'
metaflows logo
Category Started On Completed On Duration Cuckoo Version
FILE 2016-11-08 14:32:21.932570 2016-11-08 14:35:38.025624 196 seconds 2.0-dev
Machine Label Manager Started On Shutdown On
win7cuckoo win7 Clone 1 VirtualBox 2016-11-08 14:32:22 2016-11-08 14:35:37

File Details

File name dc6b3d185fd9aa208f6673bae38854633024ff30.zip
File size 1105 bytes
File type Zip archive data, at least v2.0 to extract
CRC32 9A224BCE
MD5 962f622d26cff16ad6179972e09659e1
SHA1 dc6b3d185fd9aa208f6673bae38854633024ff30
SHA256 e835ce73b1242c71f29cf28294c029158d8b8d6928fd567bae696be7a203fdac
SHA512 3eeed79287d4576a6809212d7b2bbe544db30f4c8395f55ee4ff181e9bf80996a8a498b9187f312e84607f700153593da03206402adc80c8010bdda77d1ed392
Ssdeep 24:9OpNtTWXfeaKHO42oTJTP17XfqKoumZEXi2l70OtivzlZL9vWzfNJkut9:9OpNhWXDKHO7ojjfqK9mZESwPtiPlWDb
PEiD None matched
Yara
  • PM_Zip_with_js ()
VirusTotal Permalink
VirusTotal Scan Date: 2016-11-08 13:21:05
Detection Rate: 7/56 (Expand)

MetaFlows Scores

Metaflows Analysis Results (Signatures=125, Anomalies=0, PEiD=0, Yara=2, VT[1478615779]=100): Snort Events=1, AV Events=2
Total Score=125

SNORT EVENTS:
ET POLICY PE EXE or DLL Windows file download HTTP

CLAMAV DETECTED:
Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND
DROPPED FILE - NRV_LG988J_.js: Sanesecurity.Malware.26447.JsHeur.UNOFFICIAL FOUND

Dropped File/Buffer Yara Signatures:
7531fee89ed9ec03c5ba992e9a465c8bd9457814 [BUFFER]: Str_Win32_Http_API
8294177ab6792e9793f11b3cfda853c28efe744b [BUFFER]: shellcode

Signatures

antivm_queries_computername details
recon_fingerprint details
antivm_memory_available details
dumped_buffer details
creates_doc details
antivm_network_adapters details
dumped_buffer2 details
antivm_vbox_files details
Windows_Proxy_Tinkering details
network_wscript_downloader details
persistence_ads details
antiav_detectfile details
exploit_heapspray details
malicious_document_urls details
network_document_file details
network_downloader_exe details
antivm_vbox_devices details
antivm_vbox_files details
modifies_files details

Screenshots

No screenshots available.

Static Analysis

Nothing to display.

Dropped Files

e55d30365d5f6119_gizcrygq-7am0-r3p3-008f-0b5756e9234e.thor

878a3dd2f14ff92b_gizcrygq-7am0-r3p3-74df-fc6419b96d8c.thor

73735b538d085e38_gizcrygq-7am0-r3p3-3a85-125eb680bef4.thor

1418f4fc0952cee2_gizcrygq-7am0-r3p3-cc83-efd25a1a2199.thor

75b73e7f6c42894c_gizcrygq-7am0-r3p3-d7b4-9503f3211c97.thor

1c3a3391fcbc9695_gizcrygq-7am0-r3p3-69a3-14847dbce941.thor

7b9dad63a231c66d_gizcrygq-7am0-r3p3-d6a0-bbff9c15d8a2.thor

6d626a77d7938437_gizcrygq-7am0-r3p3-31f0-cec8c29eb0de.thor

52152ab7a948c371_gizcrygq-7am0-r3p3-bdae-c34e0f485319.thor

e3d395f5b08beedb_gizcrygq-7am0-r3p3-fdcb-b9afa2cf2f25.thor

af9cb2d3ce7cef12_gizcrygq-7am0-r3p3-83b9-b18c0724a0c6.thor

faf021b3c06abc41_tasks.xml

4ed40d60b192ff0d_gizcrygq-7am0-r3p3-3090-f43feea7f1c6.thor

aa135c807fab3e1e_gizcrygq-7am0-r3p3-6b37-fa05bf348b89.thor

daf75f978c2bd4bd_gizcrygq-7am0-r3p3-9286-395b63600d24.thor

90e05afd0d60525f_gizcrygq-7am0-r3p3-67e3-dd27043ba6cb.thor

ab38850f00697ba7_gizcrygq-7am0-r3p3-44ab-7b8c4b4f1524.thor

18baa7e945df74d5_gizcrygq-7am0-r3p3-004e-1c779c6c5375.thor

0c74d924d97a524c_gizcrygq-7am0-r3p3-cabe-1bdc162a0355.thor

e341387e671d689c_gizcrygq-7am0-r3p3-9242-ad73357edac3.thor

aaab01d2f20dbd9b_gizcrygq-7am0-r3p3-ebb0-30c9dbc7f564.thor

85b9c4a9e7f6c982__9_what_is.html

433767f91e55a0b7_gizcrygq-7am0-r3p3-8056-2a11b3a0e13a.thor

972be91254d86341_gizcrygq-7am0-r3p3-38fd-5b99185370d2.thor

8e2299e6063c8429_gizcrygq-7am0-r3p3-3875-5d51a1f5e35f.thor

9370250097f9d871_gizcrygq-7am0-r3p3-8c7d-08c5077d46cd.thor

531747d4ada7942b_gizcrygq-7am0-r3p3-4d75-62042633f9d1.thor

72308ca349145fa6_gizcrygq-7am0-r3p3-ed8b-663bdd48242a.thor

53962411ef6d5452_gizcrygq-7am0-r3p3-6570-a05bae179c8b.thor

de840823ea75f302_gizcrygq-7am0-r3p3-e374-7bc6f018a19e.thor

d64f1a0256959d95_gizcrygq-7am0-r3p3-4502-c28a0b4ac381.thor

f3b4e5eb0cd12ecb_gizcrygq-7am0-r3p3-7c08-d3924b01acd4.thor

359d4b55080dcb41_gizcrygq-7am0-r3p3-a4c9-8696b4b91d8d.thor

fd5f68b59aa2b3e8_resource.xml

073fe60940792f8e_gizcrygq-7am0-r3p3-824f-f3aa612a435d.thor

de87cdf5aed9d686_gizcrygq-7am0-r3p3-ac0e-c01b953e02a5.thor

a97f10b689200746_gizcrygq-7am0-r3p3-99e1-f16f03906bf5.thor

f6e05c2435eeadd4_gizcrygq-7am0-r3p3-2c17-344d4a87c2a6.thor

98945f3879df29a0_gizcrygq-7am0-r3p3-ba91-5984cc8e2ac1.thor

6db9fcf7048a963c_gizcrygq-7am0-r3p3-7802-8c68970a4744.thor

4f36733fd42bb072_gizcrygq-7am0-r3p3-c4ed-acf074bf36dd.thor

91285575ad759784_gizcrygq-7am0-r3p3-ef72-68cc854c686c.thor

2fc55768e9ea0731_gizcrygq-7am0-r3p3-9e1b-f394bae69501.thor

e895f8bc924f66d7_gizcrygq-7am0-r3p3-4f9c-e95ce784f1a4.thor

527db68681cbff0d_gizcrygq-7am0-r3p3-f9b2-68f14eebeca3.thor

6698e31ebed7bb4b_gizcrygq-7am0-r3p3-6108-4f30b6ce2676.thor

f7d7e781acb85399_gizcrygq-7am0-r3p3-693a-970d51be16fc.thor

8bf0faf2844cb1ee_gizcrygq-7am0-r3p3-821c-ab6039730b34.thor

abb0324af31c80d2_gizcrygq-7am0-r3p3-14ff-9f57641df350.thor

c1a5a3822f762fb3_gizcrygq-7am0-r3p3-fc16-39b11565075a.thor

3ea42e02755faa5c_gizcrygq-7am0-r3p3-de5e-08fbf07b3c16.thor

37c381244ea53009_gizcrygq-7am0-r3p3-ad74-0ea8366af08d.thor

8027c2ebc7adf454_gizcrygq-7am0-r3p3-a7b5-0854932b32ee.thor

a6a13885d1d56609_gizcrygq-7am0-r3p3-94a0-adbc495fa752.thor

9d3096e817f16334_gizcrygq-7am0-r3p3-47e7-77ae7d46d274.thor

795d3519a24ec05a_gizcrygq-7am0-r3p3-4feb-a1a77b154db6.thor

f812370cb57b00dd_gizcrygq-7am0-r3p3-2969-5e0fd486c0e8.thor

999a22b66ccf7a7d_gizcrygq-7am0-r3p3-028a-42a037fd2144.thor

1c56dbcb54d8b452_gizcrygq-7am0-r3p3-e3aa-e554a0aee804.thor

fe4dc4b28fd9ba44_gizcrygq-7am0-r3p3-8c68-450c2d59ec00.thor

d24bd55daab027f4_gizcrygq-7am0-r3p3-8658-caaf652e4e91.thor

af7a12135db48bf2_resource.xml

c2f1160ae2b4d8bd_gizcrygq-7am0-r3p3-c512-8fa18086ad77.thor

bfd6e72b008ed27e_gizcrygq-7am0-r3p3-18c5-da9cb6a660d4.thor

666723472168dbec_gizcrygq-7am0-r3p3-50f7-50782c87a59a.thor

247be3b882c8394d_gizcrygq-7am0-r3p3-415b-44d19f4ccdfa.thor

b033b782ad44229b_gizcrygq-7am0-r3p3-0534-df2c5ce314b7.thor

b9da0815320c9088_gizcrygq-7am0-r3p3-f941-e61651b65262.thor

1f1fc9a8f595c6cb_gizcrygq-7am0-r3p3-d1eb-e5ba1135c23b.thor

c1844bbdecc4e960_gizcrygq-7am0-r3p3-41ce-bb8bbd6302e5.thor

52996ef2b719a55d_gizcrygq-7am0-r3p3-5e9a-28c59a0b8c3c.thor

0bff49017c6e3578_gizcrygq-7am0-r3p3-6439-552501db1a9c.thor

fcbcf314a26944f3_gizcrygq-7am0-r3p3-edd9-ace7b53c21cd.thor

eec3862b12020895_gizcrygq-7am0-r3p3-fe45-bb2d92c5e906.thor

9cb4b86167311a6e_gizcrygq-7am0-r3p3-a06d-537e565bffcf.thor

c84cb8f5a4efc441_gizcrygq-7am0-r3p3-4def-aa6410928c88.thor

1e139abad6c386b3_gizcrygq-7am0-r3p3-561d-592d4da20880.thor

1e48f9102206b1af_gizcrygq-7am0-r3p3-c019-a205d3e9c8b9.thor

0f1ecb784d875036_gizcrygq-7am0-r3p3-136a-85b30cbd0d08.thor

2a71b2f1fc19114d_gizcrygq-7am0-r3p3-36f0-47d129e72a86.thor

21dc3245031bfda8_gizcrygq-7am0-r3p3-8c3e-b82a86a76148.thor

6b044ac46114c104_gizcrygq-7am0-r3p3-fa51-f53c6d6d497c.thor

a4688b15aa37ac8a_gizcrygq-7am0-r3p3-b6de-877e51b203c3.thor

291e05d9afb9bde3_gizcrygq-7am0-r3p3-e351-153a2a5cc19b.thor

8d57db5116d3a497_gizcrygq-7am0-r3p3-ede0-40dcbd35524f.thor

b8d32b505dcdde05_gizcrygq-7am0-r3p3-bcd8-5ecbf5cd5069.thor

86c05252eacc2b5d_tasks.xml

604c5b4c32be2e31_gizcrygq-7am0-r3p3-3738-fc90573fccdc.thor

16affefcca94205c_gizcrygq-7am0-r3p3-ce18-93edc85303dc.thor

dddb315e760d5291_gizcrygq-7am0-r3p3-411e-2ceb31ddff9d.thor

406dae41b8519357_gizcrygq-7am0-r3p3-daad-e699fb175cd3.thor

77576a5abf7fd7fe_gizcrygq-7am0-r3p3-1bec-b06246c842f7.thor

7cc06afcf53e239f_gizcrygq-7am0-r3p3-5193-4915a05b6742.thor

be751024d03167d2_gizcrygq-7am0-r3p3-7953-ddd4da709327.thor

021e288881333b1a_gizcrygq-7am0-r3p3-272b-98db7d1fc0d8.thor

a31f6ac261454ee3_gizcrygq-7am0-r3p3-b809-938ace609a80.thor

2fdd08776af04994_gizcrygq-7am0-r3p3-11e5-a5294640a963.thor

88ea16d1cec99f48_gizcrygq-7am0-r3p3-6328-dcc0e2503843.thor

a40f1dea046ae46d_gizcrygq-7am0-r3p3-7662-f9158f8fcf83.thor

cc6a0a04da3360ed_gizcrygq-7am0-r3p3-6f0e-bc574be95aec.thor

6cc5fc3b3e1ba120_gizcrygq-7am0-r3p3-0e7e-940acaadba04.thor

a3191d9b06aaec9e_gizcrygq-7am0-r3p3-0e57-0298bd8daf51.thor

75b04df23e91ec39_gizcrygq-7am0-r3p3-ee47-bebd3c0a98e7.thor

e33b752c904261db_gizcrygq-7am0-r3p3-0f0d-459c30848721.thor

70f52de3cae131a6_gizcrygq-7am0-r3p3-685a-77e510ddef64.thor

099ec1b017d98c15_gizcrygq-7am0-r3p3-58c7-d184954ca173.thor

039dbe1cb429c5ca_gizcrygq-7am0-r3p3-cf4c-5d249bad48f7.thor

d9616c813dbc08b5_gizcrygq-7am0-r3p3-df35-a8ee39f1c6c3.thor

2decb5830e0104ba_gizcrygq-7am0-r3p3-3300-3b1017dec4a8.thor

09d4cf232b611dbc_gizcrygq-7am0-r3p3-e168-df07b00d35a3.thor

e8c4f2db20bb4091_gizcrygq-7am0-r3p3-84ed-08d82b098fdd.thor

5155556c513c7de3_gizcrygq-7am0-r3p3-0bd2-c4a903ffe0fd.thor

1eee3cb3f7db915b_gizcrygq-7am0-r3p3-edac-3a06145ed0d9.thor

fd46ddd3ac455fff_gizcrygq-7am0-r3p3-f72d-aadb349f1464.thor

930953371108449c_gizcrygq-7am0-r3p3-5df9-eb221bd2d1ad.thor

4916b6951a09e0ba_gizcrygq-7am0-r3p3-ce7c-a83b6fdf340a.thor

22e1621408f2de85_gizcrygq-7am0-r3p3-5e64-44c099578ac8.thor

b107c50b402b9756_gizcrygq-7am0-r3p3-f5c6-1df4da944716.thor

7a2ece01a0c6cf49_gizcrygq-7am0-r3p3-1a5f-10ae557df297.thor

088814644664edd8_gizcrygq-7am0-r3p3-faf0-becc70db9158.thor

412001e665ac1b47_gizcrygq-7am0-r3p3-fca8-ef6b22dcea68.thor

e7fe32573fea45fd_gizcrygq-7am0-r3p3-0b94-6e4a2111d195.thor

37c79a035e9e7c8e_gizcrygq-7am0-r3p3-05a5-4202bea6d20e.thor

74983285a498275d_gizcrygq-7am0-r3p3-76db-aec9a256eef9.thor

b0c0230722baa634_gizcrygq-7am0-r3p3-ca50-72e00eb0e030.thor

6753527dbdad2537_gizcrygq-7am0-r3p3-3002-5b4a72991d8a.thor

8251b35e49a9f94e_gizcrygq-7am0-r3p3-8d33-96ee1c903a30.thor

d19092e9e84d6ddd_gizcrygq-7am0-r3p3-e3d3-d13b813e10e7.thor

dde53a87f1aeb345_gizcrygq-7am0-r3p3-4c07-3bc0d891973e.thor

206d09a32e2cdc73_gizcrygq-7am0-r3p3-6ad1-dedb42da048c.thor

7a72b7946eef5175_gizcrygq-7am0-r3p3-591f-b084ef66e702.thor

011b62a786569845_gizcrygq-7am0-r3p3-a039-253e3116cd68.thor

e1ab41fe84867fcb_gizcrygq-7am0-r3p3-8006-365fa478cae0.thor

8f33263ec47e5b3a_gizcrygq-7am0-r3p3-120b-34b36c9f3740.thor

da8cc954a615b0d7_gizcrygq-7am0-r3p3-6cdc-a8181582af4b.thor

9260f9fe3ed515f3_gizcrygq-7am0-r3p3-2dd7-f0b9f99f178d.thor

7d27009589c81929_gizcrygq-7am0-r3p3-a4f1-7b13d81c0948.thor

900b882f6d9b67e6_gizcrygq-7am0-r3p3-0b15-64b315a0a2d7.thor

91cffc2207cccf7b_gizcrygq-7am0-r3p3-d4ed-d71cf1476246.thor

1eb3b0a3516c6b8b_gizcrygq-7am0-r3p3-a97a-2dd9f8fac859.thor

1522e03cacd7ab5d_gizcrygq-7am0-r3p3-c852-2b5b197c4053.thor

923c5d0dec6fee4b_gizcrygq-7am0-r3p3-c6c9-8dda0c0da7cb.thor

859409c3e75f2205_gizcrygq-7am0-r3p3-a819-e6c73ffff5e4.thor

cfee3abd135f6d47_gizcrygq-7am0-r3p3-2d02-988de0cf10cc.thor

a1e3114eabb337d4_gizcrygq-7am0-r3p3-b95a-ed946546fb1e.thor

bfec49fdd019971f_gizcrygq-7am0-r3p3-138a-f954e3de8bb0.thor

30923b5644a2b83e_gizcrygq-7am0-r3p3-b1de-f3f3a5f3d2d7.thor

fa1aaec2b6870e98_gizcrygq-7am0-r3p3-ce2b-fe664056cc9c.thor

001cec5bd00316d1_gizcrygq-7am0-r3p3-2edf-d281a80e6fb6.thor

4ea4223454848502_gizcrygq-7am0-r3p3-b994-51e31344f9c8.thor

793876a3e59609a7_gizcrygq-7am0-r3p3-89a9-8db406328892.thor

85f0019c884d60c0_gizcrygq-7am0-r3p3-2609-28b6c432be85.thor

5dd6f63ca932a3ad_gizcrygq-7am0-r3p3-2ba9-b67cbc9a5128.thor

de8c2dc6dbb12825_gizcrygq-7am0-r3p3-2900-a2a7cd670d10.thor

cdb1160b80a2968d_gizcrygq-7am0-r3p3-c970-c009c4ccadc0.thor

aeee93ebdf01c0fd_gizcrygq-7am0-r3p3-0973-ce67b61ab6f1.thor

00a53ebbb327c125_gizcrygq-7am0-r3p3-3fd1-8e5d16154dfb.thor

e4b882d9c72a862a_gizcrygq-7am0-r3p3-5775-9c77908463c3.thor

73dbfa558cd81ecc_gizcrygq-7am0-r3p3-9712-cc24e375e7c4.thor

9c1b2c654e4c2ff6_gizcrygq-7am0-r3p3-f079-375e2ac911f0.thor

60316d2176473fbd_gizcrygq-7am0-r3p3-2877-7747fc725ba0.thor

5e06723f29c5ae01_gizcrygq-7am0-r3p3-f3f7-8604f4dfc4d0.thor

ce6caeee41c2a33e_gizcrygq-7am0-r3p3-3451-932aa344e879.thor

40183da251b1693d_gizcrygq-7am0-r3p3-9dcc-8eb6e73ab93e.thor

85de46a6653df10e_gizcrygq-7am0-r3p3-2484-eff7cbe98973.thor

51b60902ed09ceea_gizcrygq-7am0-r3p3-034a-7392ac6a5a99.thor

15b48dda23e6abbc_gizcrygq-7am0-r3p3-9493-824b6f818550.thor

90116fa9777f9ac6_gizcrygq-7am0-r3p3-9db1-4c2cc6ebef45.thor

f7cbeab015b14855_gizcrygq-7am0-r3p3-867c-27a28c1c1278.thor

0621163de7c6ecac_gizcrygq-7am0-r3p3-bb0b-4e39d2853058.thor

49709be62c92b11f_gizcrygq-7am0-r3p3-cb23-6be12257478f.thor

5fcc465e586955c3_gizcrygq-7am0-r3p3-30dc-cf900add3e51.thor

ceaf9ab6b380b56c_gizcrygq-7am0-r3p3-576e-a71521cb64ba.thor

e9d26c12a07ad20e_gizcrygq-7am0-r3p3-5920-344209243d9e.thor

ca6c86bd3a432078_gizcrygq-7am0-r3p3-5866-2568ea88d36a.thor

0c95baf101cc29ba_gizcrygq-7am0-r3p3-7b3d-dd269bc64217.thor

f9458772c179ae80_gizcrygq-7am0-r3p3-699f-0b458bec83c0.thor

e092944605671849_gizcrygq-7am0-r3p3-4093-ff670925db38.thor

366160a01aefd217_gizcrygq-7am0-r3p3-2541-1c22a22736e0.thor

f72ebf6d6c9427f8_gizcrygq-7am0-r3p3-066e-cb59f31cde6b.thor

cdccbed1ad2abbd7_gizcrygq-7am0-r3p3-7937-cc87ed19066a.thor

c5420a53a127dd73_gizcrygq-7am0-r3p3-18ab-cd4070336058.thor

e788529f2fd782e0_gizcrygq-7am0-r3p3-86be-f6839b7c58fa.thor

13dfc6a7f439e19a_gizcrygq-7am0-r3p3-2b7c-73bd41faf9b4.thor

2cb0fde5c646def3_gizcrygq-7am0-r3p3-c1fb-9af2a0026102.thor

8c16c6ac5138cada_gizcrygq-7am0-r3p3-276a-d14beeee897f.thor

30bed4da3c6e9936_gizcrygq-7am0-r3p3-a50a-69a4035f122c.thor

2b7712240f9a1390_gizcrygq-7am0-r3p3-c8c7-f8a3ba87b908.thor

4db6afc9f0552280_gizcrygq-7am0-r3p3-99fa-ba6ca9116db9.thor

b3d5a3c291c220ae_gizcrygq-7am0-r3p3-f355-97f600c9b255.thor

3902dbcb71b74d12_gizcrygq-7am0-r3p3-a0c9-3b9b8e6ba65c.thor

0bfc0c0e488c882a_gizcrygq-7am0-r3p3-2db9-929ac4d3f1d6.thor

1c5bf6acd2654114_gizcrygq-7am0-r3p3-170a-278ba35f1d70.thor

29204ba21aa3a5a0_gizcrygq-7am0-r3p3-1ce5-bed0f7d87978.thor

4be661d9db0814d6_gizcrygq-7am0-r3p3-d376-130c3d5d7505.thor

9b03407ac9fd2473_gizcrygq-7am0-r3p3-7353-0213772cb497.thor

192a329baf7f2f40_gizcrygq-7am0-r3p3-93ee-3bacf421891f.thor

3dc8aab213c76a59_gizcrygq-7am0-r3p3-1bec-ab8d40a8b3e5.thor

253084e055e0e086_xzhwvlelpt.dll

cb698b7ac6166a18_gizcrygq-7am0-r3p3-f376-3397b5046ec5.thor

50975e463dce7629_gizcrygq-7am0-r3p3-e3df-5d56676ba19f.thor

8931d34acc2d60b8_behavior.xml

8edb203b860036bb_gizcrygq-7am0-r3p3-788b-f01f039978ae.thor

2fca1ef5f86826a2_gizcrygq-7am0-r3p3-5059-8b048ad930a7.thor

a0c56049b0d97b8d_gizcrygq-7am0-r3p3-669b-cb9506087582.thor

d2e5f8bc29b736e2_gizcrygq-7am0-r3p3-f5a4-da3f40c27b9b.thor

fe835c7afad021ef_gizcrygq-7am0-r3p3-3886-11383f896019.thor

9e0800eeee3ce691_gizcrygq-7am0-r3p3-ae28-a23df41f4b65.thor

7f59448033a2084f_gizcrygq-7am0-r3p3-aad7-636214db93ab.thor

11874571a2d5b3fe_gizcrygq-7am0-r3p3-a863-5466a8eac74c.thor

dc32f8ba813f42a4_gizcrygq-7am0-r3p3-7454-e63adec85bd9.thor

21277d457bd24ca4_gizcrygq-7am0-r3p3-d0d5-019b07287383.thor

4f62fa663c17a877_gizcrygq-7am0-r3p3-afa3-fb49b22d3181.thor

e8425ba05d06bead_gizcrygq-7am0-r3p3-73f5-73c5295951f8.thor

f9b8f18b0b196dac_gizcrygq-7am0-r3p3-221e-381f6c918669.thor

0778ea43c5ecb932_gizcrygq-7am0-r3p3-3c9a-4e570134a42e.thor

79a81edac5d72744_gizcrygq-7am0-r3p3-3ba4-d8386aad9250.thor

4767b04ff23b0456_gizcrygq-7am0-r3p3-4e03-e7b3a983e710.thor

24162691ffc33a0b_gizcrygq-7am0-r3p3-aa28-ad44fdc822cd.thor

13409049fb51ca32_gizcrygq-7am0-r3p3-ea51-9468bd246800.thor

d55ec9e7ce5a28ee_gizcrygq-7am0-r3p3-925d-75242719fd86.thor

7a4e19ebf94aacc4_gizcrygq-7am0-r3p3-ccb4-c9077822fe5f.thor

5aae53927fa1d6d3_gizcrygq-7am0-r3p3-a855-42d0b3075f33.thor

a22ced281cc8d00f_gizcrygq-7am0-r3p3-c362-50df20f30204.thor

26100478a9ff96de_gizcrygq-7am0-r3p3-57a7-277c8e90edb8.thor

b316c734927e1147_gizcrygq-7am0-r3p3-02da-f7b1120d4830.thor

34371891498b6548_gizcrygq-7am0-r3p3-f043-7047cffffd8a.thor

f98c5662ba829de1_gizcrygq-7am0-r3p3-e016-204e715d4b24.thor

e67416632083fabd_gizcrygq-7am0-r3p3-d7a0-9e12a7b7e776.thor

bb58e10fd0e986a3_gizcrygq-7am0-r3p3-7dde-5543da12dfd9.thor

4a0ddadb6a4e3b05_gizcrygq-7am0-r3p3-78ae-acf06f5dccc6.thor

3d032b92b034c8b2_gizcrygq-7am0-r3p3-ca6f-053ee94d8e43.thor

7065b84a56399046_gizcrygq-7am0-r3p3-b646-e7134ff00b38.thor

3ddb3a671b08cbbf_gizcrygq-7am0-r3p3-876f-ade001c84e8c.thor

78904eeaf26cb48f_gizcrygq-7am0-r3p3-7096-4c6b97b0148d.thor

7d576d2d156602b7_gizcrygq-7am0-r3p3-876b-69ad7f7b869e.thor

0f2e765ae7dceb4b_gizcrygq-7am0-r3p3-47ff-5b84e6629ba9.thor

33a2ba1f18088c10_gizcrygq-7am0-r3p3-f6a1-eb07969a76d1.thor

aeccbfb737f79ebb_gizcrygq-7am0-r3p3-3d90-181842588d9e.thor

07d183e040bda822_gizcrygq-7am0-r3p3-3293-b0ea52a2fbdd.thor

303196d069886b11_gizcrygq-7am0-r3p3-db0c-6ed8a3470975.thor

fbfd8b7cb858d94c_gizcrygq-7am0-r3p3-700e-f31c8d8a56ee.thor

45b2bfd15e20587c_gizcrygq-7am0-r3p3-bc15-34a9ad265b4f.thor

7c4196e4094cd039_gizcrygq-7am0-r3p3-2282-0733053c390e.thor

acd8846566ec1148_gizcrygq-7am0-r3p3-65a1-aeec8e16a0a1.thor

a5695e158aea1c64_gizcrygq-7am0-r3p3-3953-bd0283e1555c.thor

6f037c62d764ccc2_gizcrygq-7am0-r3p3-7790-e3ac9b27aeac.thor

421172d6c1df06ec_gizcrygq-7am0-r3p3-29d2-4cbd1e429453.thor

64071f95faa12c93_gizcrygq-7am0-r3p3-5277-e5d6f25cc730.thor

56e0305ba787ea67_gizcrygq-7am0-r3p3-a66f-a3b3a45fded5.thor

8d9069eea64f90ce_gizcrygq-7am0-r3p3-e780-332bed68c1ed.thor

cad4bd8711fd17ae_gizcrygq-7am0-r3p3-2561-7ac3a8488edc.thor

b9b51a9208ec87cb_gizcrygq-7am0-r3p3-bc86-226e7be69a4b.thor

9b325b76453a0a10_gizcrygq-7am0-r3p3-fd46-9d04639b80a7.thor

1f2cb58e24a3276e_gizcrygq-7am0-r3p3-a2f7-a2612b8f644c.thor

633c437687c87be0_gizcrygq-7am0-r3p3-5982-ad0fcb4fe9ac.thor

7b63c86e7dda52ed_gizcrygq-7am0-r3p3-0b2c-a6ba811cf53b.thor

f0572b5708c83015_behavior.xml

b25cb4e3c219e8cf_gizcrygq-7am0-r3p3-8df9-6ffbf7d64286.thor

e1c2b066f0090db4_gizcrygq-7am0-r3p3-7d77-ac58de31901c.thor

e68e0cd8bb0c8cff_gizcrygq-7am0-r3p3-159c-ddec9d8ab052.thor

0c8ab8ad49b53fc8_gizcrygq-7am0-r3p3-f336-92758ece27ef.thor

52cd14355bf44240_gizcrygq-7am0-r3p3-d65a-e5039e62a3c5.thor

5beb7499343ed9a3_gizcrygq-7am0-r3p3-1411-36d2d3852880.thor

aac9145342c57d6e_gizcrygq-7am0-r3p3-dbc9-cfd8b263900f.thor

cbf541ca8f21ea53_gizcrygq-7am0-r3p3-559f-0bf3bcbfc3cf.thor

156c565d3517333f_gizcrygq-7am0-r3p3-1aaf-a8a993e2457b.thor

83d6a275f7c11331_gizcrygq-7am0-r3p3-2633-cf2812a48c30.thor

f03c438bb073844e_gizcrygq-7am0-r3p3-fbf3-b63aa7774530.thor

c2eda29ab37529e0_gizcrygq-7am0-r3p3-c5f4-c27bcc5edbf1.thor

3c38f78cf86e7fdf_gizcrygq-7am0-r3p3-a19c-335f631247e5.thor

5ddfef485b170373_gizcrygq-7am0-r3p3-6d74-d68845eb533f.thor

e3d7380a8bf505ac_gizcrygq-7am0-r3p3-fde1-ca8c69d5e34b.thor

a431b02511488685_gizcrygq-7am0-r3p3-a4e6-bda5f2b055f4.thor

51bddf793226a594_gizcrygq-7am0-r3p3-d485-127d018e8d2f.thor

38304b28df25c6e8_gizcrygq-7am0-r3p3-7ce9-c80033da5ef4.thor

8fae791838eacc50_gizcrygq-7am0-r3p3-48a2-28f15b1d4fbc.thor

a3e79109d5901451_gizcrygq-7am0-r3p3-c2a9-4bf2f83a6c24.thor

332a6e04a0b00ad6_gizcrygq-7am0-r3p3-63e7-421f66362c62.thor

dfef82b9d2becdd6_gizcrygq-7am0-r3p3-3e0c-2c200b8ca749.thor

1acf1f7ce783be6a_gizcrygq-7am0-r3p3-9f62-2a7e8aa2085e.thor

a8c1c2d1de309147_gizcrygq-7am0-r3p3-5745-6fca8a623084.thor

035292fd685ac4de_gizcrygq-7am0-r3p3-4ba9-6ce9327af4c9.thor

a3be321051bfde7b_gizcrygq-7am0-r3p3-6af3-86db4650492d.thor

a46ab735978e5f5a_gizcrygq-7am0-r3p3-777f-e53fbdeabb70.thor

9ecf7e67a24334b7_gizcrygq-7am0-r3p3-622a-84ab481c98df.thor

2ae309a817fdde49_gizcrygq-7am0-r3p3-875d-efce120e83a8.thor

7263637b4513791f_gizcrygq-7am0-r3p3-90c2-77d3aeabb3a4.thor

19de9a70b2d9424c_gizcrygq-7am0-r3p3-0e67-685cfffcfbf0.thor

a7b28e3496f6ef19_gizcrygq-7am0-r3p3-8dbf-6f95cd3de167.thor

010c65d3a539e95b_gizcrygq-7am0-r3p3-cebd-2c747c6ebf5f.thor

cfbc2f045ecc8851_gizcrygq-7am0-r3p3-e0fa-b28d535a8eeb.thor

d0e2b8e5a625fe0b_gizcrygq-7am0-r3p3-6035-696e038ad1ef.thor

8b5d1be24c3454cc_gizcrygq-7am0-r3p3-f71e-864ebdd43b83.thor

18bb925f14669dc1_gizcrygq-7am0-r3p3-580b-0b5b450153f6.thor

3ff9b013996a77be_gizcrygq-7am0-r3p3-1079-077a65d7c857.thor

001dd84969adc1ff_gizcrygq-7am0-r3p3-8024-348618720fa9.thor

3736e8110e3e1bef_gizcrygq-7am0-r3p3-6424-830d84c87d68.thor

e7b2e2f75ea3f61f_gizcrygq-7am0-r3p3-842b-7621111fbd33.thor

853760edfe78915a_gizcrygq-7am0-r3p3-3978-d54ea4ef6e18.thor

07e9c93d8bfdfaac_gizcrygq-7am0-r3p3-b75e-1c614412cab3.thor

54744699b71716a3_gizcrygq-7am0-r3p3-167f-07aa061e799e.thor

e1bbb08856ebbbf4_gizcrygq-7am0-r3p3-84c5-811ef3f38d15.thor

428bcb2be1243b1e_gizcrygq-7am0-r3p3-451f-2aa1b1813ab0.thor

f30b6cbbf9690937_gizcrygq-7am0-r3p3-787f-db8b8e47d289.thor

059c3b112934cac2_gizcrygq-7am0-r3p3-b009-0ccf6aa2a3e2.thor

446d9ca69475c579_gizcrygq-7am0-r3p3-701e-ed2e3994ab7d.thor

eec1df1aaf6f1688_gizcrygq-7am0-r3p3-b700-c8484238ffa1.thor

eab1038f239d3747_gizcrygq-7am0-r3p3-8bb3-21c0c5e849db.thor

838f752b47a06919_gizcrygq-7am0-r3p3-6c77-363d2fb1cf28.thor

53e620ab4939987d_gizcrygq-7am0-r3p3-160c-64cf97010c63.thor

7dc034d8547b9354_gizcrygq-7am0-r3p3-4e89-9bc0e2b62df4.thor

4d334b229f730b9c_gizcrygq-7am0-r3p3-efd2-c6b1109c2f0f.thor

0f7f7dce36f6c63e_gizcrygq-7am0-r3p3-5306-1688bd2e5011.thor

f728de68bf46c0dc_gizcrygq-7am0-r3p3-d7a2-f56d8e5e0674.thor

ce5cb6c2837d67b4_gizcrygq-7am0-r3p3-654d-0fb988d843b8.thor

03d546ea72798101_gizcrygq-7am0-r3p3-82fe-f9edf496502e.thor

b35bbda24536620d_gizcrygq-7am0-r3p3-55df-1509aae576ab.thor

73ae49cd89237540_gizcrygq-7am0-r3p3-3e0d-5d423cc5ff4f.thor

a3ed836b46b1ca2d_gizcrygq-7am0-r3p3-f869-d760ad81ad69.thor

2a457a4dd66914bc_gizcrygq-7am0-r3p3-28a9-f9f889a238e3.thor

61b9a573661bb9b8_gizcrygq-7am0-r3p3-49e5-dd478c38ec50.thor

e38446671c103329_gizcrygq-7am0-r3p3-fb67-aea2e7ca90b5.thor

0e6eb78ed92552eb_gizcrygq-7am0-r3p3-ff2d-1913f25cb111.thor

461e03fad44a9e07_gizcrygq-7am0-r3p3-040b-114f489aab4b.thor

456ccf40c34835fa_gizcrygq-7am0-r3p3-e24b-a1041368cddf.thor

7e34b5d180260630_gizcrygq-7am0-r3p3-3a3a-dacdd31bc891.thor

ef9aaa0854e857ce_gizcrygq-7am0-r3p3-c285-a1aab143e266.thor

4f0470f0abcc3e0a_gizcrygq-7am0-r3p3-6ca2-61f831872a73.thor

2e7f39bcd77d6942_gizcrygq-7am0-r3p3-6d57-30ee4cea74cb.thor

daec2034d8ba70ac_gizcrygq-7am0-r3p3-9ae6-4c3feb1deea0.thor

NRV_LG988J_.js

Network Analysis

Hosts Involved

DNS Requests

HTTP Requests

Behavior Summary

File-Read
  • C:\Users\Harry Dresden\Desktop\desktop.ini
  • C:\Users\Harry Dresden\AppData\Local\Temp\NRV_LG988J_.js
  • C:\Windows\System32\wscript.exe
  • C:\Windows\System32\msxml3.dll
  • C:\Windows\System32\wshom.ocx
  • c:\Python27\include\pyexpat.h
  • c:\Python27\Lib\email\test\data\msg_45.txt
  • c:\ustnke\bin\cert.p12
  • c:\Python27\include\ast.h
  • c:\ProgramData\Microsoft\ClickToRun\DeploymentConfig.0.xml
  • c:\Python27\include\tupleobject.h
  • c:\ProgramData\Microsoft\Device Stage\Device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Enterprise PDF Reader.bmp
  • c:\Python27\include\descrobject.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ProfileRibbon.xml
  • c:\Python27\Lib\test\cjkencodings\iso2022_kr.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\content_showbg.jpg
  • c:\Python27\Lib\test\cjkencodings\gb2312.txt
  • c:\Python27\tcl\tix8.4.3\pref\SGIGray.cs
  • c:\Python27\include\grammar.h
  • UNC\SHARDREALM\Users\Harry Dresden\Desktop\ARspEezDKfSDUT.docx
  • c:\Python27\include\import.h
  • \\?\PIPE\browser
  • c:\Python27\Lib\email\test\data\msg_30.txt
  • c:\6cdeacda242012e0e5b593e657\1040\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1043\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\tab.png
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Integrate PDF into your mobile apps.bmp
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Maid with the Flaxen Hair.mp3
  • c:\Python27\Lib\test\xmltestdata\simple.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16-open.png
  • c:\Python27\Lib\test\test_doctest2.txt
  • c:\Python27\Lib\email\test\data\msg_36.txt
  • c:\6cdeacda242012e0e5b593e657\1042\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\UiInfo.xml
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Penguins.jpg
  • c:\Python27\Lib\test\cjkencodings\johab.txt
  • c:\Python27\Lib\idlelib\TODO.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\history.txt
  • c:\Python27\include\marshal.h
  • c:\Python27\Lib\email\test\data\msg_23.txt
  • c:\6cdeacda242012e0e5b593e657\2052\LocalizedData.xml
  • c:\Python27\Lib\email\test\data\msg_19.txt
  • c:\Python27\Lib\idlelib\extend.txt
  • c:\Python27\Lib\test\badcert.pem
  • c:\Python27\Lib\test\cjkencodings\euc_kr.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\base.css
  • c:\Python27\include\pgen.h
  • c:\Python27\Lib\test\floating_points.txt
  • c:\Python27\include\memoryobject.h
  • c:\Python27\include\objimpl.h
  • c:\Python27\Lib\test\math_testcases.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Publisher.Publisher.x-none.msi.16.x-none.xml
  • c:\inetpub\history\CFGHISTORY_0000000005\schema\NetFx45_IIS_schema_update.xml
  • c:\Python27\Lib\idlelib\idle_test\README.txt
  • c:\Python27\include\abstract.h
  • c:\ProgramData\WebEx\WebEx\12_1324\gpc.php
  • c:\Python27\Lib\test\keycert.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\ribbon-16.png
  • c:\Python27\Lib\test\cjkencodings\gb18030-utf8.txt
  • c:\Python27\include\object.h
  • c:\6cdeacda242012e0e5b593e657\1036\eula.rtf
  • c:\6cdeacda242012e0e5b593e657\1044\LocalizedData.xml
  • c:\Python27\Lib\test\cjkencodings\shift_jis.txt
  • c:\Python27\Lib\test\cjkencodings\euc_jisx0213.txt
  • c:\Python27\tcl\tclConfig.sh
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal create pdf from scanner documents.bmp
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs-ie.css
  • c:\Python27\include\pyport.h
  • c:\6cdeacda242012e0e5b593e657\1045\eula.rtf
  • c:\Python27\Lib\email\test\data\msg_04.txt
  • c:\6cdeacda242012e0e5b593e657\1030\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.es-es.xml
  • c:\Python27\include\code.h
  • c:\ProgramData\Microsoft\ClickToRun\MachineData\Catalog\Packages\{9AC08E99-230B-47E8-9721-4577B7F124EA}\{1A8308C7-90D1-4200-B16E-646F163A08E8}\DeploymentConfiguration.xml
  • c:\Python27\Lib\test\exception_hierarchy.txt
  • c:\Python27\include\dtoa.h
  • c:\Python27\include\asdl.h
  • c:\Python27\Lib\test\empty.vbs
  • c:\ProgramData\Microsoft\IlsCache\ilrcache.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.proofing.msi.16.en-us.xml
  • c:\Python27\include\complexobject.h
  • c:\Python27\Lib\email\test\data\msg_13.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\history_winbg.jpg
  • c:\Python27\Lib\test\tokenize_tests.txt
  • c:\6cdeacda242012e0e5b593e657\3082\eula.rtf
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon create pdf from scanner documents.bmp
  • c:\Python27\Lib\lib2to3\Grammar.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Protect Sensitive PDF Documents.bmp
  • c:\Python27\include\pystrtod.h
  • c:\Python27\include\longobject.h
  • c:\Python27\include\intobject.h
  • c:\Python27\tcl\tix8.4.3\pref\Bisque.cs
  • c:\Python27\include\pyctype.h
  • c:\Python27\Lib\email\test\data\msg_02.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\index.html
  • c:\Python27\Lib\test\nokia.pem
  • c:\Python27\include\pydebug.h
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\images\classic-16.png
  • c:\Python27\LICENSE.txt
  • c:\Python27\include\fileobject.h
  • c:\Python27\Lib\email\test\data\msg_11.txt
  • c:\Python27\include\enumobject.h
  • c:\Python27\Lib\test\ssl_key.passwd.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Enterprise PDF Reader.bmp
  • c:\Python27\include\metagrammar.h
  • c:\Python27\include\pyfpe.h
  • c:\Python27\include\compile.h
  • c:\Python27\tcl\tix8.4.3\pref\WmDefault.cs
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Proof.Culture.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\line.jpg
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\config.css
  • c:\Python27\Lib\test\https_svn_python_org_root.pem
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.officemui.msi.16.en-us.xml
  • c:\Python27\Lib\test\cjkencodings\shift_jisx0213-utf8.txt
  • c:\ProgramData\Microsoft\Device Stage\Task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-US\resource.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\ribbon Protect your PDF files with AD RMS.bmp
  • c:\Python27\include\structseq.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\js\nor.js
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.onenotemui.msi.16.en-us.xml
  • c:\Python27\Lib\test\cjkencodings\hz.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_over_bg.jpg
  • c:\Python27\Lib\test\test_doctest.txt
  • c:\Python27\Lib\test\test_doctest4.txt
  • c:\Python27\Lib\email\test\data\msg_22.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\css\tabs.css
  • c:\Python27\include\pgenheaders.h
  • c:\Python27\include\pythread.h
  • c:\Python27\NEWS.txt
  • c:\Python27\Lib\email\test\data\msg_31.txt
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Koala.jpg
  • c:\Python27\Lib\email\test\data\msg_14.txt
  • c:\Python27\Lib\email\test\data\msg_39.txt
  • c:\Python27\Lib\site-packages\setuptools\command\launcher manifest.xml
  • c:\Python27\Lib\email\test\data\msg_40.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.powerpointmui.msi.16.en-us.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\tpl\index.html
  • c:\Python27\include\opcode.h
  • c:\6cdeacda242012e0e5b593e657\1046\LocalizedData.xml
  • c:\6cdeacda242012e0e5b593e657\1025\eula.rtf
  • c:\Python27\Lib\test\wrongcert.pem
  • c:\Python27\include\moduleobject.h
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Excel.Excel.x-none.msi.16.x-none.xml
  • UNC\SHARDREALM\Users\Public\Music\Sample Music\Kalimba.mp3
  • c:\Python27\Lib\email\test\data\msg_25.txt
  • c:\Python27\include\boolobject.h
  • c:\Python27\Lib\email\test\data\msg_12.txt
  • c:\Python27\include\token.h
  • c:\Python27\include\bitset.h
  • c:\Python27\include\warnings.h
  • c:\Python27\include\pycapsule.h
  • c:\ProgramData\Microsoft\ClickToRun\ProductReleases\9E1D94D2-471F-4DC3-9EBD-E31E1E099E00\en-us.16\MasterDescriptor.en-us.xml
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.Access.Access.x-none.msi.16.x-none.xml
  • c:\Python27\Lib\email\test\data\msg_27.txt
  • c:\Python27\Lib\idlelib\NEWS.txt
  • c:\Python27\Lib\email\test\data\msg_42.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Create PDF from Office-convert PDF to office.bmp
  • c:\Python27\include\modsupport.h
  • c:\Python27\tcl\tix8.4.3\pref\TixGray.cs
  • c:\Python27\Lib\idlelib\help.txt
  • c:\6cdeacda242012e0e5b593e657\2052\eula.rtf
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.excelmui.msi.16.en-us.xml
  • c:\Python27\include\ucnhash.h
  • c:\Python27\Lib\test\check_soundcard.vbs
  • c:\Python27\Lib\test\keycert4.pem
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Integrate PDF into your mobile apps.bmp
  • c:\Python27\Lib\test\cjkencodings\cp949-utf8.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\Default\right_move_bg.jpg
  • c:\Python27\include\symtable.h
  • c:\Python27\include\node.h
  • c:\inetpub\history\CFGHISTORY_0000000004\schema\NetFx40_IIS_schema_update.xml
  • c:\Python27\Lib\test\cjkencodings\iso2022_kr-utf8.txt
  • c:\Python27\Lib\email\test\data\msg_16.txt
  • c:\Python27\Lib\idlelib\HISTORY.txt
  • UNC\SHARDREALM\Users\Harry Dresden\Downloads\big-hero-6-2.jpg
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Tulips.jpg
  • c:\Python27\Lib\test\cjkencodings\gb2312-utf8.txt
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Fastest PDF Search and Index.bmp
  • c:\Python27\Lib\email\test\data\msg_41.txt
  • c:\Python27\include\cStringIO.h
  • c:\Python27\Lib\test\cjkencodings\euc_jp.txt
  • c:\ProgramData\Microsoft\ClickToRun\{9AC08E99-230B-47e8-9721-4577B7F124EA}\C2RManifest.PowerPoint.PowerPoint.x-none.msi.16.x-none.xml
  • c:\ProgramData\Sun\Java\Java Update\jaureglist.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\advertisement\normal Design form fields easily.bmp
  • c:\Python27\Lib\email\test\data\msg_29.txt
  • c:\6cdeacda242012e0e5b593e657\2070\LocalizedData.xml
  • UNC\SHARDREALM\Users\Public\Foxit Software\Foxit Reader\StartPage\start\en_us\skin.css
  • \\?\PIPE\lsarpc
  • UNC\SHARDREALM\Users\Public\Pictures\Sample Pictures\Jellyfish.jpg
  • c:\Python27\Lib\test\cjkencodings\big5-utf8.txt
  • c:\Python27\Lib\test\formatfloat_testcases.txt