'
metaflows logo
Category Started On Completed On Duration Cuckoo Version
FILE 2016-11-08 13:31:58.140725 2016-11-08 13:34:49.010301 170 seconds 2.0-dev
Machine Label Manager Started On Shutdown On
win7cuckoo win7 Clone 1 VirtualBox 2016-11-08 13:31:58 2016-11-08 13:34:48

File Details

File name d1751b7267a168dea424dd25add2aa58b3d28796.zip
File size 1108 bytes
File type Zip archive data, at least v2.0 to extract
CRC32 DDAF42E6
MD5 06c9fcce84c60b504f34691a7236f25a
SHA1 d1751b7267a168dea424dd25add2aa58b3d28796
SHA256 a34b6cb8357474332f4d9bbc295ae99af06056e78187d31b0ed893a9cd8e90b6
SHA512 b756e192c1a602f3a241cba65b2c8d2752a21ff64bc5640837d886efcde735b735a1a27f7058a533c5376fe6c3edc094f390ec4df425a7f8a90cb177f7a6a053
Ssdeep 24:98Wj1COpzR/LKQtERZJ0wYXGrzP+MRFWvpRbmh1hQreDIARJpKuTbx:97j1Jp1RtkZJ0wY2PdFSkh+e/DpKSx
PEiD None matched
Yara
  • PM_Zip_with_js ()
VirusTotal Permalink
VirusTotal Scan Date: 2016-11-08 13:03:51
Detection Rate: 6/56 (Expand)

MetaFlows Scores

Metaflows Analysis Results (Signatures=125, Anomalies=0, PEiD=0, Yara=2, VT[1478612129]=100): Snort Events=1, AV Events=2
Total Score=125

SNORT EVENTS:
ET POLICY PE EXE or DLL Windows file download HTTP

CLAMAV DETECTED:
Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND
DROPPED FILE - NRV_29CD9E5_.js: Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND

Dropped File/Buffer Yara Signatures:
e1a78e3e8b8023c9e317313a8cc3db7ba246d05a [BUFFER]: Str_Win32_Http_API
23f4e84663f56e3ac2b12a45a8b294fd9a78b431 [BUFFER]: shellcode

Signatures

antivm_queries_computername details
recon_fingerprint details
antivm_memory_available details
dumped_buffer details
creates_doc details
antivm_network_adapters details
dumped_buffer2 details
antivm_vbox_files details
Windows_Proxy_Tinkering details
network_wscript_downloader details
persistence_ads details
antiav_detectfile details
exploit_heapspray details
malicious_document_urls details
network_document_file details
network_downloader_exe details
antivm_vbox_devices details
antivm_vbox_files details
modifies_files details

Screenshots

No screenshots available.

Static Analysis

Nothing to display.

Dropped Files

74ca3cdb2b8ce330_gizcrygm-7am0-ruq7-9cc2-51c9d8901c94.thor

1b3ed1da1875bd51_gizcrygm-7am0-ruq7-0973-43f0862a7ad7.thor

5bec688307746012_gizcrygm-7am0-ruq7-f60a-ff868716fc8f.thor

c3cb00a7c3232c51_gizcrygm-7am0-ruq7-bb9e-ecc035ab1078.thor

150535a6fa44cc4a_gizcrygm-7am0-ruq7-6675-6e15c94fd5e1.thor

8a4e91501b6a0b73_gizcrygm-7am0-ruq7-0aca-157e79271d95.thor

1b649df82182b60a_gizcrygm-7am0-ruq7-04fc-63d6014f2d08.thor

7ddb69376249467a_gizcrygm-7am0-ruq7-04a2-c6570ec93099.thor

7f44fed230f28d6c_gizcrygm-7am0-ruq7-9629-15fad45a15ab.thor

9e59409181be89af_gizcrygm-7am0-ruq7-03e4-c00a553c6ee8.thor

3023c6784d8171f2_gizcrygm-7am0-ruq7-095a-e4c0b8a1c2ed.thor

6d04e223e5d07914_gizcrygm-7am0-ruq7-001d-1e0daf9ead6d.thor

8859e5b168c963de_gizcrygm-7am0-ruq7-bb21-a51be1b944d1.thor

7e07f44d67ec8375_gizcrygm-7am0-ruq7-d219-2ad1dec2660d.thor

9e3b726fcd05455a_gizcrygm-7am0-ruq7-b589-8bf62ce154d2.thor

58cc560098e37af3_gizcrygm-7am0-ruq7-cfba-5209e8113274.thor

08afb410e894c26c_gizcrygm-7am0-ruq7-5c16-fb7a8f98de5d.thor

c54bdcac19983594_gizcrygm-7am0-ruq7-954e-1fb01a4ab731.thor

bc01413048077458_gizcrygm-7am0-ruq7-5b8b-32005f9631a9.thor

0330193edd73395e_gizcrygm-7am0-ruq7-8058-d923e7d91184.thor

c42df173767402b3_gizcrygm-7am0-ruq7-7653-cd6090e04d7e.thor

89d7ea36cfa2b7be_gizcrygm-7am0-ruq7-7cfe-ca3f8076bdcd.thor

81a5a0684476e05c_gizcrygm-7am0-ruq7-999a-d5876ccf9e83.thor

d2e4efe2a1ff6c43_gizcrygm-7am0-ruq7-c390-428e75859ee3.thor

cffe24158ebbab4a_gizcrygm-7am0-ruq7-b947-a3b9d78a22b6.thor

53ac696ed47e7625_gizcrygm-7am0-ruq7-d1d5-01610c6818b1.thor

7a9680ab2ed87263_gizcrygm-7am0-ruq7-cb1b-daac584e43b1.thor

d7390b8a15d2b3ea_s5a4x7g8boj.dll

ce53454febd45b6d_gizcrygm-7am0-ruq7-cef7-3a29cfd327fc.thor

2a0486ba49a0bb6a_gizcrygm-7am0-ruq7-357d-7d8d7472c4f5.thor

25119a7f1288b016_gizcrygm-7am0-ruq7-acf9-8103d256ed43.thor

e545e1e17a463de3_gizcrygm-7am0-ruq7-e286-05484f36691f.thor

4132e3d3b74ce3b5_gizcrygm-7am0-ruq7-b1d6-43db35afd3ae.thor

19ad229506f3744d_gizcrygm-7am0-ruq7-d2a4-4ed7ed2bf6f0.thor

a648f9fbd955e91b_gizcrygm-7am0-ruq7-6c1c-414ebd5d8b81.thor

9cf2c767628505d2_gizcrygm-7am0-ruq7-6686-8c00b0ab834a.thor

01da84e7420c131e_gizcrygm-7am0-ruq7-6cd7-1b24d04700d1.thor

5165d5f2b89e78bd_gizcrygm-7am0-ruq7-5b41-f94404f49372.thor

1e84dac3a97be56f_gizcrygm-7am0-ruq7-306f-7a5b66f414d0.thor

d177cb31d3401c1a_gizcrygm-7am0-ruq7-6571-50250972c6d0.thor

b5f6319db367dfc2_gizcrygm-7am0-ruq7-2bea-a2fdb1ec8091.thor

9d7845aeadc6a38f__13_what_is.html

f4124e99530bd406_gizcrygm-7am0-ruq7-a6ef-7c1c3252ca52.thor

69f7ab9c5f04f07a_gizcrygm-7am0-ruq7-d843-999eb30b765b.thor

f943acee6e2eba7b_gizcrygm-7am0-ruq7-ac58-2588c90058c3.thor

890cdf9911d7b965_gizcrygm-7am0-ruq7-f64c-50703983f40a.thor

94bcd9f1586a21aa_gizcrygm-7am0-ruq7-34b0-55442f3195c6.thor

78f50050bea18811_gizcrygm-7am0-ruq7-091c-3394fe044929.thor

b0d176ec437ea9b6_gizcrygm-7am0-ruq7-277b-fc6ac2da4807.thor

1cf18a1c030d606f_gizcrygm-7am0-ruq7-6206-bbd8ca458953.thor

4f4a34b27e3eed5d_gizcrygm-7am0-ruq7-b8eb-7ac7a7e7b931.thor

0d615879ef7bd16e_gizcrygm-7am0-ruq7-8f95-28029f72d8b8.thor

2a334800c60de4cc_gizcrygm-7am0-ruq7-abd2-23f05c4e5dfe.thor

348841aaba91022f_gizcrygm-7am0-ruq7-5799-c910966d8baa.thor

509673edfaa8105b_gizcrygm-7am0-ruq7-d2e1-b59e6876c8ab.thor

3639b297bd665dfc_gizcrygm-7am0-ruq7-ff5c-98f148db99f3.thor

f368e1ebdde6bff8_gizcrygm-7am0-ruq7-6450-9a6c5a927c60.thor

2766f106af75646f_gizcrygm-7am0-ruq7-f8cf-c1fa95175b9a.thor

0744b223df1e9488_gizcrygm-7am0-ruq7-e825-a9ea53d771a3.thor

34dceaba27f49aae_gizcrygm-7am0-ruq7-8b45-49d009cb58be.thor

76a2a6f62a1f3c15_gizcrygm-7am0-ruq7-f53d-67d54fa5ed57.thor

5eec83b9c2d134ba_gizcrygm-7am0-ruq7-5f3b-5e0dfa1ed476.thor

fccc95db14829a41_gizcrygm-7am0-ruq7-86fb-e4ecc327672f.thor

82524f96e6ba624b_gizcrygm-7am0-ruq7-bd46-8dc7fb972a27.thor

eddb064df2a937b0_gizcrygm-7am0-ruq7-6f14-91496254f036.thor

b93e890a2e92578e_gizcrygm-7am0-ruq7-51de-a6ed63f64ecc.thor

dab5c6ba0324f8b0_gizcrygm-7am0-ruq7-7a3d-0f297149a3eb.thor

2b35f3427d27080d_gizcrygm-7am0-ruq7-94d3-a43f33d73848.thor

3f5a168ed8d7dd01_gizcrygm-7am0-ruq7-f039-3b7e2ca58424.thor

af4b889a76f083ea_gizcrygm-7am0-ruq7-2be8-ca167e4d28d5.thor

27da69addc4c2e40_gizcrygm-7am0-ruq7-8959-8fd18485f940.thor

d83d41ae5fec72cd_gizcrygm-7am0-ruq7-cf99-25ee627c6332.thor

2461ff96c2dd5a80_gizcrygm-7am0-ruq7-35d7-af6fdaddf9ed.thor

01a31c90b917d2e7_gizcrygm-7am0-ruq7-c015-5377bc3952f0.thor

a690b606b937136b_gizcrygm-7am0-ruq7-9f96-37234180473a.thor

74f6b202dad5af6f_gizcrygm-7am0-ruq7-574d-2b9b6ea8b854.thor

ec1b0bc3a6273d7d_gizcrygm-7am0-ruq7-39a1-765099a8cf10.thor

0104faa1b9bcd323_gizcrygm-7am0-ruq7-4004-5ccff5525525.thor

883fab2849080077_gizcrygm-7am0-ruq7-a124-92b25bd4ea3e.thor

e8cedb11ea857a55_gizcrygm-7am0-ruq7-c790-6e558ff878a3.thor

004879a56083fbfb_gizcrygm-7am0-ruq7-c272-6b58ceec9231.thor

98b76bd7b30ced3a_gizcrygm-7am0-ruq7-ad60-63dc11a31214.thor

1e490f4b8679b44b_gizcrygm-7am0-ruq7-32f4-5f58784c49b8.thor

b5b8aaa37c32a962_gizcrygm-7am0-ruq7-c25c-f8dc8552d025.thor

af2f181d6212b042_gizcrygm-7am0-ruq7-a69a-dc6c20785ea2.thor

de1a2f9a6900c17b_gizcrygm-7am0-ruq7-1cd5-101be43ece8b.thor

277080df7b08342e_gizcrygm-7am0-ruq7-5baa-07fce899316f.thor

1463323ada07ba4f_gizcrygm-7am0-ruq7-10a7-5ffa316b57ee.thor

54690488c3f949e2_gizcrygm-7am0-ruq7-7de2-07cdd3af91f2.thor

fc6448b3a95124bc_gizcrygm-7am0-ruq7-37b7-4ce802966612.thor

267d4f19c2ac29c0_gizcrygm-7am0-ruq7-9951-c2f049d72e2e.thor

c6456e50468aecaf_gizcrygm-7am0-ruq7-0949-d8f399222ce6.thor

7590346c5e8b7a68_gizcrygm-7am0-ruq7-b8f6-f2a275d9dbaf.thor

4ed814f8ac86bde1_gizcrygm-7am0-ruq7-c1b7-aeb2033146b5.thor

dbb5811ee261915a_gizcrygm-7am0-ruq7-373c-54320c098fec.thor

d117bffd2ec02f25_gizcrygm-7am0-ruq7-bf18-4c99e5300946.thor

ef6ad847603742af_gizcrygm-7am0-ruq7-0db3-a8f96bd49f05.thor

e17f9b57836b44a2_gizcrygm-7am0-ruq7-a251-df251b29c2fe.thor

088e4a63f13c739a_gizcrygm-7am0-ruq7-e399-cfd37124f8a1.thor

293fdfa6bae92053_gizcrygm-7am0-ruq7-52e3-e9e0fcdf51d1.thor

056359a87a0ebd63_gizcrygm-7am0-ruq7-ab2c-3e4343789c30.thor

83ad71102d402847_gizcrygm-7am0-ruq7-d94a-8816562e8705.thor

e1cd5d161d48cf6c_gizcrygm-7am0-ruq7-7b3e-fea621998e89.thor

8be7b1df480a6c52_gizcrygm-7am0-ruq7-56a0-6e5115dcfa71.thor

f366822e010fc3a0_gizcrygm-7am0-ruq7-8b3a-57014fdf5b83.thor

9da2a4e28910227f_gizcrygm-7am0-ruq7-abd8-1783c066a7e5.thor

1128c3dfad55e29d_gizcrygm-7am0-ruq7-8332-742fbf043e77.thor

7fdb4e07752b31e5_gizcrygm-7am0-ruq7-eb7f-4f225d61cff1.thor

525cc775f5b23b87_gizcrygm-7am0-ruq7-a974-94b037b52f8e.thor

14a945bb01df514a_gizcrygm-7am0-ruq7-5160-e353483fe32e.thor

116f0bad5bdb5b2e_gizcrygm-7am0-ruq7-0bff-0eabddcce571.thor

227a8d331974cb17_gizcrygm-7am0-ruq7-2497-ee94f0aae6e0.thor

23caf0c4d7fa6016_gizcrygm-7am0-ruq7-d29d-b52a5e3dcadd.thor

25c6ab3a49d4ab75_gizcrygm-7am0-ruq7-62f3-7dee75d3180a.thor

17f1189edb05d575_gizcrygm-7am0-ruq7-2912-24ad608ab80a.thor

da7d1a2f9cf2c477_gizcrygm-7am0-ruq7-f74c-c0b53b991da2.thor

2413a8487e4737de_gizcrygm-7am0-ruq7-5d76-36d6bd805247.thor

32cd6de2c2444fe5_gizcrygm-7am0-ruq7-178d-d231d57126da.thor

172387adf3849af3_gizcrygm-7am0-ruq7-98b4-d01aeede4198.thor

a634db0b9c0c7a44_gizcrygm-7am0-ruq7-ad43-8c49928917a1.thor

914b9b11a7ee36c4_gizcrygm-7am0-ruq7-b081-2bb4c46b5def.thor

6f1248ef1b9972d3_gizcrygm-7am0-ruq7-85c2-ed12e578df5a.thor

2706bc53aa337e08_gizcrygm-7am0-ruq7-ece8-877d1670b833.thor

3af694c50ba5ac7d_gizcrygm-7am0-ruq7-133c-1dcf6dd5a594.thor

9da4403d37cf9db1_gizcrygm-7am0-ruq7-6372-c1c4276408e0.thor

25d34b83883baa08_gizcrygm-7am0-ruq7-3ec1-0fbe576c09ea.thor

9935ec4f1e9d5ae7_gizcrygm-7am0-ruq7-4494-0dd256652a0e.thor

0a09a26a72a2e44b_gizcrygm-7am0-ruq7-d757-a5e65307b078.thor

335b2e3a03420597_gizcrygm-7am0-ruq7-92a2-58dc3f5bf147.thor

e40b01d1b1d09bc2_gizcrygm-7am0-ruq7-115c-246e69b8e56a.thor

24436c044e2f85af_gizcrygm-7am0-ruq7-0807-c993a4867e1f.thor

76d15e8302a01b77_gizcrygm-7am0-ruq7-1b80-e1ba9394008c.thor

e1d08da329823468_gizcrygm-7am0-ruq7-20f4-d9702b6ce154.thor

445f6548d3073ac3_gizcrygm-7am0-ruq7-4e0f-9a3f262b33df.thor

6735812bc405a1b4_gizcrygm-7am0-ruq7-f946-d8def4ff09ec.thor

d0d9b3019d5a1660_gizcrygm-7am0-ruq7-337f-c9e8a2a3428d.thor

b585f425917f9baf_gizcrygm-7am0-ruq7-3231-1885d8639269.thor

a420657aec65725a_gizcrygm-7am0-ruq7-d637-46bfb0c386cc.thor

2ca7191db3aea248_gizcrygm-7am0-ruq7-8b77-c750ff36e2cc.thor

65faba76d640c90e_gizcrygm-7am0-ruq7-61c7-670102d088a6.thor

e86b593f15080cff_gizcrygm-7am0-ruq7-d26e-d5805d59ae43.thor

056c674774361c4d_gizcrygm-7am0-ruq7-1056-63497326be32.thor

3deb41395df666f6_gizcrygm-7am0-ruq7-d701-49e7b5c9cbf1.thor

f35eb02d8189ff38_gizcrygm-7am0-ruq7-eac9-768340241443.thor

14e99e6499aa61a7_gizcrygm-7am0-ruq7-5c26-5a60dd7e6033.thor

931d7bb2c868119f_gizcrygm-7am0-ruq7-77e5-00a077254591.thor

e8fdad5ca92400ed_gizcrygm-7am0-ruq7-5dec-a36f70392a0f.thor

ba9239a0a462ff8c_gizcrygm-7am0-ruq7-1ee8-c3c8dfa73be0.thor

e2b83ba8f3241d5f_gizcrygm-7am0-ruq7-b2f9-afd9f2b79ded.thor

6d8043c09231f9b5_gizcrygm-7am0-ruq7-e96f-f5eb3bd794b9.thor

f06fa1c1697d8255_gizcrygm-7am0-ruq7-afea-c0c2593a5a53.thor

4c6fdd392348dbef_gizcrygm-7am0-ruq7-6943-0641d4095b94.thor

a1c1901fb2805e0a_gizcrygm-7am0-ruq7-3e67-c8b5179446f2.thor

861c64cbacc12b85_gizcrygm-7am0-ruq7-914c-c840f9857d98.thor

0e83e14708d25f0c_gizcrygm-7am0-ruq7-ca5c-0a920dc5a8b4.thor

617f9516ec1b0c6c_gizcrygm-7am0-ruq7-9b50-ddb1ea8c6769.thor

7af5612c1c2d35f4_gizcrygm-7am0-ruq7-e64a-64c6a5fdf67d.thor

bf20b8abb663b098_gizcrygm-7am0-ruq7-a6f4-07b21a07befd.thor

d3376c1d38a44a66_gizcrygm-7am0-ruq7-b803-62a7415c49be.thor

e9a40ef27b7a5bc5_gizcrygm-7am0-ruq7-371b-89557fc0bb38.thor

329e7784bc0f4261_gizcrygm-7am0-ruq7-a0e0-76d0ba722790.thor

d00419045f21201a_gizcrygm-7am0-ruq7-85c3-96b2c4cd013a.thor

3cb7bdcd8be3c579_gizcrygm-7am0-ruq7-30fd-2967526d4790.thor

03fa543ba24c3bb0_gizcrygm-7am0-ruq7-94a6-51e1ed023bce.thor

dc3e1758ac9b1202_gizcrygm-7am0-ruq7-6584-b9a15883c488.thor

61fb654a57501163_gizcrygm-7am0-ruq7-eb36-c3f7cd0c44f2.thor

70a3ee05870ad902_gizcrygm-7am0-ruq7-7f83-426c957a873c.thor

9aacd0fa2ac9bee0_gizcrygm-7am0-ruq7-d687-86c20b135640.thor

adbbcaeb6ee41dc5_gizcrygm-7am0-ruq7-a103-7edda196097b.thor

e2e912218c3b6f86_gizcrygm-7am0-ruq7-0e39-9150d3f527fb.thor

58ccb24bf5959cb6_gizcrygm-7am0-ruq7-c4ae-2d44d12c3f31.thor

2ef613f678056f44_gizcrygm-7am0-ruq7-8b3d-2bee93cf99e4.thor

78725db1281c339f_gizcrygm-7am0-ruq7-3226-5a65f9bcd060.thor

c2ffa409033130cf_gizcrygm-7am0-ruq7-1717-e2a2dfc721c4.thor

03d11ceeb3b9ebe9_gizcrygm-7am0-ruq7-ce29-f059d2d450d8.thor

06149b7926847a3d_gizcrygm-7am0-ruq7-adb5-092083863db3.thor

75d443188775d42f_gizcrygm-7am0-ruq7-046f-753e4a573338.thor

880cccb866e2c63b_gizcrygm-7am0-ruq7-3e60-cfb6a20bc30d.thor

e9416fb2779b42eb_gizcrygm-7am0-ruq7-aa8a-aaeba6f2a038.thor

0fbfcf86a2c30941_gizcrygm-7am0-ruq7-4b66-1f4e3378ef5a.thor

bc1346e98107804a_gizcrygm-7am0-ruq7-94d0-df6ecbbef599.thor

70a2e336532db6b2_gizcrygm-7am0-ruq7-7d80-019df4b1a8ee.thor

d983d8a7142840ff_gizcrygm-7am0-ruq7-dd98-12ad5ed08920.thor

0757ed2dcff2ee48_gizcrygm-7am0-ruq7-e48d-2c17255686d5.thor

9ec85b42007470cd_gizcrygm-7am0-ruq7-0722-c598ec0d3363.thor

9853e844096953ba_gizcrygm-7am0-ruq7-7a66-e9408d724a86.thor

ef6d92ff4a51ca29_gizcrygm-7am0-ruq7-e49c-4932944a40de.thor

8f7a25a27e2b7eaa_gizcrygm-7am0-ruq7-4398-94558a46dd41.thor

14804833b810d5fb_gizcrygm-7am0-ruq7-5fd8-93c8f478127d.thor

ac6afd99f889039f_gizcrygm-7am0-ruq7-519c-aa8c981bab5c.thor

fb18fede3431cc99_gizcrygm-7am0-ruq7-163b-21ff01fbe41a.thor

3844d4aa7797b120_gizcrygm-7am0-ruq7-8062-b2c86a44ea54.thor

6fc6ebc2ef8c04ad_gizcrygm-7am0-ruq7-64f4-77974c4959a8.thor

a51054eca1f49e1d_gizcrygm-7am0-ruq7-6769-c6ba5f3c8f60.thor

c155948a51807175_gizcrygm-7am0-ruq7-0ea4-a00bfa4dc934.thor

b97e669b237f7290_gizcrygm-7am0-ruq7-cc84-bb56fd23f5a6.thor

ab473961f3dfaa79_gizcrygm-7am0-ruq7-4d40-227c5e12907a.thor

9f3101429737da48_gizcrygm-7am0-ruq7-8876-493def3125df.thor

901b83ef80c2aa8b_gizcrygm-7am0-ruq7-bcae-348f87f7956d.thor

4fd49ac0b0f7132c_gizcrygm-7am0-ruq7-37ae-68e93c3fe9fa.thor

9da23c13e65410f7_gizcrygm-7am0-ruq7-cd97-c6095b27b68e.thor

87e0677f062b146a_gizcrygm-7am0-ruq7-fc42-8df5dcdd0ad9.thor

05b10b7a37074f35_gizcrygm-7am0-ruq7-ec3b-6a733f24ccd9.thor

c54dda1dab953dec_gizcrygm-7am0-ruq7-1b3d-1af924146f61.thor

82454d038a1780e6_gizcrygm-7am0-ruq7-860f-1649b553cb36.thor

190c95fa9e9d4f31_gizcrygm-7am0-ruq7-cda1-74df985e48a4.thor

15c29c8d2aa29de5_gizcrygm-7am0-ruq7-c44f-a98e372f918f.thor

30043c7c50722431_gizcrygm-7am0-ruq7-b481-25cf40318504.thor

c586de96936db012_gizcrygm-7am0-ruq7-be48-f57e4871f908.thor

77c1bc4bea2a9881_gizcrygm-7am0-ruq7-4ee9-6ae6d230b77a.thor

505b1fda39f4f5fc_gizcrygm-7am0-ruq7-c912-2377cb052697.thor

NRV_29CD9E5_.js

Network Analysis

Hosts Involved

DNS Requests

HTTP Requests

Behavior Summary

File-Read
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\cleandesktop.py.txt
  • c:\Python27\include\pyexpat.h
  • c:\Python27\include\object.h
  • c:\Python27\include\pygetopt.h
  • c:\Python27\include\errcode.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\gozFRnNwgdPqc.doc
  • c:\Python27\Lib\test\keycert3.pem
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Desert.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\config.css
  • c:\Python27\include\intrcheck.h
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\Python27\Lib\email\test\data\msg_28.txt
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\Python27\Lib\test\ssl_cert.pem
  • c:\Python27\include\tupleobject.h
  • c:\Python27\include\pyconfig.h
  • c:\Python27\include\cStringIO.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Fastest PDF Search and Index.bmp
  • c:\Python27\include\pyerrors.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect your PDF files with AD RMS.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect your PDF files with AD RMS.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml
  • c:\Python27\include\structseq.h
  • c:\Python27\include\floatobject.h
  • c:\Python27\include\Python-ast.h
  • c:\Python27\include\osdefs.h
  • c:\Python27\Lib\test\empty.vbs
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\blank.gif
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\szcMHZwFrDOIBLfo.ppt
  • c:\Python27\include\pymacconfig.h
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\Python27\include\boolobject.h
  • c:\Python27\include\rangeobject.h
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Python27\include\ceval.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml
  • c:\Python27\include\grammar.h
  • c:\Python27\include\import.h
  • \\?\PIPE\browser
  • c:\Python27\include\pythonrun.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16.png
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\cacert.pem
  • c:\Python27\include\pyarena.h
  • c:\Python27\include\structmember.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_over_bg.jpg
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1033\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_33.txt
  • c:\Python27\Lib\test\selfsigned_pythontestdotnet.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • c:\Python27\Lib\email\test\data\msg_22.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Create PDF from Office-convert PDF to office.bmp
  • c:\Python27\include\ast.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your application.bmp
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\Profile.xml
  • c:\Python27\include\pgenheaders.h
  • c:\Python27\include\pythread.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png
  • c:\Python27\include\patchlevel.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64mui.msi.16.en-us.xml
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\6cdeacda242012e0e5b593e657\2070\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_24.txt
  • c:\Python27\include\iterobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts\Harry Dresden.contact
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\qkfzGZlydLg.rtf
  • c:\Python27\Lib\email\test\data\msg_14.txt
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx40_IIS_schema_update.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Penguins.jpg
  • c:\Python27\include\listobject.h
  • c:\Python27\Lib\test\keycert.pem
  • c:\Python27\Lib\email\test\data\msg_42.txt
  • c:\Python27\include\traceback.h
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\EcfNCByCTHLgui.doc
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\Python27\include\marshal.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16-open.png
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_18.txt
  • c:\Python27\Lib\email\test\data\msg_37.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index_ori.html
  • c:\Python27\Lib\email\test\data\msg_17.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Powerful Word Processor.bmp
  • c:\Python27\include\frameobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index.html
  • c:\Python27\include\longintrepr.h
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx40_IIS_schema_update.xml
  • c:\Python27\Lib\email\test\data\msg_16.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\buy_phantom.png
  • c:\Python27\include\opcode.h
  • c:\Python27\include\parsetok.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css
  • c:\Python27\Lib\test\badcert.pem
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\gTbFtRxIdgP.rtf
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\tcl\tix8.4.3\pref\TK.cs
  • c:\Python27\include\sliceobject.h
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • c:\Python27\include\pgen.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml
  • c:\Python27\include\moduleobject.h
  • c:\Python27\include\memoryobject.h
  • c:\Python27\tcl\tix8.4.3\pref\TkWin.cs
  • c:\Python27\include\objimpl.h
  • c:\Python27\include\Python.h
  • c:\Python27\include\fileobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\POwkdloDBG.docx
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Kalimba.mp3
  • c:\Python27\include\stringobject.h
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_12.txt
  • c:\Python27\include\token.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View PDFs on mobile devices.bmp
  • c:\Python27\include\bitset.h
  • c:\Python27\include\intobject.h
  • c:\Python27\include\bytes_methods.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp
  • c:\Python27\include\abstract.h
  • c:\Python27\include\pystate.h
  • c:\Python27\Lib\test\ssl_key.pem
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\cxHhwvhMSsZWxNVKyM.docm
  • c:\Python27\include\pycapsule.h
  • c:\Python27\include\methodobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\version.xml
  • c:\Python27\Lib\email\test\data\msg_11.txt
  • c:\Python27\include\descrobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_b.png
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • \\?\PIPE\wkssvc
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\Python27\include\pymath.h
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Sleep Away.mp3
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • c:\Python27\Lib\email\test\data\msg_27.txt
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Koala.jpg
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf
  • c:\Python27\include\timefuncs.h
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • c:\Python27\tcl\tclConfig.sh
  • c:\Python27\Lib\email\test\data\msg_25.txt
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_32.txt
  • c:\Python27\Lib\test\185test.db
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg
  • c:\Python27\include\ucnhash.h
  • c:\Python27\include\py_curses.h
  • c:\Python27\Lib\test\ssl_key.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\Lib\test\keycert2.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp
  • c:\Python27\Lib\test\keycert4.pem
  • c:\Python27\include\pyport.h
  • c:\Python27\Lib\email\test\data\msg_34.txt
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\wBUfqiFTAA.ppt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_move_bg.jpg
  • c:\6cdeacda242012e0e5b593e657\1037\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\Python27\Lib\email\test\data\msg_15.txt
  • c:\Python27\include\pystrcmp.h
  • c:\Python27\include\symtable.h
  • c:\Python27\include\node.h
  • UNC\SHARDREALM\Users\Default\NTUSER.DAT.LOG
  • c:\Python27\Lib\email\test\data\msg_26.txt
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\MasterDescriptor.x-none.xml
  • c:\Python27\Lib\test\pycacert.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\top_tb_bg.jpg
  • c:\Python27\include\code.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\Python27\Lib\email\test\data\msg_19.txt
  • c:\Python27\Lib\email\test\data\msg_12a.txt
  • c:\Python27\include\dtoa.h
  • c:\Python27\include\graminit.h
  • c:\Python27\include\asdl.h
  • c:\Python27\include\funcobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Powerful Word Processor.bmp
  • c:\Python27\Lib\idlelib\idle.bat
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\big-hero-6-2.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png
  • c:\Python27\include\complexobject.h
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Tulips.jpg
  • c:\6cdeacda242012e0e5b593e657\1049\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_13.txt
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx45_IIS_schema_update.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View PDFs on mobile devices.bmp
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Fastest PDF Search and Index.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx45_IIS_schema_update.xml
  • c:\Python27\include\bufferobject.h
  • c:\Python27\include\bytearrayobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect Sensitive PDF Documents.bmp
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • UNC\SHARDREALM\Users\Public\Videos\Sample Videos\Wildlife.wmv
  • c:\Python27\include\setobject.h
  • c:\Python27\Lib\test\badkey.pem
  • c:\Python27\include\warnings.h
  • c:\Python27\include\cobject.h
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View and annotate PDFs.bmp
  • c:\Python27\include\dictobject.h
  • c:\Python27\include\pyctype.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • c:\Python27\include\sysmodule.h
  • c:\Python27\include\pymactoolbox.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Design form fields easily.bmp
  • c:\Python27\Lib\email\test\data\msg_35.txt
  • c:\Python27\Lib\email\test\data\msg_29.txt
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\MasterDescriptor.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html
  • c:\Python27\Lib\email\test\data\msg_20.txt
  • c:\Python27\Lib\test\nokia.pem
  • c:\Python27\include\cellobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\skin.css
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect Sensitive PDF Documents.bmp
  • c:\Python27\include\pydebug.h
  • \\?\PIPE\lsarpc
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg
  • c:\Python27\Lib\email\test\data\msg_23.txt
  • c:\acugdultjv\bin\cert.p12
  • c:\Python27\tcl\tix8.4.3\pref\Gray.cs
  • c:\Python27\Lib\email\test\data\msg_38.txt
  • c:\Python27\Lib\test\check_soundcard.vbs
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\body_bg.jpg
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\Python27\Lib\test\nullbytecert.pem
  • c:\Python27\Lib\email\test\data\msg_21.txt
  • c:\Python27\include\pymem.h
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • c:\Python27\Lib\test\dh1024.pem
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\Lib\test\sha256.pem
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_s.png
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml
  • c:\Python27\Lib\test\keycert.passwd.pem
  • c:\Python27\include\modsupport.h
  • c:\Python27\include\enumobject.h
  • c:\Python27\include\classobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • c:\Python27\include\bytesobject.h
  • c:\Python27\include\weakrefobject.h
  • c:\Python27\include\eval.h
  • c:\Python27\include\datetime.h
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\bBXkYeoUNraFtMDfBVH.pptx
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\iHwmrzfuVZqFBSSUP.docm
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
  • c:\Python27\include\unicodeobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • c:\Python27\include\metagrammar.h
  • c:\Python27\include\pyfpe.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View and annotate PDFs.bmp
  • c:\Python27\include\compile.h
  • c:\Python27\include\genobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your application.bmp
  • c:\Python27\include\codecs.h
  • C:\Users\Harry Dresden\Desktop\desktop.ini
  • C:\Users\Harry Dresden\AppData\Local\Temp\NRV_29CD9E5_.js
  • C:\Windows\System32\wscript.exe
  • C:\Windows\System32\msxml3.dll
  • C:\Windows\System32\wshom.ocx
File-Written
  • c:\Python27\include\pyexpat.h
  • c:\6cdeacda242012e0e5b593e657\1033\_25_WHAT_is.html
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\gozFRnNwgdPqc.doc
  • c:\Python27\include\ast.h
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\Python27\include\tupleobject.h
  • c:\Python27\tcl\tix8.4.3\pref\_29_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp
  • c:\Python27\include\descrobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Python27\include\grammar.h
  • c:\Python27\include\import.h
  • \\?\PIPE\browser
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\_11_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\Python27\Lib\test\nullcert.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • c:\6cdeacda242012e0e5b593e657\1044\_9_WHAT_is.html
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Penguins.jpg
  • c:\6cdeacda242012e0e5b593e657\2070\_16_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\_37_WHAT_is.html
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\EcfNCByCTHLgui.doc
  • c:\6cdeacda242012e0e5b593e657\1053\_13_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\Python27\include\marshal.h
  • c:\ProgramData\Microsoft\ClickToRun\_35_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_23.txt
  • c:\6cdeacda242012e0e5b593e657\1046\_11_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_19.txt
  • c:\Python27\Lib\test\badcert.pem
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\gTbFtRxIdgP.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css
  • c:\Python27\include\pgen.h
  • c:\Python27\include\memoryobject.h
  • c:\Python27\include\objimpl.h
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx45_IIS_schema_update.xml
  • c:\6cdeacda242012e0e5b593e657\1032\_24_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1040\_5_WHAT_is.html
  • c:\Python27\include\abstract.h
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\cxHhwvhMSsZWxNVKyM.docm
  • c:\Python27\Lib\test\keycert.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png
  • c:\Python27\include\object.h
  • c:\Python27\Lib\idlelib\_31_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • c:\Python27\tcl\tclConfig.sh
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css
  • c:\Python27\include\pyport.h
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\_3_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • c:\Python27\include\code.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\Python27\include\dtoa.h
  • c:\Python27\include\asdl.h
  • c:\Python27\Lib\test\empty.vbs
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png
  • c:\Python27\include\complexobject.h
  • c:\Python27\Lib\email\test\data\msg_13.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp
  • c:\6cdeacda242012e0e5b593e657\1030\_22_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect Sensitive PDF Documents.bmp
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • c:\6cdeacda242012e0e5b593e657\1035\_26_WHAT_is.html
  • c:\Python27\include\intobject.h
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\Python27\include\pyctype.h
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\_38_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html
  • c:\Python27\Lib\test\nokia.pem
  • c:\Python27\include\pydebug.h
  • c:\Python27\include\structmember.h
  • c:\Python27\include\fileobject.h
  • c:\Python27\Lib\email\test\data\msg_11.txt
  • c:\Python27\include\enumobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • c:\Python27\include\metagrammar.h
  • c:\Python27\include\pyfpe.h
  • c:\Python27\include\compile.h
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
  • UNC\SHARDREALM\Users\Public\Videos\Sample Videos\_10_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\config.css
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect your PDF files with AD RMS.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_over_bg.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\_8_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_22.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css
  • c:\Python27\include\pgenheaders.h
  • c:\Python27\include\pythread.h
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Koala.jpg
  • c:\6cdeacda242012e0e5b593e657\1043\_8_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_14.txt
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\_1_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index.html
  • c:\Python27\include\opcode.h
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\_33_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\Python27\include\moduleobject.h
  • c:\Python27\include\_4_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Kalimba.mp3
  • c:\Python27\Lib\email\test\data\msg_25.txt
  • c:\Python27\include\boolobject.h
  • c:\Python27\Lib\email\test\data\msg_12.txt
  • c:\Python27\include\token.h
  • c:\Python27\include\bitset.h
  • c:\Python27\include\warnings.h
  • c:\Python27\include\pycapsule.h
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\MasterDescriptor.en-us.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_27.txt
  • c:\Python27\Lib\email\test\data\msg_42.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp
  • c:\Python27\include\modsupport.h
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • c:\Python27\include\ucnhash.h
  • c:\6cdeacda242012e0e5b593e657\1049\_12_WHAT_is.html
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\keycert4.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp
  • c:\6cdeacda242012e0e5b593e657\1038\_3_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_16.txt
  • c:\Python27\include\symtable.h
  • c:\Python27\include\node.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_b.png
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx40_IIS_schema_update.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_move_bg.jpg
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\big-hero-6-2.jpg
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Tulips.jpg
  • c:\6cdeacda242012e0e5b593e657\2052\_15_WHAT_is.html
  • c:\acugdultjv\bin\_0_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Fastest PDF Search and Index.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\_5_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\_6_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1055\_14_WHAT_is.html
  • c:\Python27\include\setobject.h
  • c:\Python27\include\cStringIO.h
  • c:\Python27\include\cobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Design form fields easily.bmp
  • c:\Python27\Lib\email\test\data\msg_29.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\skin.css
  • \\?\PIPE\lsarpc
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg
  • c:\Python27\tcl\_30_WHAT_is.html
  • c:\Python27\Lib\test\sha256.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_s.png
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
  • c:\Python27\include\classobject.h
  • c:\Python27\include\datetime.h
  • c:\6cdeacda242012e0e5b593e657\1045\_10_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1041\_6_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_18.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your application.bmp
  • c:\Python27\include\errcode.h
  • c:\Python27\Lib\test\keycert3.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Fastest PDF Search and Index.bmp
  • c:\Python27\include\pyerrors.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml
  • c:\Python27\include\Python-ast.h
  • c:\6cdeacda242012e0e5b593e657\1042\_7_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\blank.gif
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\szcMHZwFrDOIBLfo.ppt
  • c:\Python27\Lib\email\test\data\msg_21.txt
  • c:\Python27\include\ceval.h
  • c:\Python27\include\pythonrun.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16.png
  • c:\Python27\include\pygetopt.h
  • c:\Python27\include\codecs.h
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\_39_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_33.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\Profile.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index_ori.html
  • c:\Python27\include\patchlevel.h
  • c:\Python27\include\bytes_methods.h
  • c:\Python27\Lib\test\_1_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx40_IIS_schema_update.xml
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf
  • c:\Python27\Lib\test\keycert.pem
  • c:\6cdeacda242012e0e5b593e657\1029\_21_WHAT_is.html
  • c:\Python27\include\traceback.h
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Powerful Word Processor.bmp
  • c:\Python27\include\longintrepr.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\buy_phantom.png
  • c:\Python27\include\parsetok.h
  • c:\6cdeacda242012e0e5b593e657\1036\_27_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml
  • c:\Python27\include\Python.h
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\_0_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_34.txt
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View PDFs on mobile devices.bmp
  • c:\Python27\include\pystate.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\version.xml
  • c:\Python27\include\pyconfig.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\_36_WHAT_is.html
  • c:\Python27\include\pymacconfig.h
  • c:\Python27\include\bufferobject.h
  • c:\Python27\include\timefuncs.h
  • c:\Python27\Lib\email\test\data\msg_37.txt
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\wBUfqiFTAA.ppt
  • c:\Python27\include\graminit.h
  • c:\6cdeacda242012e0e5b593e657\1037\eula.rtf
  • c:\Python27\include\pystrcmp.h
  • c:\Python27\include\floatobject.h
  • UNC\SHARDREALM\Users\Default\NTUSER.DAT.LOG
  • c:\Python27\Lib\email\test\data\msg_26.txt
  • c:\Python27\Lib\test\pycacert.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\top_tb_bg.jpg
  • c:\Python27\Lib\test\badkey.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Powerful Word Processor.bmp
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\_34_WHAT_is.html
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt
  • c:\Python27\Lib\email\test\data\_32_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Videos\Sample Videos\Wildlife.wmv
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • c:\Python27\include\bytesobject.h
  • c:\Python27\include\sysmodule.h
  • c:\Python27\include\pymactoolbox.h
  • c:\Python27\Lib\email\test\data\msg_35.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\_4_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect Sensitive PDF Documents.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml
  • c:\Python27\Lib\test\185test.db
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\cacert.pem
  • UNC\SHARDREALM\Users\Default\_12_WHAT_is.html
  • c:\Python27\include\eval.h
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\bBXkYeoUNraFtMDfBVH.pptx
  • c:\Python27\Lib\email\test\data\msg_15.txt
  • c:\Python27\include\genobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\cleandesktop.py.txt
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Desert.jpg
  • c:\Python27\Lib\email\test\data\msg_28.txt
  • c:\Python27\Lib\test\ssl_cert.pem
  • c:\Python27\Lib\email\test\data\msg_17.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\osdefs.h
  • \\?\PIPE\wkssvc
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\_2_WHAT_is.html
  • c:\Python27\include\pymem.h
  • c:\6cdeacda242012e0e5b593e657\1037\_28_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\include\pyarena.h
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\_2_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1033\eula.rtf
  • c:\Python27\Lib\test\selfsigned_pythontestdotnet.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Create PDF from Office-convert PDF to office.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your application.bmp
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\_40_WHAT_is.html
  • c:\Python27\include\rangeobject.h
  • c:\6cdeacda242012e0e5b593e657\2070\eula.rtf
  • c:\Python27\include\iterobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\qkfzGZlydLg.rtf
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf
  • c:\Python27\include\funcobject.h
  • c:\Python27\include\listobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16-open.png
  • c:\Python27\include\frameobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\_7_WHAT_is.html
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\_9_WHAT_is.html
  • c:\Python27\include\sliceobject.h
  • c:\Python27\tcl\tix8.4.3\pref\TK.cs
  • c:\6cdeacda242012e0e5b593e657\3082\_17_WHAT_is.html
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\POwkdloDBG.docx
  • c:\Python27\include\stringobject.h
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts\Harry Dresden.contact
  • c:\Python27\Lib\email\test\data\msg_20.txt
  • c:\Python27\tcl\tix8.4.3\pref\Gray.cs
  • c:\Python27\Lib\test\ssl_key.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • c:\Python27\include\methodobject.h
  • c:\Python27\include\structseq.h
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts\_13_WHAT_is.html
  • c:\Python27\include\pymath.h
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Sleep Away.mp3
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_32.txt
  • c:\Python27\Lib\email\test\data\msg_24.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg
  • c:\Python27\Lib\test\ssl_key.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\Lib\test\keycert2.pem
  • c:\Python27\include\py_curses.h
  • c:\6cdeacda242012e0e5b593e657\1025\_18_WHAT_is.html
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\MasterDescriptor.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\1028\_19_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1049\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View PDFs on mobile devices.bmp
  • c:\Python27\tcl\tix8.4.3\pref\TkWin.cs
  • c:\Python27\include\bytearrayobject.h
  • c:\6cdeacda242012e0e5b593e657\1031\_23_WHAT_is.html
  • c:\Python27\Lib\email\test\data\msg_12a.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View and annotate PDFs.bmp
  • c:\Python27\include\dictobject.h
  • c:\Python27\include\intrcheck.h
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg
  • c:\acugdultjv\bin\cert.p12
  • c:\Python27\Lib\email\test\data\msg_38.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\body_bg.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64mui.msi.16.en-us.xml
  • c:\Python27\Lib\test\nullbytecert.pem
  • c:\ProgramData\WebEx\WebEx\12_1324\_20_WHAT_is.html
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • c:\Python27\Lib\test\dh1024.pem
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml
  • c:\Python27\include\weakrefobject.h
  • c:\Python27\Lib\idlelib\idle.bat
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx45_IIS_schema_update.xml
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\iHwmrzfuVZqFBSSUP.docm
  • c:\Python27\include\unicodeobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View and annotate PDFs.bmp
  • c:\Python27\include\cellobject.h
  • C:\Users\Harry Dresden\AppData\Local\Temp\s5a4x7g8BoJ.dll
  • C:\Users\Harry Dresden\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YLC2QM2Y\04u77s[1]
File-Deleted
  • C:\Users\Harry Dresden\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000000.db
File-Opened
  • c:\Python27\include\frameobject.h
  • c:\Python27\include\pyexpat.h
  • c:\Python27\Lib\ctypes
  • UNC\SHARDREALM\Users\Harry Dresden\Documents
  • c:\Users\Default\Links
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\gozFRnNwgdPqc.doc
  • c:\Python27\include\pymacconfig.h
  • c:\Python27\include\ast.h
  • c:\Python27\include\memoryobject.h
  • c:\Python27\Lib\site-packages\pip\_vendor\colorama
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources
  • c:\Python27\DLLs
  • c:\Python27\Lib\site-packages\pip\_vendor\cachecontrol
  • c:\Python27\include\tupleobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Favorites\Links for United States
  • c:\ProgramData\Microsoft\Event Viewer\Views\ApplicationViewsRootNode
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp
  • c:\ProgramData\Adobe\Setup
  • c:\Python27\Lib\test\empty.vbs
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg
  • c:\ProgramData\Microsoft\Assistance\Client\1.0\en-US
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\packages
  • UNC\SHARDREALM\Users\Harry Dresden\OneDrive
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Users\Harry Dresden\OneDrive
  • c:\Python27\include\grammar.h
  • c:\ProgramData\Microsoft\PlayReady\Cache\S-1-5-21-3416602863-1947377224-293699093-1001
  • c:\Python27\include\import.h
  • c:\Users\Public\Libraries
  • \\?\PIPE\browser
  • c:\Python27\Lib\test\tracedmodules
  • c:\ProgramData\Adobe\ARM
  • c:\Python27\tcl\tcl8.5\tzdata\Indian
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages
  • c:\acugdultjv\modules\packages
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Queue
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource
  • c:\Python27\Lib
  • \??\VBoxMiniRdrDN
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • c:\ProgramData
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
  • c:\Python27\Lib\site-packages\pip
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\A5
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\A6
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\Python27\Lib\ctypes\macholib
  • c:\ProgramData\Adobe\Acrobat\11.0\Replicate\Security
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • c:\inetpub\history\CFGHISTORY_0000000004\schema
  • c:\Python27\Lib\unittest\test
  • c:\ProgramData\Microsoft\PlayReady
  • c:\Python27\Lib\xml\dom
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\EcfNCByCTHLgui.doc
  • c:\acugdultjv\modules\auxiliary
  • c:\Python27\Lib\site-packages\pip\models
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\Python27\include\marshal.h
  • UNC\SHARDREALM\Users\Public\Foxit Software
  • c:\ProgramData\Adobe\Acrobat\11.0\Replicate
  • c:\Python27\Tools\i18n
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp
  • c:\Python27\tcl\tcl8\8.4
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog
  • c:\ProgramData\Microsoft\Crypto\Keys
  • UNC\SHARDREALM\Users\Public\Music\Sample Music
  • c:\Python27\Lib\email\test\data\msg_19.txt
  • c:\inetpub\wwwroot\aspnet_client\system_web\4_0_30319
  • c:\Python27\Lib\ctypes\test
  • c:\Users\Harry Dresden\Searches
  • c:\Python27\Lib\test\badcert.pem
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\gTbFtRxIdgP.rtf
  • c:\ProgramData\Adobe\ARM\S
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css
  • c:\Python27\Lib\ensurepip
  • c:\Python27\include\pgen.h
  • UNC\SHARDREALM\Users
  • c:\Python27\tcl\tcl8.5\tzdata\Canada
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\Users\Harry Dresden\Downloads
  • c:\Python27\include\objimpl.h
  • c:\ProgramData\Microsoft\eHome
  • c:\Python27\tcl\tk8.5\demos\images
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images
  • c:\Python27\Lib\test\cjkencodings
  • c:\inetpub\wwwroot\aspnet_client\system_web
  • UNC\SHARDREALM\Users\Public\Music
  • c:\Python27\tcl\tcl8.5\tzdata\America\Kentucky
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US
  • c:\Python27\include\abstract.h
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\cxHhwvhMSsZWxNVKyM.docm
  • c:\Python27\Lib\test\keycert.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png
  • c:\Python27\include\object.h
  • c:\Python27\tcl\tix8.4.3
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • c:\ProgramData\Microsoft\RAC\PublishedData
  • UNC\SHARDREALM\Users\Harry Dresden\Links
  • c:\inetpub\history\CFGHISTORY_0000000005
  • c:\inetpub\history\CFGHISTORY_0000000004
  • c:\inetpub\history\CFGHISTORY_0000000001
  • c:\Python27\include\pydebug.h
  • c:\inetpub\history\CFGHISTORY_0000000003
  • c:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204
  • c:\Users\Harry Dresden\Favorites\Links for United States
  • c:\Python27\Lib\lib2to3\tests\data\fixers
  • c:\Python27\Lib\email\test\data\msg_14.txt
  • c:\Python27\tcl\tcl8.5\tzdata\US
  • c:\Python27\tcl\tcl8.5\tzdata
  • UNC\SHARDREALM\Users\Public\Videos
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp
  • c:\Python27\tcl\tcl8.5\tzdata\Europe
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css
  • c:\Python27\include\pyport.h
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • UNC\SHARDREALM\Users\Public\Documents
  • c:\Python27\Lib\email
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Kalimba.mp3
  • c:\Python27\tcl\tix8.4.3\demos\samples
  • c:\Python27\Lib\email\test\data\msg_15.txt
  • c:\Python27\Lib\lib-tk\test\test_tkinter
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf
  • UNC\SHARDREALM\Users\Harry Dresden\Music
  • c:\Python27\Tools\webchecker
  • c:\Python27\tcl\tcl8.5\tzdata\America\North_Dakota
  • c:\Python27\Lib\test\crashers
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\ProgramData\Microsoft\Windows Defender\LocalCopy
  • c:\Python27\include\dtoa.h
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • c:\Python27\include\asdl.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml
  • c:\Users\Harry Dresden\Contacts
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\E0
  • c:\PerfLogs
  • UNC\SHARDREALM\Users\Public\Libraries
  • c:\
  • c:\Python27\include\complexobject.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Entries
  • c:\Python27\Lib\email\test\data\msg_13.txt
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\treebuilders
  • c:\Python27\tcl\tcl8\8.5
  • UNC\SHARDREALM\Users\Default\Desktop
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • c:\Python27\libs
  • c:\ProgramData\Microsoft\ClickToRun\MachineData
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect Sensitive PDF Documents.bmp
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts\Harry Dresden.contact
  • c:\Python27\Lib\email\test\data\msg_12.txt
  • c:\ProgramData\Microsoft\Assistance
  • c:\Python27\include\bytesobject.h
  • c:\Python27\include\pyctype.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Results
  • c:\Users\Harry Dresden\Videos
  • c:\Python27\Lib\pydoc_data
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html
  • UNC\SHARDREALM\Users\Default\Music
  • c:\ProgramData\Microsoft\Crypto\DSS
  • c:\ProgramData\Adobe\Acrobat
  • c:\Python27\tcl\tcl8.5\tzdata\Atlantic
  • c:\ProgramData\NovaTech Network\NovaBench\3.0.2.0
  • c:\ProgramData\Microsoft\Network
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\1A
  • c:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger
  • c:\Users\Default\Downloads
  • c:\Python27\include\structmember.h
  • c:\Python27\Lib\xml
  • c:\Python27\tcl\tcl8.5\tzdata\Australia
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\17
  • c:\Python27\include\fileobject.h
  • c:\Python27\tcl\tk8.5
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml
  • c:\ProgramData\Microsoft\PlayReady\Cache
  • c:\6cdeacda242012e0e5b593e657\3082
  • c:\Python27\Lib\site-packages\pip\compat
  • c:\Python27\Lib\test\leakers
  • c:\Python27\tcl\tcl8\8.4\platform
  • c:\Python27\include\modsupport.h
  • c:\ProgramData\regid.1991-06.com.microsoft
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\filters
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\DD
  • c:\Python27\Tools\pynche\X
  • c:\Python27\include\bufferobject.h
  • c:\Python27\Tools\Scripts
  • c:\Python27\include\cellobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\35
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore
  • c:\Python27\Lib\test\nokia.pem
  • c:\Python27\include\compile.h
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf
  • c:\Users\Public
  • C:\Users\Harry Dresden\AppData\Local\Temp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg
  • c:\Python27\tcl\tk8.5\images
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\config.css
  • c:\ProgramData\Microsoft\DRM
  • UNC\SHARDREALM\Users\Harry Dresden\Videos
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages\en-US
  • c:\Python27\Lib\idlelib\idle_test
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\Python27\include
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • c:\Python27\Lib\test\nullcert.pem
  • c:\Python27\Lib\site-packages\setuptools
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\structseq.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • c:\6cdeacda242012e0e5b593e657\1029
  • c:\6cdeacda242012e0e5b593e657\1028
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}
  • c:\Python27\Lib\site-packages\pip\commands
  • c:\Python27\Lib\lib2to3\tests\data\fixers\myfixes
  • c:\6cdeacda242012e0e5b593e657\1025
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us
  • c:\ProgramData\Adobe\ARM\S\5521
  • c:\Python27\Lib\email\test\data
  • c:\ProgramData\Microsoft\Windows Defender\Support
  • c:\ProgramData\WebEx\WebEx
  • c:\6cdeacda242012e0e5b593e657\2052
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Sleep Away.mp3
  • c:\Python27\Lib\email\test\data\msg_22.txt
  • c:\Python27\Lib\email\test\data\msg_12a.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css
  • UNC\SHARDREALM\Users\Default\Saved Games
  • c:\Python27\tcl\tcl8.5\opt0.4
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases
  • c:\Python27\include\pgenheaders.h
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US
  • c:\Python27\tcl\tcl8.5\encoding
  • c:\ProgramData\Microsoft\Diagnosis\ETLLogs
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • c:\Python27\Lib\msilib
  • c:\ProgramData\Microsoft\WwanSvc\Profiles
  • UNC\SHARDREALM\Users\Harry Dresden\Contacts
  • c:\Python27\Lib\encodings
  • c:\Python27\Lib\site-packages\pip\_vendor\distlib\_backport
  • c:\ProgramData\Microsoft\Assistance\Client
  • UNC\SHARDREALM\Users\Default\Pictures
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\95
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_42.txt
  • c:\Python27\Lib\site-packages\_markerlib
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\ProgramData\Microsoft\Diagnosis\LocalTraceStore
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index_ori.html
  • c:\inetpub\custerr
  • c:\Python27\include\longintrepr.h
  • c:\inetpub\custerr\en-US
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index.html
  • c:\Python27\Lib\site-packages\pip\_vendor\cachecontrol\caches
  • c:\Python27\Lib\test\185test.db
  • c:\Python27\include\opcode.h
  • c:\ProgramData\Microsoft\Crypto\RSA
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\tcl\tk8.5\ttk
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\01
  • c:\Users\Default\Favorites
  • c:\inetpub\history
  • c:\Python27\include\moduleobject.h
  • c:\ProgramData\Microsoft\Windows NT
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\chardet
  • c:\Python27\Lib\email\test\data\msg_17.txt
  • c:\ProgramData\Microsoft\Vault
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData
  • UNC\SHARDREALM\Users\Harry Dresden\Pictures
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_25.txt
  • c:\Python27\include\boolobject.h
  • C:\Windows\SysWOW64\en-US\VssTrace.DLL.mui
  • c:\Python27\include\token.h
  • UNC\SHARDREALM\Users\Default\Videos
  • c:\Python27\include\bitset.h
  • c:\Python27\include\warnings.h
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages
  • UNC\SHARDREALM\Users\Harry Dresden
  • c:\ProgramData\Mozilla\logs
  • UNC\SHARDREALM\Users\Public\Recorded TV
  • c:\Python27\include\pycapsule.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\70
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\MasterDescriptor.en-us.xml
  • c:\Python27\tcl\tcl8.5\tzdata\Mexico
  • c:\Python27\Lib\importlib
  • c:\ProgramData\Microsoft\Crypto
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\ProgramData\NovaTech Network\NovaBench\3.0.2.0\media
  • c:\Python27\Lib\email\test\data\msg_27.txt
  • c:\Python27\tcl\tcl8.5
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Koala.jpg
  • c:\Python27\tcl\tcl8.5\tzdata\Africa
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp
  • c:\Python27\Lib\email\test\data\msg_11.txt
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • c:\ProgramData\McAfee
  • c:\Python27\include\enumobject.h
  • c:\Python27\Lib\site-packages\pip\vcs
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Edit and reflow paragraphs in PDF files.bmp
  • c:\Python27\Lib\bsddb\test
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\43
  • c:\Python27\Lib\test\keycert2.pem
  • c:\ProgramData\Microsoft\Search\Data\Applications
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\F7
  • c:\Python27\include\ucnhash.h
  • c:\Python27\include\py_curses.h
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\F3
  • c:\Python27\Lib\xml\parsers
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\keycert4.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp
  • c:\Python27\tcl\tcl8.5\msgs
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_move_bg.jpg
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Inbox
  • c:\Users\Harry Dresden
  • UNC\SHARDREALM\Users\Public\Recorded TV\Sample Media
  • c:\Python27\include\node.h
  • c:\ProgramData\McAfee\MCLOGS\Common\jxpiinstall
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx40_IIS_schema_update.xml
  • c:\ProgramData\Microsoft\Windows Defender\Quarantine
  • c:\Users\Public\Favorites
  • c:\Python27\Lib\site-packages\pkg_resources\_vendor
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Penguins.jpg
  • c:\Python27\Lib\email\test\data\msg_16.txt
  • c:\ProgramData\Microsoft\Office
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\big-hero-6-2.jpg
  • UNC\SHARDREALM\Users\Public
  • c:\ProgramData\NovaTech Network\NovaBench
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Tulips.jpg
  • c:\Python27\Lib\site-packages\pip\_vendor\_markerlib
  • c:\Python27\tcl\reg1.2
  • c:\Users\ruiner
  • c:\acugdultjv\modules
  • c:\Python27\Lib\xml\etree
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Fastest PDF Search and Index.bmp
  • c:\ProgramData\Microsoft\Media Player
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl
  • c:\Users\Public\Videos\Sample Videos
  • UNC\SHARDREALM\Users\Harry Dresden\Favorites
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\01
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00
  • c:\Python27\include\symtable.h
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • c:\Python27\include\cStringIO.h
  • c:\Python27\include\cobject.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\util
  • c:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Design form fields easily.bmp
  • c:\Python27\tcl\tcl8.5\tzdata\Antarctica
  • c:\Python27\Lib\email\test\data\msg_29.txt
  • c:\Python27\Lib\xml\sax
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\trie
  • c:\Users\Harry Dresden\Desktop
  • c:\Users\Public\Recorded TV
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\skin.css
  • c:\ProgramData\Microsoft\Office\Heartbeat
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\42
  • c:\Python27\tcl\tcl8.5\tzdata\Etc
  • c:\Python27\Lib\bsddb
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\47
  • c:\Python27\Lib\email\test\data\msg_23.txt
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\95
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Integration\ShortcutBackups
  • c:\Python27\Lib\wsgiref
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_18.txt
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\contrib
  • c:\Python27\include\pyfpe.h
  • c:\ProgramData\Microsoft\User Account Pictures
  • c:\ProgramData\Sun\Java\Java Update
  • c:\Python27\Lib\test\sha256.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_s.png
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml
  • c:\Users
  • c:\Users\Default\Saved Games
  • c:\Python27\Lib\site-packages\pip\_vendor\pkg_resources
  • c:\inetpub\history\CFGHISTORY_0000000005\schema
  • c:\Python27\include\datetime.h
  • c:\inetpub
  • c:\Users\Default
  • c:\Python27\tcl\tcl8.5\tzdata\Pacific
  • c:\ProgramData\Microsoft\Windows NT\MSFax\ActivityLog
  • c:\Python27\tcl\tk8.5\msgs
  • c:\Python27\tcl\tcl8.5\tzdata\America
  • c:\ProgramData\Microsoft\Diagnosis\DownloadedSettings
  • c:\ProgramData\Microsoft\Windows Defender\Definition Updates\{98101498-C465-4F51-8751-D1919E97D29D}
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader
  • c:\Python27\Lib\multiprocessing\dummy
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your application.bmp
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}
  • c:\ProgramData\Microsoft\MF
  • c:\Python27\include\errcode.h
  • c:\Python27\Lib\test
  • c:\Python27\Lib\test\keycert3.pem
  • c:\Users\Public\Downloads
  • c:\Python27\Lib\site-packages
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage
  • c:\ProgramData\Microsoft\Device Stage\Task
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Fastest PDF Search and Index.bmp
  • c:\Python27\include\pyerrors.h
  • c:\Python27\Lib\unittest
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml
  • c:\6cdeacda242012e0e5b593e657\Graphics
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}
  • c:\Python27\Lib\test\capath
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\blank.gif
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\szcMHZwFrDOIBLfo.ppt
  • c:\Recovery
  • c:\ProgramData\Microsoft\Device Stage
  • c:\Python27\tcl\tk8.5\demos
  • c:\Python27\Lib\email\test\data\msg_21.txt
  • c:\Python27\include\ceval.h
  • c:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18
  • UNC\SHARDREALM\Users\Public\Desktop
  • c:\ProgramData\Microsoft\Assistance\Client\1.0
  • c:\Python27\include\pythonrun.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16.png
  • c:\ProgramData\Oracle
  • c:\Python27\include\pygetopt.h
  • c:\Python27\Lib\distutils\tests
  • c:\Python27\include\codecs.h
  • c:\Python27\Lib\logging
  • c:\ProgramData\Microsoft\RAC
  • c:\Python27\Lib\site-packages\pip\req
  • c:\Users\Harry Dresden\Links
  • c:\ProgramData\Microsoft\DeviceSync
  • c:\Python27\Doc
  • c:\Python27\Lib\email\test\data\msg_33.txt
  • c:\Users\Public\Pictures
  • c:\Python27\tcl\tix8.4.3\demos\bitmaps
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\Profile.xml
  • c:\Python27\Lib\site-packages\pip\_vendor\requests
  • c:\Python27\include\patchlevel.h
  • c:\Python27\include\bytes_methods.h
  • c:\Python27\Lib\compiler
  • c:\Python27\Scripts
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\47
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\42
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\17
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx40_IIS_schema_update.xml
  • c:\Users\Public\Recorded TV\Sample Media
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf
  • c:\Python27\Lib\test\keycert.pem
  • c:\Python27\include\traceback.h
  • c:\Python27\tcl\dde1.3
  • c:\Python27\tcl\tcl8.5\tzdata\SystemV
  • c:\ProgramData\NovaTech Network
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf
  • \\?\PIPE\lsarpc
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Powerful Word Processor.bmp
  • UNC\SHARDREALM\Users\ruiner
  • c:\ProgramData\Sun\Java
  • c:\Python27\Lib\test\ssl_cert.pem
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js
  • c:\ProgramData\Microsoft\Diagnosis\AsimovUploader
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\buy_phantom.png
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images
  • c:\Python27\tcl\tcl8.5\tzdata\Chile
  • c:\ProgramData\Microsoft\ClickToRun\UserData
  • c:\Python27\Lib\test\xmltestdata
  • c:\ProgramData\Microsoft\WPD
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View PDFs on mobile devices.bmp
  • c:\Python27\Lib\site-packages\pip\_vendor
  • c:\ProgramData\Sun
  • c:\Python27\include\Python.h
  • UNC\SHARDREALM\Users\Default\Documents
  • c:\Python27\Lib\email\test\data\msg_34.txt
  • c:\Python27\tcl\tclConfig.sh
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf
  • c:\ProgramData\Microsoft\Diagnosis\ETLLogs\ShutdownLogger
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View PDFs on mobile devices.bmp
  • c:\Python27\include\metagrammar.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\pystate.h
  • c:\Users\Default\Desktop
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\1A
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\treewalkers
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\version.xml
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}
  • c:\ProgramData\Microsoft\WwanSvc
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_b.png
  • \\?\PIPE\wkssvc
  • c:\ProgramData\Microsoft\Event Viewer\Views
  • c:\Python27\Lib\json\tests
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\serializer
  • c:\Python27\include\osdefs.h
  • c:\Python27\Tools
  • c:\Python27\include\timefuncs.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css
  • c:\ProgramData\Microsoft\IlsCache
  • c:\Python27\Lib\lib-tk
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Store
  • c:\ProgramData\Microsoft\Windows NT\MSFax\SentItems
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx45_IIS_schema_update.xml
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16
  • c:\Python27\Lib\site-packages\pip\operations
  • c:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\wBUfqiFTAA.ppt
  • c:\Python27\Lib\site-packages\pip\_vendor\lockfile
  • c:\Python27\Lib\curses
  • c:\6cdeacda242012e0e5b593e657\1037\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures
  • c:\Python27\include\pystrcmp.h
  • c:\acugdultjv
  • c:\Python27\include\floatobject.h
  • UNC\SHARDREALM\Users\Default\NTUSER.DAT.LOG
  • c:\Python27\Lib\email\test\data\msg_26.txt
  • c:\Python27\Lib\test\pycacert.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\top_tb_bg.jpg
  • c:\Python27\include\pymactoolbox.h
  • c:\Python27\Lib\test\badkey.pem
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Integration
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Powerful Word Processor.bmp
  • c:\Users\Default\Music
  • c:\Python27\Lib\email\mime
  • c:\Users\Harry Dresden\Music
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt
  • c:\6cdeacda242012e0e5b593e657\1053
  • c:\6cdeacda242012e0e5b593e657\1055
  • UNC\SHARDREALM\Users\Public\Favorites
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3
  • c:\Python27\tcl\tcl8.5\tzdata\Asia
  • UNC\SHARDREALM\Users\Public\Downloads
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css
  • c:\Python27\Lib\multiprocessing
  • c:\Users\Default\Documents
  • UNC\SHARDREALM\Users\Public\Videos\Sample Videos\Wildlife.wmv
  • c:\Python27\Tools\pynche
  • c:\Users\Public\Desktop
  • c:\ProgramData\Microsoft\User Account Pictures\Default Pictures
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads
  • c:\Python27\Lib\lib-tk\test\test_ttk
  • c:\Users\Harry Dresden\Documents
  • c:\Python27\include\sysmodule.h
  • c:\ProgramData\McAfee\MCLOGS\Common
  • c:\Python27\Lib\email\test\data\msg_35.txt
  • UNC\SHARDREALM\Users\Harry Dresden\Favorites\Links
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect Sensitive PDF Documents.bmp
  • c:\ProgramData\Microsoft\IdentityCRL
  • c:\ProgramData\WebEx\WebEx\12_1324
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml
  • c:\Python27\Lib\email\test\data\msg_24.txt
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • c:\Python27\Lib\site-packages\pip\utils
  • c:\Python27\Lib\distutils\command
  • c:\Users\Harry Dresden\Saved Games
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Edit and reflow paragraphs in PDF files.bmp
  • UNC\SHARDREALM\Users\Default
  • c:\Python27\include\pyarena.h
  • c:\ProgramData\Microsoft\Windows Defender
  • c:\Python27\include\eval.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_over_bg.jpg
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\bBXkYeoUNraFtMDfBVH.pptx
  • c:\Python27
  • c:\Python27\Lib\hotshot
  • c:\Python27\include\genobject.h
  • c:\inetpub\wwwroot
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\cleandesktop.py.txt
  • c:\Python27\Tools\versioncheck
  • c:\Python27\tcl\tcl8.5\tzdata\Arctic
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\F7
  • c:\Users\Public\Music
  • c:\6cdeacda242012e0e5b593e657\1033\eula.rtf
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\F3
  • c:\Python27\Lib\test\audiodata
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Desert.jpg
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\treeadapters
  • c:\Python27\include\intrcheck.h
  • c:\ProgramData\Microsoft\Network\Connections
  • c:\Python27\Lib\email\test\data\msg_28.txt
  • c:\Python27\Lib\sqlite3
  • c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys
  • UNC\SHARDREALM\Users\Public\Pictures
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\43
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js
  • UNC\SHARDREALM\Users\Default\Downloads
  • UNC\SHARDREALM\Users\Default\Links
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg
  • c:\ProgramData\Microsoft\Diagnosis
  • c:\Python27\Lib\distutils
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
  • c:\Python27\Lib\site-packages\pip\_vendor\pkg_resources\tests
  • c:\Python27\Lib\idlelib\Icons
  • c:\ProgramData\Microsoft\Device Stage\Device
  • c:\Python27\Lib\site-packages\pip\_vendor\distlib
  • c:\Python27\Lib\test\subprocessdata
  • c:\acugdultjv\bin\cert.p12
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\35
  • c:\Python27\include\pymem.h
  • c:\inetpub\wwwroot\aspnet_client
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\cacert.pem
  • c:\ProgramData\Microsoft\Network\Downloader
  • c:\Users\Public\Foxit Software
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick
  • c:\ProgramData\Microsoft\Windows NT\MSScan
  • c:\acugdultjv\lib\core
  • c:\Python27\Lib\lib2to3\tests
  • c:\acugdultjv\lib
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Create PDF from Office-convert PDF to office.bmp
  • c:\Python27\Lib\test\selfsigned_pythontestdotnet.pem
  • c:\ProgramData\Microsoft OneDrive\setup
  • c:\ProgramData\Microsoft\Crypto\DSS\MachineKeys
  • c:\6cdeacda242012e0e5b593e657\2070\eula.rtf
  • c:\Python27\Lib\site-packages\pkg_resources
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info
  • c:\Python27\include\Python-ast.h
  • c:\Python27\include\rangeobject.h
  • c:\Python27\tcl\tcl8.5\tzdata\Brazil
  • c:\Users\Harry Dresden\Favorites\Links
  • c:\Python27\Lib\test\imghdrdata
  • c:\Python27\include\iterobject.h
  • c:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates
  • UNC\SHARDREALM\Users\Harry Dresden\Saved Games
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\qkfzGZlydLg.rtf
  • c:\ProgramData\Microsoft\RAC\Outbound
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your application.bmp
  • c:\inetpub\history\CFGHISTORY_0000000002
  • c:\Python27\include\funcobject.h
  • c:\Python27\include\listobject.h
  • c:\ProgramData\Microsoft\NetFramework
  • c:\ProgramData\Adobe\ARM\Reader_11.0.10
  • c:\ProgramData\Microsoft
  • c:\Users\Public\Pictures\Sample Pictures
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Service
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16-open.png
  • c:\Users\Default\Videos
  • c:\ProgramData\Microsoft\Search\Data
  • c:\Python27\tcl
  • c:\Python27\Lib\json
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml
  • c:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\en-US
  • c:\Python27\include\pythread.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement
  • c:\Python27\Lib\lib2to3\fixes
  • c:\Python27\tcl\tix8.4.3\bitmaps
  • c:\Python27\Lib\site-packages\setuptools\command
  • c:\6cdeacda242012e0e5b593e657
  • c:\Python27\tcl\tcl8.5\tzdata\America\Indiana
  • c:\6cdeacda242012e0e5b593e657\2070
  • c:\Python27\include\sliceobject.h
  • c:\Python27\tcl\tix8.4.3\pref\TK.cs
  • c:\Users\Public\Videos
  • c:\Python27\Lib\test\decimaltestdata
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\DD
  • c:\Python27\include\descrobject.h
  • c:\ProgramData\Microsoft\Diagnosis\UIF
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\A6
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\POwkdloDBG.docx
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\A5
  • c:\Python27\include\stringobject.h
  • c:\Python27\Lib\lib2to3
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default
  • c:\Python27\include\intobject.h
  • c:\ProgramData\Microsoft\Event Viewer
  • c:\ProgramData\Adobe\Setup\{AC76BA86-7AD7-1033-7B44-AB0000000001}
  • c:\Python27\Lib\email\test\data\msg_20.txt
  • c:\Python27\tcl\tix8.4.3\pref\Gray.cs
  • c:\Python27\Lib\test\ssl_key.pem
  • c:\ProgramData\Microsoft\ClickToRun
  • c:\Python27\tcl\tix8.4.3\pref
  • c:\Python27\include\methodobject.h
  • c:\Python27\include\pyconfig.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp
  • UNC\SHARDREALM\Users\Default\Favorites
  • c:\Python27\tcl\tcl8.5\http1.0
  • c:\Python27\include\pymath.h
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf
  • c:\Python27\include\parsetok.h
  • c:\acugdultjv\bin
  • c:\ProgramData\Adobe\Acrobat\11.0
  • c:\Python27\Lib\email\test\data\msg_32.txt
  • c:\Python27\Lib\ensurepip\_bundled
  • c:\Python27\Lib\email\test\data\msg_37.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg
  • c:\Python27\include\classobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us
  • c:\Python27\Lib\test\ssl_key.passwd.pem
  • c:\Users\Public\Music\Sample Music
  • c:\Python27\tcl\tcl8
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager
  • c:\Python27\Lib\lib2to3\tests\data
  • c:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\Cache
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\70
  • c:\ProgramData\Microsoft OneDrive
  • UNC\SHARDREALM\Users\Harry Dresden\Searches
  • c:\Python27\tcl\tcl8.5\tzdata\America\Argentina
  • c:\Python27\include\setobject.h
  • c:\Recovery\015e7760-d44b-11e0-8947-954f09601788
  • c:\Python27\Lib\idlelib
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\MasterDescriptor.x-none.xml
  • c:\PerfLogs\Admin
  • c:\Python27\include\graminit.h
  • c:\Python27\Lib\site-packages\pip\_vendor\progress
  • c:\Users\Harry Dresden\Pictures
  • c:\ProgramData\Microsoft\Diagnosis\Sideload
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\packages\ssl_match_hostname
  • c:\Users\Harry Dresden\Favorites
  • c:\ProgramData\Passmark
  • c:\Python27\Lib\lib-tk\test
  • c:\6cdeacda242012e0e5b593e657\1049\eula.rtf
  • c:\ProgramData\Adobe
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • c:\Users\Public\Foxit Software\Foxit Reader
  • c:\ProgramData\Microsoft\Search
  • c:\ProgramData\Passmark\PerformanceTest
  • c:\Python27\tcl\tix8.4.3\pref\TkWin.cs
  • UNC\SHARDREALM\Users\Public\Videos\Sample Videos
  • c:\Python27\include\bytearrayobject.h
  • c:\ProgramData\Microsoft\NetFramework\BreadcrumbStore
  • c:\Python27\Lib\email\test
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}
  • c:\ProgramData\WebEx
  • c:\inetpub\wwwroot\msmq
  • c:\Python27\tcl\tix8.4.3\demos
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View and annotate PDFs.bmp
  • c:\Python27\include\dictobject.h
  • c:\Python27\Lib\site-packages\pkg_resources\_vendor\packaging
  • c:\ProgramData\McAfee\MCLOGS
  • c:\Users\Default\Pictures
  • c:\6cdeacda242012e0e5b593e657\1049
  • c:\Users\Public\Documents
  • c:\6cdeacda242012e0e5b593e657\1046
  • c:\6cdeacda242012e0e5b593e657\1045
  • c:\6cdeacda242012e0e5b593e657\1044
  • c:\6cdeacda242012e0e5b593e657\1043
  • c:\6cdeacda242012e0e5b593e657\1042
  • c:\6cdeacda242012e0e5b593e657\1041
  • c:\6cdeacda242012e0e5b593e657\1040
  • c:\Python27\Lib\site-packages\pip\_vendor\packaging
  • c:\ProgramData\Microsoft\eHome\logs
  • c:\ProgramData\Microsoft\Windows Defender\Scans
  • c:\ProgramData\Microsoft\Windows NT\MSFax
  • c:\Python27\Lib\email\test\data\msg_38.txt
  • c:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\body_bg.jpg
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64mui.msi.16.en-us.xml
  • c:\Python27\Lib\test\nullbytecert.pem
  • c:\Python27\Lib\sqlite3\test
  • c:\Python27\Lib\test\dh1024.pem
  • c:\ProgramData\Mozilla
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\E0
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View and annotate PDFs.bmp
  • c:\ProgramData\Microsoft\Windows Defender\Definition Updates
  • c:\acugdultjv\lib\common
  • c:\Python27\include\weakrefobject.h
  • c:\Python27\Lib\lib2to3\pgen2
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History
  • c:\Python27\Lib\idlelib\idle.bat
  • c:\Python27\include\code.h
  • c:\acugdultjv\lib\api
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx45_IIS_schema_update.xml
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\iHwmrzfuVZqFBSSUP.docm
  • c:\Python27\include\unicodeobject.h
  • c:\ProgramData\Microsoft\RAC\StateData
  • c:\6cdeacda242012e0e5b593e657\1038
  • c:\ProgramData\Microsoft\DRM\Server
  • c:\6cdeacda242012e0e5b593e657\1032
  • c:\6cdeacda242012e0e5b593e657\1033
  • c:\6cdeacda242012e0e5b593e657\1030
  • c:\6cdeacda242012e0e5b593e657\1031
  • c:\6cdeacda242012e0e5b593e657\1036
  • c:\6cdeacda242012e0e5b593e657\1037
  • c:\6cdeacda242012e0e5b593e657\1035
  • C:\Windows\System32\wshqos.dll
  • C:\Windows\System32\wshom.ocx
  • C:\
  • C:\Windows\Globalization\Sorting\sortdefault.nls
  • C:\Users\
  • C:\Users\Harry Dresden\AppData\Local\Temp\NRV_29CD9E5_.js
  • C:\Users\Harry Dresden\AppData\
  • C:\Users\Harry Dresden\AppData\Local\
  • C:\Windows\SysWOW64\rundll32.exe
  • C:\Windows\System32\en-US\wshqos.dll.mui
  • C:\Users\Harry Dresden\Desktop\desktop.ini
  • C:\Windows\System32\en-US\wshtcpip.dll.mui
  • C:\Windows\System32\rsaenh.dll
  • C:\Windows\System32\msxml3.dll
  • C:\Users\Harry Dresden\
  • C:\Windows\System32\en-US\wship6.dll.mui
  • C:\Windows\System32\wscript.exe
  • C:\Windows\
  • C:\Windows\SysWOW64\
File-Moved
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\GIZCRYGM-7AM0-RUQ7-9170-59609E654F96.thor
  • c:\6cdeacda242012e0e5b593e657\1028\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1028\GIZCRYGM-7AM0-RUQ7-5799-C910966D8BAA.thor
  • c:\Python27\Lib\email\test\data\msg_25.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-E399-CFD37124F8A1.thor
  • \\SHARDREALM\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg -> \\SHARDREALM\Users\Public\Pictures\Sample Pictures\GIZCRYGM-7AM0-RUQ7-E191-8FE4A8DFAEA2.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-A63E-D9D03A6CDFEF.thor
  • c:\Python27\Lib\test\badkey.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-BB9E-ECC035AB1078.thor
  • \\SHARDREALM\Users\Harry Dresden\Desktop\gTbFtRxIdgP.rtf -> \\SHARDREALM\Users\Harry Dresden\Desktop\GIZCRYGM-7AM0-RUQ7-C608-FEB9A746D534.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYGM-7AM0-RUQ7-C4AE-2D44D12C3F31.thor
  • c:\Python27\include\pystrcmp.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-8F95-28029F72D8B8.thor
  • c:\Python27\Lib\test\https_svn_python_org_root.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-E825-A9EA53D771A3.thor
  • c:\Python27\include\asdl.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-ABD8-1783C066A7E5.thor
  • c:\Python27\Lib\email\test\data\msg_12a.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-D637-46BFB0C386CC.thor
  • c:\Python27\include\setobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-B2F9-AFD9F2B79DED.thor
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1036\GIZCRYGM-7AM0-RUQ7-6450-9A6C5A927C60.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\top_tb_bg.jpg -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\GIZCRYGM-7AM0-RUQ7-F4C5-289E0D065247.thor
  • c:\Python27\Lib\test\nullbytecert.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-E96F-F5EB3BD794B9.thor
  • c:\Python27\include\genobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-7F83-426C957A873C.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\GIZCRYGM-7AM0-RUQ7-DB9B-9886AAD383B6.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemuiset.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYGM-7AM0-RUQ7-371B-89557FC0BB38.thor
  • \\SHARDREALM\Users\Public\Pictures\Sample Pictures\Desert.jpg -> \\SHARDREALM\Users\Public\Pictures\Sample Pictures\GIZCRYGM-7AM0-RUQ7-13BB-E7890CD45EAB.thor
  • c:\Python27\include\pyarena.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-115C-246E69B8E56A.thor
  • c:\Python27\Lib\test\nullcert.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-A6EF-7C1C3252CA52.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\Profile.xml -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-143C-E98D1AB82872.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect Sensitive PDF Documents.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-898A-7C78CF5C5984.thor
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs -> c:\Python27\tcl\tix8.4.3\pref\GIZCRYGM-7AM0-RUQ7-178D-D231D57126DA.thor
  • c:\Python27\include\pythonrun.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-6206-BBD8CA458953.thor
  • c:\Python27\Lib\test\ssl_cert.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-5F3B-5E0DFA1ED476.thor
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.2.xml -> c:\ProgramData\Microsoft\ClickToRun\GIZCRYGM-7AM0-RUQ7-B481-25CF40318504.thor
  • c:\Python27\include\pymactoolbox.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-ACF9-8103D256ED43.thor
  • c:\Python27\include\longobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-10A7-5FFA316B57EE.thor
  • c:\Python27\include\marshal.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-2912-24AD608AB80A.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16-open.png -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\GIZCRYGM-7AM0-RUQ7-F1F6-57995F803102.thor
  • c:\Python27\Lib\test\pycacert.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-519C-AA8C981BAB5C.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\DD_belatedPNG.js -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\GIZCRYGM-7AM0-RUQ7-D7D9-A2CE05D8B954.thor
  • c:\Python27\include\pyfpe.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-F53D-67D54FA5ED57.thor
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml -> c:\ProgramData\Microsoft\ClickToRun\GIZCRYGM-7AM0-RUQ7-999A-D5876CCF9E83.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_b.png -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\GIZCRYGM-7AM0-RUQ7-2DEF-412D3511EDF6.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\show_con_bg.jpg -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\GIZCRYGM-7AM0-RUQ7-8AF9-C079E2A8454C.thor
  • c:\Python27\include\unicodeobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-6675-6E15C94FD5E1.thor
  • \\SHARDREALM\Users\Public\Pictures\Sample Pictures\Chrysanthemum.jpg -> \\SHARDREALM\Users\Public\Pictures\Sample Pictures\GIZCRYGM-7AM0-RUQ7-9CF8-9B0FFB240C6A.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View and annotate PDFs.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-1B41-DCE1A4C3AF00.thor
  • c:\Python27\include\codecs.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-0DB3-A8F96BD49F05.thor
  • \\SHARDREALM\Users\Public\Pictures\Sample Pictures\Koala.jpg -> \\SHARDREALM\Users\Public\Pictures\Sample Pictures\GIZCRYGM-7AM0-RUQ7-C6E1-4C5C178CCA0B.thor
  • c:\Python27\include\methodobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-C25C-F8DC8552D025.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-9F15-5DABAE7F4CA7.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmui.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYGM-7AM0-RUQ7-30FD-2967526D4790.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your application.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-A8CA-119DB78CC84C.thor
  • c:\Python27\include\token.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-BF18-4C99E5300946.thor
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx45_IIS_schema_update.xml -> c:\inetpub\history\CFGHISTORY_0000000005\schema\GIZCRYGM-7AM0-RUQ7-CF99-25EE627C6332.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-87B4-9AC7BBA41FD4.thor
  • c:\Python27\include\pymath.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-94D0-DF6ECBBEF599.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYGM-7AM0-RUQ7-095A-E4C0B8A1C2ED.thor
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1045\GIZCRYGM-7AM0-RUQ7-0ACA-157E79271D95.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\config.css -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\GIZCRYGM-7AM0-RUQ7-3E9D-A048556822C8.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-3DB2-90B1697F227E.thor
  • c:\Python27\Lib\email\test\data\msg_19.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-BCAE-348F87F7956D.thor
  • c:\Python27\include\pyconfig.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-8876-493DEF3125DF.thor
  • c:\Python27\Lib\email\test\data\msg_16.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-BB21-A51BE1B944D1.thor
  • c:\Python27\include\pgen.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-7DE2-07CDD3AF91F2.thor
  • c:\Python27\include\cobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-E286-05484F36691F.thor
  • c:\Python27\include\stringobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-EB36-C3F7CD0C44F2.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal View PDFs on mobile devices.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-6499-5E80B5F7D646.thor
  • c:\Python27\Lib\test\keycert.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-EC3B-6A733F24CCD9.thor
  • c:\Python27\include\traceback.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-9629-15FAD45A15AB.thor
  • c:\Python27\Lib\email\test\data\msg_11.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-AD43-8C49928917A1.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYGM-7AM0-RUQ7-35D7-AF6FDADDF9ED.thor
  • c:\6cdeacda242012e0e5b593e657\1044\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1044\GIZCRYGM-7AM0-RUQ7-4398-94558A46DD41.thor
  • \\SHARDREALM\Users\Public\Pictures\Sample Pictures\Hydrangeas.jpg -> \\SHARDREALM\Users\Public\Pictures\Sample Pictures\GIZCRYGM-7AM0-RUQ7-0A6B-6CC67F8C2B69.thor
  • c:\Python27\Lib\test\empty.vbs -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-B8F6-F2A275D9DBAF.thor
  • c:\6cdeacda242012e0e5b593e657\1038\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1038\GIZCRYGM-7AM0-RUQ7-A103-7EDDA196097B.thor
  • c:\Python27\include\errcode.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-A974-94B037B52F8E.thor
  • c:\Python27\include\ast.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-F64C-50703983F40A.thor
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx40_IIS_schema_update.xml -> c:\inetpub\history\CFGHISTORY_0000000004\schema\GIZCRYGM-7AM0-RUQ7-5D76-36D6BD805247.thor
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\MasterDescriptor.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\GIZCRYGM-7AM0-RUQ7-6571-50250972C6D0.thor
  • c:\6cdeacda242012e0e5b593e657\1046\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1046\GIZCRYGM-7AM0-RUQ7-CE29-F059D2D450D8.thor
  • c:\Python27\include\structseq.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-0EA4-A00BFA4DC934.thor
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx40_IIS_schema_update.xml -> c:\inetpub\history\CFGHISTORY_0000000005\schema\GIZCRYGM-7AM0-RUQ7-D757-A5E65307B078.thor
  • c:\Python27\include\cStringIO.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-E49C-4932944A40DE.thor
  • c:\Python27\include\import.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-7A66-E9408D724A86.thor
  • c:\Python27\include\pgenheaders.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-0807-C993A4867E1F.thor
  • c:\6cdeacda242012e0e5b593e657\1035\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1035\GIZCRYGM-7AM0-RUQ7-D94A-8816562E8705.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\GIZCRYGM-7AM0-RUQ7-5D06-4068146595A9.thor
  • c:\Python27\include\moduleobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-EB7F-4F225D61CFF1.thor
  • c:\Python27\Lib\test\badcert.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-0973-43F0862A7AD7.thor
  • c:\Python27\Lib\email\test\data\msg_27.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-9951-C2F049D72E2E.thor
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php -> c:\ProgramData\WebEx\WebEx\12_1324\GIZCRYGM-7AM0-RUQ7-9CC2-51C9D8901C94.thor
  • c:\Python27\Lib\test\check_soundcard.vbs -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-860F-1649B553CB36.thor
  • \\SHARDREALM\Users\Harry Dresden\Desktop\iHwmrzfuVZqFBSSUP.docm -> \\SHARDREALM\Users\Harry Dresden\Desktop\GIZCRYGM-7AM0-RUQ7-39F0-01B2605FB898.thor
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1040\GIZCRYGM-7AM0-RUQ7-5DEC-A36F70392A0F.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect Sensitive PDF Documents.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-B732-4C43E0352978.thor
  • c:\Python27\Lib\test\keycert3.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-574D-2B9B6EA8B854.thor
  • c:\Python27\include\object.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-C912-2377CB052697.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\GIZCRYGM-7AM0-RUQ7-06ED-318928201F9E.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect your PDF files with AD RMS.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-3AB1-D2A7943F77F4.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\GIZCRYGM-7AM0-RUQ7-2F9F-D92285FE56D3.thor
  • c:\Python27\Lib\test\keycert4.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-F946-D8DEF4FF09EC.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\GIZCRYGM-7AM0-RUQ7-0F53-7F8DFD923763.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYGM-7AM0-RUQ7-F8CF-C1FA95175B9A.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.outlookmui.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYGM-7AM0-RUQ7-1B3D-1AF924146F61.thor
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf -> c:\6cdeacda242012e0e5b593e657\3082\GIZCRYGM-7AM0-RUQ7-7653-CD6090E04D7E.thor
  • c:\Python27\Lib\test\ssl_key.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-2BEA-A2FDB1EC8091.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16.png -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\GIZCRYGM-7AM0-RUQ7-5835-BC225C5FD8F2.thor
  • \\SHARDREALM\Users\Public\Music\Sample Music\Sleep Away.mp3 -> \\SHARDREALM\Users\Public\Music\Sample Music\GIZCRYGM-7AM0-RUQ7-30A9-00928D28147B.thor
  • c:\Python27\Lib\email\test\data\msg_32.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-4EE9-6AE6D230B77A.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Fastest PDF Search and Index.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-7BA8-21AB78F6F3DD.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Edit and reflow paragraphs in PDF files.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-CB58-5E8C3B0959D2.thor
  • c:\Python27\include\py_curses.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-3E60-CFB6A20BC30D.thor
  • \\SHARDREALM\Users\Harry Dresden\Desktop\cxHhwvhMSsZWxNVKyM.docm -> \\SHARDREALM\Users\Harry Dresden\Desktop\GIZCRYGM-7AM0-RUQ7-C6FA-CF261C6E684F.thor
  • c:\Python27\include\pyexpat.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-37AE-68E93C3FE9FA.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Create PDF from Office-convert PDF to office.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-E3FC-9F006D4352AC.thor
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx45_IIS_schema_update.xml -> c:\inetpub\history\CFGHISTORY_0000000004\schema\GIZCRYGM-7AM0-RUQ7-98B4-D01AEEDE4198.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.accessmuiset.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYGM-7AM0-RUQ7-61C7-670102D088A6.thor
  • c:\Python27\include\pymem.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-32F4-5F58784C49B8.thor
  • c:\Python27\include\warnings.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-D2A4-4ED7ED2BF6F0.thor
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf -> c:\6cdeacda242012e0e5b593e657\2052\GIZCRYGM-7AM0-RUQ7-1EE8-C3C8DFA73BE0.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View and annotate PDFs.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-4E4D-CC9E11EDD0C9.thor
  • c:\Python27\include\timefuncs.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-337F-C9E8A2A3428D.thor
  • c:\Python27\Lib\email\test\data\msg_28.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-ECE8-877D1670B833.thor
  • c:\Python27\include\abstract.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-3E67-C8B5179446F2.thor
  • c:\Python27\include\bytes_methods.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-0E39-9150D3F527FB.thor
  • c:\Python27\tcl\tix8.4.3\pref\Gray.cs -> c:\Python27\tcl\tix8.4.3\pref\GIZCRYGM-7AM0-RUQ7-A0E0-76D0BA722790.thor
  • c:\Python27\include\symtable.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-4004-5CCFF5525525.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-6A59-C1103DBA6DDB.thor
  • c:\Python27\include\pystate.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-5BAA-07FCE899316F.thor
  • c:\6cdeacda242012e0e5b593e657\1041\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1041\GIZCRYGM-7AM0-RUQ7-0BFF-0EABDDCCE571.thor
  • c:\Python27\include\floatobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-9B50-DDB1EA8C6769.thor
  • c:\Python27\include\opcode.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-AA8A-AAEBA6F2A038.thor
  • c:\Python27\Lib\test\ssl_key.passwd.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-8B45-49D009CB58BE.thor
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1042\GIZCRYGM-7AM0-RUQ7-7CFE-CA3F8076BDCD.thor
  • c:\Python27\Lib\email\test\data\msg_33.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-62F3-7DEE75D3180A.thor
  • \\SHARDREALM\Users\Harry Dresden\Downloads\big-hero-6-2.jpg -> \\SHARDREALM\Users\Harry Dresden\Downloads\GIZCRYGM-7AM0-RUQ7-B157-62315282647E.thor
  • \\SHARDREALM\Users\Harry Dresden\Desktop\POwkdloDBG.docx -> \\SHARDREALM\Users\Harry Dresden\Desktop\GIZCRYGM-7AM0-RUQ7-0FC7-3E6F2CAE0578.thor
  • c:\6cdeacda242012e0e5b593e657\1037\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1037\GIZCRYGM-7AM0-RUQ7-77E5-00A077254591.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Powerful Word Processor.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-3E48-0D33B30AEA29.thor
  • c:\Python27\include\iterobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-6F14-91496254F036.thor
  • c:\Python27\include\pydebug.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-7D80-019DF4B1A8EE.thor
  • c:\Python27\include\compile.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-6584-B9A15883C488.thor
  • c:\Python27\include\objimpl.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-0722-C598EC0D3363.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your application.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-17F2-99B954D3FAF0.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-8D39-D76AC7149CE0.thor
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\UserDeploymentConfiguration.xml -> c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\GIZCRYGM-7AM0-RUQ7-ADB5-092083863DB3.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\GIZCRYGM-7AM0-RUQ7-E378-34E5C0E22423.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect your PDF files with AD RMS.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-27E1-86686DFF6D2D.thor
  • c:\Python27\include\eval.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-D26E-D5805D59AE43.thor
  • c:\Python27\Lib\test\185test.db -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-CA5C-0A920DC5A8B4.thor
  • c:\Python27\include\pystrtod.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-34B0-55442F3195C6.thor
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs -> c:\Python27\tcl\tix8.4.3\pref\GIZCRYGM-7AM0-RUQ7-B1D6-43DB35AFD3AE.thor
  • c:\Python27\Lib\email\test\data\msg_20.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-C272-6B58CEEC9231.thor
  • c:\Python27\Lib\email\test\data\msg_40.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-CFBA-5209E8113274.thor
  • c:\Python27\include\enumobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-5160-E353483FE32E.thor
  • c:\6cdeacda242012e0e5b593e657\1033\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1033\GIZCRYGM-7AM0-RUQ7-D843-999EB30B765B.thor
  • c:\Python27\include\fileobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-954E-1FB01A4AB731.thor
  • \\SHARDREALM\Users\Public\Pictures\Sample Pictures\Penguins.jpg -> \\SHARDREALM\Users\Public\Pictures\Sample Pictures\GIZCRYGM-7AM0-RUQ7-3AF2-21BB1B3EC418.thor
  • c:\Python27\Lib\test\keycert2.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-CB1B-DAAC584E43B1.thor
  • c:\6cdeacda242012e0e5b593e657\1031\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1031\GIZCRYGM-7AM0-RUQ7-9F96-37234180473A.thor
  • c:\Python27\include\pyport.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-56A0-6E5115DCFA71.thor
  • c:\Python27\include\modsupport.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-04FC-63D6014F2D08.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64muiset.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYGM-7AM0-RUQ7-1CD5-101BE43ECE8B.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\body_bg.jpg -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\GIZCRYGM-7AM0-RUQ7-F00C-92B56410FC25.thor
  • c:\Python27\Lib\email\test\data\msg_35.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-C015-5377BC3952F0.thor
  • c:\Python27\include\grammar.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-4D40-227C5E12907A.thor
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\cacert.pem -> c:\Python27\Lib\site-packages\pip\_vendor\requests\GIZCRYGM-7AM0-RUQ7-D2E1-B59E6876C8AB.thor
  • c:\Python27\include\listobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-FF5C-98F148DB99F3.thor
  • c:\Python27\Lib\test\nokia.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-37B7-4CE802966612.thor
  • c:\Python27\include\parsetok.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-7B3E-FEA621998E89.thor
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml -> c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\GIZCRYGM-7AM0-RUQ7-0949-D8F399222CE6.thor
  • c:\Python27\tcl\tix8.4.3\pref\TK.cs -> c:\Python27\tcl\tix8.4.3\pref\GIZCRYGM-7AM0-RUQ7-F60A-FF868716FC8F.thor
  • c:\Python27\Lib\email\test\data\msg_42.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-AC58-2588C90058C3.thor
  • \\SHARDREALM\Users\Harry Dresden\Desktop\szcMHZwFrDOIBLfo.ppt -> \\SHARDREALM\Users\Harry Dresden\Desktop\GIZCRYGM-7AM0-RUQ7-FD67-5F6EE407348F.thor
  • c:\Python27\include\intrcheck.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-8B77-C750FF36E2CC.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Fastest PDF Search and Index.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-E4BF-81679B13B721.thor
  • c:\6cdeacda242012e0e5b593e657\1049\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1049\GIZCRYGM-7AM0-RUQ7-FC42-8DF5DCDD0AD9.thor
  • \\SHARDREALM\Users\Harry Dresden\Desktop\bBXkYeoUNraFtMDfBVH.pptx -> \\SHARDREALM\Users\Harry Dresden\Desktop\GIZCRYGM-7AM0-RUQ7-2433-1C67D20F7E5D.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\GIZCRYGM-7AM0-RUQ7-FE4D-EA5AA67A9265.thor
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs -> c:\Python27\tcl\tix8.4.3\pref\GIZCRYGM-7AM0-RUQ7-2497-EE94F0AAE6E0.thor
  • c:\Python27\include\boolobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-C790-6E558FF878A3.thor
  • c:\Python27\Lib\email\test\data\msg_18.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-306F-7A5B66F414D0.thor
  • c:\6cdeacda242012e0e5b593e657\1029\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1029\GIZCRYGM-7AM0-RUQ7-D687-86C20B135640.thor
  • c:\Python27\Lib\email\test\data\msg_34.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-CC84-BB56FD23F5A6.thor
  • c:\Python27\include\graminit.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-A69A-DC6C20785EA2.thor
  • c:\Python27\include\intobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-163B-21FF01FBE41A.thor
  • c:\6cdeacda242012e0e5b593e657\1055\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1055\GIZCRYGM-7AM0-RUQ7-8B3D-2BEE93CF99E4.thor
  • c:\Python27\tcl\tix8.4.3\pref\TkWin.cs -> c:\Python27\tcl\tix8.4.3\pref\GIZCRYGM-7AM0-RUQ7-92A2-58DC3F5BF147.thor
  • c:\Python27\include\bitset.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-C44F-A98E372F918F.thor
  • c:\Python27\Lib\test\keycert.passwd.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-64F4-77974C4959A8.thor
  • \\SHARDREALM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3 -> \\SHARDREALM\Users\Public\Music\Sample Music\GIZCRYGM-7AM0-RUQ7-BBC4-F32D0283137F.thor
  • \\SHARDREALM\Users\Public\Videos\Sample Videos\Wildlife.wmv -> \\SHARDREALM\Users\Public\Videos\Sample Videos\GIZCRYGM-7AM0-RUQ7-8A32-8526B49B1339.thor
  • c:\Python27\Lib\test\sha256.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-5B41-F94404F49372.thor
  • \\SHARDREALM\Users\Harry Dresden\Desktop\qkfzGZlydLg.rtf -> \\SHARDREALM\Users\Harry Dresden\Desktop\GIZCRYGM-7AM0-RUQ7-236B-3125BBF6BF3E.thor
  • c:\Python27\Lib\email\test\data\msg_26.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-03E4-C00A553C6EE8.thor
  • c:\Python27\include\pyerrors.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-AFEA-C0C2593A5A53.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index_ori.html -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\GIZCRYGM-7AM0-RUQ7-7C96-E4C420294AB7.thor
  • c:\acugdultjv\bin\cert.p12 -> c:\acugdultjv\bin\GIZCRYGM-7AM0-RUQ7-1056-63497326BE32.thor
  • c:\Python27\Lib\email\test\data\msg_41.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-5B8B-32005F9631A9.thor
  • \\SHARDREALM\Users\Harry Dresden\Desktop\gozFRnNwgdPqc.doc -> \\SHARDREALM\Users\Harry Dresden\Desktop\GIZCRYGM-7AM0-RUQ7-EF97-C954A291361C.thor
  • c:\Python27\include\bufferobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-8332-742FBF043E77.thor
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1043\GIZCRYGM-7AM0-RUQ7-D219-2AD1DEC2660D.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index.html -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\GIZCRYGM-7AM0-RUQ7-A32D-928E836A8D70.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Edit and reflow paragraphs in PDF files.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-8500-BE696E6951F5.thor
  • \\SHARDREALM\Users\Harry Dresden\Desktop\wBUfqiFTAA.ppt -> \\SHARDREALM\Users\Harry Dresden\Desktop\GIZCRYGM-7AM0-RUQ7-5B18-AC202196C7EB.thor
  • c:\Python27\Lib\test\dh1024.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-1717-E2A2DFC721C4.thor
  • c:\Python27\Lib\email\test\data\msg_22.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-D701-49E7B5C9CBF1.thor
  • c:\Python27\include\dtoa.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-6943-0641D4095B94.thor
  • \\SHARDREALM\Users\Harry Dresden\Downloads\cleandesktop.py.txt -> \\SHARDREALM\Users\Harry Dresden\Downloads\GIZCRYGM-7AM0-RUQ7-30DB-4A1C4962EB90.thor
  • c:\Python27\Lib\email\test\data\msg_30.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-2BE8-CA167E4D28D5.thor
  • \\SHARDREALM\Users\Harry Dresden\Contacts\Harry Dresden.contact -> \\SHARDREALM\Users\Harry Dresden\Contacts\GIZCRYGM-7AM0-RUQ7-34F8-9D8809E2741D.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_move_bg.jpg -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\GIZCRYGM-7AM0-RUQ7-59B7-2B31682F9C3A.thor
  • c:\Python27\include\sliceobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-3EC1-0FBE576C09EA.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Design form fields easily.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-CAAD-B1B4CFB414BC.thor
  • c:\Python27\tcl\tclConfig.sh -> c:\Python27\tcl\GIZCRYGM-7AM0-RUQ7-85C2-ED12E578DF5A.thor
  • c:\Python27\Lib\email\test\data\msg_37.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-5C26-5A60DD7E6033.thor
  • c:\Python27\Lib\email\test\data\msg_29.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-8B3A-57014FDF5B83.thor
  • c:\Python27\Lib\email\test\data\msg_14.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-C1B7-AEB2033146B5.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYGM-7AM0-RUQ7-F039-3B7E2CA58424.thor
  • c:\Python27\Lib\email\test\data\msg_21.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-B081-2BB4C46B5DEF.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64mui.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYGM-7AM0-RUQ7-4E0F-9A3F262B33DF.thor
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1030\GIZCRYGM-7AM0-RUQ7-6686-8C00B0AB834A.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\buy_phantom.png -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\GIZCRYGM-7AM0-RUQ7-0FFA-9D96E7417B9D.thor
  • c:\Python27\include\ceval.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-6CD7-1B24D04700D1.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\GIZCRYGM-7AM0-RUQ7-5580-9EDD0E3EC597.thor
  • c:\Python27\Lib\email\test\data\msg_36.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-94D3-A43F33D73848.thor
  • c:\Python27\Lib\test\wrongcert.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-3226-5A65F9BCD060.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\blank.gif -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\GIZCRYGM-7AM0-RUQ7-F37B-D4CD725B5B80.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\GIZCRYGM-7AM0-RUQ7-1EEA-4429A608A4AF.thor
  • c:\Python27\include\weakrefobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-04A2-C6570EC93099.thor
  • c:\Python27\include\pymacconfig.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-C390-428E75859EE3.thor
  • c:\Python27\Lib\email\test\data\msg_13.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-001D-1E0DAF9EAD6D.thor
  • c:\Python27\Lib\email\test\data\msg_12.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-A124-92B25BD4EA3E.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\GIZCRYGM-7AM0-RUQ7-21AB-605FC2093BD2.thor
  • c:\Python27\include\longintrepr.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-CDA1-74DF985E48A4.thor
  • c:\Python27\tcl\tix8.4.3\pref\Blue.cs -> c:\Python27\tcl\tix8.4.3\pref\GIZCRYGM-7AM0-RUQ7-BE48-F57E4871F908.thor
  • c:\Python27\include\pygetopt.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-CD97-C6095B27B68E.thor
  • \\SHARDREALM\Users\Default\NTUSER.DAT.LOG -> \\SHARDREALM\Users\Default\GIZCRYGM-7AM0-RUQ7-92F5-5446D1231379.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Outlook.Outlook.x-none.msi.16.x-none.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYGM-7AM0-RUQ7-F74C-C0B53B991DA2.thor
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\top_level.txt -> c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\GIZCRYGM-7AM0-RUQ7-94A6-51E1ED023BCE.thor
  • c:\6cdeacda242012e0e5b593e657\1053\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1053\GIZCRYGM-7AM0-RUQ7-86FB-E4ECC327672F.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYGM-7AM0-RUQ7-B8EB-7AC7A7E7B931.thor
  • c:\Python27\include\funcobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-51DE-A6ED63F64ECC.thor
  • c:\Python27\include\Python.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-091C-3394FE044929.thor
  • c:\Python27\include\node.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-4494-0DD256652A0E.thor
  • c:\Python27\include\dictobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-E48D-2C17255686D5.thor
  • c:\Python27\include\frameobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-8062-B2C86A44EA54.thor
  • c:\6cdeacda242012e0e5b593e657\2070\eula.rtf -> c:\6cdeacda242012e0e5b593e657\2070\GIZCRYGM-7AM0-RUQ7-A6F4-07B21A07BEFD.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Powerful Word Processor.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-4438-7227EBEE2C60.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\version.xml -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\GIZCRYGM-7AM0-RUQ7-8D28-5A5A580D94C7.thor
  • c:\Python27\Lib\email\test\data\msg_23.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-B589-8BF62CE154D2.thor
  • c:\Python27\Lib\email\test\data\msg_15.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-914C-C840F9857D98.thor
  • c:\Python27\include\classobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-046F-753E4A573338.thor
  • c:\Python27\Lib\email\test\data\msg_39.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-39A1-765099A8CF10.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_over_bg.jpg -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\GIZCRYGM-7AM0-RUQ7-9A17-C71E975B2202.thor
  • \\SHARDREALM\Users\Public\Pictures\Sample Pictures\Tulips.jpg -> \\SHARDREALM\Users\Public\Pictures\Sample Pictures\GIZCRYGM-7AM0-RUQ7-98EF-146F78F9FF3F.thor
  • \\SHARDREALM\Users\Harry Dresden\Desktop\EcfNCByCTHLgui.doc -> \\SHARDREALM\Users\Harry Dresden\Desktop\GIZCRYGM-7AM0-RUQ7-63BC-8FB92F3D3DF4.thor
  • c:\Python27\include\Python-ast.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-277B-FC6AC2DA4807.thor
  • c:\Python27\include\tupleobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-357D-7D8D7472C4F5.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\GIZCRYGM-7AM0-RUQ7-4509-B30EADDE7623.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Design form fields easily.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-8F26-D1DC7753ADF8.thor
  • c:\Python27\Lib\idlelib\idle.bat -> c:\Python27\Lib\idlelib\GIZCRYGM-7AM0-RUQ7-6372-C1C4276408E0.thor
  • c:\Python27\include\osdefs.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-6C1C-414EBD5D8B81.thor
  • c:\Python27\Lib\email\test\data\msg_24.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-3231-1885D8639269.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\phantomPDF_s.png -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\GIZCRYGM-7AM0-RUQ7-C868-FAD0CC79B2A7.thor
  • c:\Python27\include\memoryobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-5C16-FB7A8F98DE5D.thor
  • c:\Python27\include\pythread.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-EAC9-768340241443.thor
  • c:\Python27\include\cellobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-B803-62A7415C49BE.thor
  • c:\Python27\include\complexobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-DD98-12AD5ED08920.thor
  • c:\Python27\include\bytesobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-CEF7-3A29CFD327FC.thor
  • \\SHARDREALM\Users\Public\Music\Sample Music\Kalimba.mp3 -> \\SHARDREALM\Users\Public\Music\Sample Music\GIZCRYGM-7AM0-RUQ7-8037-1445A155BE31.thor
  • c:\Python27\include\datetime.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-D1D5-01610C6818B1.thor
  • c:\Python27\Lib\test\selfsigned_pythontestdotnet.pem -> c:\Python27\Lib\test\GIZCRYGM-7AM0-RUQ7-5FD8-93C8F478127D.thor
  • c:\6cdeacda242012e0e5b593e657\1032\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1032\GIZCRYGM-7AM0-RUQ7-133C-1DCF6DD5A594.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon View PDFs on mobile devices.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-8EBA-3A5A7C46EC14.thor
  • c:\Python27\include\bytearrayobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-6769-C6BA5F3C8F60.thor
  • c:\Python27\include\ucnhash.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-373C-54320C098FEC.thor
  • c:\Python27\include\sysmodule.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-4B66-1F4E3378EF5A.thor
  • c:\Python27\include\patchlevel.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-AD60-63DC11A31214.thor
  • c:\Python27\include\rangeobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-ABD2-23F05C4E5DFE.thor
  • c:\Python27\include\code.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-A251-DF251B29C2FE.thor
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs -> c:\Python27\tcl\tix8.4.3\pref\GIZCRYGM-7AM0-RUQ7-1B80-E1BA9394008C.thor
  • c:\Python27\include\descrobject.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-20F4-D9702B6CE154.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\skin.css -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\GIZCRYGM-7AM0-RUQ7-7F40-7E00E77DF9BA.thor
  • c:\Python27\Lib\email\test\data\msg_31.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-AB2C-3E4343789C30.thor
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\MasterDescriptor.x-none.xml -> c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\GIZCRYGM-7AM0-RUQ7-BD46-8DC7FB972A27.thor
  • c:\Python27\include\pycapsule.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-7A3D-0F297149A3EB.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-168D-2F44B0473C39.thor
  • c:\Python27\Lib\email\test\data\msg_38.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-8058-D923E7D91184.thor
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp -> \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\GIZCRYGM-7AM0-RUQ7-688D-76EADFE666DC.thor
  • c:\Python27\include\pyctype.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-85C3-96B2C4CD013A.thor
  • c:\Python27\Lib\email\test\data\msg_17.txt -> c:\Python27\Lib\email\test\data\GIZCRYGM-7AM0-RUQ7-E64A-64C6A5FDF67D.thor
  • \\SHARDREALM\Users\Public\Pictures\Sample Pictures\Lighthouse.jpg -> \\SHARDREALM\Users\Public\Pictures\Sample Pictures\GIZCRYGM-7AM0-RUQ7-3008-CFA42123B446.thor
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.office64ww.msi.16.x-none.xml -> c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\GIZCRYGM-7AM0-RUQ7-8959-8FD18485F940.thor
  • c:\Python27\include\metagrammar.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-B947-A3B9D78A22B6.thor
  • c:\Python27\include\structmember.h -> c:\Python27\include\GIZCRYGM-7AM0-RUQ7-52E3-E9E0FCDF51D1.thor
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf -> c:\6cdeacda242012e0e5b593e657\1025\GIZCRYGM-7AM0-RUQ7-D29D-B52A5E3DCADD.thor
Network-Connects Host
  • thisnspeel.com
Directory-Created
  • C:\Users\Harry Dresden\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YLC2QM2Y
  • C:\Users\Harry Dresden\AppData\Local\Microsoft\Windows\Caches
Directory-Enumerated
  • c:\Python27\Lib\site-packages\pip\*
  • c:\Python27\tcl\tcl8\8.5\*
  • c:\ProgramData\Sun\*
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\*
  • c:\Python27\tcl\tk8.5\demos\images\*
  • c:\Users\ruiner\*
  • c:\acugdultjv\lib\core\*
  • c:\Recovery\015e7760-d44b-11e0-8947-954f09601788\*
  • c:\PerfLogs\*
  • c:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\*
  • c:\ProgramData\Passmark\*
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\*
  • c:\Python27\Tools\pynche\X\*
  • c:\Users\Public\Music\Sample Music\*
  • c:\Python27\Lib\importlib\*
  • c:\Python27\tcl\tcl8.5\http1.0\*
  • c:\Python27\Lib\bsddb\*
  • \\SHARDREALM\Users\Harry Dresden\Pictures\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\17\*
  • c:\inetpub\wwwroot\aspnet_client\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\43\*
  • c:\ProgramData\Microsoft\Windows NT\MSFax\ActivityLog\*
  • c:\acugdultjv\modules\*
  • c:\Python27\tcl\tk8.5\ttk\*
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\*
  • c:\Users\Default\Saved Games\*
  • c:\Python27\tcl\tcl8.5\tzdata\Africa\*
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages\en-US\*
  • c:\Python27\Tools\i18n\*
  • c:\ProgramData\Microsoft\ClickToRun\*
  • c:\Python27\Lib\site-packages\pip\_vendor\lockfile\*
  • c:\ProgramData\*
  • c:\6cdeacda242012e0e5b593e657\Graphics\*
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\treebuilders\*
  • c:\Python27\Lib\compiler\*
  • c:\ProgramData\Microsoft\Windows NT\MSFax\*
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\*
  • c:\Python27\Lib\unittest\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\35\*
  • c:\Python27\Lib\test\capath\*
  • c:\Users\Harry Dresden\OneDrive\*
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\*
  • c:\ProgramData\Adobe\Acrobat\11.0\*
  • c:\ProgramData\Microsoft\Diagnosis\DownloadedSettings\*
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\*
  • c:\Python27\tcl\tcl8.5\*
  • c:\Python27\Lib\unittest\test\*
  • c:\inetpub\wwwroot\aspnet_client\system_web\4_0_30319\*
  • c:\Users\Public\Videos\Sample Videos\*
  • c:\ProgramData\Microsoft\Network\Connections\*
  • c:\Users\Public\Recorded TV\*
  • c:\Users\Harry Dresden\Contacts\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\42\*
  • c:\Python27\tcl\tk8.5\msgs\*
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\*
  • c:\Python27\tcl\tcl8.5\tzdata\Atlantic\*
  • c:\Python27\tcl\tcl8.5\tzdata\Europe\*
  • c:\ProgramData\WebEx\WebEx\*
  • c:\Python27\tcl\tk8.5\demos\*
  • c:\ProgramData\Microsoft\Windows Defender\*
  • c:\ProgramData\Microsoft\PlayReady\Cache\*
  • c:\Python27\Lib\site-packages\pip\_vendor\distlib\_backport\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\01\*
  • c:\inetpub\history\CFGHISTORY_0000000005\*
  • c:\Python27\tcl\tix8.4.3\demos\samples\*
  • c:\ProgramData\Microsoft\Windows NT\MSFax\SentItems\*
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\treewalkers\*
  • \\SHARDREALM\Users\Harry Dresden\Favorites\*
  • c:\ProgramData\Microsoft\PlayReady\Cache\S-1-5-21-3416602863-1947377224-293699093-1001\*
  • c:\6cdeacda242012e0e5b593e657\1037\*
  • c:\Python27\Lib\pydoc_data\*
  • c:\Users\Default\Pictures\*
  • \\SHARDREALM\Users\Default\Links\*
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Integration\*
  • \\SHARDREALM\Users\Public\Music\*
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\serializer\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\95\*
  • c:\inetpub\custerr\*
  • c:\6cdeacda242012e0e5b593e657\1033\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\47\*
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\packages\*
  • c:\ProgramData\Microsoft\Windows Defender\Definition Updates\Backup\*
  • \\SHARDREALM\Users\Harry Dresden\Links\*
  • c:\Python27\Scripts\*
  • c:\Users\Public\Desktop\*
  • \\SHARDREALM\Users\Harry Dresden\Videos\*
  • c:\ProgramData\Microsoft\Network\Downloader\*
  • c:\ProgramData\Microsoft\Vault\AC658CB4-9126-49BD-B877-31EEDAB3F204\*
  • c:\Python27\Tools\pynche\*
  • c:\Python27\Lib\email\test\*
  • c:\ProgramData\Mozilla\logs\*
  • c:\acugdultjv\modules\packages\*
  • c:\ProgramData\Microsoft\IdentityCRL\*
  • c:\ProgramData\Microsoft\WPD\*
  • c:\ProgramData\Microsoft\Diagnosis\LocalTraceStore\*
  • c:\ProgramData\Microsoft\Event Viewer\*
  • c:\Users\Harry Dresden\Favorites\Links for United States\*
  • c:\Users\Default\*
  • c:\ProgramData\Sun\Java\Java Update\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\17\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\43\*
  • c:\Python27\tcl\dde1.3\*
  • c:\Python27\Lib\ensurepip\_bundled\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\95\*
  • c:\PerfLogs\Admin\*
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\treeadapters\*
  • c:\Python27\Lib\idlelib\*
  • c:\Python27\Lib\site-packages\pip\models\*
  • c:\inetpub\*
  • \\SHARDREALM\Users\Harry Dresden\Music\*
  • c:\Users\Harry Dresden\Saved Games\*
  • c:\inetpub\wwwroot\msmq\*
  • c:\ProgramData\Microsoft\DRM\*
  • c:\ProgramData\Microsoft\Crypto\RSA\*
  • c:\6cdeacda242012e0e5b593e657\1025\*
  • c:\Python27\Lib\test\crashers\*
  • c:\ProgramData\Microsoft\Search\Data\Applications\*
  • c:\Python27\Lib\ctypes\test\*
  • c:\Users\Public\Libraries\*
  • c:\ProgramData\Microsoft\Device Stage\*
  • \\SHARDREALM\Users\Harry Dresden\Searches\*
  • c:\ProgramData\Microsoft\Windows NT\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\01\*
  • c:\Python27\Lib\site-packages\setuptools-16.0.dist-info\*
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\*
  • \\SHARDREALM\Users\Public\Videos\Sample Videos\*
  • c:\Python27\Lib\xml\etree\*
  • c:\acugdultjv\bin\*
  • c:\ProgramData\Microsoft\Crypto\RSA\MachineKeys\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\F3\*
  • c:\Python27\Lib\test\*
  • c:\ProgramData\Adobe\Acrobat\11.0\Replicate\Security\*
  • \\SHARDREALM\Users\Public\Libraries\*
  • c:\Python27\Lib\ctypes\macholib\*
  • c:\Python27\Lib\msilib\*
  • c:\Python27\Lib\site-packages\pip\_vendor\distlib\*
  • \\SHARDREALM\Users\Harry Dresden\Desktop\*
  • c:\6cdeacda242012e0e5b593e657\1035\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\DD\*
  • \\SHARDREALM\Users\Harry Dresden\Contacts\*
  • c:\ProgramData\Adobe\ARM\S\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\70\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\*
  • c:\Users\Default\Videos\*
  • c:\ProgramData\McAfee\MCLOGS\Common\*
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\*
  • c:\Users\Default\Documents\*
  • c:\6cdeacda242012e0e5b593e657\1031\*
  • c:\Python27\tcl\tcl8.5\tzdata\Pacific\*
  • \\SHARDREALM\Users\*
  • c:\Python27\tcl\tcl8.5\tzdata\America\North_Dakota\*
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\*
  • c:\Python27\tcl\tcl8.5\tzdata\Etc\*
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\*
  • c:\ProgramData\Adobe\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\*
  • c:\inetpub\history\CFGHISTORY_0000000001\*
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\chardet\*
  • \\SHARDREALM\Users\Default\Music\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\A6\*
  • c:\Python27\Lib\site-packages\pip\_vendor\pkg_resources\*
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\*
  • \\SHARDREALM\Users\Default\Favorites\*
  • c:\Python27\Tools\webchecker\*
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\A5\*
  • c:\ProgramData\Adobe\Acrobat\11.0\Replicate\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\CacheManager\*
  • c:\ProgramData\NovaTech Network\NovaBench\*
  • \\SHARDREALM\Users\Public\Music\Sample Music\*
  • c:\Users\Harry Dresden\Favorites\Links\*
  • c:\ProgramData\Microsoft\Assistance\*
  • c:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\*
  • c:\inetpub\wwwroot\*
  • c:\Users\Harry Dresden\*
  • c:\Python27\tcl\tcl8.5\tzdata\Antarctica\*
  • c:\Python27\Lib\site-packages\pip\_vendor\*
  • c:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\en-US\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\E0\*
  • c:\ProgramData\Adobe\ARM\S\5521\*
  • \\SHARDREALM\Users\Public\Foxit Software\*
  • c:\Users\Public\Downloads\*
  • c:\6cdeacda242012e0e5b593e657\2070\*
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\x-none.16\*
  • c:\Python27\Lib\test\cjkencodings\*
  • c:\ProgramData\Microsoft\Assistance\Client\1.0\*
  • c:\ProgramData\Microsoft\Windows Defender\Support\*
  • c:\Python27\Lib\site-packages\pip\operations\*
  • \\SHARDREALM\Users\Harry Dresden\*
  • c:\ProgramData\Microsoft\MF\*
  • c:\6cdeacda242012e0e5b593e657\1029\*
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Integration\ShortcutBackups\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\1A\*
  • c:\Python27\Lib\distutils\tests\*
  • c:\ProgramData\Microsoft\Office\*
  • c:\Users\Public\Music\*
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\*
  • c:\6cdeacda242012e0e5b593e657\1045\*
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\*
  • c:\Users\Harry Dresden\Desktop\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\*
  • c:\ProgramData\Microsoft\Crypto\*
  • \\SHARDREALM\Users\Public\Recorded TV\Sample Media\*
  • c:\Users\Public\Pictures\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\42\*
  • c:\ProgramData\Microsoft\Windows Defender\Definition Updates\Updates\*
  • c:\Python27\include\*
  • c:\Python27\Lib\lib2to3\tests\data\fixers\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Service\*
  • c:\Python27\Lib\site-packages\setuptools\*
  • c:\Python27\Lib\test\tracedmodules\*
  • c:\ProgramData\Microsoft\DRM\Server\*
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-US\*
  • c:\Python27\tcl\tcl8.5\tzdata\SystemV\*
  • c:\6cdeacda242012e0e5b593e657\1049\*
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\*
  • c:\Users\Harry Dresden\Music\*
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\*
  • c:\Python27\tcl\tcl8.5\tzdata\Mexico\*
  • c:\ProgramData\Microsoft\RAC\*
  • c:\6cdeacda242012e0e5b593e657\2052\*
  • c:\ProgramData\Microsoft\WwanSvc\*
  • c:\Python27\tcl\tcl8.5\tzdata\Arctic\*
  • c:\ProgramData\Oracle\*
  • c:\ProgramData\NovaTech Network\NovaBench\3.0.2.0\media\*
  • c:\ProgramData\Microsoft\Windows Defender\Quarantine\*
  • \\SHARDREALM\Users\Default\Pictures\*
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Queue\*
  • c:\ProgramData\Microsoft\RAC\Outbound\*
  • c:\ProgramData\WebEx\*
  • c:\inetpub\history\CFGHISTORY_0000000003\*
  • c:\Python27\Lib\site-packages\setuptools\command\*
  • c:\Python27\tcl\tcl8.5\tzdata\Indian\*
  • c:\ProgramData\Microsoft\Event Viewer\Views\*
  • c:\Users\Default\Favorites\*
  • c:\*
  • c:\Users\Default\Desktop\*
  • \\SHARDREALM\Users\Default\Desktop\*
  • c:\ProgramData\Microsoft\eHome\logs\*
  • c:\ProgramData\Microsoft\Network\*
  • c:\Python27\tcl\tcl8.5\tzdata\America\Kentucky\*
  • \\SHARDREALM\Users\Harry Dresden\Favorites\Links\*
  • c:\Python27\Lib\lib-tk\test\test_ttk\*
  • c:\Python27\tcl\tcl8.5\tzdata\US\*
  • c:\ProgramData\Microsoft\ClickToRun\UserData\*
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\*
  • c:\Users\Public\Pictures\Sample Pictures\*
  • c:\Python27\tcl\tcl8.5\msgs\*
  • c:\6cdeacda242012e0e5b593e657\1041\*
  • c:\Users\Default\Downloads\*
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\packages\ssl_match_hostname\*
  • c:\Users\Harry Dresden\Links\*
  • \\SHARDREALM\Users\Harry Dresden\Favorites\Links for United States\*
  • c:\Python27\DLLs\*
  • \\SHARDREALM\Users\Default\Documents\*
  • c:\ProgramData\Microsoft\User Account Pictures\*
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\contrib\*
  • c:\Python27\tcl\tcl8.5\tzdata\Asia\*
  • c:\Users\Harry Dresden\Downloads\*
  • c:\Python27\tcl\tcl8.5\opt0.4\*
  • c:\ProgramData\Mozilla\*
  • c:\Users\Public\Videos\*
  • c:\Python27\tcl\tcl8\8.4\*
  • c:\6cdeacda242012e0e5b593e657\1055\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\70\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Store\*
  • c:\Python27\Tools\versioncheck\*
  • c:\Python27\tcl\reg1.2\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\F7\*
  • c:\Python27\Lib\xml\dom\*
  • c:\Python27\Lib\lib2to3\tests\data\*
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\trie\*
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\*
  • c:\Python27\tcl\tcl8.5\encoding\*
  • c:\ProgramData\McAfee\*
  • c:\ProgramData\Microsoft\Diagnosis\AsimovUploader\*
  • c:\ProgramData\Microsoft\Diagnosis\ETLLogs\ShutdownLogger\*
  • c:\ProgramData\Microsoft\User Account Pictures\Default Pictures\*
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\47\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\*
  • \\SHARDREALM\Users\Public\Documents\*
  • c:\Python27\Lib\xml\parsers\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\*
  • c:\6cdeacda242012e0e5b593e657\1038\*
  • c:\Python27\tcl\tix8.4.3\*
  • c:\Python27\Lib\encodings\*
  • c:\Python27\tcl\tcl8.5\tzdata\Canada\*
  • c:\ProgramData\NovaTech Network\*
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\*
  • c:\Python27\tcl\tcl8\*
  • c:\6cdeacda242012e0e5b593e657\1053\*
  • c:\Users\Default\Music\*
  • c:\Python27\Lib\test\decimaltestdata\*
  • c:\Python27\Lib\test\xmltestdata\*
  • \\SHARDREALM\Users\Public\Desktop\*
  • c:\ProgramData\Passmark\PerformanceTest\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\*
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\*
  • \\SHARDREALM\Users\Harry Dresden\OneDrive\*
  • c:\ProgramData\Adobe\ARM\*
  • c:\ProgramData\Microsoft\Diagnosis\ETLLogs\*
  • \\SHARDREALM\Users\Harry Dresden\Documents\*
  • c:\Python27\Lib\logging\*
  • c:\ProgramData\Microsoft\eHome\*
  • c:\Users\Public\*
  • c:\6cdeacda242012e0e5b593e657\1043\*
  • c:\Python27\Lib\site-packages\*
  • c:\ProgramData\Microsoft\NetFramework\BreadcrumbStore\*
  • c:\ProgramData\Microsoft\Diagnosis\UIF\*
  • c:\Users\Harry Dresden\Searches\*
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\*
  • c:\Python27\tcl\tk8.5\*
  • \\SHARDREALM\Users\Public\*
  • c:\Python27\Lib\xml\sax\*
  • c:\ProgramData\Microsoft\Device Stage\Device\*
  • c:\ProgramData\Microsoft\Vault\*
  • c:\Users\Default\Links\*
  • c:\Python27\Lib\json\tests\*
  • c:\Python27\libs\*
  • c:\6cdeacda242012e0e5b593e657\1028\*
  • c:\Python27\Lib\lib-tk\test\test_tkinter\*
  • c:\ProgramData\Microsoft OneDrive\*
  • c:\ProgramData\Microsoft\Crypto\DSS\MachineKeys\*
  • c:\Python27\Lib\ctypes\*
  • c:\Users\Public\Recorded TV\Sample Media\*
  • \\SHARDREALM\Users\Harry Dresden\Downloads\*
  • c:\Python27\*
  • c:\ProgramData\Microsoft\Crypto\DSS\*
  • c:\ProgramData\Microsoft\Diagnosis\Sideload\*
  • c:\Python27\Lib\email\*
  • c:\ProgramData\Microsoft\Search\Data\*
  • c:\Users\Harry Dresden\Documents\*
  • c:\ProgramData\Adobe\Setup\*
  • c:\Python27\Lib\distutils\*
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Common Coverpages\*
  • c:\ProgramData\Microsoft\Device Stage\Task\*
  • c:\Users\*
  • \\SHARDREALM\Users\Public\Favorites\*
  • c:\ProgramData\Adobe\Setup\{AC76BA86-7AD7-1033-7B44-AB0000000001}\*
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\*
  • c:\Python27\Lib\sqlite3\*
  • c:\ProgramData\Sun\Java\*
  • c:\ProgramData\Microsoft\NetFramework\*
  • c:\ProgramData\Microsoft\Crypto\Keys\*
  • c:\Python27\Lib\site-packages\pip\_vendor\cachecontrol\*
  • c:\Python27\Lib\bsddb\test\*
  • c:\ProgramData\Microsoft\Windows Defender\Definition Updates\{98101498-C465-4F51-8751-D1919E97D29D}\*
  • c:\ProgramData\NovaTech Network\NovaBench\3.0.2.0\*
  • c:\Python27\Lib\site-packages\pip\_vendor\pkg_resources\tests\*
  • \\SHARDREALM\Users\ruiner\*
  • c:\Recovery\*
  • c:\Users\Public\Foxit Software\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\A6\*
  • c:\inetpub\history\CFGHISTORY_0000000002\*
  • c:\Python27\Lib\site-packages\pip\req\*
  • c:\Users\Harry Dresden\Videos\*
  • \\SHARDREALM\Users\Default\Downloads\*
  • c:\inetpub\wwwroot\aspnet_client\system_web\*
  • c:\Python27\tcl\tcl8.5\tzdata\Australia\*
  • c:\Users\Harry Dresden\Pictures\*
  • c:\ProgramData\Microsoft\DeviceSync\*
  • c:\ProgramData\WebEx\WebEx\12_1324\*
  • c:\ProgramData\Microsoft\Office\Heartbeat\*
  • c:\Python27\Lib\lib2to3\tests\data\fixers\myfixes\*
  • c:\Python27\Tools\Scripts\*
  • c:\Python27\Lib\hotshot\*
  • \\SHARDREALM\Users\Public\Videos\*
  • c:\ProgramData\Microsoft\*
  • c:\ProgramData\Microsoft\PlayReady\*
  • c:\Python27\Lib\site-packages\pip\utils\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Entries\*
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\*
  • c:\Python27\tcl\tcl8.5\tzdata\Brazil\*
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\*
  • c:\Python27\Lib\site-packages\pkg_resources\_vendor\packaging\*
  • c:\acugdultjv\lib\*
  • c:\Python27\Lib\lib2to3\*
  • c:\acugdultjv\*
  • c:\Python27\tcl\tcl8.5\tzdata\America\Argentina\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\E0\*
  • c:\ProgramData\Microsoft\WwanSvc\Profiles\*
  • c:\ProgramData\Microsoft\Windows NT\MSFax\VirtualInbox\*
  • c:\Python27\Lib\test\subprocessdata\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Quick\*
  • c:\Python27\Lib\site-packages\pip-7.0.1.dist-info\*
  • c:\Python27\Lib\site-packages\pip\_vendor\progress\*
  • c:\acugdultjv\lib\common\*
  • c:\Users\Public\Foxit Software\Foxit Reader\*
  • c:\ProgramData\Microsoft\Event Viewer\Views\ApplicationViewsRootNode\*
  • c:\ProgramData\Microsoft\Windows NT\MSFax\Inbox\*
  • c:\Python27\Lib\xml\*
  • c:\ProgramData\Microsoft\Search\*
  • c:\ProgramData\Microsoft\IlsCache\*
  • c:\Python27\tcl\tk8.5\images\*
  • e:\*
  • c:\Python27\Lib\sqlite3\test\*
  • c:\ProgramData\McAfee\MCLOGS\*
  • c:\Python27\Lib\ensurepip\*
  • c:\Python27\Lib\idlelib\Icons\*
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\*
  • c:\Python27\Lib\test\imghdrdata\*
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\*
  • c:\ProgramData\Microsoft\Diagnosis\*
  • c:\6cdeacda242012e0e5b593e657\*
  • \\SHARDREALM\Users\Default\Saved Games\*
  • c:\Python27\tcl\tcl8.5\tzdata\America\*
  • c:\Python27\Lib\site-packages\pkg_resources\_vendor\*
  • c:\6cdeacda242012e0e5b593e657\1030\*
  • \\SHARDREALM\Users\Default\Videos\*
  • c:\ProgramData\Microsoft\Device Stage\Device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\*
  • \\SHARDREALM\Users\Public\Downloads\*
  • c:\ProgramData\Microsoft\RAC\PublishedData\*
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\*
  • c:\Python27\Lib\multiprocessing\dummy\*
  • c:\Python27\Lib\email\mime\*
  • c:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\*
  • c:\Python27\tcl\tix8.4.3\demos\bitmaps\*
  • c:\Users\Public\Documents\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\35\*
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\*
  • c:\ProgramData\Microsoft\Device Stage\Task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\*
  • c:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\Cache\*
  • c:\Python27\Lib\lib-tk\*
  • c:\Users\Harry Dresden\Favorites\*
  • c:\Python27\Doc\*
  • c:\Python27\Lib\curses\*
  • c:\Python27\Lib\lib2to3\pgen2\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\1A\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\A5\*
  • c:\ProgramData\Adobe\Acrobat\*
  • c:\Python27\Lib\*
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\*
  • c:\Python27\tcl\tix8.4.3\demos\*
  • \\SHARDREALM\Users\Public\Pictures\Sample Pictures\*
  • c:\6cdeacda242012e0e5b593e657\1042\*
  • c:\Python27\Lib\test\audiodata\*
  • c:\inetpub\history\CFGHISTORY_0000000004\*
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\*
  • c:\Python27\tcl\tcl8.5\tzdata\*
  • c:\Python27\Lib\site-packages\pip\_vendor\_markerlib\*
  • c:\Python27\tcl\tcl8\8.4\platform\*
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\*
  • \\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\*
  • c:\Python27\Lib\site-packages\pip\vcs\*
  • c:\6cdeacda242012e0e5b593e657\1046\*
  • c:\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\*
  • c:\Python27\tcl\tix8.4.3\pref\*
  • c:\Python27\Lib\site-packages\pip\compat\*
  • \\SHARDREALM\Users\Public\Pictures\*
  • c:\Python27\Lib\json\*
  • c:\Python27\Lib\lib2to3\fixes\*
  • c:\ProgramData\Microsoft\Windows Defender\LocalCopy\*
  • c:\ProgramData\Microsoft\Assistance\Client\*
  • c:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\*
  • \\SHARDREALM\Users\Default\*
  • c:\acugdultjv\lib\api\*
  • c:\Python27\Lib\test\leakers\*
  • \\SHARDREALM\Users\Harry Dresden\Saved Games\*
  • c:\ProgramData\Microsoft\Media Player\*
  • c:\ProgramData\McAfee\MCLOGS\Common\jxpiinstall\*
  • c:\Python27\Lib\site-packages\pip\_vendor\html5lib\filters\*
  • c:\Python27\Tools\*
  • c:\acugdultjv\modules\auxiliary\*
  • c:\6cdeacda242012e0e5b593e657\1044\*
  • c:\6cdeacda242012e0e5b593e657\1036\*
  • c:\inetpub\history\*
  • c:\6cdeacda242012e0e5b593e657\1032\*
  • c:\Python27\tcl\tcl8.5\tzdata\Chile\*
  • c:\Python27\Lib\site-packages\pip\_vendor\packaging\*
  • \\SHARDREALM\Users\Public\Recorded TV\*
  • c:\ProgramData\Microsoft\Windows NT\MSScan\*
  • c:\Python27\Lib\email\test\data\*
  • c:\Python27\tcl\tix8.4.3\bitmaps\*
  • c:\Python27\Lib\site-packages\pip\_vendor\colorama\*
  • c:\Python27\Lib\lib2to3\tests\*
  • c:\ProgramData\regid.1991-06.com.microsoft\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\F7\*
  • c:\ProgramData\Microsoft OneDrive\setup\*
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\*
  • c:\Python27\Lib\site-packages\pip\_vendor\cachecontrol\caches\*
  • c:\Python27\Lib\distutils\command\*
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\*
  • c:\Python27\tcl\*
  • c:\Python27\Lib\site-packages\pip\commands\*
  • c:\Python27\Lib\site-packages\pkg_resources\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\ResourceData\F3\*
  • c:\Python27\Lib\multiprocessing\*
  • c:\Python27\Lib\wsgiref\*
  • c:\6cdeacda242012e0e5b593e657\3082\*
  • c:\Users\Public\Favorites\*
  • c:\Python27\Lib\lib-tk\test\*
  • c:\Python27\Lib\site-packages\pip\_vendor\requests\packages\urllib3\util\*
  • c:\ProgramData\Microsoft\RAC\StateData\*
  • c:\Python27\tcl\tcl8.5\tzdata\America\Indiana\*
  • c:\Python27\Lib\site-packages\_markerlib\*
  • c:\ProgramData\Microsoft\Windows Defender\Scans\CleanStore\Resources\DD\*
  • c:\Python27\Lib\idlelib\idle_test\*
  • c:\ProgramData\Adobe\ARM\Reader_11.0.10\*
  • c:\inetpub\custerr\en-US\*
  • c:\ProgramData\Microsoft\Windows Defender\Definition Updates\*
  • c:\6cdeacda242012e0e5b593e657\1040\*
Registry Key-Opened