Why... why would no-one at Microsoft fuzz their operating system's file browser with at least every possible four-length(?) string?