VTI SCORE: 95/100
Dynamic Analysis Report |
Classification: - |
4095b31681f998c808b2e7338fa8adec82c9f5049df457c9f0c0fc562e2a48ab (SHA256)
Doc061120182038778905.xls
Excel Document
Created at 2018-11-06 10:22:00
Virtual Machine Information
Name | win7_64_sp1-mso2016 |
Description | - |
Architecture | x86 64-bit |
Operating System | Windows 7 |
Kernel Version | 6.1.7601.17514 (3844dbb9-2017-4967-be7a-a4a2c20430fa) |
System Information
Computer Name | YKYD69Q |
User Domain | YKYD69Q |
User Name | aETAdzjz |
User Profile | C:\Users\aETAdzjz |
Temp Directory | C:\Users\aETAdzjz\AppData\Local\Temp |
System Root | C:\Windows |
Sample Directory | C:\Users\aETAdzjz\Desktop |
Software Information
Adobe Acrobat Reader Version | 10.0.0 |
Microsoft Office | 2016 |
Microsoft Office Version | 16.0.8431.2079 |
Internet Explorer Version | 8.0.7601.17514 |
Chrome Version | 59.0.3071.115 |
Firefox Version | 25.0 |
Flash Version | 11.2.202.233 |
Java Version | 7.0.710.14 |
Microsoft Project Version | 16.0.8431.2079 |
Microsoft Visio Version | 16.0.8431.2079 |
Randomly Created Artifacts
This section provides information about processes and files that were created before the analysis was started. This is one of many steps designed to make the analysis system look more realistic and prevent evasion by environment aware malware. The number of randomly generated artifacts can be changed in the configuration.
Processes (16)
»
Filename | PID | GUI |
---|---|---|
C:\Program Files (x86)\Java\shine.exe | #1776 | |
C:\Program Files (x86)\Microsoft.NET\vids rating.exe | #2012 | |
C:\Program Files (x86)\Mozilla Firefox\te ray.exe | #1484 | |
C:\Program Files (x86)\Uninstall Information\consultants consistent.exe | #300 | |
C:\Program Files (x86)\Uninstall Information\mj vids.exe | #1028 | |
C:\Program Files (x86)\Uninstall Information\summermovieourselves.exe | #1380 | |
C:\Program Files (x86)\Windows Media Player\unless.exe | #1068 | |
C:\Program Files (x86)\Windows Portable Devices\shots-worse-nh.exe | #1844 | |
C:\Program Files (x86)\Windows Sidebar\completing.exe | #1764 | |
C:\Program Files (x86)\Windows Sidebar\renew-sonic-sms.exe | #792 | |
C:\Program Files\Internet Explorer\spend.exe | #100 | |
C:\Program Files\Microsoft Office 15\marsh.exe | #1396 | |
C:\Program Files\Reference Assemblies\wax-preparation-cardiac.exe | #1320 | |
C:\Program Files\Windows Defender\possibly.exe | #840 | |
C:\Program Files\Windows Mail\household.exe | #2036 | |
C:\Program Files\Windows Mail\regardsneoparade.exe | #1420 |
Files (281)
»
Filename |
---|
C:\Users\aETAdzjz\AppData\Local\Temp\4BTVeY.odp |
C:\Users\aETAdzjz\AppData\Local\Temp\65iN-r0NUjvPQ.swf |
C:\Users\aETAdzjz\AppData\Local\Temp\9vK AP.jpg |
C:\Users\aETAdzjz\AppData\Local\Temp\BnaonljDaTXY.mkv |
C:\Users\aETAdzjz\AppData\Local\Temp\CEgT7.wav |
C:\Users\aETAdzjz\AppData\Local\Temp\CK5YRtq4D lNinpA-.wav |
C:\Users\aETAdzjz\AppData\Local\Temp\JIFu.csv |
C:\Users\aETAdzjz\AppData\Local\Temp\KGXLvlf0C9aY_Te.avi |
C:\Users\aETAdzjz\AppData\Local\Temp\QTvpv.bmp |
C:\Users\aETAdzjz\AppData\Local\Temp\S91aD2GIJqlWGSur.xls |
C:\Users\aETAdzjz\AppData\Local\Temp\Vc_m 8LqetV8jwP1.flv |
C:\Users\aETAdzjz\AppData\Local\Temp\XKZKEFAMdS.mp4 |
C:\Users\aETAdzjz\AppData\Local\Temp\XqvKMy3-J5llkWE4oBD.mkv |
C:\Users\aETAdzjz\AppData\Local\Temp\XypZuc.gif |
C:\Users\aETAdzjz\AppData\Local\Temp\Y8vvsg3tlptT.m4a |
C:\Users\aETAdzjz\AppData\Local\Temp\Z-REFL1Q33.csv |
C:\Users\aETAdzjz\AppData\Local\Temp\_ffFul34h.png |
C:\Users\aETAdzjz\AppData\Local\Temp\_pA76DRVSCBBR.swf |
C:\Users\aETAdzjz\AppData\Local\Temp\a 1qZj1aO7.jpg |
C:\Users\aETAdzjz\AppData\Local\Temp\cOuf_OfL1najDixrqhJ.ods |
C:\Users\aETAdzjz\AppData\Local\Temp\ei8.flv |
C:\Users\aETAdzjz\AppData\Local\Temp\fIs66ShUgy.wav |
C:\Users\aETAdzjz\AppData\Local\Temp\fuCVS50QMJVZu_4.mkv |
C:\Users\aETAdzjz\AppData\Local\Temp\iBD7Uf7T.mp4 |
C:\Users\aETAdzjz\AppData\Local\Temp\kl8YjfVm vMufQ.csv |
C:\Users\aETAdzjz\AppData\Local\Temp\nUpNu3nqNABOTmPGw.flv |
C:\Users\aETAdzjz\AppData\Local\Temp\nz6vBf2CD4NfQ.png |
C:\Users\aETAdzjz\AppData\Local\Temp\uYwqME90j66KIaA.mp4 |
C:\Users\aETAdzjz\AppData\Local\Temp\wYt0PEhsF.mp4 |
C:\Users\aETAdzjz\AppData\Local\Temp\z aj8R.wav |
C:\Users\aETAdzjz\AppData\Roaming\-LTHiSwxXK8pZQ5TA.avi |
C:\Users\aETAdzjz\AppData\Roaming\0lySx81zN1mIwLei.png |
C:\Users\aETAdzjz\AppData\Roaming\10j_oLaFkT5m2T.png |
C:\Users\aETAdzjz\AppData\Roaming\282bpJ1dT_W2z7.mp3 |
C:\Users\aETAdzjz\AppData\Roaming\7AWKQbYH Q3Xhbb5a8t.mkv |
C:\Users\aETAdzjz\AppData\Roaming\9cWR73cc7l5BXKyAKO0.png |
C:\Users\aETAdzjz\AppData\Roaming\B_oT-Tt1YEP Uzx.xlsx |
C:\Users\aETAdzjz\AppData\Roaming\Cm9 WQMjga31FukJ5YN.bmp |
C:\Users\aETAdzjz\AppData\Roaming\CwBdzSRPpVClI5-B4.wav |
C:\Users\aETAdzjz\AppData\Roaming\EnFN2J.mp3 |
C:\Users\aETAdzjz\AppData\Roaming\FhOYTKqa.bmp |
C:\Users\aETAdzjz\AppData\Roaming\Jlr0Iw3dzuG.m4a |
C:\Users\aETAdzjz\AppData\Roaming\QThoswHnRRR.m4a |
C:\Users\aETAdzjz\AppData\Roaming\So5IRjaKJHv7bx.swf |
C:\Users\aETAdzjz\AppData\Roaming\TKXbHR8GTFOY7S5JzDim.mp3 |
C:\Users\aETAdzjz\AppData\Roaming\W4f3Vtj2N z.bmp |
C:\Users\aETAdzjz\AppData\Roaming\WuYdWO 1wA-t8unTd9mz.wav |
C:\Users\aETAdzjz\AppData\Roaming\_Ylj4tDO-l2GHd7bHCIa.ots |
C:\Users\aETAdzjz\AppData\Roaming\_okor1FMfutYJ1k.swf |
C:\Users\aETAdzjz\AppData\Roaming\bHmWQ8g_efgh-g-.pps |
C:\Users\aETAdzjz\AppData\Roaming\fFTdtx.wav |
C:\Users\aETAdzjz\AppData\Roaming\hSI5FaX5AeM9yxr.png |
C:\Users\aETAdzjz\AppData\Roaming\idXXwh7noHGBv.flv |
C:\Users\aETAdzjz\AppData\Roaming\ipRJbo.avi |
C:\Users\aETAdzjz\AppData\Roaming\k5yOWQaPot_ua5i.odt |
C:\Users\aETAdzjz\AppData\Roaming\lLljACo_9Pp1LWC.mp3 |
C:\Users\aETAdzjz\AppData\Roaming\nAPQd6IxE.swf |
C:\Users\aETAdzjz\AppData\Roaming\pdaTQ5p7Z0.wav |
C:\Users\aETAdzjz\AppData\Roaming\qqdnrVgV 804wf.wav |
C:\Users\aETAdzjz\AppData\Roaming\qryoZLMHredvh5_F.mp3 |
C:\Users\aETAdzjz\AppData\Roaming\r5V397aUh05WRVESP.bmp |
C:\Users\aETAdzjz\AppData\Roaming\tzfQWbv9iJ- jpkVCdF.flv |
C:\Users\aETAdzjz\AppData\Roaming\uYLyBhhZO9.m4a |
C:\Users\aETAdzjz\AppData\Roaming\xdIF4HNJJmP.m4a |
C:\Users\aETAdzjz\AppData\Roaming\zwUjkt.avi |
C:\Users\aETAdzjz\Desktop\0IbjrD.jpg |
C:\Users\aETAdzjz\Desktop\26z1.xls |
C:\Users\aETAdzjz\Desktop\7V5i.rtf |
C:\Users\aETAdzjz\Desktop\ChS9amBE2pxjf4O3MTT.mp3 |
C:\Users\aETAdzjz\Desktop\DW7x.ppt |
C:\Users\aETAdzjz\Desktop\JZQeLXM0N-Nshk6rM.doc |
C:\Users\aETAdzjz\Desktop\MCBwT0sJe8g7S3.m4a |
C:\Users\aETAdzjz\Desktop\NgnBAtYSA_nnwfj.flv |
C:\Users\aETAdzjz\Desktop\UkAFVlFxySU.csv |
C:\Users\aETAdzjz\Desktop\VQox9tg |
C:\Users\aETAdzjz\Desktop\VQox9tg\0u8n6yB9hjxYqd__9_t.mp3 |
C:\Users\aETAdzjz\Desktop\VQox9tg\639Z |
C:\Users\aETAdzjz\Desktop\VQox9tg\639Z\2DzwdfDmenO1-SE.odt |
C:\Users\aETAdzjz\Desktop\VQox9tg\639Z\5T6tS.docx |
C:\Users\aETAdzjz\Desktop\VQox9tg\639Z\8niXD65lih0ajGNXjg.mp3 |
C:\Users\aETAdzjz\Desktop\VQox9tg\639Z\SvpAcuKlgYkt.m4a |
C:\Users\aETAdzjz\Desktop\VQox9tg\639Z\kujtc2IJHQFqz_EogDqh.avi |
C:\Users\aETAdzjz\Desktop\VQox9tg\G5xREP-8P.mp3 |
C:\Users\aETAdzjz\Desktop\VQox9tg\JCh99qmO.swf |
C:\Users\aETAdzjz\Desktop\VQox9tg\NZKuP69Am2L.avi |
C:\Users\aETAdzjz\Desktop\VQox9tg\Yb2beLj8.ods |
C:\Users\aETAdzjz\Desktop\WAuI5nLx7l5nMbFKS.wav |
C:\Users\aETAdzjz\Desktop\b5Ohs2R8g1eP_3O.mkv |
C:\Users\aETAdzjz\Desktop\dnl MxU.m4a |
C:\Users\aETAdzjz\Desktop\fDuXLVYbXtTA46.mp3 |
C:\Users\aETAdzjz\Desktop\heWMC3orLzH.csv |
C:\Users\aETAdzjz\Desktop\i4K12.wav |
C:\Users\aETAdzjz\Desktop\jt0rI68g 2pO-aEGa.jpg |
C:\Users\aETAdzjz\Desktop\lTkUmCKRcB6jwt.wav |
C:\Users\aETAdzjz\Desktop\t7r_nc6Z.flv |
C:\Users\aETAdzjz\Desktop\tsztnzZmSf.mp3 |
C:\Users\aETAdzjz\Desktop\wc1bk1n9BIHUNZA.pptx |
C:\Users\aETAdzjz\Desktop\x8VS-RN33suMz.png |
C:\Users\aETAdzjz\Desktop\xPS4.mkv |
C:\Users\aETAdzjz\Desktop\xrunAG4YkHmEmvA.swf |
C:\Users\aETAdzjz\Desktop\zP0-47mA50a61c6 |
C:\Users\aETAdzjz\Desktop\zP0-47mA50a61c6\6t0D0A_.m4a |
C:\Users\aETAdzjz\Desktop\zP0-47mA50a61c6\90E wPEJ1.gif |
C:\Users\aETAdzjz\Desktop\zP0-47mA50a61c6\l5L0d AgpLHC-0221.ots |
C:\Users\aETAdzjz\Documents\-ROpRMi2dTHD.odp |
C:\Users\aETAdzjz\Documents\1V7uSReZv1rjS-wSv.xlsx |
C:\Users\aETAdzjz\Documents\1l Icd6GVbS8.pptx |
C:\Users\aETAdzjz\Documents\2UuykZLMn_2V8clAl.xlsx |
C:\Users\aETAdzjz\Documents\2xNgN.xlsx |
C:\Users\aETAdzjz\Documents\3ApqIsRX9h.rtf |
C:\Users\aETAdzjz\Documents\6MpHVZxgV.xlsx |
C:\Users\aETAdzjz\Documents\8P6GImV58.doc |
C:\Users\aETAdzjz\Documents\A_bgX_s2eYOjOU8jmijs.rtf |
C:\Users\aETAdzjz\Documents\B41UU9Xfx96Du1.pdf |
C:\Users\aETAdzjz\Documents\B5zDdXsVievJQMy.pptx |
C:\Users\aETAdzjz\Documents\BnRFfH VXuAX.pptx |
C:\Users\aETAdzjz\Documents\CJuxL.ods |
C:\Users\aETAdzjz\Documents\IIrXXwjkIj_a.pdf |
C:\Users\aETAdzjz\Documents\JnHZ.ods |
C:\Users\aETAdzjz\Documents\KUyIyeG5kvjz.ots |
C:\Users\aETAdzjz\Documents\LfZ byEbA8w-.odp |
C:\Users\aETAdzjz\Documents\P-tHGE7.ots |
C:\Users\aETAdzjz\Documents\PKekwBoeyiF618XXOb.odt |
C:\Users\aETAdzjz\Documents\PWXlKva_umG.docx |
C:\Users\aETAdzjz\Documents\Pn4leAJ1I_fraNH.xls |
C:\Users\aETAdzjz\Documents\RGXQjv.xlsx |
C:\Users\aETAdzjz\Documents\RLhzC.rtf |
C:\Users\aETAdzjz\Documents\SBA6OKY54.ppt |
C:\Users\aETAdzjz\Documents\SWZfPsLwgO.docx |
C:\Users\aETAdzjz\Documents\SqDmwaxXXc.docx |
C:\Users\aETAdzjz\Documents\Thn9B5bT__iu-MEXZPhV.pptx |
C:\Users\aETAdzjz\Documents\V4NTOQFDl8h.docx |
C:\Users\aETAdzjz\Documents\VD8Mxn.pdf |
C:\Users\aETAdzjz\Documents\Ve8D1sY9_ZRO.docx |
C:\Users\aETAdzjz\Documents\XGM_7YhcPWon_LVx3.rtf |
C:\Users\aETAdzjz\Documents\YFQWheU9nij.xlsx |
C:\Users\aETAdzjz\Documents\YfoMpgDC7.docx |
C:\Users\aETAdzjz\Documents\_lKH8pUZ J_Ng44.odp |
C:\Users\aETAdzjz\Documents\_qi_tQH-lj.xlsx |
C:\Users\aETAdzjz\Documents\aHou9SPQ1EFXtLVOA.docx |
C:\Users\aETAdzjz\Documents\aShFiq531cNTjU.odp |
C:\Users\aETAdzjz\Documents\azL04xFNDnFcosHE6.xlsx |
C:\Users\aETAdzjz\Documents\dKG5ATy.docx |
C:\Users\aETAdzjz\Documents\d_rKvfk JxWr.pps |
C:\Users\aETAdzjz\Documents\e7pjXQh.rtf |
C:\Users\aETAdzjz\Documents\epzbLEEu8Qvfz1e.ods |
C:\Users\aETAdzjz\Documents\hvB 4.pps |
C:\Users\aETAdzjz\Documents\iPmvdwE YmRqkLP2g.pptx |
C:\Users\aETAdzjz\Documents\l1B2WQYq XR5 F4Cadp.xlsx |
C:\Users\aETAdzjz\Documents\lX_Szbwtzx.odt |
C:\Users\aETAdzjz\Documents\mqP5s.pptx |
C:\Users\aETAdzjz\Documents\n92PAuLgDj.xlsx |
C:\Users\aETAdzjz\Documents\oDbQEN.pptx |
C:\Users\aETAdzjz\Documents\qCAJ.pdf |
C:\Users\aETAdzjz\Documents\rdJu0na.docx |
C:\Users\aETAdzjz\Documents\ryVvXhq 2.rtf |
C:\Users\aETAdzjz\Documents\st9a8An2v7Dy.doc |
C:\Users\aETAdzjz\Documents\to PkQKBGl.xls |
C:\Users\aETAdzjz\Documents\zMT7EUbEB.ots |
C:\Users\aETAdzjz\Music\3_yhwinIKZ32Ym894E.wav |
C:\Users\aETAdzjz\Music\59dbLsqRUrSoc |
C:\Users\aETAdzjz\Music\59dbLsqRUrSoc\y0-P wn0Ib.mp3 |
C:\Users\aETAdzjz\Music\B8aK1g.wav |
C:\Users\aETAdzjz\Music\iG8TsHmUh_9w.wav |
C:\Users\aETAdzjz\Music\jvvyY1 |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\3odm9.mp3 |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\6oDwSmznDPl9w.mp3 |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\7I bSKDw.mp3 |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\MuH7Qumk.m4a |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\TOwRS26n3Ot8 |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\TOwRS26n3Ot8\RjCYX80 |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\TOwRS26n3Ot8\RjCYX80\-BEVRSFg-LZtx Tf.m4a |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\TOwRS26n3Ot8\RjCYX80\LZh6.mp3 |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\TOwRS26n3Ot8\RjCYX80\Xxvu0.mp3 |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\TOwRS26n3Ot8\RjCYX80\YASfYoAxy0YsbBFTkhuI.wav |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\TOwRS26n3Ot8\RjCYX80\b0EeST.m4a |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\TOwRS26n3Ot8\RjCYX80\vaJuzd8wvOCq-U1wLddB.m4a |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\TOwRS26n3Ot8\gCj 2vsyAjEHg |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\TOwRS26n3Ot8\gCj 2vsyAjEHg\2qvxAqDgmw-D9Wt6YS.mp3 |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\TOwRS26n3Ot8\gCj 2vsyAjEHg\EDrjyesJGwj6c.m4a |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\TOwRS26n3Ot8\gCj 2vsyAjEHg\e4ovl.mp3 |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\TOwRS26n3Ot8\hCWVbhs6YL2ogsavCFbS.mp3 |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\TOwRS26n3Ot8\iIlN4MknYW.wav |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\TOwRS26n3Ot8\pZ4HXG5jCvTDP.m4a |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\TOwRS26n3Ot8\vtAKSJF-6vU1.m4a |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\TOwRS26n3Ot8\wStUDqy5 9.m4a |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\TOwRS26n3Ot8\yRvSiu.mp3 |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\kbfauOBt.mp3 |
C:\Users\aETAdzjz\Music\jvvyY1\4e46Ueyb430xJInc5f\xGaDsxrEGp1ksxLOf.wav |
C:\Users\aETAdzjz\Music\jvvyY1\R_MPLmirrS.m4a |
C:\Users\aETAdzjz\Music\jvvyY1\cNbDIBB2 |
C:\Users\aETAdzjz\Music\jvvyY1\cNbDIBB2\oWM58cAKOsS 0.m4a |
C:\Users\aETAdzjz\Music\jvvyY1\cNbDIBB2\xL1rzutosj.wav |
C:\Users\aETAdzjz\Music\jvvyY1\cNbDIBB2\zG8khcRAnQLZ2h92_O.m4a |
C:\Users\aETAdzjz\Music\jvvyY1\nAa1USD5nzz13oh4ze |
C:\Users\aETAdzjz\Music\jvvyY1\nAa1USD5nzz13oh4ze\8NqV rDOD.m4a |
C:\Users\aETAdzjz\Music\jvvyY1\nAa1USD5nzz13oh4ze\dMM19.wav |
C:\Users\aETAdzjz\Music\jvvyY1\nAa1USD5nzz13oh4ze\hGQa15o5.wav |
C:\Users\aETAdzjz\Music\jvvyY1\zz03UrewztA.mp3 |
C:\Users\aETAdzjz\Music\tLSR8ku.m4a |
C:\Users\aETAdzjz\Music\xRl4TllIjkZ3cW.wav |
C:\Users\aETAdzjz\Music\yT8Q2WySjNcqeLvu6.mp3 |
C:\Users\aETAdzjz\Pictures\0VH38hgXFjW |
C:\Users\aETAdzjz\Pictures\9Eymwcq |
C:\Users\aETAdzjz\Pictures\9Eymwcq\0_B3I |
C:\Users\aETAdzjz\Pictures\9Eymwcq\0_B3I\vaBlCJRjLPyB |
C:\Users\aETAdzjz\Pictures\9Eymwcq\0_B3I\vaBlCJRjLPyB\8GmO480S9T.png |
C:\Users\aETAdzjz\Pictures\9Eymwcq\0_B3I\vaBlCJRjLPyB\AH9n.jpg |
C:\Users\aETAdzjz\Pictures\9Eymwcq\0_B3I\vaBlCJRjLPyB\mO65gUc9bdmRLf1.jpg |
C:\Users\aETAdzjz\Pictures\9Eymwcq\40ERP |
C:\Users\aETAdzjz\Pictures\9Eymwcq\40ERP\NPpO0L.gif |
C:\Users\aETAdzjz\Pictures\9Eymwcq\40ERP\YWydnkv9Df7uEXgDLY |
C:\Users\aETAdzjz\Pictures\9Eymwcq\40ERP\YWydnkv9Df7uEXgDLY\45rC.png |
C:\Users\aETAdzjz\Pictures\9Eymwcq\40ERP\YWydnkv9Df7uEXgDLY\SVRO5yd1i-T8W.jpg |
C:\Users\aETAdzjz\Pictures\9Eymwcq\40ERP\YWydnkv9Df7uEXgDLY\TG72NxQcxmw45Lubicn.gif |
C:\Users\aETAdzjz\Pictures\9Eymwcq\40ERP\YWydnkv9Df7uEXgDLY\hrfL78q.jpg |
C:\Users\aETAdzjz\Pictures\9Eymwcq\40ERP\YWydnkv9Df7uEXgDLY\kUW0mAGnm |
C:\Users\aETAdzjz\Pictures\9Eymwcq\40ERP\YWydnkv9Df7uEXgDLY\kUW0mAGnm\Oe73G4V-Pggh5MAN.gif |
C:\Users\aETAdzjz\Pictures\9Eymwcq\40ERP\YWydnkv9Df7uEXgDLY\kUW0mAGnm\j7Gu9nT.bmp |
C:\Users\aETAdzjz\Pictures\9Eymwcq\40ERP\YWydnkv9Df7uEXgDLY\kUW0mAGnm\z-_WvKSBqE.png |
C:\Users\aETAdzjz\Pictures\9Eymwcq\40ERP\YWydnkv9Df7uEXgDLY\rh69-aG6vZE.png |
C:\Users\aETAdzjz\Pictures\9Eymwcq\40ERP\YWydnkv9Df7uEXgDLY\sfANT.jpg |
C:\Users\aETAdzjz\Pictures\9Eymwcq\40ERP\lkfeRrIPKEtuRsxd.png |
C:\Users\aETAdzjz\Pictures\9Eymwcq\4hKq03u_X LG9w -.gif |
C:\Users\aETAdzjz\Pictures\CMwQPHjz.gif |
C:\Users\aETAdzjz\Pictures\R2WuJ ZTRbM_mc2c.jpg |
C:\Users\aETAdzjz\Pictures\oAtm |
C:\Users\aETAdzjz\Pictures\oAtm\BO00c_gW6v EpDFSj.png |
C:\Users\aETAdzjz\Pictures\oAtm\CgEV |
C:\Users\aETAdzjz\Pictures\oAtm\CgEV\Al6a32TBSDrCggj7Z.bmp |
C:\Users\aETAdzjz\Pictures\oAtm\CgEV\IZoS0.png |
C:\Users\aETAdzjz\Pictures\oAtm\CgEV\RDGIX.jpg |
C:\Users\aETAdzjz\Pictures\oAtm\CgEV\k7qK80uP.jpg |
C:\Users\aETAdzjz\Pictures\oAtm\DhC So8OCVgI5BHFyN.png |
C:\Users\aETAdzjz\Pictures\oAtm\DuuZ.jpg |
C:\Users\aETAdzjz\Pictures\oAtm\a2 BIxvjO.bmp |
C:\Users\aETAdzjz\Pictures\oAtm\kqNMLTgs5J6.png |
C:\Users\aETAdzjz\Pictures\oAtm\mjd4phe-I_8l3Q6qpiO.bmp |
C:\Users\aETAdzjz\Pictures\pY 31ffHh9Y5Xh6c |
C:\Users\aETAdzjz\Pictures\pY 31ffHh9Y5Xh6c\Aa7P67wxh.bmp |
C:\Users\aETAdzjz\Pictures\pY 31ffHh9Y5Xh6c\ibU2cY0I-7A8kccD.png |
C:\Users\aETAdzjz\Videos\0fOaUXnxnw4V-.flv |
C:\Users\aETAdzjz\Videos\3sXUGx4i |
C:\Users\aETAdzjz\Videos\3sXUGx4i\670- pxszf.swf |
C:\Users\aETAdzjz\Videos\3sXUGx4i\8NQA8dRA.mkv |
C:\Users\aETAdzjz\Videos\3sXUGx4i\KLNlehhHIq7weDMz.flv |
C:\Users\aETAdzjz\Videos\3sXUGx4i\PNP3CW4DTUCEE1-5Rui.swf |
C:\Users\aETAdzjz\Videos\3sXUGx4i\i7-5vGxMNf9.avi |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\eIK8bpjr 0mPHLq0.swf |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\48uKb6WpAhRyBaB5p.swf |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\Ep0pyW.avi |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM\3yvIVZQ89mg6.mp4 |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM\N3MsrtRgIrDyRhYT.swf |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM\S9bUPHjKjfoazs |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM\S9bUPHjKjfoazs\VnFbKwnpzIJIYHJ1yT-a |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM\S9bUPHjKjfoazs\VnFbKwnpzIJIYHJ1yT-a\0y6332I.swf |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM\S9bUPHjKjfoazs\VnFbKwnpzIJIYHJ1yT-a\7dwCbpp9D569XZ.mp4 |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM\S9bUPHjKjfoazs\VnFbKwnpzIJIYHJ1yT-a\iBY-9DAsuj.swf |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM\S9bUPHjKjfoazs\YfNe.swf |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM\S9bUPHjKjfoazs\kqxAVW8LVmBwlF |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM\S9bUPHjKjfoazs\kqxAVW8LVmBwlF\2SIZQMnjSOG7HFch.flv |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM\S9bUPHjKjfoazs\kqxAVW8LVmBwlF\A7c--_UYhI3haUPu.flv |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM\S9bUPHjKjfoazs\kqxAVW8LVmBwlF\b0jOic.avi |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM\S9bUPHjKjfoazs\kqxAVW8LVmBwlF\nxYT1ze1J_6TWES9ip.avi |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM\S9bUPHjKjfoazs\nikT6ENR4wiF.mp4 |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM\S9bUPHjKjfoazs\suFjeLHP0WjABut.mkv |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM\_oSK.avi |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM\drs3L.mp4 |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\fAk1J5JMIKc_eBM\rNLPif7KDmOYMRbv7bjR.avi |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\jU6n.mp4 |
C:\Users\aETAdzjz\Videos\3sXUGx4i\jW6C5kbHmoC0OD\lXbvfVmhzwl\o4aquuGMw-cE_zP.swf |
C:\Users\aETAdzjz\Videos\3sXUGx4i\mNEu16.swf |
C:\Users\aETAdzjz\Videos\3sXUGx4i\xbvwQXhKTfMmswc.flv |
C:\Users\aETAdzjz\Videos\bjla9aNr6G_4MIj5Rb.avi |
C:\Users\aETAdzjz\Videos\hmWnk3vmh.mkv |
C:\Users\aETAdzjz\Videos\wf7G6ewM.mkv |
C:\Users\aETAdzjz\Videos\xyfaH34QWMRB.flv |