5e29-6be8-fd11-0eb69a43083a.thor

e42670e491318d4c_076e35c0-5e29-6be8-8898-b8f99a367439.thor

6d7aa6634506ebbb_076e35c0-5e29-6be8-32ad-a0a444e722dc.thor

25605aa81766a4e9_076e35c0-5e29-6be8-fa2a-310bce4de458.thor

db1f954edc3da392_076e35c0-5e29-6be8-b97e-44e11bdb366b.thor

8e74a5e61dd11de0_076e35c0-5e29-6be8-0d58-46a39a9ad024.thor

45b5e777fee88f24_076e35c0-5e29-6be8-b39d-262a074633e2.thor

688ecede7bcaa76d_076e35c0-5e29-6be8-94c4-de9a57584db7.thor

db5f6fdf37d7103b_076e35c0-5e29-6be8-1712-0157b83cc2fa.thor

2782a72475009cc9_076e35c0-5e29-6be8-eb0d-a48fafb2eed2.thor

6fbea55089594cdc_076e35c0-5e29-6be8-a9a8-bec3061a5ec2.thor

e8f67f65d24fadba_076e35c0-5e29-6be8-9564-2344abe9258b.thor

a51e32738a531139_076e35c0-5e29-6be8-2167-5ca3e5799f69.thor

dd501de55397ef60_076e35c0-5e29-6be8-8392-acddac01866f.thor

4cb74d2be9cf07e3_076e35c0-5e29-6be8-af00-b5aee797cb68.thor

822b9b6d32864f93_076e35c0-5e29-6be8-060d-eafff0938eaf.thor

e8eec400aabcdbb7_076e35c0-5e29-6be8-c8ed-fb0cd7544ee7.thor

908f1c6b172608bd_076e35c0-5e29-6be8-c9a9-d609b5192cda.thor

4529d33d7dd4f2f6_076e35c0-5e29-6be8-c9d2-987cd4dfcc5e.thor

408b518061d75826_076e35c0-5e29-6be8-731d-2546408fbe4c.thor

ff8bf1ebb842d897_076e35c0-5e29-6be8-3eb9-9c240c3deb41.thor

c657b961ed91f9c8_076e35c0-5e29-6be8-338e-80b886287ea0.thor

e96a6078af9d1052_076e35c0-5e29-6be8-74e5-558b3113e76b.thor

7defa2d54eb57676_076e35c0-5e29-6be8-76b6-0c9975773bc2.thor

24e33f5a00952920_076e35c0-5e29-6be8-3b72-0e5d609d405c.thor

105e42f46c3ef2c6_076e35c0-5e29-6be8-df68-98cb24ca3f67.thor

98798ea33d9e6ae8_076e35c0-5e29-6be8-3d70-7859841753bd.thor

e391bae86c389270_076e35c0-5e29-6be8-3d93-aa11c580466e.thor

908758dc2c6554d0_076e35c0-5e29-6be8-0de9-dbc64c347ab2.thor

48be3943179c533e_076e35c0-5e29-6be8-5685-e285d293beb6.thor

a35a300e0b101529_076e35c0-5e29-6be8-a794-77c3f60a1bc6.thor

b49b7c939a93934b_076e35c0-5e29-6be8-9106-c11991aa2a01.thor

8ef6749480b70a37_076e35c0-5e29-6be8-a19e-658b7639b4da.thor

9b2b155419bce494_076e35c0-5e29-6be8-0a70-80c22a1d102a.thor

5123f6ae94028e1e_076e35c0-5e29-6be8-0e71-575a614248c6.thor

5152e34646c1a776_076e35c0-5e29-6be8-d852-6765e79d965b.thor

c319e2dee9990d59_076e35c0-5e29-6be8-94ee-d22dc908315e.thor

95ea0e269481c090_076e35c0-5e29-6be8-2d36-0e970cb85240.thor

cdf3795eed320398_076e35c0-5e29-6be8-e19e-1cf0216c3d24.thor

a99bc4ef04e09b86_076e35c0-5e29-6be8-6886-9f42af8cd01c.thor

f5b4be0ad1074f1b_076e35c0-5e29-6be8-c4b3-85118b0b5d4c.thor

f8011096999c1a18_076e35c0-5e29-6be8-03fc-320a4905399b.thor

f0572b5708c83015_behavior.xml

15e299f45f8fd066_076e35c0-5e29-6be8-0846-ef6c30f67c41.thor

5c54b0a4d2a33fd6_076e35c0-5e29-6be8-8de1-089356641e19.thor

199318b67473e55c_076e35c0-5e29-6be8-afc6-589297800e51.thor

d2a71c916e4c2927_076e35c0-5e29-6be8-57e0-368df16ea1f9.thor

1d4a656771182cda_076e35c0-5e29-6be8-ed4e-113f173c5a0a.thor

33c2e37394dc7961_076e35c0-5e29-6be8-b106-434cbe1d91b6.thor

e7b830e14f51fd8d_076e35c0-5e29-6be8-534c-57daa04fd4ee.thor

3f85288800c40f8c_076e35c0-5e29-6be8-cd0f-1d1eaafc2f20.thor

e0808a060f41e481_076e35c0-5e29-6be8-f103-925392c50aa9.thor

7f1400cf4558dc36_076e35c0-5e29-6be8-07ec-ceae9d47c8d3.thor

8367edb4635dc552_076e35c0-5e29-6be8-1673-cea6bc4635e7.thor

7d7567d5545f5245_076e35c0-5e29-6be8-c4cc-e90819b194ed.thor

a911200f0ec0fcee_076e35c0-5e29-6be8-be58-6b67f6b8a741.thor

54a2baa843a451e8_076e35c0-5e29-6be8-a124-d335fa7ffd82.thor

5592bcd9d7175fc8_076e35c0-5e29-6be8-084c-5955320e1683.thor

d042d8feb16e821c_076e35c0-5e29-6be8-5344-5b2f2bfb17e5.thor

2b8fff036b83237c_076e35c0-5e29-6be8-3268-348adc856b65.thor

3f1ef31dc797ad5a_076e35c0-5e29-6be8-6f48-6738ca27dc3d.thor

8f8b1628ace76406_076e35c0-5e29-6be8-175c-57cc35881874.thor

5d70209420d5a504_076e35c0-5e29-6be8-1cec-ec2d07173aba.thor

78aa854e79240128_076e35c0-5e29-6be8-ebb9-cbb679aa07b4.thor

f537fbd01bf4f238_076e35c0-5e29-6be8-fe69-0550e7412688.thor

4878d0777bf2b33e_076e35c0-5e29-6be8-8744-e3bfb0f39530.thor

6649d3f4696b7e99_076e35c0-5e29-6be8-8089-70e783cd1a36.thor

3a7837745359dd23_076e35c0-5e29-6be8-b837-d50bce197bbf.thor

dbaebcf0a1c62eae__29_what_is.html

09b927f3d020c225_076e35c0-5e29-6be8-1b45-4695f6cdc0cc.thor

628e4efde68ad863_076e35c0-5e29-6be8-6a83-0b4aef13f3ff.thor

c97828dad18b4794_076e35c0-5e29-6be8-0d51-413c5437e320.thor

e0e9022652c1df42_076e35c0-5e29-6be8-f1d6-6d00c412c284.thor

2f84fd42623f82cc_076e35c0-5e29-6be8-bc21-582c65afe845.thor

dcabbaa36b301d69_076e35c0-5e29-6be8-448f-2f91e788e87f.thor

d93e7afc6e94c3b6_076e35c0-5e29-6be8-12f3-fb6aaaa5a654.thor

4dd1e97c7a772033_076e35c0-5e29-6be8-9a86-7124fd9c71be.thor

e1987767db9a2018_076e35c0-5e29-6be8-1586-a22c962f3476.thor

4f83e253a8a54dc0_076e35c0-5e29-6be8-fcd8-2ba110e0460c.thor

2236e8b43503364a_qvwnx7rfpwwglr1j.dll

de443bb2920ce861_076e35c0-5e29-6be8-8f25-4ca886ace845.thor

4188e13671aa0483_076e35c0-5e29-6be8-5edb-9bf170074bad.thor

1f3a014da6ea1dc3_076e35c0-5e29-6be8-04df-85fd262b71ac.thor

639d3a9ff2a42371_076e35c0-5e29-6be8-bef0-999c7449919b.thor

92158fe96208e04c_076e35c0-5e29-6be8-26ba-a0d9668a1a9c.thor

2d697b7feb6d54b9_076e35c0-5e29-6be8-44c8-71c5e6d7979e.thor

7cf52e3fa9861e17_076e35c0-5e29-6be8-73be-6c84361685d8.thor

e7a41d4696dbaab8_076e35c0-5e29-6be8-0fb9-677865492fd5.thor

f9b37dcac2559186_076e35c0-5e29-6be8-f20e-187566eecda3.thor

ad74b47378b7f147_076e35c0-5e29-6be8-e80f-2b999cc94c58.thor

122b626584118f26_076e35c0-5e29-6be8-3efc-6c1602993a18.thor

c61088cca9877714_076e35c0-5e29-6be8-3331-538c63a95dbb.thor

e3b0f472ef6cb188_076e35c0-5e29-6be8-bf77-11a7c57e1131.thor

81b0165e2b099d98_076e35c0-5e29-6be8-c7c7-8c3ab840bf49.thor

231dee8451598612_076e35c0-5e29-6be8-6fd3-b53d3d28144d.thor

e5a452a0a97218e2_076e35c0-5e29-6be8-6a1c-665980d18f6d.thor

beae243f1b6ae907_076e35c0-5e29-6be8-6097-455b0625bbaa.thor

59c2c04e70ac9b7d_076e35c0-5e29-6be8-aa38-ba63177a1178.thor

a577d9848e128445_076e35c0-5e29-6be8-8fec-14f2058eeecf.thor

8f397b6a07d4e8cb_076e35c0-5e29-6be8-3821-25bb9d8a69a1.thor

3b8a3ebf11fce9f5_076e35c0-5e29-6be8-53d8-80259441107b.thor

c89730363e6dfe87_076e35c0-5e29-6be8-3c2b-154aac81d79d.thor

cb41d030feee5d14_076e35c0-5e29-6be8-27bc-d833b2502590.thor

NRV_3HE2535_.js

Network Analysis

Hosts Involved

DNS Requests

HTTP Requests

Behavior Summary

File-Read
  • C:\Users\Harry Dresden\Desktop\desktop.ini
  • C:\Users\Harry Dresden\AppData\Local\Temp\NRV_3HE2535_.js
  • C:\Windows\System32\wscript.exe
  • C:\Windows\System32\msxml3.dll
  • C:\Windows\System32\wshom.ocx
  • c:\Python27\Lib\email\test\data\msg_02.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Edit and reflow paragraphs in PDF files.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml
  • c:\Python27\include\errcode.h
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\top_level.txt
  • c:\6cdeacda242012e0e5b593e657\1055\LocalizedData.xml
  • c:\Python27\Lib\test\keycert3.pem
  • c:\Python27\include\ast.h
  • c:\Python27\Lib\email\test\data\msg_42.txt
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\Python27\Lib\idlelib\NEWS.txt
  • c:\Python27\include\pyexpat.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\Python27\Lib\test\ssl_cert.pem
  • c:\Python27\include\tupleobject.h
  • c:\Python27\include\parsetok.h
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
  • c:\Python27\include\enumobject.h
  • c:\Python27\include\warnings.h
  • c:\Python27\include\cStringIO.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\version.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml
  • c:\Python27\include\cobject.h
  • c:\Python27\include\Python-ast.h
  • c:\Python27\include\osdefs.h
  • c:\Python27\Lib\test\empty.vbs
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp
  • c:\Python27\include\pymacconfig.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16.png
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\body_bg.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Python27\include\ceval.h
  • c:\Python27\Lib\lib2to3\PatternGrammar.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml
  • c:\Python27\include\import.h
  • \\?\PIPE\browser
  • c:\Python27\include\pythonrun.h
  • c:\Python27\include\structmember.h
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\cacert.pem
  • c:\Python27\Lib\idlelib\README.txt
  • c:\Python27\include\pyarena.h
  • c:\Python27\include\pygetopt.h
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\wNwLLIfeGL.rtf
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • UNC\KIDSROOM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Create PDF from Office-convert PDF to office.bmp
  • c:\6cdeacda242012e0e5b593e657\1033\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect Sensitive PDF Documents.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml
  • c:\Python27\Lib\email\test\data\msg_33.txt
  • c:\Python27\Lib\test\selfsigned_pythontestdotnet.pem
  • c:\Python27\Lib\email\test\data\msg_46.txt
  • c:\Python27\Lib\email\test\data\msg_44.txt
  • c:\Python27\include\complexobject.h
  • UNC\KIDSROOM\Users\Harry Dresden\Downloads\big-hero-6-2.jpg
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf
  • c:\Python27\include\rangeobject.h
  • c:\Python27\include\pgenheaders.h
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\Python27\include\pythread.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your application.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Powerful Word Processor.bmp
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • c:\Python27\include\patchlevel.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64mui.msi.16.en-us.xml
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\jsqhNSfquiaSTX.docm
  • c:\6cdeacda242012e0e5b593e657\2070\eula.rtf
  • c:\Python27\include\iterobject.h
  • c:\Python27\include\memoryobject.h
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx40_IIS_schema_update.xml
  • c:\6cdeacda242012e0e5b593e657\UiInfo.xml
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • c:\Python27\include\funcobject.h
  • c:\Python27\include\listobject.h
  • c:\Python27\Lib\test\keycert.pem
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\x-none.16\MasterDescriptor.x-none.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • c:\Python27\include\traceback.h
  • c:\Python27\Lib\email\test\data\msg_28.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\Profile.xml
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • c:\Python27\include\marshal.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\config.css
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_37.txt
  • c:\Python27\Lib\site-packages\setuptools\command\launcher manifest.xml
  • UNC\KIDSROOM\Users\Public\Videos\Sample Videos\Wildlife.wmv
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml
  • c:\Python27\include\frameobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\buy_phantom.png
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\longintrepr.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml
  • c:\Python27\include\node.h
  • c:\Python27\Lib\idlelib\extend.txt
  • c:\Python27\include\opcode.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Koala.jpg
  • c:\Python27\Lib\test\badcert.pem
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\RXILvVoADJw.txt
  • c:\Python27\Lib\email\test\data\msg_32.txt
  • UNC\KIDSROOM\Users\Public\Music\Sample Music\Sleep Away.mp3
  • c:\6cdeacda242012e0e5b593e657\1046\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\en-us.16\MasterDescriptor.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\tcl\tix8.4.3\pref\TK.cs
  • c:\Python27\include\sliceobject.h
  • c:\Python27\include\pgen.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\entry_points.txt
  • c:\Python27\Lib\email\test\data\msg_43.txt
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\zmgPukHfaBS.pptx
  • c:\Python27\include\moduleobject.h
  • c:\Python27\Lib\test\wrongcert.pem
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css
  • c:\Python27\tcl\tix8.4.3\pref\TkWin.cs
  • c:\Python27\include\objimpl.h
  • c:\Python27\include\Python.h
  • c:\Python27\include\fileobject.h
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_04.txt
  • c:\Python27\include\stringobject.h
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf
  • c:\Python27\include\pyerrors.h
  • c:\ProgramData\Microsoft\IlsCache\ilrcache.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html
  • c:\Python27\include\token.h
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\Python27\include\bitset.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View and annotate PDFs.bmp
  • c:\Python27\include\bytes_methods.h
  • c:\Python27\include\dictobject.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg
  • c:\Python27\include\abstract.h
  • c:\Python27\include\pystate.h
  • c:\Python27\Lib\test\ssl_key.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • c:\Python27\Lib\test\keycert.passwd.pem
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Fastest PDF Search and Index.bmp
  • c:\Python27\include\methodobject.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\include\object.h
  • c:\Python27\include\descrobject.h
  • c:\Python27\include\grammar.h
  • c:\Python27\include\pyconfig.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml
  • c:\Python27\include\structseq.h
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • \\?\PIPE\wkssvc
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\EgkLSaVPadslnWZBeX.docm
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml
  • c:\Python27\include\pymath.h
  • c:\Python27\Lib\email\test\data\msg_45.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Fastest PDF Search and Index.bmp
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf
  • c:\Python27\include\timefuncs.h
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • c:\Python27\tcl\tclConfig.sh
  • c:\ztxfzetqpe\bin\cert.p12
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\ProgramData\Sun\Java\Java Update\jaureglist.xml
  • c:\Python27\Lib\idlelib\help.txt
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16-open.png
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml
  • c:\Python27\Lib\email\test\data\msg_03.txt
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\Python27\Lib\idlelib\TODO.txt
  • c:\Python27\Lib\test\keycert2.pem
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\entry_points.txt
  • c:\Python27\include\ucnhash.h
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\ssl_key.passwd.pem
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\KEJYhoaYBY.rtf
  • c:\Python27\include\py_curses.h
  • c:\Python27\Lib\test\keycert4.pem
  • c:\Python27\include\pyport.h
  • c:\Python27\Lib\email\test\data\msg_34.txt
  • c:\Python27\include\graminit.h
  • c:\6cdeacda242012e0e5b593e657\1037\eula.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\skin.css
  • c:\Python27\include\pystrcmp.h
  • c:\Python27\include\symtable.h
  • c:\Python27\include\setobject.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\resource.xml
  • c:\Python27\include\boolobject.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • c:\6cdeacda242012e0e5b593e657\1053\LocalizedData.xml
  • c:\Python27\Lib\test\pycacert.pem
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\code.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\Python27\include\dtoa.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Design form fields easily.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css
  • c:\Python27\include\eval.h
  • c:\Python27\include\asdl.h
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\msyGnpNqSLI.docx
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View and annotate PDFs.bmp
  • c:\Python27\Lib\email\test\data\msg_01.txt
  • c:\Python27\Lib\idlelib\idle.bat
  • c:\Python27\Lib\idlelib\HISTORY.txt
  • c:\ProgramData\WebEx\WebEx\atsdk.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Desert.jpg
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\dependency_links.txt
  • c:\6cdeacda242012e0e5b593e657\Strings.xml
  • c:\6cdeacda242012e0e5b593e657\1049\eula.rtf
  • c:\Python27\Lib\idlelib\idle_test\README.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\top_tb_bg.jpg
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx45_IIS_schema_update.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Tulips.jpg
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Powerful Word Processor.bmp
  • c:\Python27\Lib\lib2to3\Grammar.txt
  • UNC\KIDSROOM\Users\Harry Dresden\Contacts\Harry Dresden.contact
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\blank.gif
  • c:\Python27\include\bytearrayobject.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • c:\Python27\Lib\idlelib\CREDITS.txt
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Penguins.jpg
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • c:\Python27\Lib\test\badkey.pem
  • c:\Python27\include\intobject.h
  • UNC\KIDSROOM\Users\Harry Dresden\Downloads\cleandesktop.py.txt
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\6cdeacda242012e0e5b593e657\3082\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml
  • c:\Python27\include\pyctype.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png
  • c:\6cdeacda242012e0e5b593e657\1049\LocalizedData.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_s.png
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • c:\Python27\include\sysmodule.h
  • c:\Python27\include\pymactoolbox.h
  • c:\Python27\Lib\email\test\data\msg_35.txt
  • c:\Python27\Lib\email\test\data\msg_29.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your application.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View PDFs on mobile devices.bmp
  • c:\Python27\Lib\test\nokia.pem
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_b.png
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx40_IIS_schema_update.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_move_bg.jpg
  • c:\Python27\include\intrcheck.h
  • c:\Python27\include\pydebug.h
  • \\?\PIPE\lsarpc
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_over_bg.jpg
  • c:\Python27\include\metagrammar.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml
  • c:\Python27\tcl\tix8.4.3\pref\Gray.cs
  • c:\Python27\Lib\email\test\data\msg_38.txt
  • c:\6cdeacda242012e0e5b593e657\2052\LocalizedData.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml
  • c:\ProgramData\Microsoft\IlsCache\imcrcache.xml
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf
  • c:\Python27\Lib\test\nullbytecert.pem
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • c:\Python27\include\pymem.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index_ori.html
  • c:\Python27\Lib\test\dh1024.pem
  • c:\Python27\Lib\test\185test.db
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View PDFs on mobile devices.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • c:\Python27\Lib\test\sha256.pem
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\ggPmSoQkbl.docx
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp
  • c:\Python27\include\pycapsule.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect Sensitive PDF Documents.bmp
  • c:\Python27\include\modsupport.h
  • UNC\KIDSROOM\Users\Public\Music\Sample Music\Kalimba.mp3
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml
  • c:\Python27\include\classobject.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • c:\Python27\include\bytesobject.h
  • c:\Python27\include\weakrefobject.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg
  • c:\Python27\include\bufferobject.h
  • c:\Python27\include\datetime.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx45_IIS_schema_update.xml
  • c:\6cdeacda242012e0e5b593e657\2070\LocalizedData.xml
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
  • c:\Python27\include\unicodeobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp
  • UNC\KIDSROOM\Users\Default\NTUSER.DAT.LOG
  • c:\Python27\include\pyfpe.h
  • c:\Python27\include\compile.h
  • c:\Python27\Lib\site-packages\README.txt
  • c:\Python27\include\genobject.h
  • c:\Python27\include\cellobject.h
  • c:\Python27\include\codecs.h
File-Written
  • C:\Users\Harry Dresden\AppData\Local\Temp\qVwnx7rFpWwGLR1j.dll
  • C:\Users\Harry Dresden\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YLC2QM2Y\0cz2zwz[1]
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\Lib\email\test\data\msg_45.txt
  • c:\Python27\include\ast.h
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\Python27\include\pyexpat.h
  • c:\Python27\include\tupleobject.h
  • c:\Python27\include\descrobject.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp
  • c:\6cdeacda242012e0e5b593e657\1053\_15_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16.png
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\body_bg.jpg
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Python27\include\grammar.h
  • c:\Python27\include\import.h
  • \\?\PIPE\browser
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Create PDF from Office-convert PDF to office.bmp
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\Python27\Lib\test\nullcert.pem
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Desert.jpg
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • c:\ProgramData\WebEx\WebEx\12_1324\_21_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\Python27\include\_3_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\UiInfo.xml
  • c:\Python27\Lib\idlelib\TODO.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\_5_WHAT_is.html
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\_34_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\Profile.xml
  • c:\Python27\include\marshal.h
  • c:\6cdeacda242012e0e5b593e657\2052\LocalizedData.xml
  • UNC\KIDSROOM\Users\Public\Videos\Sample Videos\Wildlife.wmv
  • c:\Python27\Lib\idlelib\extend.txt
  • c:\6cdeacda242012e0e5b593e657\2070\_18_WHAT_is.html
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\_43_WHAT_is.html
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\_1_WHAT_is.html
  • c:\Python27\Lib\test\badcert.pem
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\_2_WHAT_is.html
  • c:\Python27\include\pgen.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\Python27\include\objimpl.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx45_IIS_schema_update.xml
  • c:\Python27\Lib\idlelib\idle_test\README.txt
  • c:\6cdeacda242012e0e5b593e657\1045\_12_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect Sensitive PDF Documents.bmp
  • c:\Python27\include\abstract.h
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\Python27\Lib\test\keycert.passwd.pem
  • c:\Python27\include\object.h
  • c:\Python27\Lib\idlelib\_31_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • c:\Python27\tcl\tclConfig.sh
  • c:\ztxfzetqpe\bin\cert.p12
  • c:\ProgramData\Sun\Java\Java Update\_54_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16-open.png
  • c:\Python27\include\pyport.h
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\skin.css
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml
  • c:\Python27\include\code.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\Python27\include\dtoa.h
  • UNC\KIDSROOM\Users\Public\Videos\Sample Videos\_10_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css
  • c:\Python27\include\asdl.h
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\msyGnpNqSLI.docx
  • c:\Python27\Lib\test\empty.vbs
  • c:\ProgramData\Microsoft\IlsCache\ilrcache.xml
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\ggPmSoQkbl.docx
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml
  • c:\Python27\include\complexobject.h
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • c:\Python27\Lib\lib2to3\Grammar.txt
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\076E35C0-5E29-6BE8-C967-4D92A0E76E79.thor
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\Python27\Lib\email\test\data\msg_02.txt
  • c:\Python27\include\pyctype.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_s.png
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • c:\6cdeacda242012e0e5b593e657\1055\_16_WHAT_is.html
  • c:\Python27\Lib\test\nokia.pem
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_b.png
  • c:\Python27\include\pydebug.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_over_bg.jpg
  • c:\ProgramData\WebEx\WebEx\_55_WHAT_is.html
  • c:\Python27\include\pymactoolbox.h
  • c:\Python27\include\fileobject.h
  • c:\Python27\include\modsupport.h
  • c:\Python27\include\enumobject.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\_1_WHAT_is.html
  • c:\Python27\include\metagrammar.h
  • UNC\KIDSROOM\Users\Default\NTUSER.DAT.LOG
  • c:\Python27\include\pyfpe.h
  • c:\Python27\include\compile.h
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
  • c:\6cdeacda242012e0e5b593e657\1044\_11_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1042\_9_WHAT_is.html
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\version.xml
  • c:\Python27\include\structseq.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\1032\_27_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1028\_22_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\x-none.16\_39_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1029\_23_WHAT_is.html
  • c:\Python27\include\pgenheaders.h
  • c:\Python27\include\pythread.h
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\076E35C0-5E29-6BE8-4CF6-3048D400A8EA.thor
  • c:\Python27\Lib\site-packages\setuptools\command\launcher manifest.xml
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\_44_WHAT_is.html
  • c:\Python27\Lib\test\_0_WHAT_is.html
  • c:\Python27\include\opcode.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg
  • UNC\KIDSROOM\Users\Public\Music\Sample Music\Sleep Away.mp3
  • c:\6cdeacda242012e0e5b593e657\1046\LocalizedData.xml
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\en-us.16\MasterDescriptor.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\include\memoryobject.h
  • c:\Python27\Lib\site-packages\_50_WHAT_is.html
  • c:\Python27\include\moduleobject.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_04.txt
  • c:\6cdeacda242012e0e5b593e657\2052\_17_WHAT_is.html
  • c:\Python27\include\boolobject.h
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\dependency_links.txt
  • c:\Python27\include\token.h
  • c:\Python27\include\bitset.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\_6_WHAT_is.html
  • c:\Python27\include\warnings.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\en-us.16\_38_WHAT_is.html
  • c:\Python27\include\pycapsule.h
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\EgkLSaVPadslnWZBeX.docm
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\idlelib\NEWS.txt
  • c:\Python27\Lib\email\test\data\msg_42.txt
  • c:\Python27\Lib\email\test\data\msg_46.txt
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • c:\ProgramData\Microsoft\IlsCache\_48_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\Python27\Lib\idlelib\help.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\076E35C0-5E29-6BE8-BE7A-2EAFD8D2722F.thor
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\_47_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • c:\Python27\include\ucnhash.h
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\KEJYhoaYBY.rtf
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\keycert4.pem
  • c:\6cdeacda242012e0e5b593e657\1043\_10_WHAT_is.html
  • UNC\KIDSROOM\Users\Default\_12_WHAT_is.html
  • c:\Python27\include\symtable.h
  • c:\Python27\include\node.h
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx40_IIS_schema_update.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\_35_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View and annotate PDFs.bmp
  • c:\Python27\Lib\idlelib\HISTORY.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css
  • c:\ztxfzetqpe\bin\_2_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\top_tb_bg.jpg
  • UNC\KIDSROOM\Users\Harry Dresden\Contacts\Harry Dresden.contact
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\blank.gif
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • c:\Python27\include\cStringIO.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\_42_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_29.txt
  • c:\Python27\Lib\email\test\data\msg_01.txt
  • c:\6cdeacda242012e0e5b593e657\2070\LocalizedData.xml
  • \\?\PIPE\lsarpc
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp
  • c:\Python27\tcl\_30_WHAT_is.html
  • c:\Python27\Lib\test\sha256.pem
  • c:\6cdeacda242012e0e5b593e657\3082\_19_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\_4_WHAT_is.html
  • c:\Python27\include\classobject.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg
  • c:\Python27\include\datetime.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • c:\Python27\include\errcode.h
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\top_level.txt
  • c:\Python27\Lib\test\keycert3.pem
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\buy_phantom.png
  • c:\Python27\include\pyerrors.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml
  • c:\Python27\include\Python-ast.h
  • c:\6cdeacda242012e0e5b593e657\1049\_14_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1055\LocalizedData.xml
  • c:\Python27\include\ceval.h
  • c:\Python27\Lib\lib2to3\PatternGrammar.txt
  • c:\Python27\include\pythonrun.h
  • c:\Python27\include\structmember.h
  • c:\Python27\Lib\idlelib\README.txt
  • c:\Python27\include\pygetopt.h
  • UNC\KIDSROOM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
  • c:\Python27\include\codecs.h
  • c:\Python27\Lib\email\test\data\msg_33.txt
  • UNC\KIDSROOM\Users\Harry Dresden\Downloads\big-hero-6-2.jpg
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your application.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Powerful Word Processor.bmp
  • c:\Python27\include\patchlevel.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png
  • c:\Python27\include\bytes_methods.h
  • UNC\KIDSROOM\Users\Public\Music\Sample Music\_9_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx40_IIS_schema_update.xml
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf
  • c:\Python27\Lib\test\keycert.pem
  • c:\Python27\include\traceback.h
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1046\_13_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\longintrepr.h
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\RXILvVoADJw.txt
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml
  • c:\Python27\tcl\tix8.4.3\pref\TkWin.cs
  • c:\Python27\include\Python.h
  • UNC\KIDSROOM\Users\Harry Dresden\Contacts\_13_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_34.txt
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\entry_points.txt
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html
  • c:\Python27\include\pystate.h
  • c:\Python27\Lib\lib2to3\_53_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Fastest PDF Search and Index.bmp
  • c:\Python27\include\pyconfig.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml
  • c:\Python27\include\pymacconfig.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\1031\_26_WHAT_is.html
  • c:\Python27\include\bufferobject.h
  • c:\Python27\include\timefuncs.h
  • c:\6cdeacda242012e0e5b593e657\_33_WHAT_is.html
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\_51_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_37.txt
  • c:\Python27\include\graminit.h
  • c:\6cdeacda242012e0e5b593e657\1037\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\Strings.xml
  • c:\Python27\include\pystrcmp.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\076E35C0-5E29-6BE8-019A-5249E1888E3A.thor
  • c:\Python27\Lib\test\pycacert.pem
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\076E35C0-5E29-6BE8-53D8-80259441107B.thor
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Design form fields easily.bmp
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt
  • c:\Python27\Lib\email\test\data\_32_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1037\_5_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\_8_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Penguins.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml
  • c:\ProgramData\Sun\Java\Java Update\jaureglist.xml
  • c:\Python27\include\bytesobject.h
  • c:\6cdeacda242012e0e5b593e657\1049\LocalizedData.xml
  • c:\Python27\include\sysmodule.h
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\_40_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_35.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View PDFs on mobile devices.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_move_bg.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml
  • c:\Python27\Lib\test\185test.db
  • c:\6cdeacda242012e0e5b593e657\1035\_29_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View PDFs on mobile devices.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg
  • UNC\KIDSROOM\Users\Public\Music\Sample Music\Kalimba.mp3
  • c:\6cdeacda242012e0e5b593e657\1033\_28_WHAT_is.html
  • c:\Python27\include\eval.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\_41_WHAT_is.html
  • c:\Python27\Lib\site-packages\README.txt
  • c:\Python27\include\genobject.h
  • c:\Python27\Lib\idlelib\idle_test\_52_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_28.txt
  • c:\Python27\Lib\test\ssl_cert.pem
  • c:\Python27\include\parsetok.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\_11_WHAT_is.html
  • c:\Python27\include\osdefs.h
  • \\?\PIPE\wkssvc
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png
  • c:\Python27\Lib\site-packages\setuptools\command\_49_WHAT_is.html
  • c:\Python27\include\pymem.h
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\cacert.pem
  • c:\Python27\include\pyarena.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\_45_WHAT_is.html
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\wNwLLIfeGL.rtf
  • c:\6cdeacda242012e0e5b593e657\1033\eula.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect Sensitive PDF Documents.bmp
  • c:\Python27\Lib\test\selfsigned_pythontestdotnet.pem
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\_46_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1036\_4_WHAT_is.html
  • c:\Python27\include\rangeobject.h
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\jsqhNSfquiaSTX.docm
  • c:\6cdeacda242012e0e5b593e657\2070\eula.rtf
  • c:\Python27\include\iterobject.h
  • c:\6cdeacda242012e0e5b593e657\1025\_20_WHAT_is.html
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\076E35C0-5E29-6BE8-6A83-0B4AEF13F3FF.thor
  • c:\Python27\include\funcobject.h
  • c:\Python27\include\listobject.h
  • c:\Python27\Lib\email\test\data\msg_44.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index_ori.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\config.css
  • c:\6cdeacda242012e0e5b593e657\1038\_6_WHAT_is.html
  • c:\Python27\include\frameobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Koala.jpg
  • c:\6cdeacda242012e0e5b593e657\1041\_8_WHAT_is.html
  • c:\Python27\include\sliceobject.h
  • c:\Python27\tcl\tix8.4.3\pref\TK.cs
  • c:\Python27\Lib\email\test\data\msg_43.txt
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\zmgPukHfaBS.pptx
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css
  • c:\Python27\include\stringobject.h
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • c:\Python27\include\intobject.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your application.bmp
  • c:\Python27\tcl\tix8.4.3\pref\Gray.cs
  • c:\Python27\Lib\test\ssl_key.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • c:\Python27\include\methodobject.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Edit and reflow paragraphs in PDF files.bmp
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\_0_WHAT_is.html
  • c:\Python27\include\cobject.h
  • c:\Python27\include\pymath.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Fastest PDF Search and Index.bmp
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_32.txt
  • c:\Python27\Lib\email\test\data\msg_03.txt
  • c:\Python27\Lib\test\ssl_key.passwd.pem
  • c:\Python27\Lib\test\keycert2.pem
  • c:\Python27\include\py_curses.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\_37_WHAT_is.html
  • c:\ProgramData\WebEx\WebEx\atsdk.xml
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\Python27\include\setobject.h
  • c:\6cdeacda242012e0e5b593e657\1053\LocalizedData.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect your PDF files with AD RMS.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1049\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\_36_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Tulips.jpg
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp
  • c:\Python27\tcl\tix8.4.3\pref\_25_WHAT_is.html
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Powerful Word Processor.bmp
  • c:\Python27\include\bytearrayobject.h
  • c:\6cdeacda242012e0e5b593e657\1030\_24_WHAT_is.html
  • UNC\KIDSROOM\Users\Harry Dresden\Downloads\_3_WHAT_is.html
  • c:\Python27\Lib\test\badkey.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml
  • UNC\KIDSROOM\Users\Harry Dresden\Downloads\cleandesktop.py.txt
  • c:\6cdeacda242012e0e5b593e657\3082\LocalizedData.xml
  • c:\Python27\Lib\idlelib\CREDITS.txt
  • c:\Python27\include\dictobject.h
  • c:\Python27\include\intrcheck.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\_7_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_38.txt
  • c:\ProgramData\Microsoft\IlsCache\imcrcache.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64mui.msi.16.en-us.xml
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\076E35C0-5E29-6BE8-AFC6-589297800E51.thor
  • c:\Python27\Lib\test\nullbytecert.pem
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\x-none.16\MasterDescriptor.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • c:\Python27\Lib\test\dh1024.pem
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View and annotate PDFs.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\entry_points.txt
  • c:\Python27\include\weakrefobject.h
  • c:\Python27\Lib\idlelib\idle.bat
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx45_IIS_schema_update.xml
  • c:\6cdeacda242012e0e5b593e657\1040\_7_WHAT_is.html
  • c:\Python27\include\unicodeobject.h
  • c:\Python27\include\cellobject.h
File-Deleted
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\resource.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml
File-Opened
  • C:\Windows\System32\wshqos.dll
  • C:\Windows\System32\wshom.ocx
  • C:\Windows\System32\en-US\wshqos.dll.mui
  • C:\
  • C:\Windows\Globalization\Sorting\sortdefault.nls
  • C:\Users\
  • C:\Users\Harry Dresden\
  • C:\Users\Harry Dresden\AppData\
  • C:\Users\Harry Dresden\AppData\Local\
  • C:\Windows\
  • C:\Users\Harry Dresden\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
  • C:\Users\Harry Dresden\AppData\Local\Temp\NRV_3HE2535_.js
  • C:\Users\Harry Dresden\Desktop\desktop.ini
  • C:\Windows\System32\en-US\wshtcpip.dll.mui
  • C:\Windows\SysWOW64\rundll32.exe
  • C:\Windows\System32\rsaenh.dll
  • C:\Windows\System32\msxml3.dll
  • C:\Windows\System32\en-US\wship6.dll.mui
  • C:\Windows\System32\wscript.exe
  • C:\Users\Harry Dresden\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000001.db
  • C:\Windows\SysWOW64\
  • c:\Python27\Lib\email\test\data\msg_02.txt
  • c:\Python27\include\frameobject.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\Lib\ctypes
  • c:\Users\Default\Links
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages
  • c:\Python27\include\ast.h
  • c:\Python27\include\memoryobject.h
  • c:\Python27\Lib\site-packages\pip\_vendor\colorama
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources
  • c:\Python27\DLLs
  • c:\Python27\Lib\site-packages\pip\_vendor\cachecontrol
  • c:\Python27\include\tupleobject.h
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
  • c:\ProgramData\Microsoft\Event Viewer\Views\ApplicationViewsRootNode
  • c:\ProgramData\Adobe\Setup
  • UNC\KIDSROOM\Users\Default\Documents
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp
  • c:\ProgramData\Microsoft\Assistance\Client\1.0\en-US
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16.png
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\packages
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Users\Harry Dresden\OneDrive
  • c:\Python27\include\grammar.h
  • c:\ProgramData\Microsoft\PlayReady\Cache\S-1-5-21-3416602863-1947377224-293699093-1001
  • c:\Python27\include\import.h
  • c:\Users\Public\Libraries
  • \\?\PIPE\browser
  • c:\Python27\Lib\test\tracedmodules
  • c:\ProgramData\Sun\Java\Java Update\jaureglist.xml
  • c:\Python27\tcl\tcl8.5\tzdata\Indian
  • c:\Users\Public
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Create PDF from Office-convert PDF to office.bmp
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Queue
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource
  • c:\Python27\Lib
  • \??\VBoxMiniRdrDN
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml
  • c:\ProgramData
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}
  • c:\Python27\Lib\site-packages\pip
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\A5
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\A6
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\Python27\Lib\ctypes\macholib
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg
  • c:\ProgramData\Adobe\Acrobat\11.0\Replicate\Security
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\UiInfo.xml
  • c:\inetpub\history\CFGHISTORY_0000000004\schema
  • c:\Python27\Lib\unittest\test
  • c:\ProgramData\Microsoft\PlayReady
  • c:\Python27\Lib\xml\dom
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\Profile.xml
  • c:\Python27\Lib\site-packages\pip\models
  • c:\Python27\include\marshal.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp
  • c:\ProgramData\Adobe\Acrobat\11.0\Replicate
  • c:\Python27\Tools\i18n
  • c:\Python27\tcl\tcl8\8.4
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog
  • c:\ProgramData\Microsoft\Crypto\Keys
  • UNC\KIDSROOM\Users\Public\Videos
  • c:\Python27\Lib\test
  • UNC\KIDSROOM\Users\Public\Videos\Sample Videos
  • c:\inetpub\wwwroot\aspnet_client\system_web\4_0_30319
  • c:\Python27\Lib\ctypes\test
  • c:\Python27\Lib\idlelib\extend.txt
  • c:\Users\Harry Dresden\Searches
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml
  • c:\Python27\Lib\test\badcert.pem
  • c:\Python27\Lib\ensurepip
  • c:\Python27\include\pgen.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\Users\Harry Dresden\Downloads
  • c:\Python27\include\objimpl.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • c:\ProgramData\Microsoft\eHome
  • c:\Python27\tcl\tk8.5\demos\images
  • c:\Python27\Lib\test\cjkencodings
  • c:\inetpub\wwwroot\aspnet_client\system_web
  • c:\Python27\tcl\tcl8.5\tzdata\America\Kentucky
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect Sensitive PDF Documents.bmp
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\en-us.16\MasterDescriptor.en-us.xml
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US
  • c:\Python27\include\moduleobject.h
  • c:\Python27\include\abstract.h
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\Python27\Lib\test\keycert.passwd.pem
  • c:\Python27\include\object.h
  • c:\Python27\tcl\tix8.4.3
  • c:\Python27\include\complexobject.h
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • c:\ProgramData\Microsoft\Network\Downloader
  • c:\Python27\include\Python-ast.h
  • c:\inetpub\history\CFGHISTORY_0000000005
  • c:\inetpub\history\CFGHISTORY_0000000004
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml
  • c:\inetpub\history\CFGHISTORY_0000000001
  • c:\Python27\include\pydebug.h
  • c:\inetpub\history\CFGHISTORY_0000000003
  • c:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204
  • c:\Users\Harry Dresden\Favorites\Links for United States
  • c:\Python27\Lib\lib2to3\tests\data\fixers
  • c:\ztxfzetqpe\bin\cert.p12
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16-open.png
  • c:\Python27\tcl\tcl8.5\tzdata\US
  • c:\Python27\tcl\tcl8.5\tzdata
  • c:\Python27\include\pyport.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email
  • c:\Python27\tcl\tix8.4.3\demos\samples
  • c:\Python27\Lib\lib-tk\test\test_tkinter
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • c:\Python27\Tools\pynche
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp
  • c:\Python27\Tools\webchecker
  • c:\Python27\tcl\tcl8.5\tzdata\America\North_Dakota
  • c:\Python27\Lib\test\crashers
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\ProgramData\Microsoft\Windows Defender\LocalCopy
  • c:\Python27\include\dtoa.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\body_bg.jpg
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css
  • c:\Python27\include\asdl.h
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\msyGnpNqSLI.docx
  • c:\Python27\Lib\test\empty.vbs
  • c:\Users\Harry Dresden\Contacts
  • c:\ProgramData\Microsoft\IlsCache\ilrcache.xml
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\E0
  • c:\PerfLogs
  • c:\
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Desert.jpg
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Entries
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\ztxfzetqpe\modules\auxiliary
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\treebuilders
  • c:\Python27\tcl\tcl8\8.5
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • c:\Python27\libs
  • c:\ProgramData\Microsoft\ClickToRun\MachineData
  • c:\Python27\Lib\lib2to3\Grammar.txt
  • c:\Python27\include\pyexpat.h
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • UNC\KIDSROOM\Users\Public
  • c:\Python27\include\intobject.h
  • c:\ProgramData\Microsoft\Assistance
  • c:\Python27\include\bytesobject.h
  • c:\Python27\include\pyctype.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Results
  • c:\Users\Harry Dresden\Videos
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • c:\Python27\Lib\pydoc_data
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_s.png
  • c:\Python27\Lib\test\nokia.pem
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_b.png
  • c:\ProgramData\Microsoft\Crypto\DSS
  • c:\ProgramData\Adobe\Acrobat
  • c:\Python27\tcl\tcl8.5\tzdata\Atlantic
  • c:\ProgramData\NovaTech Network\NovaBench\3.0.2.0
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_over_bg.jpg
  • UNC\KIDSROOM\Users\Public\Music\Sample Music\Sleep Away.mp3
  • c:\ProgramData\Microsoft\Network
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\1A
  • c:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger
  • c:\Users\Default\Downloads
  • c:\Python27\Lib\xml
  • c:\Python27\tcl\tcl8.5\tzdata\Australia
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\17
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • c:\Python27\tcl\tk8.5
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • c:\ProgramData\Microsoft\PlayReady\Cache
  • c:\6cdeacda242012e0e5b593e657\3082
  • c:\Python27\Lib\site-packages\pip\compat
  • c:\Python27\Lib\test\leakers
  • c:\Python27\tcl\tcl8\8.4\platform
  • c:\Python27\include\modsupport.h
  • c:\ProgramData\regid.1991-06.com.microsoft
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\filters
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\DD
  • c:\Python27\Tools\pynche\X
  • c:\Python27\tcl\tix8.4.3\pref
  • c:\Python27\include\bufferobject.h
  • c:\Python27\Tools\Scripts
  • c:\Python27\include\cellobject.h
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\35
  • UNC\KIDSROOM\Users\Default\NTUSER.DAT.LOG
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore
  • c:\Python27\include\pyfpe.h
  • c:\Python27\include\compile.h
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • C:\Users\Harry Dresden\AppData\Local\Temp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml
  • c:\ztxfzetqpe
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_move_bg.jpg
  • c:\Python27\tcl\tk8.5\images
  • c:\ProgramData\Microsoft\DRM
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages\en-US
  • c:\Python27\Lib\idlelib\idle_test
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\Python27\include
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • c:\Python27\Lib\test\nullcert.pem
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\version.xml
  • c:\Python27\include\cobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\1029
  • c:\6cdeacda242012e0e5b593e657\1028
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}
  • c:\Python27\Lib\site-packages\pip\commands
  • c:\Python27\Lib\lib2to3\tests\data\fixers\myfixes
  • c:\6cdeacda242012e0e5b593e657\1025
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us
  • c:\Python27\tcl\tclConfig.sh
  • c:\Python27\Lib\email\test\data
  • c:\ProgramData\Microsoft\Windows Defender\Support
  • c:\ProgramData\WebEx\WebEx
  • c:\6cdeacda242012e0e5b593e657\2052
  • c:\Python27\Lib\email\test\data\msg_44.txt
  • c:\Python27\tcl\tcl8.5\opt0.4
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases
  • c:\Python27\include\pgenheaders.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US
  • c:\Python27\tcl\tcl8.5\encoding
  • c:\ProgramData\Microsoft\Diagnosis\ETLLogs
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • c:\Python27\Lib\msilib
  • c:\ProgramData\Microsoft\WwanSvc\Profiles
  • c:\Python27\Lib\encodings
  • c:\Python27\Lib\site-packages\pip\_vendor\distlib\_backport
  • c:\ProgramData\Microsoft\Assistance\Client
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\95
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_42.txt
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\C0D2A2B7-8AE4-4D06-93E4-F1A7BD5FEC3F
  • c:\Python27\Lib\site-packages\_markerlib
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\ProgramData\Microsoft\Diagnosis\LocalTraceStore
  • c:\Python27\Lib\site-packages\setuptools\command\launcher manifest.xml
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • c:\inetpub\custerr
  • c:\Python27\include\longintrepr.h
  • c:\inetpub\custerr\en-US
  • c:\Python27\Lib\site-packages\pip\_vendor\cachecontrol\caches
  • c:\Python27\Lib\test\185test.db
  • c:\Python27\include\opcode.h
  • c:\ztxfzetqpe\bin
  • c:\Python27\Lib\email\test\data\msg_32.txt
  • c:\ProgramData\Microsoft\Crypto\RSA
  • c:\6cdeacda242012e0e5b593e657\1046\LocalizedData.xml
  • c:\ztxfzetqpe\lib\common
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\tcl\tk8.5\ttk
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\01
  • c:\Users\Default\Favorites
  • c:\inetpub\history
  • UNC\KIDSROOM\Users\Default\Desktop
  • c:\ProgramData\Microsoft\Windows NT
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\chardet
  • c:\ProgramData\Microsoft\Vault
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData
  • c:\Python27\include\fileobject.h
  • UNC\KIDSROOM\Users\ruiner
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_04.txt
  • c:\Python27\Lib\idlelib\idle_test\README.txt
  • c:\Python27\include\boolobject.h
  • C:\Windows\SysWOW64\en-US\VssTrace.DLL.mui
  • c:\Python27\include\token.h
  • c:\Python27\include\bitset.h
  • c:\Python27\include\warnings.h
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg
  • c:\Python27\tcl\tk8.5\demos
  • c:\ProgramData\Mozilla\logs
  • c:\Python27\include\pycapsule.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\70
  • c:\Python27\tcl\tcl8.5\tzdata\Mexico
  • c:\Python27\Lib\importlib
  • c:\ProgramData\Microsoft\Crypto
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\EgkLSaVPadslnWZBeX.docm
  • UNC\KIDSROOM\Users\Harry Dresden\Searches
  • c:\ProgramData\NovaTech Network\NovaBench\3.0.2.0\media
  • c:\Python27\tcl\tcl8.5
  • c:\Python27\tcl\tcl8.5\tzdata\Africa
  • UNC\KIDSROOM\Users\Harry Dresden\Music
  • c:\ProgramData\McAfee
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\Python27\Lib\idlelib\help.txt
  • c:\Python27\Lib\site-packages\pip\vcs
  • c:\Python27\Lib\bsddb\test
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\Python27\Lib\test\keycert2.pem
  • c:\ProgramData\Microsoft\Search\Data\Applications
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\F7
  • c:\Python27\include\ucnhash.h
  • c:\Python27\include\py_curses.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\F3
  • c:\Python27\Lib\xml\parsers
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\KEJYhoaYBY.rtf
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\keycert4.pem
  • c:\Python27\tcl\tcl8.5\msgs
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Inbox
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage
  • c:\Users\Harry Dresden
  • c:\Python27\include\symtable.h
  • c:\Python27\include\node.h
  • c:\ProgramData\McAfee\MCLOGS\Common\jxpiinstall
  • c:\ztxfzetqpe\lib
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx40_IIS_schema_update.xml
  • UNC\KIDSROOM\Users\Harry Dresden\Downloads
  • c:\ProgramData\Microsoft\Windows Defender\Quarantine
  • c:\Users\Public\Favorites
  • c:\Python27\Lib\site-packages\pkg_resources\_vendor
  • c:\Python27\Lib\email\test\data\msg_43.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View and annotate PDFs.bmp
  • c:\Python27\include\codecs.h
  • c:\Python27\Lib\idlelib\HISTORY.txt
  • c:\ProgramData\Microsoft\Office
  • c:\Python27\Lib\site-packages\pip\_vendor\requests
  • c:\Users\Public\Pictures
  • c:\ProgramData\NovaTech Network\NovaBench
  • UNC\KIDSROOM\Users\Harry Dresden\Documents
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\top_tb_bg.jpg
  • c:\Python27\Lib\site-packages\pip\_vendor\_markerlib
  • c:\Python27\tcl\reg1.2
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css
  • UNC\KIDSROOM\Users\Public\Desktop
  • c:\Users\ruiner
  • c:\6cdeacda242012e0e5b593e657\Strings.xml
  • c:\Python27\Lib\xml\etree
  • c:\Python27\include\pymacconfig.h
  • UNC\KIDSROOM\Users\Harry Dresden\Contacts\Harry Dresden.contact
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\blank.gif
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\01
  • UNC\KIDSROOM\Users\Harry Dresden\Favorites\Links for United States
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\util
  • c:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform
  • c:\Python27\tcl\tcl8.5\tzdata\Antarctica
  • c:\Python27\Lib\email\test\data\msg_29.txt
  • c:\Python27\Lib\email\test\data\msg_01.txt
  • c:\Python27\Lib\xml\sax
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\trie
  • c:\Users\Harry Dresden\Desktop
  • c:\Users\Public\Recorded TV
  • c:\ProgramData\Microsoft\Office\Heartbeat
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\42
  • c:\Python27\tcl\tcl8.5\tzdata\Etc
  • c:\Python27\Lib\bsddb
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\47
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\95
  • c:\6cdeacda242012e0e5b593e657\2052\LocalizedData.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Integration\ShortcutBackups
  • c:\6cdeacda242012e0e5b593e657\1053\LocalizedData.xml
  • c:\Python27\Lib\wsgiref
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\contrib
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\resource.xml
  • c:\ProgramData\Microsoft\User Account Pictures
  • c:\ProgramData\Sun\Java\Java Update
  • c:\Python27\Lib\test\sha256.pem
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9
  • c:\Recovery\015e7760-d44b-11e0-8947-954f09601788
  • c:\Users
  • UNC\KIDSROOM\Users\Public\Foxit Software
  • c:\Users\Default\Saved Games
  • c:\Python27\Lib\site-packages\pip\_vendor\pkg_resources
  • c:\inetpub\history\CFGHISTORY_0000000005\schema
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg
  • UNC\KIDSROOM\Users\Public\Videos\Sample Videos\Wildlife.wmv
  • c:\inetpub
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • UNC\KIDSROOM\Users\Public\Favorites
  • c:\Users\Default
  • c:\Python27\tcl\tcl8.5\tzdata\Pacific
  • c:\ProgramData\Microsoft\Windows NT\MSFax\ActivityLog
  • c:\Python27\tcl\tk8.5\msgs
  • c:\Python27\tcl\tcl8.5\tzdata\America
  • c:\ProgramData\Microsoft\Diagnosis\DownloadedSettings
  • c:\ProgramData\Microsoft\Windows Defender\Definition Updates\{98101498-C465-4F51-8751-D1919E97D29D}
  • c:\Python27\Lib\multiprocessing\dummy
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml
  • c:\ProgramData\Microsoft\MF
  • c:\Python27\include\errcode.h
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\top_level.txt
  • c:\Python27\Lib\test\keycert3.pem
  • UNC\KIDSROOM\Users\Default\Saved Games
  • c:\Users\Public\Downloads
  • c:\Python27\Lib\site-packages
  • c:\Python27\Lib\idlelib\NEWS.txt
  • c:\ProgramData\Microsoft\Device Stage\Task
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\buy_phantom.png
  • c:\Python27\include\pyerrors.h
  • c:\Python27\Lib\unittest
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\Graphics
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}
  • c:\Python27\Lib\test\capath
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default
  • c:\Recovery
  • c:\ProgramData\Microsoft\Device Stage
  • c:\6cdeacda242012e0e5b593e657\1055\LocalizedData.xml
  • c:\Python27\include\ceval.h
  • c:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18
  • c:\ProgramData\Microsoft\Assistance\Client\1.0
  • c:\Python27\include\pythonrun.h
  • c:\Python27\include\structmember.h
  • c:\ProgramData\Oracle
  • c:\Python27\Lib\idlelib\README.txt
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
  • c:\Python27\include\pygetopt.h
  • UNC\KIDSROOM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
  • c:\Python27\Lib\distutils\tests
  • UNC\KIDSROOM\Users\Harry Dresden\Videos
  • c:\Python27\Lib\logging
  • c:\ProgramData\Microsoft\RAC
  • c:\Python27\Lib\site-packages\pip\req
  • c:\Users\Harry Dresden\Links
  • c:\ProgramData\Microsoft\DeviceSync
  • c:\Python27\Doc
  • c:\Python27\Lib\email\test\data\msg_33.txt
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop
  • UNC\KIDSROOM\Users\Harry Dresden\Downloads\big-hero-6-2.jpg
  • c:\Python27\tcl\tix8.4.3\demos\bitmaps
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\en-us.16
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your application.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Powerful Word Processor.bmp
  • c:\Python27\include\patchlevel.h
  • UNC\KIDSROOM\Users\Default\Favorites
  • c:\Python27\include\bytes_methods.h
  • c:\Python27\Lib\compiler
  • c:\Python27\Scripts
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\47
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\43
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\42
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\17
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx40_IIS_schema_update.xml
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf
  • c:\Python27\Lib\test\keycert.pem
  • c:\Python27\include\traceback.h
  • c:\Python27\tcl\dde1.3
  • c:\Python27\tcl\tcl8.5\tzdata\SystemV
  • c:\ProgramData\NovaTech Network
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index.html
  • c:\ProgramData\Sun\Java
  • UNC\KIDSROOM\Users\Public\Recorded TV
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect your PDF files with AD RMS.bmp
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js
  • c:\ProgramData\Microsoft\Diagnosis\AsimovUploader
  • UNC\KIDSROOM\Users\Public\Documents
  • UNC\KIDSROOM\Users\Default\Pictures
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\RXILvVoADJw.txt
  • UNC\KIDSROOM\Users\Public\Libraries
  • c:\Python27\tcl\tcl8.5\tzdata\Chile
  • c:\ProgramData\Microsoft\ClickToRun\UserData
  • c:\Python27\Lib\test\xmltestdata
  • c:\ProgramData\Microsoft\WPD
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml
  • c:\Python27\Lib\site-packages\pip\_vendor
  • c:\ProgramData\Sun
  • c:\Python27\include\Python.h
  • UNC\KIDSROOM\Users\Default\Videos
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\entry_points.txt
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf
  • c:\ProgramData\Microsoft\Diagnosis\ETLLogs\ShutdownLogger
  • c:\Python27\Lib\site-packages\setuptools
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html
  • c:\Python27\include\metagrammar.h
  • UNC\KIDSROOM\Users\Public\Music\Sample Music
  • c:\Python27\include\pystate.h
  • c:\Users\Default\Desktop
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Fastest PDF Search and Index.bmp
  • UNC\KIDSROOM\Users\Default\Music
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\1A
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\treewalkers
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}
  • c:\ProgramData\Microsoft\WwanSvc
  • c:\Python27\include\pyconfig.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml
  • c:\Python27\Lib\lib2to3\PatternGrammar.txt
  • \\?\PIPE\wkssvc
  • c:\ProgramData\Microsoft\Event Viewer\Views
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.shared.Office.x-none.msi.16.x-none.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start
  • c:\Python27\Lib\json\tests
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\serializer
  • c:\Python27\Lib\email\test\data\msg_45.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default
  • c:\Python27\include\osdefs.h
  • c:\Python27\Tools
  • c:\Python27\include\timefuncs.h
  • c:\Users\Public\Videos\Sample Videos
  • UNC\KIDSROOM\Users\Public\Downloads
  • c:\Python27\include\enumobject.h
  • c:\ProgramData\Microsoft\IlsCache
  • c:\Python27\Lib\lib-tk
  • UNC\KIDSROOM\Users\Default
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Store
  • c:\ProgramData\Microsoft\Windows NT\MSFax\SentItems
  • c:\Users\Public\Foxit Software\Foxit Reader
  • c:\Python27\Lib\site-packages\pip\operations
  • c:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox
  • c:\Python27\Lib\email\test\data\msg_34.txt
  • c:\Python27\Lib\site-packages\pip\_vendor\lockfile
  • c:\Python27\Lib\curses
  • c:\6cdeacda242012e0e5b593e657\1037\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}
  • c:\Python27\include\pystrcmp.h
  • c:\Python27\include\floatobject.h
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx45_IIS_schema_update.xml
  • c:\Python27\Lib\test\pycacert.pem
  • c:\Python27\include\pymactoolbox.h
  • c:\Python27\Lib\test\badkey.pem
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Design form fields easily.bmp
  • c:\Python27\include\cStringIO.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Integration
  • c:\Users\Default\Music
  • c:\Python27\Lib\email\mime
  • c:\Users\Harry Dresden\Music
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt
  • c:\6cdeacda242012e0e5b593e657\1053
  • c:\6cdeacda242012e0e5b593e657\1055
  • UNC\KIDSROOM\Users\Harry Dresden\Links
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3
  • c:\Python27\tcl\tcl8.5\tzdata\Asia
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css
  • c:\ztxfzetqpe\lib\core
  • c:\Python27\Lib\multiprocessing
  • c:\Users\Default\Documents
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Penguins.jpg
  • c:\Users\Public\Desktop
  • c:\ProgramData\Microsoft\User Account Pictures\Default Pictures
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml
  • c:\Python27\Lib\lib-tk\test\test_ttk
  • c:\Python27\include\dictobject.h
  • c:\Users\Harry Dresden\Documents
  • c:\6cdeacda242012e0e5b593e657\1049\LocalizedData.xml
  • c:\Python27\include\sysmodule.h
  • c:\ProgramData\McAfee\MCLOGS\Common
  • c:\Python27\Lib\email\test\data\msg_35.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View PDFs on mobile devices.bmp
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\C0D2A2B7-8AE4-4D06-93E4-F1A7BD5FEC3F\x-none.16
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • c:\ProgramData\Microsoft\IdentityCRL
  • c:\ProgramData\WebEx\WebEx\12_1324
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml
  • c:\Python27\Lib\site-packages\pip\utils
  • c:\Python27\Lib\distutils\command
  • c:\Users\Harry Dresden\Saved Games
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View PDFs on mobile devices.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg
  • UNC\KIDSROOM\Users\Public\Music\Sample Music\Kalimba.mp3
  • c:\Python27\include\pyarena.h
  • c:\Python27\Lib\email\test\data\msg_05.txt
  • c:\ProgramData\Microsoft\Windows Defender
  • c:\Python27\include\eval.h
  • c:\6cdeacda242012e0e5b593e657\2070\LocalizedData.xml
  • c:\Python27
  • c:\Python27\Lib\hotshot
  • UNC\KIDSROOM\Users\Harry Dresden
  • c:\Python27\include\genobject.h
  • c:\inetpub\wwwroot
  • c:\Python27\tcl\tcl8.5\tzdata\Canada
  • c:\Python27\Tools\versioncheck
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\Python27\tcl\tcl8.5\tzdata\Arctic
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\F7
  • c:\Users\Public\Music
  • c:\6cdeacda242012e0e5b593e657\1033\eula.rtf
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\F3
  • c:\Python27\Lib\test\audiodata
  • UNC\KIDSROOM\Users\Default\Downloads
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\treeadapters
  • c:\Python27\include\intrcheck.h
  • c:\ProgramData\Microsoft\Network\Connections
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\x-none.16
  • c:\Python27\Lib\email\test\data\msg_28.txt
  • c:\Python27\Lib\sqlite3
  • c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys
  • c:\Python27\Lib\test\ssl_cert.pem
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\43
  • \\?\PIPE\lsarpc
  • c:\ProgramData\Microsoft\Diagnosis
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\C0D2A2B7-8AE4-4D06-93E4-F1A7BD5FEC3F\en-us.16
  • c:\Python27\Lib\distutils
  • UNC\KIDSROOM\Users\Harry Dresden\Saved Games
  • c:\Python27\Lib\site-packages\pip\_vendor\pkg_resources\tests
  • c:\Python27\Lib\idlelib\Icons
  • c:\ProgramData\Microsoft\Device Stage\Device
  • c:\Python27\Lib\site-packages\pip\_vendor\distlib
  • c:\Python27\Lib\test\subprocessdata
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png
  • c:\Python27\Lib\email\test\data\msg_46.txt
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\35
  • c:\Python27\include\pymem.h
  • c:\inetpub\wwwroot\aspnet_client
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\cacert.pem
  • c:\ProgramData\Microsoft\RAC\PublishedData
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\wNwLLIfeGL.rtf
  • c:\Users\Public\Foxit Software
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick
  • c:\ProgramData\Microsoft\Windows NT\MSScan
  • c:\Python27\Lib\lib2to3\tests
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect Sensitive PDF Documents.bmp
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info
  • c:\Python27\Lib\test\selfsigned_pythontestdotnet.pem
  • c:\ProgramData\Microsoft OneDrive\setup
  • c:\ProgramData\Microsoft\Crypto\DSS\MachineKeys
  • c:\6cdeacda242012e0e5b593e657\2070\eula.rtf
  • UNC\KIDSROOM\Users
  • c:\Python27\Lib\site-packages\pkg_resources
  • UNC\KIDSROOM\Users\Harry Dresden\Contacts
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info
  • c:\Python27\include\rangeobject.h
  • c:\Python27\tcl\tcl8.5\tzdata\Brazil
  • c:\Users\Harry Dresden\Favorites\Links
  • UNC\KIDSROOM\Users\Default\Links
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\jsqhNSfquiaSTX.docm
  • c:\Python27\Lib\test\imghdrdata
  • c:\Python27\include\iterobject.h
  • c:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement
  • c:\ProgramData\Microsoft\RAC\Outbound
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf
  • c:\inetpub\history\CFGHISTORY_0000000002
  • c:\Python27\include\funcobject.h
  • c:\Python27\include\listobject.h
  • c:\ProgramData\Microsoft\NetFramework
  • c:\Users\Public\Recorded TV\Sample Media
  • c:\ProgramData\Microsoft
  • c:\Users\Public\Pictures\Sample Pictures
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Service
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.wordmui.msi.16.en-us.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\config.css
  • c:\Users\Default\Videos
  • c:\ProgramData\Microsoft\Search\Data
  • c:\Python27\tcl
  • c:\Python27\Lib\json
  • UNC\KIDSROOM\Users\Public\Pictures
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • c:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\en-US
  • c:\Python27\include\pythread.h
  • c:\Python27\Lib\lib2to3\fixes
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Koala.jpg
  • c:\Python27\tcl\tix8.4.3\bitmaps
  • c:\Python27\Lib\site-packages\setuptools\command
  • c:\6cdeacda242012e0e5b593e657
  • c:\Python27\tcl\tcl8.5\tzdata\America\Indiana
  • c:\6cdeacda242012e0e5b593e657\2070
  • c:\Python27\include\sliceobject.h
  • c:\Python27\tcl\tix8.4.3\pref\TK.cs
  • c:\Users\Public\Videos
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\zmgPukHfaBS.pptx
  • c:\Python27\Lib\test\decimaltestdata
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\DD
  • c:\Python27\include\descrobject.h
  • c:\ProgramData\Microsoft\Diagnosis\UIF
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\A6
  • c:\Python27\tcl\tcl8.5\tzdata\Europe
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\A5
  • c:\Python27\include\stringobject.h
  • c:\Python27\Lib\lib2to3
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View and annotate PDFs.bmp
  • c:\ProgramData\Microsoft\Event Viewer
  • c:\ProgramData\Adobe\Setup\{AC76BA86-7AD7-1033-7B44-AB0000000001}
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your application.bmp
  • c:\Python27\tcl\tix8.4.3\pref\Gray.cs
  • c:\Python27\Lib\test\ssl_key.pem
  • c:\ProgramData\Microsoft\ClickToRun
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures
  • c:\Python27\include\methodobject.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Edit and reflow paragraphs in PDF files.bmp
  • UNC\KIDSROOM\Users\Harry Dresden\Favorites
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml
  • c:\Python27\include\structseq.h
  • c:\Python27\tcl\tcl8.5\http1.0
  • c:\Python27\include\pymath.h
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Fastest PDF Search and Index.bmp
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf
  • c:\Python27\include\parsetok.h
  • c:\ProgramData\Adobe\Acrobat\11.0
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg
  • c:\Python27\Lib\email\test\data\msg_03.txt
  • c:\Python27\Lib\ensurepip\_bundled
  • c:\Python27\Lib\idlelib\TODO.txt
  • c:\Python27\Lib\email\test\data\msg_37.txt
  • c:\Python27\include\classobject.h
  • c:\Python27\Lib\test\ssl_key.passwd.pem
  • c:\Users\Public\Music\Sample Music
  • c:\Python27\tcl\tcl8
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager
  • c:\Python27\Lib\lib2to3\tests\data
  • c:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\Cache
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\70
  • c:\ztxfzetqpe\modules
  • c:\ProgramData\WebEx\WebEx\atsdk.xml
  • c:\ProgramData\Microsoft OneDrive
  • c:\ProgramData\Microsoft\Media Player
  • c:\Python27\tcl\tcl8.5\tzdata\America\Argentina
  • c:\Python27\include\setobject.h
  • UNC\KIDSROOM\Users\Harry Dresden\Pictures
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml
  • c:\Python27\Lib\idlelib
  • c:\Python27\Lib\site-packages\README.txt
  • c:\PerfLogs\Admin
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\graminit.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images
  • c:\Python27\Lib\site-packages\pip\_vendor\progress
  • c:\Users\Harry Dresden\Pictures
  • c:\ProgramData\Microsoft\Diagnosis\Sideload
  • c:\Python27\include\datetime.h
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\packages\ssl_match_hostname
  • c:\Users\Harry Dresden\Favorites
  • c:\ProgramData\Passmark
  • c:\Python27\Lib\lib-tk\test
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\dependency_links.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\skin.css
  • c:\6cdeacda242012e0e5b593e657\1049\eula.rtf
  • c:\ProgramData\Adobe
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Tulips.jpg
  • UNC\KIDSROOM\Users\Harry Dresden\Favorites\Links
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp
  • c:\ProgramData\Microsoft\Search
  • c:\ProgramData\Passmark\PerformanceTest
  • c:\Python27\tcl\tix8.4.3\pref\TkWin.cs
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Powerful Word Processor.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index_ori.html
  • UNC\KIDSROOM\Users\Public\Music
  • c:\Python27\include\bytearrayobject.h
  • c:\ProgramData\Microsoft\NetFramework\BreadcrumbStore
  • c:\Python27\Lib\email\test
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}
  • c:\ProgramData\WebEx
  • c:\inetpub\wwwroot\msmq
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.fr-fr.xml
  • UNC\KIDSROOM\Users\Harry Dresden\Downloads\cleandesktop.py.txt
  • c:\Python27\tcl\tix8.4.3\demos
  • c:\6cdeacda242012e0e5b593e657\3082\LocalizedData.xml
  • c:\ztxfzetqpe\lib\api
  • c:\Python27\Lib\idlelib\CREDITS.txt
  • UNC\KIDSROOM\Users\Public\Recorded TV\Sample Media
  • c:\Python27\Lib\site-packages\pkg_resources\_vendor\packaging
  • c:\ztxfzetqpe\modules\packages
  • c:\ProgramData\McAfee\MCLOGS
  • c:\Users\Default\Pictures
  • c:\6cdeacda242012e0e5b593e657\1049
  • c:\Users\Public\Documents
  • c:\6cdeacda242012e0e5b593e657\1046
  • c:\6cdeacda242012e0e5b593e657\1045
  • c:\6cdeacda242012e0e5b593e657\1044
  • c:\6cdeacda242012e0e5b593e657\1043
  • c:\6cdeacda242012e0e5b593e657\1042
  • c:\6cdeacda242012e0e5b593e657\1041
  • c:\6cdeacda242012e0e5b593e657\1040
  • c:\Python27\Lib\site-packages\pip\_vendor\packaging
  • c:\ProgramData\Microsoft\eHome\logs
  • c:\ProgramData\Microsoft\Windows Defender\Scans
  • c:\ProgramData\Microsoft\Windows NT\MSFax
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Word.Word.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_38.txt
  • c:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup
  • c:\ProgramData\Microsoft\IlsCache\imcrcache.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64mui.msi.16.en-us.xml
  • c:\Python27\Lib\test\nullbytecert.pem
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\x-none.16\MasterDescriptor.x-none.xml
  • c:\Python27\Lib\sqlite3\test
  • c:\Python27\Lib\test\dh1024.pem
  • c:\ProgramData\Mozilla
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\ggPmSoQkbl.docx
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\E0
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml
  • c:\ProgramData\Microsoft\Windows Defender\Definition Updates
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\entry_points.txt
  • c:\Python27\include\weakrefobject.h
  • c:\Python27\Lib\lib2to3\pgen2
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History
  • c:\Python27\Lib\idlelib\idle.bat
  • c:\Python27\include\code.h
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx45_IIS_schema_update.xml
  • c:\Python27\include\unicodeobject.h
  • c:\ProgramData\Microsoft\RAC\StateData
  • c:\6cdeacda242012e0e5b593e657\1038
  • UNC\KIDSROOM\Users\Harry Dresden\OneDrive
  • c:\ProgramData\Microsoft\DRM\Server
  • c:\6cdeacda242012e0e5b593e657\1032
  • c:\6cdeacda242012e0e5b593e657\1033
  • c:\6cdeacda242012e0e5b593e657\1030
  • c:\6cdeacda242012e0e5b593e657\1031
  • c:\6cdeacda242012e0e5b593e657\1036
  • c:\6cdeacda242012e0e5b593e657\1037
  • c:\6cdeacda242012e0e5b593e657\1035
File-Moved
  • c:\Python27\include\object.h -> c:\Python27\include\076E35C0-5E29-6BE8-17A0-033EE3FCE963.thor
  • c:\Python27\include\memoryobject.h -> c:\Python27\include\076E35C0-5E29-6BE8-119B-6F8E144AE2F6.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\076E35C0-5E29-6BE8-94EE-D22DC908315E.thor
  • c:\Python27\Lib\email\test\data\msg_40.txt -> c:\Python27\Lib\email\test\data\076E35C0-5E29-6BE8-8C5D-24E4CE0C3E14.thor
  • c:\Python27\Lib\email\test\data\msg_37.txt -> c:\Python27\Lib\email\test\data\076E35C0-5E29-6BE8-1673-CEA6BC4635E7.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\076E35C0-5E29-6BE8-94C4-DE9A57584DB7.thor
  • \\KIDSROOM\Users\Harry Dresden\Desktop\wNwLLIfeGL.rtf -> \\KIDSROOM\Users\Harry Dresden\Desktop\076E35C0-5E29-6BE8-BDB7-EDBF9917AB55.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\076E35C0-5E29-6BE8-54DD-BF86EFC7C1BC.thor
  • c:\Python27\include\structmember.h -> c:\Python27\include\076E35C0-5E29-6BE8-E80F-2B999CC94C58.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\076E35C0-5E29-6BE8-15BB-CD5C0233D999.thor
  • c:\6cdeacda242012e0e5b593e657\UiInfo.xml -> c:\6cdeacda242012e0e5b593e657\076E35C0-5E29-6BE8-5344-5B2F2BFB17E5.thor
  • c:\Python27\Lib\test\dh1024.pem -> c:\Python27\Lib\test\076E35C0-5E29-6BE8-5382-58737133D6CE.thor
  • c:\Python27\include\bitset.h -> c:\Python27\include\076E35C0-5E29-6BE8-A1E5-105F2A560E49.thor
  • c:\Python27\include\token.h -> c:\Python27\include\076E35C0-5E29-6BE8-07EC-CEAE9D47C8D3.thor
  • c:\Python27\include\pystate.h -> c:\Python27\include\076E35C0-5E29-6BE8-76B6-0C9975773BC2.thor
  • c:\Python27\Lib\email\test\data\msg_01.txt -> c:\Python27\Lib\email\test\data\076E35C0-5E29-6BE8-B106-434CBE1D91B6.thor
  • c:\Python27\include\pycapsule.h -> c:\Python27\include\076E35C0-5E29-6BE8-27BC-D833B2502590.thor
  • \\KIDSROOM\Users\Harry Dresden\Desktop\msyGnpNqSLI.docx -> \\KIDSROOM\Users\Harry Dresden\Desktop\076E35C0-5E29-6BE8-FE62-0A9A72DCA921.thor
  • c:\Python27\include\patchlevel.h -> c:\Python27\include\076E35C0-5E29-6BE8-D833-E2EFBC1B5474.thor
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1029\076E35C0-5E29-6BE8-1B45-4695F6CDC0CC.thor
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1038\076E35C0-5E29-6BE8-06BA-768C4EBE12A3.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.publishermui.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\076E35C0-5E29-6BE8-C9F6-5C9FF0008196.thor
  • c:\Python27\include\dtoa.h -> c:\Python27\include\076E35C0-5E29-6BE8-9246-EBA9A170AF3F.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\076E35C0-5E29-6BE8-084C-5955320E1683.thor
  • c:\Python27\include\dictobject.h -> c:\Python27\include\076E35C0-5E29-6BE8-F0D3-D50EFE9CB95A.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\076E35C0-5E29-6BE8-7ECD-CC67A02E7019.thor
  • c:\Python27\include\pymactoolbox.h -> c:\Python27\include\076E35C0-5E29-6BE8-09E6-E4189A971065.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\top_tb_bg.jpg -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\076E35C0-5E29-6BE8-4BA3-38026A8F6B76.thor
  • c:\Python27\Lib\test\nokia.pem -> c:\Python27\Lib\test\076E35C0-5E29-6BE8-5568-859EDEA367B6.thor
  • c:\Python27\include\weakrefobject.h -> c:\Python27\include\076E35C0-5E29-6BE8-215D-47348B3AB138.thor
  • c:\Python27\Lib\test\keycert.passwd.pem -> c:\Python27\Lib\test\076E35C0-5E29-6BE8-AD6F-B0F25ADBD2FF.thor
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1035\076E35C0-5E29-6BE8-0A70-80C22A1D102A.thor
  • c:\Python27\Lib\email\test\data\msg_34.txt -> c:\Python27\Lib\email\test\data\076E35C0-5E29-6BE8-73BE-6C84361685D8.thor
  • c:\Python27\include\datetime.h -> c:\Python27\include\076E35C0-5E29-6BE8-12FB-D4A56A3B6A7A.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_move_bg.jpg -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\076E35C0-5E29-6BE8-35EC-E7EA4B410D91.thor
  • c:\Python27\include\pymath.h -> c:\Python27\include\076E35C0-5E29-6BE8-75AE-0E9947C8F0BE.thor
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\en-us.16\MasterDescriptor.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\en-us.16\076E35C0-5E29-6BE8-9564-2344ABE9258B.thor
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\resource.xml -> c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\CE6C70D1E30DBCBB2724F8F4249BF5D7.tmp
  • c:\Python27\Lib\email\test\data\msg_42.txt -> c:\Python27\Lib\email\test\data\076E35C0-5E29-6BE8-BF77-11A7C57E1131.thor
  • \\KIDSROOM\Users\Public\Pictures\Sample Pictures\Desert.jpg -> \\KIDSROOM\Users\Public\Pictures\Sample Pictures\076E35C0-5E29-6BE8-54A6-05E6D793ADB9.thor
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx40_IIS_schema_update.xml -> c:\inetpub\history\CFGHISTORY_0000000004\schema\076E35C0-5E29-6BE8-9106-C11991AA2A01.thor
  • c:\Python27\Lib\email\test\data\msg_29.txt -> c:\Python27\Lib\email\test\data\076E35C0-5E29-6BE8-AA38-BA63177A1178.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\076E35C0-5E29-6BE8-4826-4A21B3A22D21.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Fastest PDF Search and Index.bmp -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\076E35C0-5E29-6BE8-CBD6-6844E93A997F.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View PDFs on mobile devices.bmp -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\076E35C0-5E29-6BE8-D31D-0BB88E3E66D5.thor
  • c:\Python27\include\moduleobject.h -> c:\Python27\include\076E35C0-5E29-6BE8-D3B4-39247BCCCF67.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\076E35C0-5E29-6BE8-81EC-6CF4C4C1303D.thor
  • c:\ProgramData\Microsoft\IlsCache\ilrcache.xml -> c:\ProgramData\Microsoft\IlsCache\076E35C0-5E29-6BE8-A9A8-BEC3061A5EC2.thor
  • c:\Python27\Lib\test\keycert3.pem -> c:\Python27\Lib\test\076E35C0-5E29-6BE8-A83C-EB722433CB20.thor
  • c:\Python27\include\pyerrors.h -> c:\Python27\include\076E35C0-5E29-6BE8-731D-2546408FBE4C.thor
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1031\076E35C0-5E29-6BE8-A250-C142C6D684B3.thor
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml -> c:\ProgramData\Microsoft\ClickToRun\076E35C0-5E29-6BE8-975B-C8FA612D17DC.thor
  • \\KIDSROOM\Users\Harry Dresden\Desktop\KEJYhoaYBY.rtf -> \\KIDSROOM\Users\Harry Dresden\Desktop\076E35C0-5E29-6BE8-8E4C-A74C9B07F781.thor
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml -> c:\ProgramData\Microsoft\ClickToRun\076E35C0-5E29-6BE8-12F3-FB6AAAA5A654.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\076E35C0-5E29-6BE8-4626-E879539843F3.thor
  • c:\Python27\include\complexobject.h -> c:\Python27\include\076E35C0-5E29-6BE8-D852-6765E79D965B.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\076E35C0-5E29-6BE8-553A-E77570C0145C.thor
  • c:\Python27\include\sysmodule.h -> c:\Python27\include\076E35C0-5E29-6BE8-956B-0AAB40542B76.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index_ori.html -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\076E35C0-5E29-6BE8-C61B-A06FC223404B.thor
  • \\KIDSROOM\Users\Harry Dresden\Desktop\RXILvVoADJw.txt -> \\KIDSROOM\Users\Harry Dresden\Desktop\076E35C0-5E29-6BE8-8B85-5A31A4E8060D.thor
  • c:\Python27\include\node.h -> c:\Python27\include\076E35C0-5E29-6BE8-6A7B-9BCB3C65462F.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Fastest PDF Search and Index.bmp -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\076E35C0-5E29-6BE8-5A79-68F2A5E09F87.thor
  • c:\Python27\include\cellobject.h -> c:\Python27\include\076E35C0-5E29-6BE8-3D70-7859841753BD.thor
  • c:\Python27\Lib\test\nullcert.pem -> c:\Python27\Lib\test\076E35C0-5E29-6BE8-0DE9-DBC64C347AB2.thor
  • c:\Python27\Lib\idlelib\idle.bat -> c:\Python27\Lib\idlelib\076E35C0-5E29-6BE8-6F47-5AC4C2F151C6.thor
  • c:\Python27\Lib\site-packages\README.txt -> c:\Python27\Lib\site-packages\076E35C0-5E29-6BE8-C535-47601721525B.thor
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1045\076E35C0-5E29-6BE8-0FB9-677865492FD5.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\076E35C0-5E29-6BE8-FDC0-D75CFFDD497D.thor
  • c:\Python27\include\cobject.h -> c:\Python27\include\076E35C0-5E29-6BE8-78AC-DF1F15F7D485.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\076E35C0-5E29-6BE8-7234-63C352BAD2A8.thor
  • c:\Python27\tcl\tix8.4.3\pref\TK.cs -> c:\Python27\tcl\tix8.4.3\pref\076E35C0-5E29-6BE8-CD70-2FAB861EE762.thor
  • c:\Python27\include\bytearrayobject.h -> c:\Python27\include\076E35C0-5E29-6BE8-94D7-E3EB05E54123.thor
  • c:\Python27\include\Python.h -> c:\Python27\include\076E35C0-5E29-6BE8-124A-E3B63DF3EECD.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_s.png -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\076E35C0-5E29-6BE8-89E8-765C3238ADFE.thor
  • c:\Python27\include\ucnhash.h -> c:\Python27\include\076E35C0-5E29-6BE8-C8ED-FB0CD7544EE7.thor
  • c:\Python27\Lib\test\wrongcert.pem -> c:\Python27\Lib\test\076E35C0-5E29-6BE8-3268-348ADC856B65.thor
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1030\076E35C0-5E29-6BE8-2681-75413F4E4ECF.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\076E35C0-5E29-6BE8-E008-43BB54D466FA.thor
  • c:\Python27\include\rangeobject.h -> c:\Python27\include\076E35C0-5E29-6BE8-15F9-3C8057794D4C.thor
  • c:\Python27\Lib\email\test\data\msg_44.txt -> c:\Python27\Lib\email\test\data\076E35C0-5E29-6BE8-1693-7C72ABE17639.thor
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1042\076E35C0-5E29-6BE8-DBCB-1AF117F2F3D7.thor
  • c:\Python27\Lib\test\ssl_key.passwd.pem -> c:\Python27\Lib\test\076E35C0-5E29-6BE8-3C3F-A6B5DBB75609.thor
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1044\076E35C0-5E29-6BE8-BE58-6B67F6B8A741.thor
  • c:\Python27\include\eval.h -> c:\Python27\include\076E35C0-5E29-6BE8-8646-A5B917394AF5.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\076E35C0-5E29-6BE8-4199-3334CAB62FCE.thor
  • \\KIDSROOM\Users\Harry Dresden\Desktop\zmgPukHfaBS.pptx -> \\KIDSROOM\Users\Harry Dresden\Desktop\076E35C0-5E29-6BE8-247E-4518B06ACA37.thor
  • c:\Python27\include\fileobject.h -> c:\Python27\include\076E35C0-5E29-6BE8-E43D-08562E2FAE22.thor
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf -> c:\6cdeacda242012e0e5b593e657\2052\076E35C0-5E29-6BE8-99AD-F073B9A00766.thor
  • c:\Python27\Lib\idlelib\NEWS.txt -> c:\Python27\Lib\idlelib\076E35C0-5E29-6BE8-3B72-0E5D609D405C.thor
  • c:\Python27\include\pyctype.h -> c:\Python27\include\076E35C0-5E29-6BE8-3F64-F5FB0AB74041.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Edit and reflow paragraphs in PDF files.bmp -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\076E35C0-5E29-6BE8-4533-BA01CB6DACFA.thor
  • c:\Python27\include\pyexpat.h -> c:\Python27\include\076E35C0-5E29-6BE8-B39D-262A074633E2.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\076E35C0-5E29-6BE8-2C4D-CC7769B9FE3B.thor
  • c:\Python27\include\symtable.h -> c:\Python27\include\076E35C0-5E29-6BE8-CDD9-AD748D8038F1.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\076E35C0-5E29-6BE8-2332-61890FF7783A.thor
  • c:\Python27\include\tupleobject.h -> c:\Python27\include\076E35C0-5E29-6BE8-DF68-98CB24CA3F67.thor
  • c:\Python27\include\pyconfig.h -> c:\Python27\include\076E35C0-5E29-6BE8-060D-EAFFF0938EAF.thor
  • c:\Python27\include\metagrammar.h -> c:\Python27\include\076E35C0-5E29-6BE8-1586-A22C962F3476.thor
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx45_IIS_schema_update.xml -> c:\inetpub\history\CFGHISTORY_0000000004\schema\076E35C0-5E29-6BE8-5788-653D5F65A0EB.thor
  • c:\Python27\Lib\test\keycert4.pem -> c:\Python27\Lib\test\076E35C0-5E29-6BE8-E19E-1CF0216C3D24.thor
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1025\076E35C0-5E29-6BE8-CD0F-1D1EAAFC2F20.thor
  • c:\Python27\include\structseq.h -> c:\Python27\include\076E35C0-5E29-6BE8-3EB9-9C240C3DEB41.thor
  • c:\6cdeacda242012e0e5b593e657\1055\LocalizedData.xml -> c:\6cdeacda242012e0e5b593e657\1055\076E35C0-5E29-6BE8-C4CC-E90819B194ED.thor
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\x-none.16\MasterDescriptor.x-none.xml -> c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\x-none.16\076E35C0-5E29-6BE8-F7C1-3AFE4C0186CA.thor
  • c:\Python27\include\ast.h -> c:\Python27\include\076E35C0-5E29-6BE8-2F12-46992347ED77.thor
  • c:\Python27\Lib\test\empty.vbs -> c:\Python27\Lib\test\076E35C0-5E29-6BE8-2D36-0E970CB85240.thor
  • c:\Python27\include\compile.h -> c:\Python27\include\076E35C0-5E29-6BE8-6663-9D3E7DD2BAED.thor
  • c:\Python27\include\marshal.h -> c:\Python27\include\076E35C0-5E29-6BE8-BAD5-2E295A55BFEA.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Edit and reflow paragraphs in PDF files.bmp -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\076E35C0-5E29-6BE8-BD67-1A382132C451.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\076E35C0-5E29-6BE8-70F2-B41473DCE733.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your application.bmp -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\076E35C0-5E29-6BE8-28D4-5FC635DB653B.thor
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs -> c:\Python27\tcl\tix8.4.3\pref\076E35C0-5E29-6BE8-6250-5786734E5191.thor
  • c:\Python27\Lib\idlelib\CREDITS.txt -> c:\Python27\Lib\idlelib\076E35C0-5E29-6BE8-10C9-E11448B240BE.thor
  • c:\Python27\include\stringobject.h -> c:\Python27\include\076E35C0-5E29-6BE8-74E5-558B3113E76B.thor
  • \\KIDSROOM\Users\Harry Dresden\Downloads\big-hero-6-2.jpg -> \\KIDSROOM\Users\Harry Dresden\Downloads\076E35C0-5E29-6BE8-D092-176C8D14BDAB.thor
  • c:\Python27\include\codecs.h -> c:\Python27\include\076E35C0-5E29-6BE8-55A4-C228F6E37537.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\076E35C0-5E29-6BE8-6FAF-533643AB9A35.thor
  • c:\6cdeacda242012e0e5b593e657\2070\LocalizedData.xml -> c:\6cdeacda242012e0e5b593e657\2070\076E35C0-5E29-6BE8-525A-F5F3A1840821.thor
  • \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt -> \\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\076E35C0-5E29-6BE8-C80D-1E02577F0161.thor
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1046\076E35C0-5E29-6BE8-FC17-C863255C1FDD.thor
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1055\076E35C0-5E29-6BE8-B9C4-6659671C9F22.thor
  • c:\Python27\include\abstract.h -> c:\Python27\include\076E35C0-5E29-6BE8-73F8-E2951E01F32A.thor
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1040\076E35C0-5E29-6BE8-5EDB-9BF170074BAD.thor
  • c:\Python27\Lib\email\test\data\msg_32.txt -> c:\Python27\Lib\email\test\data\076E35C0-5E29-6BE8-534C-57DAA04FD4EE.thor
  • c:\Python27\Lib\test\badcert.pem -> c:\Python27\Lib\test\076E35C0-5E29-6BE8-CA7F-FF7F5D51171B.thor
  • \\KIDSROOM\Users\Public\Music\Sample Music\Sleep Away.mp3 -> \\KIDSROOM\Users\Public\Music\Sample Music\076E35C0-5E29-6BE8-4C51-717EE631DC68.thor
  • c:\Python27\include\osdefs.h -> c:\Python27\include\076E35C0-5E29-6BE8-7AFA-9E2A0DFB405E.thor
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml -> c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\901776510EAADF96CFD68A8CFCF3A6A5.tmp
  • c:\Python27\include\longobject.h -> c:\Python27\include\076E35C0-5E29-6BE8-0BC4-73009C825A06.thor
  • \\