VTI SCORE: 100/100
Dynamic Analysis Report |
Classification: Ransomware, Wiper, Spyware, Trojan |
exec.exe
Windows Exe (x86-32)
Created at 2019-04-12T22:27:00
Virtual Machine Information
Name | win7_64_sp1 |
Description | - |
Architecture | x86 64-bit |
Operating System | Windows 7 |
Kernel Version | 6.1.7601.17514 (3844dbb9-2017-4967-be7a-a4a2c20430fa) |
Network Scheme Name | Local Gateway |
Network Config Name | Local Gateway |
Analyzer Information
Dynamic Analyzer Build Date | 2019-04-09 11:17 (UTC+2) |
Dynamic Analyzer Version | 3.0.1 |
Local AV Version | AVCORE v2.1 Linux/x86_64 11.0.1.18 (Aug 9, 2017) |
Local AV Database Update Release Date | 2019-04-12 20:41 (UTC+2) |
Static Analyzer Version | 1.1.0 |
VTI Ruleset Version | 3.2 |
YARA Built-in Ruleset Version | 1.2 |
Analysis Report Layout Version | 4 |
System Information
Computer Name | XDUWTFONO |
User Domain | XDUWTFONO |
User Name | 5p5NrGJn0jS HALPmcxz |
User Profile | C:\Users\5p5NrGJn0jS HALPmcxz |
Temp Directory | C:\Users\5P5NRG~1\AppData\Local\Temp |
System Root | C:\Windows |
Sample Directory | C:\Users\5p5NrGJn0jS HALPmcxz\Desktop |
Software Information
Adobe Acrobat Reader Version | 10.0.0 |
Microsoft Office | 2010 |
Microsoft Office Version | 14.0.4762.1000 |
Internet Explorer Version | 8.0.7601.17514 |
Chrome Version | 58.0.3029.110 |
Firefox Version | 25.0 |
Flash Version | 11.2.202.233 |
Java Version | 7.0.450.18 |
Microsoft Project Version | 14.0.6023.1000 |
Microsoft Visio Version | 14.0.6022.1000 |
Randomly Created Artifacts
This section provides information about processes and files that were created before the analysis was started. This is one of many steps designed to make the analysis system look more realistic and prevent evasion by environment aware malware. The number of randomly generated artifacts can be changed in the configuration.
Processes (17)
»
Filename | PID | GUI |
---|---|---|
C:\Program Files (x86)\Common Files\divisionsflat.exe | #1476 | |
C:\Program Files (x86)\Google\ram_tolerance.exe | #2020 | |
C:\Program Files (x86)\Microsoft Analysis Services\aquarium jewellery coaches.exe | #1964 | |
C:\Program Files (x86)\Mozilla Maintenance Service\delivered_magnitude.exe | #784 | |
C:\Program Files (x86)\Mozilla Maintenance Service\mounting sender ended.exe | #712 | |
C:\Program Files (x86)\Reference Assemblies\pottery_goals_fold.exe | #1448 | |
C:\Program Files (x86)\Windows NT\domain.exe | #960 | |
C:\Program Files\Common Files\islamic_assist.exe | #1540 | |
C:\Program Files\Common Files\secretsfenceflavor.exe | #1972 | |
C:\Program Files\Microsoft Analysis Services\dell.exe | #836 | |
C:\Program Files\Microsoft Analysis Services\fourth.exe | #804 | |
C:\Program Files\Microsoft Office\coordinator.exe | #792 | |
C:\Program Files\Microsoft SQL Server Compact Edition\drug.exe | #2000 | |
C:\Program Files\Microsoft SQL Server Compact Edition\willing-losing.exe | #1940 | |
C:\Program Files\Microsoft Sync Framework\enlargement_validity.exe | #808 | |
C:\Program Files\Windows Defender\gapvital.exe | #348 | |
C:\Program Files\Windows Defender\rio.exe | #1080 |
Files (271)
»
Filename |
---|
C:\Users\5P5NRG~1\AppData\Local\Temp\-YnXFZfYJK3 IVlO.wav |
C:\Users\5P5NRG~1\AppData\Local\Temp\0Qen25WMg.m4a |
C:\Users\5P5NRG~1\AppData\Local\Temp\0U1GwY.jpg |
C:\Users\5P5NRG~1\AppData\Local\Temp\0XrZNMvrHXy.csv |
C:\Users\5P5NRG~1\AppData\Local\Temp\1 hu.gif |
C:\Users\5P5NRG~1\AppData\Local\Temp\3xr-eVQKOGYZ34E.mp3 |
C:\Users\5P5NRG~1\AppData\Local\Temp\5oMuETnHP-S7WlfpOlSu.png |
C:\Users\5P5NRG~1\AppData\Local\Temp\AwIhQOzqZyn-b_f4.png |
C:\Users\5P5NRG~1\AppData\Local\Temp\CPwwNQ227anynR.bmp |
C:\Users\5P5NRG~1\AppData\Local\Temp\CYtrY1OD2PRanit.mkv |
C:\Users\5P5NRG~1\AppData\Local\Temp\Hbl3xkp8irsS-.bmp |
C:\Users\5P5NRG~1\AppData\Local\Temp\IDvo5FVdj.pdf |
C:\Users\5P5NRG~1\AppData\Local\Temp\JqoHTaT22.mp3 |
C:\Users\5P5NRG~1\AppData\Local\Temp\TlUA0FofxYZmSB Bn.gif |
C:\Users\5P5NRG~1\AppData\Local\Temp\XSKnYo15F.doc |
C:\Users\5P5NRG~1\AppData\Local\Temp\YZGA0gxdErPgcpy.avi |
C:\Users\5P5NRG~1\AppData\Local\Temp\Yb0ESaRT.bmp |
C:\Users\5P5NRG~1\AppData\Local\Temp\ZQDB73.gif |
C:\Users\5P5NRG~1\AppData\Local\Temp\aM1CeQ6qf0bMMZ.mp3 |
C:\Users\5P5NRG~1\AppData\Local\Temp\eL-dXx 2-UNEbSc.wav |
C:\Users\5P5NRG~1\AppData\Local\Temp\eSApLxOukBvfceugk.gif |
C:\Users\5P5NRG~1\AppData\Local\Temp\kfgRjeDXn8iu.wav |
C:\Users\5P5NRG~1\AppData\Local\Temp\nnfT.m4a |
C:\Users\5P5NRG~1\AppData\Local\Temp\oNAC4LxkBl6ADF.mp4 |
C:\Users\5P5NRG~1\AppData\Local\Temp\pfKR.m4a |
C:\Users\5P5NRG~1\AppData\Local\Temp\sEBQ.wav |
C:\Users\5P5NRG~1\AppData\Local\Temp\vpW8D.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\-ErXgd.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\4xJFAf.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\5_HAXPP g-i-7iPCiO2e.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\6DMG9aa.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\6ci0JU2A.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\6qo4ZLZi.csv |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\7zRGZMLtqc2sORLSkF.pps |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\CQ44PQZH.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\DEYvjqXKC-p5a4h4Ok.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\DxhDeU.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\F9iQBTh6JsYE3NMw8go0.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\GB2mGEStAE9dp.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\HGjGuaMnCM8koFJ.rtf |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\IQCk1WOIKqKA.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\J_CmiP.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\LpkaXf84Y3y05eg.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\OP3DdKr.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\OUV71DC5.swf |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\OuK6eX rKBYffUyn.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\R JNgCX-Stdfyzmy mFA.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\Uk6Qo-ok7CDEt9a.csv |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\VYOzyWVCK.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\_C79B2a4_n0vfXJt6.odp |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\_WkKzsf7W.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\_c53.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\b-Hp.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\clAsttDrcm.ods |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\kifyX0ZlBX.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\ktT xIdVRRvSjlr_RcuY.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\nMIMLhE oLgflWa-DXa.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\oIYMVr7NRYrpuIA5YZt.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\qq3rksI.docx |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\tnjr.pdf |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\w1MdTT4Wxq.swf |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\wAudKXbcuY7SjiMuiS.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\wpS2V9tUZkF.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\AppData\Roaming\y5s6.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\6FTLsd.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\7T-xab-pfacE8GgvXsB.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\8ttYfcXFhbBhXnHHPoF.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\9deII5P0-trYkA_97dJ.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\D07wOtkP4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\D07wOtkP4\6wR9giuKFJAphjeEW.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\D07wOtkP4\EgdjDG3M_GA4pVcf v.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\D07wOtkP4\NzbYhgr7XRG.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\D07wOtkP4\aB3Rdr.docx |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\D07wOtkP4\lTqEzeGMbsz.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\D07wOtkP4\pAYwNn.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\FoPmTlXOKuop2R.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\GyH9tFXtnU2kfsyVw.pdf |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\I7axOhhAwhNWrb.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\KnNS9WDAiiFvVYz7D-.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\NM9OwdEbf-b.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\OZnEXi rpCg2 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\OZnEXi rpCg2\FL 01kmtWL5HAgmaAL.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\OZnEXi rpCg2\Px2oRZW0ju4eRHrT4Mm.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\OZnEXi rpCg2\vCSx2uj4.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\OZnEXi rpCg2\zBP9e1bnfyQ.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ReVcwkpnizb6rUIU.xls |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ThKXNc1XT.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\Uw9MMlJNvm.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\XE425vM-hfc24 qDJojm.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\dvFf7Hlk.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\fw1yVQQ4bJEe.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\h9DWAy.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\mJth_o7FSbH0UAsev5.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\o4Djq-x2uVL |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\o4Djq-x2uVL\20AsLgTrMkZkMHopn.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\o4Djq-x2uVL\Lt_a1ygkTVSs46R6.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\o4Djq-x2uVL\NwMSUJw.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\o4Djq-x2uVL\bj6Rh0jlc4r77afRHZ4.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\oV5O5D9wSdG_MOwsY0.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\oVdUh4Ugc.csv |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\pGvn9-QR.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\pcEMxAF.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\t8p1dXbkwgDxC62lGDzr.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\ta4mOSmjLg.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\veaj0CBQm33.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\vi6xmFqnUtCPLKmu.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\0fkEaIWh1k-ezLz_8.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y- |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\8h3ImrKNTgE0g |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\8h3ImrKNTgE0g\903fT4zIThIEKTyMuT7D.ots |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\8h3ImrKNTgE0g\XsP7HX.doc |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\8h3ImrKNTgE0g\_Niwl24vFC ZEfC.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\8h3ImrKNTgE0g\erKA1htmg.ots |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\8h3ImrKNTgE0g\i_1YLNTeDDRTI6iyC.docx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\Z BKGrD4N |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\Z BKGrD4N\Cmo9R-1XTEaOu4GLH |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\Z BKGrD4N\Cmo9R-1XTEaOu4GLH\4i9F_Il1 |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\Z BKGrD4N\Cmo9R-1XTEaOu4GLH\4i9F_Il1\DeNpiK9Oud.doc |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\Z BKGrD4N\Cmo9R-1XTEaOu4GLH\4i9F_Il1\V2whzYbVGT.pdf |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\Z BKGrD4N\Cmo9R-1XTEaOu4GLH\4i9F_Il1\u91GP.doc |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\Z BKGrD4N\Cmo9R-1XTEaOu4GLH\9p1v7bjt7T1RE5.ods |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\Z BKGrD4N\Cmo9R-1XTEaOu4GLH\MY1YRwHW.csv |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\Z BKGrD4N\Cmo9R-1XTEaOu4GLH\ioAZiZSgJKDJy.odt |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\Z BKGrD4N\SiuhuZKaECuiEzUv.odt |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\Z BKGrD4N\WSMf-LY8_MIH2e52JL_.rtf |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\Z BKGrD4N\t3r_xU_HAYRzhZ.docx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\fZxai2mLP |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\fZxai2mLP\2oU_3.doc |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\fZxai2mLP\6opKb6.ppt |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\fZxai2mLP\T_-3t.doc |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\fZxai2mLP\cFAWLKyfz_nZthT6X.csv |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\fZxai2mLP\wSEjhu9leF- |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\fZxai2mLP\wSEjhu9leF-\0o-e7mR20i.csv |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\fZxai2mLP\wSEjhu9leF-\Fa5ewUOgzE3xDAR.xls |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\fZxai2mLP\wSEjhu9leF-\XsbvW.ppt |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\fZxai2mLP\wSEjhu9leF-\aXmuGdOcVBE.ods |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\fZxai2mLP\wSEjhu9leF-\u01pCZoo__EQA46.rtf |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\fZxai2mLP\ywUAB7tw1kCil NHujS7.pps |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\iS_jkuVwRL9K_cbE87FG.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\1siv16eVBt7Y-\qoVReCrCc_DdexZ1uF.rtf |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\AePBE.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\B5LfJ GwrrR6bKw.odt |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\B6_2-Vnlq39Px6c.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\FrA5h-q 5W4ULy.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\GNE8Qh4.docx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\TZT75yw.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\VuFT cdP3R7y8CXFbez.docx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\YMfOX888Olkz.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\c_3uVV.pdf |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\cyb_du.docx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\dHAzF3f9DE9t2ADhYIoo.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\h5YwO4Ok9d1jB.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\iXUq7CwZ.docx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\jFlmEksOzI.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\jkPk.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lNtq1T kmstods.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lihhDR8PcnPVBXcF0WOr |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lihhDR8PcnPVBXcF0WOr\1X6Tb_ump.xlsx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lihhDR8PcnPVBXcF0WOr\AtpNnEA42Ofil.ods |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lihhDR8PcnPVBXcF0WOr\M3UR.xls |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lihhDR8PcnPVBXcF0WOr\s3by04Y2.ods |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lihhDR8PcnPVBXcF0WOr\sM5nqK2Lu kC |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lihhDR8PcnPVBXcF0WOr\sM5nqK2Lu kC\bClrz8XbVVch.pdf |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lihhDR8PcnPVBXcF0WOr\sM5nqK2Lu kC\shXqFUpet9xNiuLj.ods |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\lihhDR8PcnPVBXcF0WOr\sM5nqK2Lu kC\yMVikYj-9s01azpDh.ppt |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\pPD wlVxvT9yO.docx |
C:\Users\5p5NrGJn0jS HALPmcxz\Documents\uFUu.pptx |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\HKLcdpGkbvv2YoBm |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\HKLcdpGkbvv2YoBm\2Adwwj9NYTJwF8.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\HKLcdpGkbvv2YoBm\3UWU5dw.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\HKLcdpGkbvv2YoBm\6Qn5uwUtApa.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\HKLcdpGkbvv2YoBm\QVueIe.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\HKLcdpGkbvv2YoBm\X9etM8U.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\HKLcdpGkbvv2YoBm\blTmFC8O.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\HKLcdpGkbvv2YoBm\oM2L6kWv9kWp.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\SeKJDfMT02ty2.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\15rwdjF0z.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\DSJNb7yWzXXdM9R |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\DSJNb7yWzXXdM9R\C0G0.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\DSJNb7yWzXXdM9R\FrerAV8Z-gjuttNi |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\DSJNb7yWzXXdM9R\FrerAV8Z-gjuttNi\qAm3eXzbu1xQwk145.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\DSJNb7yWzXXdM9R\FrerAV8Z-gjuttNi\tIjO HLUjtHC.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\DSJNb7yWzXXdM9R\OaHo4q4b |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\DSJNb7yWzXXdM9R\OaHo4q4b\1OmrP8kZJ7T67ZZaD.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\DSJNb7yWzXXdM9R\OaHo4q4b\Gl4LuTbe9Nis6.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\DSJNb7yWzXXdM9R\OaHo4q4b\OCug6Z1dr79ot.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\DSJNb7yWzXXdM9R\OaHo4q4b\RkLQ06vZ6rZ.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\DSJNb7yWzXXdM9R\OaHo4q4b\ZgE5jZV_URQp-KKTf |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\DSJNb7yWzXXdM9R\OaHo4q4b\ZgE5jZV_URQp-KKTf\g ICL.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\DSJNb7yWzXXdM9R\OaHo4q4b\ZgE5jZV_URQp-KKTf\nSzgsiWIwkr9jAOkmWu.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\DSJNb7yWzXXdM9R\OaHo4q4b\ZgE5jZV_URQp-KKTf\uHWJ0s2ka9l8vhODIdx.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\DSJNb7yWzXXdM9R\OaHo4q4b\vqfSimOlRiKKnw.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\Ez5862N_Yk_6.wav |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\HrIKXMx9SS8KCsxoOA.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\V7ey |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\V7ey\O693BtnnsXnoxsN.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\V7ey\kQlXuy0oL.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\hGEJFBQ5CVg6k9aNnlpY.mp3 |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\VplYC h\s_BQB.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\WlLl-_9g.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\uNDAF7f 4BRf.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Music\xLBOGNNUMVLleJAV6e.m4a |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\-tI5Q3UB ena4QO 2w.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\6O7-m LH.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\BjX2-p.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\LCY7v |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\LCY7v\XaJxiZV.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\LCY7v\YWgQdDMFg.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\LCY7v\_paWYJrw.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\LCY7v\aYcpxr-H-.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\LCY7v\svqOj60.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\LCY7v\ucGz58Fk.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\TFZ W.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\WdB1.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\cm9D EYqaX c.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\l 6GHZf6G8H_.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\mRIEH |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\mRIEH\HhlW6.bmp |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\mRIEH\KHAg3aeSzIAQ7EZZfgDY.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\mRIEH\O-OkUkQHqEDooBPHu.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\mRIEH\fKsV2KBu6bxqG3.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\mRIEH\gyEMvXd57lwngR3S.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\mRIEH\j5LDL4Qw NI4SuWNeLc3.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\n0cbh4dN7_2G5e |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\n0cbh4dN7_2G5e\7r71vg.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\n0cbh4dN7_2G5e\AIcLQY1V.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\n0cbh4dN7_2G5e\EJ_UqI.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\n0cbh4dN7_2G5e\LJMGEsp.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\n0cbh4dN7_2G5e\UNHUgpf_3pl-.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\n0cbh4dN7_2G5e\a0ufU.png |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\n0cbh4dN7_2G5e\b3hy_5529BUU.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\n0cbh4dN7_2G5e\nRnbeK sd.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\n0cbh4dN7_2G5e\tPfoYySpv.gif |
C:\Users\5p5NrGJn0jS HALPmcxz\Pictures\n0cbh4dN7_2G5e\zUniIF-.jpg |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\-HKNW.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6c2UZa.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\6lOkmni7_Q.swf |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\AmiaAp.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\BOq3Wo3BToA.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\HSVoLPibhtakIa.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\HkmuqdG7gP.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\Hlr3p3kxB.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\ITCckmiJch.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\KSrK Dj1c.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\U-DLsKGLUsXu1n0v49.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\U6BoOd0q.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\WfRe8W4n.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cE4b_ |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cE4b_\-NhRwcL QwSFS2.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cE4b_\3OsrId5CUQXb3t0G_L.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cE4b_\4KWxMN45S.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cE4b_\C_yT7EtBELGkVDFo4.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cE4b_\KDpI.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cE4b_\aFqKPe5P9o.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cE4b_\i0q0D553GbO.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cE4b_\qDCtLouEPjR9.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cE4b_\qqsa.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cE4b_\ud10SMBJz 5ZimP.swf |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cE4b_\wIBPYsvBS_c7Mj3o-.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cE4b_\wnWyQMdd8DFEd.swf |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\cE4b_\zjnsr5Ur.swf |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\gVOV_SE5Blg8N.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\mBEo3DTwT6 887SY49.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\nLlQ_RcPr.swf |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\nX2QY4T.avi |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\oyrwfs.mkv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\tPkZ5WJTmJ0.mp4 |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\uwn6Wtf3 9cv4.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\wI68lpv8Qm0zZ6.flv |
C:\Users\5p5NrGJn0jS HALPmcxz\Videos\yShn5.mkv |