'
metaflows logo
Category Started On Completed On Duration Cuckoo Version
FILE 2016-11-08 19:51:57.025593 2016-11-08 19:54:51.644175 174 seconds 2.0-dev
Machine Label Manager Started On Shutdown On
win7cuckoo2 win7 Clone 2 VirtualBox 2016-11-08 19:51:57 2016-11-08 19:54:51

File Details

File name cc1312d53091aeb252cbf64f99b35f1e98bbae5b.zip
File size 1092 bytes
File type Zip archive data, at least v2.0 to extract
CRC32 095FA390
MD5 85502e6a63384963634922f231d677ff
SHA1 cc1312d53091aeb252cbf64f99b35f1e98bbae5b
SHA256 f8435bf94ed4756f8cdecc30799e6f693ae7b676e40d9957d00a7408658bcbbb
SHA512 c1281bdca30a6d99f2697718c65f42f7fdfed536ed56b2a034ec9569fcbf7ac363a0298e7da05730e1fdae9b1d407e7992a9eb8f21e6a3758df2cff7043a3820
Ssdeep 24:9QAmibVVjD4pN7AvudxwM0D8PbQvX+QX51El9HtgTVjtZAXZ:9/meJUpNEvX+euHty58p
PEiD None matched
Yara
  • PM_Zip_with_js ()
VirusTotal Permalink
VirusTotal Scan Date: 2016-11-08 14:53:57
Detection Rate: 8/56 (Expand)

MetaFlows Scores

Metaflows Analysis Results (Signatures=125, Anomalies=0, PEiD=0, Yara=2, VT[1478634929]=100): Snort Events=1, AV Events=2
Total Score=125

SNORT EVENTS:
ET POLICY PE EXE or DLL Windows file download HTTP

CLAMAV DETECTED:
Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND
DROPPED FILE - NRV_LCG59_.js: Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND

Dropped File/Buffer Yara Signatures:
2e357703f557f4c19880862949a43b80d46a7b53 [BUFFER]: shellcode
c5f0a0d9e3df9a9de1ed92187ae8629bfab9d3f7 [BUFFER]: Str_Win32_Http_API

Signatures

antivm_queries_computername details
recon_fingerprint details
antivm_memory_available details
dumped_buffer details
creates_doc details
antivm_network_adapters details
dumped_buffer2 details
antivm_vbox_files details
Windows_Proxy_Tinkering details
network_wscript_downloader details
persistence_ads details
antiav_detectfile details
exploit_heapspray details
malicious_document_urls details
network_document_file details
network_downloader_exe details
antivm_vbox_devices details
antivm_vbox_files details
modifies_files details

Screenshots

No screenshots available.

Static Analysis

Nothing to display.

Dropped Files

f5c4a7595413504c_gizcryfu-7am0-fdxy-adb1-adedaa384885.thor

0af23b30428b059c_gizcryfu-7am0-fdxy-c2e8-2ed3f1ac8286.thor

a17ae417f16ed66d_gizcryfu-7am0-fdxy-01fd-21f33f32fcfb.thor

4b250eb8742e6f4a_gizcryfu-7am0-fdxy-7b6f-15a6f991d11a.thor

05ca120f03d78042_gizcryfu-7am0-fdxy-67e4-23a951be475d.thor

c57967f3f0bddf02_gizcryfu-7am0-fdxy-4bd1-590b78e15dc5.thor

003ed46337a0660f_gizcryfu-7am0-fdxy-acc7-18ea2bcf3eb3.thor

d3bfda796c914ef1_gizcryfu-7am0-fdxy-188b-981439680ded.thor

20e052b109639153_gizcryfu-7am0-fdxy-e373-215a010331db.thor

cb23a580d1ba0416_gizcryfu-7am0-fdxy-4d24-21724151686a.thor

310f0592963ff225_gizcryfu-7am0-fdxy-b721-bca021083c35.thor

149d5a57642e1069_gizcryfu-7am0-fdxy-885e-ed00f86faa8b.thor

f9813c5f72f7a815_gizcryfu-7am0-fdxy-caa4-7c2ba1576281.thor

865db9e9b7cba14d_gizcryfu-7am0-fdxy-5b7b-2c33f1005d2b.thor

faf021b3c06abc41_tasks.xml

e5b70b2063e90b4c_gizcryfu-7am0-fdxy-6856-0ae985f85ecb.thor

0198f7bd84d6abf0_gizcryfu-7am0-fdxy-5a44-69ee102ed1e4.thor

761066526d4b1e20_gizcryfu-7am0-fdxy-43d1-00f76d4ad43c.thor

c3660337605e0abb_gizcryfu-7am0-fdxy-f79b-4a87bd0cff2f.thor

cdac0e6bffee4586_gizcryfu-7am0-fdxy-9664-9d5cd2303a24.thor

d1dc3e1f5687f89d_gizcryfu-7am0-fdxy-1765-5409c6df1d86.thor

e838e6aa0ef97527_gizcryfu-7am0-fdxy-eeb7-8328a1e0211b.thor

4a985b1ef1dea0e9_gizcryfu-7am0-fdxy-f8f4-aff09f132a94.thor

6ffc2e1ee4d59b3a_gizcryfu-7am0-fdxy-580b-69cfaeac41a4.thor

72232e4363e64753_gizcryfu-7am0-fdxy-9d36-e0b9ab64c93f.thor

349e8d107cac7f2a_gizcryfu-7am0-fdxy-3cc6-1244cb9d8e99.thor

229b2867e59b3b96_gizcryfu-7am0-fdxy-e1cd-c11ac623a5b2.thor

49b696f004afadc3_gizcryfu-7am0-fdxy-b0b2-cafbb65f5030.thor

fe3e753df80f7707_gizcryfu-7am0-fdxy-0d68-767a2c0c66f0.thor

6cf7472223406cc2_gizcryfu-7am0-fdxy-d047-249714b8ebd6.thor

99ff54647db889cf_gizcryfu-7am0-fdxy-4676-a99e4c05a71c.thor

989a66442499e26d_gizcryfu-7am0-fdxy-fe0b-9896f6b8cea8.thor

73260822087d2fc5_gizcryfu-7am0-fdxy-852f-8232dd5c9301.thor

f7938203c7a9bd85_gizcryfu-7am0-fdxy-8549-8eede6f87d8f.thor

fd5f68b59aa2b3e8_resource.xml

dd0f0874167e44a8_gizcryfu-7am0-fdxy-1a25-0e7d33029d95.thor

2fbe48a397ab0033_gizcryfu-7am0-fdxy-4746-45c377186599.thor

6bc2d520ad0544ae_gizcryfu-7am0-fdxy-fa68-c92438b1f9b1.thor

277dab013b8e8d47_gizcryfu-7am0-fdxy-9f7a-7fd24f2cb539.thor

0f61ec56a214aa0c_gizcryfu-7am0-fdxy-9253-642cf412e744.thor

0db82f4c3417515a_gizcryfu-7am0-fdxy-c2ae-4e176bdce452.thor

412767a42d943c70_gizcryfu-7am0-fdxy-a2e7-8a1e18a506e4.thor

d2e4bc88db461372_gizcryfu-7am0-fdxy-ad3c-0096e7a871f2.thor

015ef1e0bb7d88d3_gizcryfu-7am0-fdxy-218c-18b219d3f738.thor

94b234bcbe467d52_gizcryfu-7am0-fdxy-f8e6-3fb76fa54e69.thor

edcf92958a418c20__57_what_is.html

fbd4d88e2d66f935_gizcryfu-7am0-fdxy-70f9-7b8410457c45.thor

87d1502f5887f5b5_gizcryfu-7am0-fdxy-5cf9-0843eae847f4.thor

78f118e39ab1fa50_gizcryfu-7am0-fdxy-33cf-921aeea3f01f.thor

3bf1317f1c6b0d78_gizcryfu-7am0-fdxy-2032-0f1b255de485.thor

1124092047c5f354_gizcryfu-7am0-fdxy-6d1f-e2e1ead2949c.thor

35de4832bcb8b9dd_gizcryfu-7am0-fdxy-0887-80e47d1de1f6.thor

af7a12135db48bf2_resource.xml

9eab73c6a70cea0b_gizcryfu-7am0-fdxy-f778-5bf686453d19.thor

452550a4e8c48f0a_gizcryfu-7am0-fdxy-fcd7-fa639eaf8bee.thor

3ab018f04316bbaa_gizcryfu-7am0-fdxy-a01b-afbff2379d14.thor

44f9c1ad5e071965_gizcryfu-7am0-fdxy-086b-c43fdba24627.thor

df72d7f4110ee0a7_gizcryfu-7am0-fdxy-fae3-635ea588f99b.thor

da41a425748359ac_gizcryfu-7am0-fdxy-0ab7-f3b40acbd9be.thor

ef9c54cb2e93a48e_gizcryfu-7am0-fdxy-60ae-c9b1edc22bf5.thor

8d3e48e429a086f3_gizcryfu-7am0-fdxy-74ee-e73f94e46be0.thor

da74149a304d5944_gizcryfu-7am0-fdxy-b428-045b41d13919.thor

2400d34b5c27ed51_gizcryfu-7am0-fdxy-b866-8801e8f00a51.thor

b01802319a8c42b8_gizcryfu-7am0-fdxy-5979-c733d881e6ff.thor

c1ec8a98b65f6637_gizcryfu-7am0-fdxy-f4b4-7f47819118c1.thor

506eb2118dfe5ef6_gizcryfu-7am0-fdxy-f356-f978ef15674b.thor

6188fd45140d55c6_gizcryfu-7am0-fdxy-a94f-622b2cc2b23b.thor

c72ba7ba99c816c7_gizcryfu-7am0-fdxy-6e10-ae1de479b0f1.thor

7759443304bbdbba_gizcryfu-7am0-fdxy-737c-d082c3fd2e17.thor

23b0644d779a2dbd_gizcryfu-7am0-fdxy-cb2b-182b769f45e8.thor

4248091abf3aa705_gizcryfu-7am0-fdxy-8611-0d8f02e9434b.thor

c68ad7691bb28ba5_gizcryfu-7am0-fdxy-7dc0-3b4b3d7a53c5.thor

bc07468b9e4d55af_gizcryfu-7am0-fdxy-5492-afac788e982a.thor

83a6dc68b34d3d73_gizcryfu-7am0-fdxy-8fae-87f873f2282d.thor

3cf08d31d6fd2ea0_gizcryfu-7am0-fdxy-7cdb-e2be35f0e98f.thor

fb332a1704f6be4f_gizcryfu-7am0-fdxy-f05c-af33c136f7c6.thor

a59ed9297a19799e_gizcryfu-7am0-fdxy-2b96-4b4e510b54fc.thor

7559badf35647f81_gizcryfu-7am0-fdxy-29da-f644f75b8aaa.thor

8086afa25d0f0d56_gizcryfu-7am0-fdxy-5850-dddd8500149f.thor

aa86d389f97b25c4_gizcryfu-7am0-fdxy-280e-95506e7817e2.thor

49cdba53f0a79569_gizcryfu-7am0-fdxy-7462-628d53fd1d19.thor

f4ed3f230ec95007_gizcryfu-7am0-fdxy-3c47-2e480000aee2.thor

1de9fdf7bc0c6dd4_gizcryfu-7am0-fdxy-bcd9-4d12ed377379.thor

3a9df8756b4f81ab_gizcryfu-7am0-fdxy-ee5e-95e4b50c4531.thor

cfc94ad924e01040_gizcryfu-7am0-fdxy-f06a-37fd51189328.thor

24f5e00cf68819b7_gizcryfu-7am0-fdxy-1a7b-d3e3496993d4.thor

54f9dc981beac0a9_gizcryfu-7am0-fdxy-628c-ae863ce3bd66.thor

ffe459bd6ec195b9_gizcryfu-7am0-fdxy-4723-2b2a21482efb.thor

3866a20c67454922_gizcryfu-7am0-fdxy-2084-6b8b92790c8b.thor

fbc29c22d791fc1b_gizcryfu-7am0-fdxy-6a12-691811ef0b2b.thor

7246317a3c8f7b12_gizcryfu-7am0-fdxy-255f-15444f17ab8e.thor

96faffbee36811c3_gizcryfu-7am0-fdxy-2490-90bdb1fbc89d.thor

86c05252eacc2b5d_tasks.xml

caf1902aa05fbd8f_gizcryfu-7am0-fdxy-6f93-db2bd1087c34.thor

6c8969759d1bb204_gizcryfu-7am0-fdxy-56df-95e057233d22.thor

53d446ea5b4d05b5_gizcryfu-7am0-fdxy-13d6-ca0f074a5009.thor

56b6c01d5fea3b62_gizcryfu-7am0-fdxy-b8fd-2bb7e30e53c1.thor

0c0a23398ad3bcbc_gizcryfu-7am0-fdxy-40b7-55e8bcf940b7.thor

7e4df09ca450043a_gizcryfu-7am0-fdxy-a3c4-de161a368fc6.thor

374b38c6cb529703_gizcryfu-7am0-fdxy-e3e3-a0fd176d8022.thor

0c631eee27b75b7f_gizcryfu-7am0-fdxy-216f-702c254cefa5.thor

c6acfdfd95cb6569_gizcryfu-7am0-fdxy-9dbc-79244e110aaa.thor

cf13d22c166a38c4_gizcryfu-7am0-fdxy-1baa-29ea7f241f17.thor

b2197ac2029c8da1_gizcryfu-7am0-fdxy-cd7c-436a9eec2cee.thor

208ae826fe396741_gizcryfu-7am0-fdxy-cd10-d583d8d4dc4e.thor

a810f4354910b9ce_gizcryfu-7am0-fdxy-0165-caf62d84d59b.thor

f7ed488f42108b92_gizcryfu-7am0-fdxy-c73d-ea6bda5c15f2.thor

f503fb3fea7e023b_gizcryfu-7am0-fdxy-fa22-dfc7966413e9.thor

192cba4d71c77a1b_gizcryfu-7am0-fdxy-e480-4e7d19686b0e.thor

c725afeb86528b27_gizcryfu-7am0-fdxy-7b6d-4582b46e66f5.thor

49835cb999b5afed_gizcryfu-7am0-fdxy-d4bd-218b3b3ea6d6.thor

93f3324b7b52d7ee_gizcryfu-7am0-fdxy-bf46-d51f198bd586.thor

79e95e9120414555_gizcryfu-7am0-fdxy-dd16-e16a7ad82d01.thor

448158e362bc6a4e_gizcryfu-7am0-fdxy-6f83-1b5444462f19.thor

fca8b74d9d9280f7_gizcryfu-7am0-fdxy-41d1-cc3be6161090.thor

002dc25649c7e1ba_gizcryfu-7am0-fdxy-3a56-60c0e3f9c59b.thor

4f8696833fdee283_gizcryfu-7am0-fdxy-2a6f-1d84514c6cf3.thor

e9ff1724da08984d_gizcryfu-7am0-fdxy-daeb-75ca78213a6b.thor

9545d4941c0f3fdc_gizcryfu-7am0-fdxy-e7f6-af34b61571cc.thor

dc9bcd43b101ce4f_gizcryfu-7am0-fdxy-9be0-aa6d3203e269.thor

95f31b92cc6a8dc9_gizcryfu-7am0-fdxy-7917-eaae7d0add8f.thor

f5e48384efced57c_gizcryfu-7am0-fdxy-6c0d-eb2083e9c4d0.thor

1fe1920ae4f3c1cf_gizcryfu-7am0-fdxy-8571-9e210204427f.thor

0d60bef2bb8de391_gizcryfu-7am0-fdxy-5cf1-c048318a5d82.thor

1cf0741293f154b9_gizcryfu-7am0-fdxy-102c-e3b373474bb3.thor

3aeed6f9013dd9c8_gizcryfu-7am0-fdxy-540d-543b3f4fb16a.thor

b7ccc98954a6778b_gizcryfu-7am0-fdxy-c76f-5f351bc60e8d.thor

7bfee4e3c17436f8_gizcryfu-7am0-fdxy-c7ce-c602b02062e7.thor

ab46b20151e02565_gizcryfu-7am0-fdxy-4464-01d87c430ead.thor

235973154442ed14_gizcryfu-7am0-fdxy-4a74-76648a471791.thor

3dbfb19671bffb20_gizcryfu-7am0-fdxy-b2a8-726bb0260638.thor

bf55fb34f95c74f2_gizcryfu-7am0-fdxy-9d05-3aaf374a6654.thor

b5f9f6094aab4219_gizcryfu-7am0-fdxy-015a-86f81af35a24.thor

3ef9bfa38d918530_gizcryfu-7am0-fdxy-f705-cd88aba776ac.thor

22b5141d9d3e72b0_gizcryfu-7am0-fdxy-6185-6ad4505ea189.thor

4304cb815ad22815_gizcryfu-7am0-fdxy-944f-ccedbdc7007a.thor

ea067e4fa40d9249_gizcryfu-7am0-fdxy-78f5-b7a745252096.thor

d2fba90f6f07808d_gizcryfu-7am0-fdxy-1a9a-649bb5c041a0.thor

a2cb54cf7478c60c_gizcryfu-7am0-fdxy-03cd-24deeb501f14.thor

74dc08513785b620_gizcryfu-7am0-fdxy-f8f0-07164dd2a280.thor

422ca57f21f7657f_gizcryfu-7am0-fdxy-21cd-64fabbdef670.thor

5ec27cbc8be3e499_gizcryfu-7am0-fdxy-f859-c164b193509b.thor

7cf09e242fa3632e_gizcryfu-7am0-fdxy-36cf-3a0bd27a9550.thor

00a464de980aefdc_gizcryfu-7am0-fdxy-6be3-501fd10e9e34.thor

d1f865c3e3d23140_gizcryfu-7am0-fdxy-4c3c-b94370ef2216.thor

f55f706fe9aebb28_gizcryfu-7am0-fdxy-7a6e-bd5f33795e13.thor

0a691d7b804fc67e_gizcryfu-7am0-fdxy-0486-8214274f2949.thor

3a9c81b629f16f3c_gizcryfu-7am0-fdxy-0711-c2ce1247c62b.thor

2599b2bf4893f148_gizcryfu-7am0-fdxy-68ed-2fb0980abeec.thor

057d1789dbf50f5c_gizcryfu-7am0-fdxy-7468-e23a58f07ef3.thor

0afa7338de8c5bc7_gizcryfu-7am0-fdxy-7095-c479a0514575.thor

61bf2cc3e94f5eed_gizcryfu-7am0-fdxy-77b8-8a2326d795ac.thor

574be2887283a37d_gizcryfu-7am0-fdxy-324b-3b381806c301.thor

457b0516aa0a4fae_gizcryfu-7am0-fdxy-8343-567410b21047.thor

dedeb607d6c4cd03_gizcryfu-7am0-fdxy-5f9c-e00b1dbb61d7.thor

7eb2806ca06f76e6_gizcryfu-7am0-fdxy-0508-dba6dd206fa2.thor

2347c82ee1b7fea8_gizcryfu-7am0-fdxy-af91-ff7d12287910.thor

1b6dbb8ef659eec3_gizcryfu-7am0-fdxy-751f-629c8e0b63fe.thor

eb7f239e617b6c63_gizcryfu-7am0-fdxy-38c6-93da17e1c454.thor

5565a4782c273386_gizcryfu-7am0-fdxy-0ec5-71173efe70f9.thor

9c0b805407905a77_gizcryfu-7am0-fdxy-45d9-37d334bcaaeb.thor

fd53ab4cf7e27baa_gizcryfu-7am0-fdxy-6827-e6b22d8a848d.thor

f71b8d98c3f138c1_gizcryfu-7am0-fdxy-b631-a89a270471b6.thor

1686426945e9cd13_gizcryfu-7am0-fdxy-58c1-c0f3e627a0b4.thor

5a43137db39e53fb_gizcryfu-7am0-fdxy-93ea-c3cda963175c.thor

7771f14399330052_gizcryfu-7am0-fdxy-8cac-8d0a39fb97e3.thor

f911817bf42b81f0_gizcryfu-7am0-fdxy-e283-e9fad4fb337b.thor

2b1738aad8bc4f92_gizcryfu-7am0-fdxy-0f64-f222a2ce67f1.thor

0b3cc577563ec646_gizcryfu-7am0-fdxy-04b8-8b18016a349a.thor

f1b4e5f97a1072db_gizcryfu-7am0-fdxy-3434-b6b5451210d8.thor

6e06115c3546cadf_gizcryfu-7am0-fdxy-f963-85cb2462fb25.thor

ed90eb9ffff4b8be_gizcryfu-7am0-fdxy-e9e8-5f7b8ec258a3.thor

6fcb0fb1c70d2847_gizcryfu-7am0-fdxy-2214-e610debc6507.thor

d2d56e964acaa848_gizcryfu-7am0-fdxy-c991-5248cc1aa054.thor

5a6266bcef94d76a_gizcryfu-7am0-fdxy-9efc-325f486b3707.thor

03d461f8d78e23d7_gizcryfu-7am0-fdxy-d839-8247846ea89c.thor

4d74bc8f088fba01_gizcryfu-7am0-fdxy-e611-04f5d85975b9.thor

9883e54588b719d8_gizcryfu-7am0-fdxy-458e-734f935b3255.thor

342699d23eff6ed7_gizcryfu-7am0-fdxy-d159-46ae3ecf67aa.thor

c7f68990b6ad6f58_gizcryfu-7am0-fdxy-2505-1c6f38e04540.thor

26a6bafe83528d40_gizcryfu-7am0-fdxy-a3fc-2f61bb959490.thor

8f4e92395461dbf1_gizcryfu-7am0-fdxy-c2aa-148c7e1fcc21.thor

eac9b7a558df4bdb_gizcryfu-7am0-fdxy-da9e-24ff1bc75e53.thor

5eca072bd838a52f_gizcryfu-7am0-fdxy-4f23-d16dd9004a30.thor

8668e5477ee85243_gizcryfu-7am0-fdxy-8838-223831181db8.thor

eec10103e0277010_gizcryfu-7am0-fdxy-80ee-9e3347f27d6f.thor

3daa79397c4ec9bc_gizcryfu-7am0-fdxy-cb24-4bdcdfb411a5.thor

d469dd4b6bf9e683_gizcryfu-7am0-fdxy-9069-75a3bb8924e7.thor

68a0acb18ca75706_gizcryfu-7am0-fdxy-f8aa-167243634457.thor

f69a92308f3d3125_gizcryfu-7am0-fdxy-679a-3516d82c38bf.thor

cafa959b16d26cb6_gizcryfu-7am0-fdxy-5ace-dc8ba3a434f6.thor

3f31a5f12d347a80_gizcryfu-7am0-fdxy-016e-13c009ffc9f4.thor

534d296f0d7d831a_gizcryfu-7am0-fdxy-0cf3-4b8b22280d14.thor

964b80189fc289e7_gizcryfu-7am0-fdxy-b58a-2e5f502715de.thor

c6c330a9c241b756_gizcryfu-7am0-fdxy-b4d0-39004fd3d6eb.thor

95fb5506e9f09ad9_gizcryfu-7am0-fdxy-aed5-74c5726bc0ff.thor

f92c9c577ac1c519_gizcryfu-7am0-fdxy-8c26-2503f4cf62b0.thor

439fc5cf7f2f0b81_gizcryfu-7am0-fdxy-078e-4ec9cb7bb507.thor

4526d5e438c68671_gizcryfu-7am0-fdxy-555b-6c8d2189aa3d.thor

34c80c367ad9eb22_gizcryfu-7am0-fdxy-e3ac-8065add4a0fc.thor

bb462918960b5da9_gizcryfu-7am0-fdxy-b33f-714b2e73fe1d.thor

35e34363ca0ae412_gizcryfu-7am0-fdxy-b2b6-4854f8079687.thor

a1d3510595cfa724_gizcryfu-7am0-fdxy-e5e3-9653bf4cfe20.thor

589ccbe16672737e_gizcryfu-7am0-fdxy-33f5-6e86e165f204.thor

43ff2af0c5e76a9f_gizcryfu-7am0-fdxy-4b62-b9e66f422af3.thor

78d47f40216e10e6_gizcryfu-7am0-fdxy-64ee-35bf59efbf62.thor

4ece7c17d0ff039d_gizcryfu-7am0-fdxy-3a10-9704aacd4725.thor

249f92948a888276_gizcryfu-7am0-fdxy-dd2f-c12c88a5de55.thor

6936e60790042df9_gizcryfu-7am0-fdxy-69ad-734d26d43dd7.thor

0104facde0de4628_gizcryfu-7am0-fdxy-eb8f-3804f5250d9a.thor

763c500161a811f0_gizcryfu-7am0-fdxy-1e81-ffd3e38cbaa6.thor

859790d72b0736a2_gizcryfu-7am0-fdxy-4faa-1142560f34a3.thor

8ada4f591d3f39cf_gizcryfu-7am0-fdxy-8b7a-7d0efb50297b.thor

7a013d3cb671df31_gizcryfu-7am0-fdxy-153c-b5aedd4dea29.thor

8931d34acc2d60b8_behavior.xml

aa0dc5ce274c545d_gizcryfu-7am0-fdxy-7ed4-f2a21f22baea.thor

2f6561b3717e730d_gizcryfu-7am0-fdxy-c010-e5d1279f614d.thor

8f8c13ad0d36a406_gizcryfu-7am0-fdxy-fbad-58097a790d85.thor

eec738149f2f903a_gizcryfu-7am0-fdxy-d4fb-d185954deb36.thor

08c620d7b5f837a7_gizcryfu-7am0-fdxy-3672-c0c1ef6af182.thor

33c21af468393ad5_gizcryfu-7am0-fdxy-3e29-bb4344fc530c.thor

91c62012b7dde18d_gizcryfu-7am0-fdxy-6222-e0b820c2b045.thor

d1c46c6f7fcebc7e_gizcryfu-7am0-fdxy-b2cc-9bf2904558a0.thor

3e2476641a090389_gizcryfu-7am0-fdxy-8d88-cea7a44ec82b.thor

19511c783e218cde_gizcryfu-7am0-fdxy-27cb-6b65676be1e4.thor

519bc3d81622ff6e_gizcryfu-7am0-fdxy-9575-ce06556fa88b.thor

63135b2111183a9f_gizcryfu-7am0-fdxy-4f6d-7ac41c12737b.thor

d9628c2369226721_gizcryfu-7am0-fdxy-c5bd-1b242c8052e4.thor

92c3b77a27971b1d_gizcryfu-7am0-fdxy-65f2-818b647111e5.thor

d88e3558163c8202_gizcryfu-7am0-fdxy-6f1a-93f560bc1cfc.thor

0de5b6203d299243_gizcryfu-7am0-fdxy-4448-208a5c1e2139.thor

7bdf2427d4e74e05_gizcryfu-7am0-fdxy-3920-2a9e0e876bef.thor

d1a18f72702c4539_gizcryfu-7am0-fdxy-e607-57e86cc0c871.thor

b1769a4eb4683e94_gizcryfu-7am0-fdxy-d558-1440cc3d0702.thor

9ee43983d33a7d97_gizcryfu-7am0-fdxy-3f7c-088811837b7d.thor

31a178488b24df0d_gizcryfu-7am0-fdxy-6560-099aa24c7191.thor

cf1bb60340046974_gizcryfu-7am0-fdxy-97dd-600add796961.thor

7d054bd99543b6e2_gizcryfu-7am0-fdxy-4939-2e517ef2dafd.thor

53159fc267fa55e2_gizcryfu-7am0-fdxy-ea28-553c2ce877d7.thor

aa9b1662fb63d55c_gizcryfu-7am0-fdxy-f17e-f73355bd3d67.thor

3b895f53c0b6ecc3_gizcryfu-7am0-fdxy-2311-b1a266e84f65.thor

501f782f39ea8918_gizcryfu-7am0-fdxy-6ec5-f4e28cb83888.thor

dbb2f6064b63f44e_gizcryfu-7am0-fdxy-cbb3-e35262ed8cf0.thor

6ce7916cacf3f658_gizcryfu-7am0-fdxy-6a07-22c1f4de1f9d.thor

66252e6b5d5e4265_gizcryfu-7am0-fdxy-4bb0-3ee1b7f202d1.thor

f65d569a2db95de5_gizcryfu-7am0-fdxy-7574-f3b31d631317.thor

b3e3d037e847fdf0_gizcryfu-7am0-fdxy-5313-efe3126bfe46.thor

c2f14def4aa82a9f_gizcryfu-7am0-fdxy-8ee6-d565f30a3dd4.thor

4cb95afa773581de_gizcryfu-7am0-fdxy-e7a9-8fb1ff50b529.thor

4bbcbfbda2d0b851_gizcryfu-7am0-fdxy-78f6-51ed0beb8a79.thor

b3b60e15819f781e_gizcryfu-7am0-fdxy-e9bd-c3e941c59525.thor

cf6aca4b6da7b38c_gizcryfu-7am0-fdxy-b03f-06c0a1867d42.thor

d2a81df837b48774_gizcryfu-7am0-fdxy-045e-3b90fa50a15d.thor

b8e737b852c8907d_gizcryfu-7am0-fdxy-ca4e-9440b910a590.thor

f01412e9217cc988_gizcryfu-7am0-fdxy-968d-1474007f03d0.thor

9bf9e39abc66d19f_gizcryfu-7am0-fdxy-645f-92fbfde4c847.thor

066f1a7772011280_gizcryfu-7am0-fdxy-b2df-2334518f740d.thor

eaa9405abf1a0af8_gizcryfu-7am0-fdxy-1d62-4bb154f103de.thor

98db89c053b0341e_gizcryfu-7am0-fdxy-8c3c-85abe6989686.thor

1071ead42cb2b62a_gizcryfu-7am0-fdxy-4051-c0ecda8a0485.thor

19f45f417411064a_gizcryfu-7am0-fdxy-abb8-8bcb9f104abc.thor

969843d6640a9e9e_gizcryfu-7am0-fdxy-4ee7-c65707a7f036.thor

a384fc48c139cb91_dfc33k67[1]

75cd893fb422c2f9_gizcryfu-7am0-fdxy-5462-8f5fb182dd0e.thor

e5967af0404be121_gizcryfu-7am0-fdxy-02c4-e12111d3154f.thor

bafced1fa28b2a48_gizcryfu-7am0-fdxy-c61d-1ee51f8f54b6.thor

833241e268a3f4ae_gizcryfu-7am0-fdxy-6c52-13f8ca03edc3.thor

b04c51e15082e4ab_gizcryfu-7am0-fdxy-4930-6111d1c6a16b.thor

f0572b5708c83015_behavior.xml

1a5f9b9901671176_gizcryfu-7am0-fdxy-c57f-36f3a073c857.thor

6041235f455e9529_gizcryfu-7am0-fdxy-0926-918073474811.thor

252097c0ac1a4b91_gizcryfu-7am0-fdxy-6779-bed04732ccef.thor

3427f3379a807edf_gizcryfu-7am0-fdxy-6844-2c42c2ec85c0.thor

f593fc39fc089cbe_gizcryfu-7am0-fdxy-c1ec-ef202bd7bd79.thor

ec39219fbb669ae3_gizcryfu-7am0-fdxy-4294-6ae9874f135e.thor

5452caff220bee3f_gizcryfu-7am0-fdxy-aeb5-b3a2054392a2.thor

fcd3ac8ee4de616f_gizcryfu-7am0-fdxy-b7e5-713ef311900c.thor

9d7bda5d40a5f1b7_gizcryfu-7am0-fdxy-dc1f-cf97fc24b147.thor

4bbce96300b191ef_gizcryfu-7am0-fdxy-2aa5-5970e1078af3.thor

bc7d6b1ce7547ba4_gizcryfu-7am0-fdxy-a40a-d021be7e39c0.thor

d532efbe1b748ce1_gizcryfu-7am0-fdxy-594d-f4a27ca06706.thor

58617f6a47dd499d_gizcryfu-7am0-fdxy-623e-0ed9ac5228f8.thor

fe6e8052e6f5bf5b_gizcryfu-7am0-fdxy-415f-aaff1ffd3717.thor

2bb6b308862f9bfd_gizcryfu-7am0-fdxy-cf2d-d92f1c25a830.thor

662c700238b85a00_gizcryfu-7am0-fdxy-d7fc-c8e62c2b9685.thor

112dd0bd32e6106d_gizcryfu-7am0-fdxy-1f92-eaaa63bdbb19.thor

84525d3ff19639f7_gizcryfu-7am0-fdxy-e948-471c396b8436.thor

18ecfa33abb4b765_gizcryfu-7am0-fdxy-a73e-01dc0e8eacd2.thor

1eb2430951e45c49_gizcryfu-7am0-fdxy-8865-6a3deb25b8cd.thor

cbe0e5c6c9f05c83_gizcryfu-7am0-fdxy-bf8c-5c012027a9d1.thor

15b06c2f48fc29b5_gizcryfu-7am0-fdxy-ae17-838d0a5fc479.thor

7a6ee95dd1f9c948_gizcryfu-7am0-fdxy-0748-ced12f4f3708.thor

898472caabc3f644_gizcryfu-7am0-fdxy-6522-1d2984c516db.thor

f64326c2d111136d_gizcryfu-7am0-fdxy-f097-57a71b708c40.thor

48903d81d01cdb2c_gizcryfu-7am0-fdxy-a4b0-ffa09acc0941.thor

489dea88c8bc3fc8_gizcryfu-7am0-fdxy-1cb1-34959ff48458.thor

c2e3df7f2a84077d_gizcryfu-7am0-fdxy-4131-0eb41a9468e9.thor

3938b8e850c83091_gizcryfu-7am0-fdxy-f5b8-aa43923ed35b.thor

aae91aba520e9efa_gizcryfu-7am0-fdxy-b76a-cf3304109dfd.thor

63c42633336374e2_gizcryfu-7am0-fdxy-7ed7-9f3ddf07442e.thor

f04baef5df07eb9e_gizcryfu-7am0-fdxy-1dc5-c4020db23491.thor

6258891ed3af694d_gizcryfu-7am0-fdxy-895a-5d4d43a3c340.thor

4c2175e7fa328ceb_gizcryfu-7am0-fdxy-638c-673cf90ab49e.thor

3ce65fed3917392f_gizcryfu-7am0-fdxy-8685-5fa754372506.thor

97e92718229a3607_gizcryfu-7am0-fdxy-2cf1-99918330f898.thor

23913a5ee33a9f60_gizcryfu-7am0-fdxy-440c-b88a2183d7b5.thor

327f42e7fe0a20b1_gizcryfu-7am0-fdxy-e80b-efd98554f453.thor

c7224a369ade1e1f_gizcryfu-7am0-fdxy-d819-63ef53e3dba7.thor

26785e2eab1f0ed1_gizcryfu-7am0-fdxy-2e1b-b5cee1996388.thor

6ac66b853754a95b_gizcryfu-7am0-fdxy-0c11-aa4f4343e553.thor

0d74828df1c98d14_gizcryfu-7am0-fdxy-3c87-159a4a02d5ce.thor

f74c9b43fba46b6f_gizcryfu-7am0-fdxy-8bb6-03a8cf3853bc.thor

fcf9eec84de40a3a_gizcryfu-7am0-fdxy-ce84-800994778a67.thor

d5115b3fb6543f65_gizcryfu-7am0-fdxy-0504-df647cdc8940.thor

9020fb9560793139_gizcryfu-7am0-fdxy-0bbd-f46a08a3f13f.thor

5aaf26dcae870ff0_gizcryfu-7am0-fdxy-19fa-aa36f2fa7392.thor

41475222d1580c0f_gizcryfu-7am0-fdxy-af97-743ebbd9014c.thor

bbd167c7b8fe8e7e_gizcryfu-7am0-fdxy-da6c-2670257c1611.thor

9bda95eb514849ac_gizcryfu-7am0-fdxy-39e8-fd452e743837.thor

efdd4058d6f8b1d7_gizcryfu-7am0-fdxy-872a-cd0440bd2f53.thor

54f0b9b672b938a8_gizcryfu-7am0-fdxy-25a6-6f9c0daa9c94.thor

d9296155de47ebb4_gizcryfu-7am0-fdxy-e52b-1631afdea66e.thor

270e23a28f3fd931_gizcryfu-7am0-fdxy-1a55-2bf77d0ff389.thor

ce37a2c61a8e23fc_gizcryfu-7am0-fdxy-fe30-eaaa06155b39.thor

b78a6a671fb9f51c_gizcryfu-7am0-fdxy-24e3-e2c5c223c089.thor

768b87d188e1302a_gizcryfu-7am0-fdxy-cfb0-922d7a1bf9b2.thor

25d4de100cc12316_gizcryfu-7am0-fdxy-3c93-9b140d61eaaa.thor

90e69c25ee3fa6d5_gizcryfu-7am0-fdxy-e774-1cc70638cc24.thor

858ebec825daba1d_gizcryfu-7am0-fdxy-0aad-8644775add9f.thor

72aeafb7d068edce_gizcryfu-7am0-fdxy-c15a-c3b6ac090907.thor

7ce4f72d08c3ab29_gizcryfu-7am0-fdxy-a256-558b649f96bf.thor

b3d1003bd5727f5c_gizcryfu-7am0-fdxy-2776-d5fdeabd2ccb.thor

b34c5479d781eb31_gizcryfu-7am0-fdxy-dc2f-8adaa9f541be.thor

NRV_LCG59_.js

Network Analysis

Hosts Involved

DNS Requests

HTTP Requests

Behavior Summary

File-Read
  • C:\Users\Harry Dresden\Desktop\desktop.ini
  • C:\Windows\System32\wshom.ocx
  • C:\Windows\System32\wscript.exe
  • C:\Windows\System32\msxml3.dll
  • C:\Users\Harry Dresden\AppData\Local\Temp\NRV_LCG59_.js
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\Lib\email\test\data\msg_45.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • c:\Python27\include\ast.h
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\WfSHCQLoXah.doc
  • c:\Python27\include\pyexpat.h
  • c:\Python27\include\tupleobject.h
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
  • c:\Python27\include\descrobject.h
  • c:\Python27\Lib\test\cjkencodings\iso2022_kr.txt
  • c:\Python27\Lib\test\cjkencodings\gb2312.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16.png
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\body_bg.jpg
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Python27\include\grammar.h
  • c:\Python27\include\import.h
  • \\?\PIPE\browser
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Create PDF from Office-convert PDF to office.bmp
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1032\LocalizedData.xml
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Desert.jpg
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\IriyoiLzdwfy.pptx
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • c:\Python27\Lib\test\cjkencodings\shift_jis.txt
  • c:\Python27\Lib\test\xmltestdata\simple.xml
  • c:\Python27\Lib\test\test_doctest2.txt
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\UiInfo.xml
  • c:\Python27\Lib\test\cjkencodings\johab.txt
  • c:\Python27\Lib\idlelib\TODO.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\Profile.xml
  • c:\Python27\include\marshal.h
  • c:\Python27\Lib\email\test\data\msg_23.txt
  • c:\6cdeacda242012e0e5b593e657\2052\LocalizedData.xml
  • UNC\KIDSROOM\Users\Public\Videos\Sample Videos\Wildlife.wmv
  • c:\Python27\Lib\email\test\data\msg_19.txt
  • c:\Python27\Lib\idlelib\extend.txt
  • c:\Python27\Lib\test\badcert.pem
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\wIyYtxSbMIrd.ppt
  • c:\Python27\Lib\test\cjkencodings\euc_kr.txt
  • c:\Python27\include\pgen.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg
  • c:\Python27\Lib\test\floating_points.txt
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\Python27\include\objimpl.h
  • c:\Python27\Lib\test\math_testcases.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx45_IIS_schema_update.xml
  • c:\Python27\Lib\idlelib\idle_test\README.txt
  • c:\Python27\include\abstract.h
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\Python27\Lib\test\keycert.passwd.pem
  • c:\Python27\Lib\test\cjkencodings\gb18030-utf8.txt
  • c:\Python27\include\object.h
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\dhGBQWkytjyC.ppt
  • c:\Python27\Lib\test\cjkencodings\euc_jisx0213.txt
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\tGgfRanLPJ.docm
  • c:\Python27\tcl\tclConfig.sh
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16-open.png
  • c:\Python27\include\pyport.h
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\skin.css
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml
  • c:\Python27\include\code.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\Python27\Lib\test\exception_hierarchy.txt
  • c:\Python27\include\dtoa.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css
  • c:\Python27\include\asdl.h
  • c:\Python27\Lib\test\empty.vbs
  • c:\6cdeacda242012e0e5b593e657\1030\LocalizedData.xml
  • c:\ProgramData\Microsoft\IlsCache\ilrcache.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml
  • c:\Python27\include\complexobject.h
  • c:\Python27\Lib\email\test\data\msg_13.txt
  • c:\Python27\Lib\test\tokenize_tests.txt
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1031\LocalizedData.xml
  • c:\Python27\Lib\lib2to3\Grammar.txt
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • c:\Python27\Lib\email\test\data\msg_12.txt
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\Python27\include\pyctype.h
  • c:\Python27\Lib\email\test\data\msg_02.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_s.png
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • c:\Python27\Lib\email\test\data\msg_20.txt
  • c:\Python27\Lib\test\nokia.pem
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_b.png
  • c:\Python27\include\pydebug.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_over_bg.jpg
  • c:\Python27\LICENSE.txt
  • c:\Python27\README.txt
  • c:\Python27\include\fileobject.h
  • c:\Python27\Lib\email\test\data\msg_11.txt
  • c:\Python27\include\enumobject.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp
  • c:\rpwmngauv\bin\cert.p12
  • c:\Python27\include\metagrammar.h
  • UNC\KIDSROOM\Users\Default\NTUSER.DAT.LOG
  • c:\Python27\include\pyfpe.h
  • c:\Python27\include\compile.h
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • c:\Python27\Lib\test\cjkencodings\shift_jisx0213-utf8.txt
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\version.xml
  • c:\Python27\include\structseq.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • c:\Python27\Lib\test\cjkencodings\hz.txt
  • c:\Python27\Lib\test\test_doctest.txt
  • c:\Python27\Lib\test\test_doctest4.txt
  • c:\Python27\Lib\email\test\data\msg_22.txt
  • c:\Python27\include\pgenheaders.h
  • c:\Python27\include\pythread.h
  • c:\Python27\NEWS.txt
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • c:\Python27\Lib\email\test\data\msg_14.txt
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\Python27\Lib\site-packages\setuptools\command\launcher manifest.xml
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml
  • UNC\KIDSROOM\Users\Harry Dresden\Desktop\CeepOSFmpMeog.rtf
  • c:\Python27\include\opcode.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg
  • UNC\KIDSROOM\Users\Public\Music\Sample Music\Sleep Away.mp3
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\53955D98-F46F-4906-AE49-9B6F52BA18A9\en-us.16\MasterDescriptor.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\include\memoryobject.h
  • c:\Python27\include\moduleobject.h
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_04.txt
  • c:\Python27\Lib\email\test\data\msg_25.txt
  • c:\Python27\include\boolobject.h
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\dependency_links.txt
  • c:\Python27\include\token.h
  • c:\Python27\include\bitset.h
  • c:\Python27\include\warnings.h
  • UNC\KIDSROOM\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg
  • c:\Python27\include\pycapsule.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_27.txt
  • c:\Python27\Lib\idlelib\NEWS.txt
  • c:\Python27\Lib\email\test\data\msg_42.txt
  • c:\Python27\include\modsupport.h
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • UNC\KIDSROOM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\Python27\Lib\idlelib\help.txt
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • c:\Python27\include\ucnhash.h
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\keycert4.pem
  • c:\Python27\Lib\test\cjkencodings\cp949-utf8.txt
  • c:\Python27\Lib\email\test\data