Dynamic Analysis Report |
Classification: Trojan, Worm |
1f0a6c92c237cbf344dedc841259f1da6b2d8742fcafb6926f746a48bbe0919f (SHA256)
%APPDATA%roamingmicrosoftwindowsstart menuprogramsstartup8gfg.exe
Created at 2019-01-04 14:38:00
Notifications (2/2)
The maximum number of reputation file hash requests (20 per analysis) was exceeded. As a result, the reputation status could not be queried for all file hashes. In order to get the reputation status for all file hashes, please increase the 'Max File Hash Requests' setting in the system configurations.
The operating system was rebooted during the analysis.
Virtual Machine Information
Name | win7_64_sp1 |
Description | - |
Architecture | x86 64-bit |
Operating System | Windows 7 |
Kernel Version | 6.1.7601.17514 (3844dbb9-2017-4967-be7a-a4a2c20430fa) |
Network Scheme Name | def |
Network Config Name | def |
System Information
Computer Name | XDUWTFONO |
User Domain | XDUWTFONO |
User Name | 5p5NrGJn0jS HALPmcxz |
User Profile | C:\Users\5p5NrGJn0jS HALPmcxz |
Temp Directory | C:\Users\5P5NRG~1\AppData\Local\Temp |
System Root | C:\Windows |
Sample Directory | C:\Users\5p5NrGJn0jS HALPmcxz\Desktop |
Software Information
Adobe Acrobat Reader Version | 10.0.0 |
Microsoft Office | 2010 |
Microsoft Office Version | 14.0.4762.1000 |
Internet Explorer Version | 8.0.7601.17514 |
Chrome Version | 58.0.3029.110 |
Firefox Version | 25.0 |
Flash Version | 11.2.202.233 |
Java Version | 7.0.450.18 |
Microsoft Project Version | 14.0.6023.1000 |
Microsoft Visio Version | 14.0.6022.1000 |
Randomly Created Artifacts
This section provides information about processes and files that were created before the analysis was started. This is one of many steps designed to make the analysis system look more realistic and prevent evasion by environment aware malware. The number of randomly generated artifacts can be changed in the configuration.
Filename | PID | GUI |
---|---|---|
C:\Program Files (x86)\Java\yn anthony.exe | #1372 | |
C:\Program Files (x86)\Microsoft Analysis Services\calgary.exe | #1728 | |
C:\Program Files (x86)\Microsoft Office\disk_promo_host.exe | #1760 | |
C:\Program Files (x86)\Microsoft Visual Studio 8\full mention.exe | #2024 | |
C:\Program Files (x86)\Microsoft Visual Studio 8\worse.exe | #1308 | |
C:\Program Files (x86)\Reference Assemblies\sie_viewers.exe | #1632 | |
C:\Program Files (x86)\Windows Defender\lanka manufacturer painful.exe | #1912 | |
C:\Program Files (x86)\Windows Media Player\fu-romania.exe | #1488 | |
C:\Program Files (x86)\Windows Media Player\host.exe | #1380 | |
C:\Program Files (x86)\Windows Media Player\pcs-eminem-brooklyn.exe | #1296 | |
C:\Program Files (x86)\Windows Sidebar\diff_tuning.exe | #196 | |
C:\Program Files\DVD Maker\mon_substitute.exe | #1988 | |
C:\Program Files\Internet Explorer\observe beaver executives.exe | #1412 | |
C:\Program Files\Microsoft Analysis Services\conferences fears printable.exe | #1248 | |
C:\Program Files\Microsoft Office\bite belle printed.exe | #1996 | |
C:\Program Files\Microsoft Synchronization Services\granny silly azerbaijan.exe | #1904 | |
C:\Program Files\Reference Assemblies\africa-arabic.exe | #1532 | |
C:\Program Files\Windows Defender\vehicleshedcio.exe | #1600 | |
C:\Program Files\Windows Mail\receptionmarriedexpand.exe | #1036 | |
C:\Program Files\Windows Media Player\studiessurface.exe | #908 | |
C:\Program Files\Windows NT\hughremains.exe | #1976 | |
C:\Program Files\Windows Photo Viewer\sponsored.exe | #1252 | |
C:\Program Files\Windows Photo Viewer\voting-brandon.exe | #684 | |
C:\Program Files\Windows Portable Devices\pos-spread.exe | #1584 |
Filename |
---|
C:\Users\5P5NRG~1\AppData\Local\Temp\0nw3 v-tHf.bmp |
C:\Users\5P5NRG~1\AppData\Local\Temp\1ZQaZ0PjuzesgmO3bX77.ppt |
C:\Users\5P5NRG~1\AppData\Local\Temp\2qrva-w9Fnx.ods |
C:\Users\5P5NRG~1\AppData\Local\Temp\33yfNf8rx5iQ_St_WJ1i.mp3 |
C:\Users\5P5NRG~1\AppData\Local\Temp\7E7 I_VxTLL.m4a |
C:\Users\5P5NRG~1\AppData\Local\Temp\CokebM-b2stoTJub.bmp |
C:\Users\5P5NRG~1\AppData\Local\Temp\Dv3yVI7Jvaf1.xls |
C:\Users\5P5NRG~1\AppData\Local\Temp\IqUTD5EbjYWDKmhai2.gif |
C:\Users\5P5NRG~1\AppData\Local\Temp\J2bQJQMn7DlGSqOo.mp4 |
C:\Users\5P5NRG~1\AppData\Local\Temp\JcKLMUMY3ze QB.m4a |
C:\Users\5P5NRG~1\AppData\Local\Temp\LBi10jAXd6O3MNUNgU.gif |
C:\Users\5P5NRG~1\AppData\Local\Temp\LxF6qw.jpg |
C:\Users\5P5NRG~1\AppData\Local\Temp\MArd.gif |
C:\Users\5P5NRG~1\AppData\Local\Temp\NXwJ_mL_Ii_13RihFCk.png |
C:\Users\5P5NRG~1\AppData\Local\Temp\RBgK5m0cIZ.wav |
C:\Users\5P5NRG~1\AppData\Local\Temp\RVFllT2Mjdy mB.wav |
C:\Users\5P5NRG~1\AppData\Local\Temp\RX5oQwm.wav |
C:\Users\5P5NRG~1\AppData\Local\Temp\U4CGRNpOTodwom.flv |
C:\Users\5P5NRG~1\AppData\Local\Temp\VZXxv1TZed-0i_ny.mp3 |
C:\Users\5P5NRG~1\AppData\Local\Temp\WnZT-k75ZavKWHkr4PV.bmp |
C:\Users\5P5NRG~1\AppData\Local\Temp\WqMmd.mkv |
C:\Users\5P5NRG~1\AppData\Local\Temp\X vuGPs_toZ4Cr04jiQk.m4a |
C:\Users\5P5NRG~1\AppData\Local\Temp\XFJy1lWQq.png |
C:\Users\5P5NRG~1\AppData\Local\Temp\YE8WnXGCuo1XCpV1r6.swf |
C:\Users\5P5NRG~1\AppData\Local\Temp\ZCsOB.mp3 |
C:\Users\5P5NRG~1\AppData\Local\Temp\aVWQ.avi |
C:\Users\5P5NRG~1\AppData\Local\Temp\cBpDHaZ0.avi |
C:\Users\5P5NRG~1\AppData\Local\Temp\cCgY.gif |
C:\Users\5P5NRG~1\AppData\Local\Temp\eck6m.jpg |
C:\Users\5P5NRG~1\AppData\Local\Temp\hD-l.mp3 |
C:\Users\5P5NRG~1\AppData\Local\Temp\ir4N8.docx |
C:\Users\5P5NRG~1\AppData\Local\Temp\mM8E0qwxj.mp4 |
C:\Users\5P5NRG~1\AppData\Local\Temp\vCBy90BYMd1dj.bmp |
C:\Users\5P5NRG~1\AppData\Local\Temp\vvT0tVh-UCs10.swf |
C:\Users\5P5NRG~1\AppData\Local\Temp\wo5W-dYb27Eu3EAM.mkv |
C:\Users\5P5NRG~1\AppData\Local\Temp\wrfeR34BC.gif |
C:\Users\5P5NRG~1\AppData\Local\Temp\x7TnxnD5VX_e.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\2Bo8xIXx0D.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\2sPx3ixMc.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\4jeccGFFmBJ8.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\6L4LaETe0.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\9j36GOn2Bmm7ZXn.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\BHeDOG UqQsLX7g.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\BueXtLGz-gs0fHV0VRrA.png |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\CXEM0qrQtSFQhwADHb.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\CcVWf8 yNa.rtf |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Fah9NBlZU83x7JH-Ik.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\NKspgObKlXC9LMJh-N.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\PMCfiLldBMbdb6g.png |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Qs5PqLx.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\UdfFt8AWih5eSf.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\WbkC8Y4WK.png |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\X0FL2ZEDKzT4.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Xo17kfgBMp22tj_YW.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\YpYkQaWd.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\a5d8uzgJmsSRaaDQn.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\d3DyVp_J.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\d537Ica6bDXMzEhrJLon.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\fWzus.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\meHHPNmSJQTqaXWRwX.pps |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\mllU_XoSFkB1XIXyGN.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\oFks.odt |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\sa cB7nK0oqKm3YkVfqf.docx |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\tk_E7lZYYfKhcc.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\wq_m0EYtWo5HMA.png |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\xmajsQLfeybGAJN.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\-3t69Q.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\1XLy.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\6I-6.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9NaofFUfBr8B02T7NR3Z.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\DI2bN |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\DI2bN\ROAQHxROFh6.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\DI2bN\YxjwB86hjkX7qZSUG.swf |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\DI2bN\gfUU |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\DI2bN\gfUU\0UblHDdLrZ8OH-0xk7MB.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\DI2bN\gfUU\KPnyDuVQU-uB8.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\DI2bN\gfUU\O5b3h_ T.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\DI2bN\gfUU\Xm5F8WS6G.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\DI2bN\gfUU\nGFVVPeRs.odt |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\DI2bN\gfUU\rl0zIAj6oueV8FVa.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\DI2bN\upBdhlp3_X JgbXlDh.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\EKE-q |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\EKE-q\YdKb2K2Q.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\EKE-q\rd18PqpzGoQ4o6ucMsh.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\EKE-q\wLfBJArhuhE1r.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\HVgV.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\HYUpAffV_ETJNgBPrKn.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Iuc7U05nqNLGsBw6Z4.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\LG7h 3vld.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\LbZ9HWqwr.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\MCAM2naA.swf |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\R-9RTI0g3CoFm8Z.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Swy4xCC p2ZXGx.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Td-3nenJO3kK.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\W 0RYYEkLAqH9zK.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dC3b Mtni.ots |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dj9e6rs4WdORYxWgV1kW.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\fF2oHmmICdg1.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\feiK4sDiRW.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\njOAze.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\nti3Em9e.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\pHW48-Kr-W-.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\qZ4t |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\qZ4t\_uXD2 sYd.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\qZ4t\hgW27TZ5Oht1b5r-v.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\qZ4t\lXSN8FFHbgyt2.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\qZ4t\oL13KhyXF5_n |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\qZ4t\oL13KhyXF5_n\SkudwDSAKLMHQFszw5xR.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\qZ4t\oL13KhyXF5_n\tKtIX9ZCsozwatq9j.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\qZ4t\oL13KhyXF5_n\tUlMzIQKr.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ryMvFAmi.ods |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\s-FClllBZp489.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\vgi f.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yMsMgj.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\yamB.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\-Akd6LXUyPxeBId.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\00XLaToCETrC.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0K4FVJcG2UEhsema.pps |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0inIsNUY27K.xls |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1kYxcSY4OBtFxrRa8Z.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1smhtMy8Iq.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\3Nnw64.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\4QlkIrW PFlzfS0.ods |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\54T4j_PahEJjxE.odt |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\6iQxWi_HP3U.doc |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\7f_uHNVGLkA3j0wa.odp |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\8gmq2LWtC EEbLEp.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\99RIcHIl7.docx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\AaHRrz HOp.ods |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\C7ktTcwgk4dZ.doc |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\D96yHgOSXdI4m.odp |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\EWrrYJcg8CbfB.pps |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Ektu6kwU.docx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\FEUB.xls |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\HFjDrTUjld4Qf.docx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\IZU5ZQZ-pzDtMXEU1.odp |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\J6k9hrDNNe99w04x7.ots |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Jf1X-7.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\JxzwLIMJrvVjIN5uf.ppt |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Jzm1yqh3 3.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\K1BwbliykN.rtf |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\Oyugi0J0rlST_MgnI.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\P436Ol0.csv |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\R3xzw8AGTfagAjH.odt |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\SD3A.doc |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\SPEN58zxY8Fx.doc |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\UF9Je5JHPoaAnXN.ots |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\VLI7.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\WqKaZFSFhsOy.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\WtlIagro1TOr.docx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\_2P61iTYBWcovipXXO.pps |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\cke8aUnXxHu5j.docx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\fZ8X2ON8d26.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\gHs_pKwW1gK9xTYqp.docx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\h6r6XJYO8aLM.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\j1Xr0bL-HPzRPOZ.pdf |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\jnQTepnO8.ppt |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\kK90ha9h-x2PET.doc |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lWfL5rRIsit8F.rtf |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\mpVPaz4gaLG_H0dn3o.docx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\myxngRiS1Jkozc47h9QN.doc |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\pAJdN VjRUi.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\q5c RA.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\riJ7DhVsP_jdZ.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tQvLBH.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\tmpd.pps |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\yPlc3fLsW_oQX_N31ZTc.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\0LHJZgFTuhkPKnz 3.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\27UL6lpTEyLt.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\PLV-GttJS H6mKl_-GR |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\PLV-GttJS H6mKl_-GR\DJEvYIXFNXCjz74.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\PLV-GttJS H6mKl_-GR\wINO6vA gO.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Yr2oyJk |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Yr2oyJk\Z3tVLJoaBQ-77yV.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Yr2oyJk\Z_dwcbXp yEwf5P9x.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Yr2oyJk\cDONs.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Yr2oyJk\hD5-ufX6.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Yr2oyJk\iysPItfvu3.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Yr2oyJk\kmfg_Y3rVkelnzrSx4.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\Yr2oyJk\sReh.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\ZHidwwEehMBf68RP7 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\ZHidwwEehMBf68RP7\U1Dl08RZxF.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\ZHidwwEehMBf68RP7\nd1tVwiTDjmQoSU.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\ZHidwwEehMBf68RP7\nq9hxosuJD3-.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\ZHidwwEehMBf68RP7\wIINCxTHrwPuVkaj.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\ZO46ct.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\_ecLvi.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\c7-XRWY55vN0PGwGv.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\efSLbMm0NwN3v.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\fbZVCWX |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\fbZVCWX\-XTv.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\fbZVCWX\8mtaQ913mGo5.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\fbZVCWX\MMQZEHA.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\fbZVCWX\MR4uWMuFfbqwBk.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\pcyYsb |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\pcyYsb\4EZGltWbl.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\pcyYsb\6mQIaFhEq.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\pcyYsb\9N_e1az99OSjCJWZHnIo.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\pcyYsb\brpzgG38V-WFXh5VN0X.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\pcyYsb\grzdlEBdaXwrz-MlVgJX.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\pcyYsb\il7t2EVLHw66Be3nsO.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\q0CYQBaz4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\q0CYQBaz4\JirohZsQubn_k8fI.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\q0CYQBaz4\LeT_srae2qnfR4.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\q0CYQBaz4\SEW9Ktp4B6VFWLP9s2Kq.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\q0CYQBaz4\i04WfCKry.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\tFIpDz32ah-UU ep.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\-t fI.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\4NKO6-ia.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6kTzUQrZkKud3yU.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\9H6Frl8t NdhoP.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ADb BS9yQ.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\DdXpK.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\XH7cdD0Bk.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\dQwgB4s900 |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\dQwgB4s900\LTmEj9pdht4eV.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\dQwgB4s900\MGeYCCUh_VaJQGVNxUS |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\dQwgB4s900\MGeYCCUh_VaJQGVNxUS\5nEUd.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\dQwgB4s900\MGeYCCUh_VaJQGVNxUS\Df3TLC1-6aIND.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\dQwgB4s900\MGeYCCUh_VaJQGVNxUS\QHgp-f64QWDZ1yhM ULW.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\dQwgB4s900\MGeYCCUh_VaJQGVNxUS\SLvYy6EqPw9ZmQ0.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\dQwgB4s900\MGeYCCUh_VaJQGVNxUS\WbrSjk- G.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\dQwgB4s900\MGeYCCUh_VaJQGVNxUS\ghwBtOKEe7Y7z_.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\dQwgB4s900\MGeYCCUh_VaJQGVNxUS\irjLWAQ1d.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\dQwgB4s900\MGeYCCUh_VaJQGVNxUS\j-6k83t_mJvdIhQPAuW_.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\dQwgB4s900\MGeYCCUh_VaJQGVNxUS\jvsD7kuOdIFgfNtq.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\dQwgB4s900\MGeYCCUh_VaJQGVNxUS\p_KSTagoohn2P.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\h2efIoN_7.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\h8xRIIr.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\hpt8jwywL.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\ioMHUaDzm6DRiCyR.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\pR4UsDE-qV6q |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\pR4UsDE-qV6q\5lWfJlwSClTk.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\pR4UsDE-qV6q\PQF DhBeSSDl_sYLh.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\pR4UsDE-qV6q\gnIAaKlsWN7EwOOjx4p.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\pR4UsDE-qV6q\n9GbeJ9u.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\pR4UsDE-qV6q\pXhd6YJOlEWNYfft.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\pR4UsDE-qV6q\qqZ_7.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\q6L_.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\xrIA5w5Vx0085.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\2M3yIOyn9DmJ |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\2M3yIOyn9DmJ\7r1nERzPGX_u.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\2M3yIOyn9DmJ\FzSob5quyLRL3eE4U.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\2M3yIOyn9DmJ\pQGPXJmSj.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\2M3yIOyn9DmJ\qlDYG_7Ya.swf |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\2M3yIOyn9DmJ\sMsBiGaT.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\2M3yIOyn9DmJ\soiMNDQ_SGeg4BrTnj.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\2w3_fEYfYO.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5Tcy9QyMjG8aYYFRsay |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5Tcy9QyMjG8aYYFRsay\DqNn2gV QE_rP63J0i.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5Tcy9QyMjG8aYYFRsay\GuXo_yFt0FwU.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5Tcy9QyMjG8aYYFRsay\Hm7r.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5Tcy9QyMjG8aYYFRsay\Kr5P_dEJGj |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5Tcy9QyMjG8aYYFRsay\Kr5P_dEJGj\NdR99FSxxkiCk8Jra.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5Tcy9QyMjG8aYYFRsay\Kr5P_dEJGj\UWH2qav-QxDc8Vq9KlY |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5Tcy9QyMjG8aYYFRsay\Kr5P_dEJGj\UWH2qav-QxDc8Vq9KlY\QqE4_0dM.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5Tcy9QyMjG8aYYFRsay\Kr5P_dEJGj\dALQCtTS9rEOZ_PKdo.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5Tcy9QyMjG8aYYFRsay\Kr5P_dEJGj\pH8DvAuQoL.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5Tcy9QyMjG8aYYFRsay\cFGo8T9smEQDxnrk.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\5Tcy9QyMjG8aYYFRsay\dpik WL_C.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\91HET49.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\LDSr6T-Y6vD.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\UbEvAYkK6qoaKvRI.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hhWI3mqIN_6 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hhWI3mqIN_6\4RwMBnklQ-.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hhWI3mqIN_6\7lgNHC7IKmz_.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hhWI3mqIN_6\RTtj9NBByxNBhqqpoRP.swf |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hhWI3mqIN_6\Y22MvHpVs_q E3Ty |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hhWI3mqIN_6\Y22MvHpVs_q E3Ty\-CKH9Of.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hhWI3mqIN_6\Y22MvHpVs_q E3Ty\H1W7Fx7N7_yGHMXC.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hhWI3mqIN_6\Y22MvHpVs_q E3Ty\Zny9ccZnJl4qL.swf |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hhWI3mqIN_6\aA1KsquDxy.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hhWI3mqIN_6\gHbGAp ZRn9Gn5vn9SUN.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\hhWI3mqIN_6\weE-XG.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\vaJ-pMD5YwMkk.flv |