VTI SCORE: 100/100
Dynamic Analysis Report |
Classification: Trojan, Dropper, Downloader |
6dd9d1ae591aa1c238d27b7d29b4d16775e02350637efc7659a7de6b062aa9d7 (SHA256)
Documento.doc
Word Document
Created at 2018-11-24 01:38:00
Notifications (1/1)
The operating system was rebooted during the analysis.
Virtual Machine Information
Name | win7_64_sp1-mso2016 |
Description | - |
Architecture | x86 64-bit |
Operating System | Windows 7 |
Kernel Version | 6.1.7601.17514 (3844dbb9-2017-4967-be7a-a4a2c20430fa) |
Network Scheme Name | def |
Network Config Name | def |
System Information
Computer Name | YKYD69Q |
User Domain | YKYD69Q |
User Name | aETAdzjz |
User Profile | C:\Users\aETAdzjz |
Temp Directory | C:\Users\aETAdzjz\AppData\Local\Temp |
System Root | C:\Windows |
Sample Directory | C:\Users\aETAdzjz\Desktop |
Software Information
Adobe Acrobat Reader Version | 10.0.0 |
Microsoft Office | 2016 |
Microsoft Office Version | 16.0.8431.2079 |
Internet Explorer Version | 8.0.7601.17514 |
Chrome Version | 59.0.3071.115 |
Firefox Version | 25.0 |
Flash Version | 11.2.202.233 |
Java Version | 7.0.710.14 |
Microsoft Project Version | 16.0.8431.2079 |
Microsoft Visio Version | 16.0.8431.2079 |
Randomly Created Artifacts
This section provides information about processes and files that were created before the analysis was started. This is one of many steps designed to make the analysis system look more realistic and prevent evasion by environment aware malware. The number of randomly generated artifacts can be changed in the configuration.
Processes (17)
»
Filename | PID | GUI |
---|---|---|
C:\Program Files (x86)\Java\where drunk assess.exe | #1912 | |
C:\Program Files (x86)\MSBuild\experts.exe | #1284 | |
C:\Program Files (x86)\Microsoft.NET\handles-engaged-provinces.exe | #1068 | |
C:\Program Files (x86)\Microsoft.NET\sentence_sets.exe | #1288 | |
C:\Program Files (x86)\Mozilla Firefox\dollars.exe | #1488 | |
C:\Program Files (x86)\Uninstall Information\televisionhandjobs.exe | #1688 | |
C:\Program Files (x86)\Windows Defender\baker.exe | #652 | |
C:\Program Files (x86)\Windows Media Player\enclosedvideosurls.exe | #1412 | |
C:\Program Files (x86)\Windows Sidebar\perfect_chocolate_employee.exe | #308 | |
C:\Program Files\Common Files\composite must sol.exe | #816 | |
C:\Program Files\DVD Maker\inputs-meditation.exe | #1992 | |
C:\Program Files\Internet Explorer\captain.exe | #1840 | |
C:\Program Files\Reference Assemblies\prisoner-form-apparent.exe | #2040 | |
C:\Program Files\Windows NT\ps providers obesity.exe | #1656 | |
C:\Program Files\Windows Portable Devices\continuedtemporarilysupport.exe | #276 | |
C:\Program Files\Windows Portable Devices\flow.exe | #524 | |
C:\Program Files\Windows Portable Devices\newton.exe | #552 |
Files (262)
»
Filename |
---|
C:\Users\aETAdzjz\AppData\Local\Temp\0BfORAQ_y24XOuOBh.mp4 |
C:\Users\aETAdzjz\AppData\Local\Temp\2SjL35cU8J2zS3K u.ods |
C:\Users\aETAdzjz\AppData\Local\Temp\4v_6rBsMjCHYHmMoq.avi |
C:\Users\aETAdzjz\AppData\Local\Temp\8A_p3-5h5St.png |
C:\Users\aETAdzjz\AppData\Local\Temp\9gUwW4XvMYoZytp0U1z.jpg |
C:\Users\aETAdzjz\AppData\Local\Temp\ETwjmTTfN5qK6weg.flv |
C:\Users\aETAdzjz\AppData\Local\Temp\Fgr0vbOGWBgw7Ch.mp4 |
C:\Users\aETAdzjz\AppData\Local\Temp\Guf3GCdJ_1y.wav |
C:\Users\aETAdzjz\AppData\Local\Temp\I7nC_nTh0.swf |
C:\Users\aETAdzjz\AppData\Local\Temp\IkhjBJo8IcL-3c5n4.mp4 |
C:\Users\aETAdzjz\AppData\Local\Temp\LkwC3c7pD0gqoZneKfT.gif |
C:\Users\aETAdzjz\AppData\Local\Temp\NmN nDoC_KhR8QI.m4a |
C:\Users\aETAdzjz\AppData\Local\Temp\QtkZYTv8O4KpjdlYB.avi |
C:\Users\aETAdzjz\AppData\Local\Temp\RIsnJDW8t.pdf |
C:\Users\aETAdzjz\AppData\Local\Temp\SmmyJZqO0f.mp4 |
C:\Users\aETAdzjz\AppData\Local\Temp\U2I-D1bV.jpg |
C:\Users\aETAdzjz\AppData\Local\Temp\Unm-VJbG7uavx.docx |
C:\Users\aETAdzjz\AppData\Local\Temp\UvU0xO48BKX.rtf |
C:\Users\aETAdzjz\AppData\Local\Temp\WqFNBlATP0X4wX.wav |
C:\Users\aETAdzjz\AppData\Local\Temp\WzDnsZFto6S.mp3 |
C:\Users\aETAdzjz\AppData\Local\Temp\YTeuztfDNYe.ots |
C:\Users\aETAdzjz\AppData\Local\Temp\_K4-NAcmRmwG_AUGQ4ri.xls |
C:\Users\aETAdzjz\AppData\Local\Temp\aeU-yrjKYNiPitti.jpg |
C:\Users\aETAdzjz\AppData\Local\Temp\dVVf.flv |
C:\Users\aETAdzjz\AppData\Local\Temp\e7x8cA8ZaPOU45.png |
C:\Users\aETAdzjz\AppData\Local\Temp\h8HCd9EsodxBbB9TC.bmp |
C:\Users\aETAdzjz\AppData\Local\Temp\l7SASJUztTREmbba.m4a |
C:\Users\aETAdzjz\AppData\Local\Temp\pEtyH289UzM.swf |
C:\Users\aETAdzjz\AppData\Local\Temp\sbbj t1zqsSFk92pc.pdf |
C:\Users\aETAdzjz\AppData\Local\Temp\x1THxk-fWNEtlizg.gif |
C:\Users\aETAdzjz\AppData\Local\Temp\ykg2obL.xls |
C:\Users\aETAdzjz\AppData\Roaming\2cwOW.swf |
C:\Users\aETAdzjz\AppData\Roaming\3az56Xoppca2bHap.mp3 |
C:\Users\aETAdzjz\AppData\Roaming\4BPk.m4a |
C:\Users\aETAdzjz\AppData\Roaming\4HPPnK6NHmTv.mp4 |
C:\Users\aETAdzjz\AppData\Roaming\52mZguxQJ3.wav |
C:\Users\aETAdzjz\AppData\Roaming\5vSpN6QirMEjcCpV.pptx |
C:\Users\aETAdzjz\AppData\Roaming\7G6_VHKYneSXamV7H.mp3 |
C:\Users\aETAdzjz\AppData\Roaming\9aTA88.mkv |
C:\Users\aETAdzjz\AppData\Roaming\AjH8m.swf |
C:\Users\aETAdzjz\AppData\Roaming\EWpjv6C4mASGe4iCFEG.docx |
C:\Users\aETAdzjz\AppData\Roaming\ElwNb-Hac6IRV2z4-d.avi |
C:\Users\aETAdzjz\AppData\Roaming\FscUcHrw19R12-cajJ5M.wav |
C:\Users\aETAdzjz\AppData\Roaming\G5Lz.bmp |
C:\Users\aETAdzjz\AppData\Roaming\GFLdMz_LiZqluDb2pe.bmp |
C:\Users\aETAdzjz\AppData\Roaming\GzHvzrDBp1g.png |
C:\Users\aETAdzjz\AppData\Roaming\H5Q2JaCs1-fZNHSI.png |
C:\Users\aETAdzjz\AppData\Roaming\HucTf2qZku3JNbpdK.swf |
C:\Users\aETAdzjz\AppData\Roaming\L3PwlaZKHx.gif |
C:\Users\aETAdzjz\AppData\Roaming\MiyCBsxXgOzRa6.mp4 |
C:\Users\aETAdzjz\AppData\Roaming\P0EVsCc.wav |
C:\Users\aETAdzjz\AppData\Roaming\RiIL nirFCN14n.mkv |
C:\Users\aETAdzjz\AppData\Roaming\T93YhWW0MJwvZlchF4M.xlsx |
C:\Users\aETAdzjz\AppData\Roaming\TNloUSIQU.mp3 |
C:\Users\aETAdzjz\AppData\Roaming\V2tq.wav |
C:\Users\aETAdzjz\AppData\Roaming\VRvLnLVczt_X.pptx |
C:\Users\aETAdzjz\AppData\Roaming\WcFycy4TS.mp3 |
C:\Users\aETAdzjz\AppData\Roaming\Whsf_7.wav |
C:\Users\aETAdzjz\AppData\Roaming\Wo_E UK89VJkxI.avi |
C:\Users\aETAdzjz\AppData\Roaming\XF9Nd1lnalqWh_Y.flv |
C:\Users\aETAdzjz\AppData\Roaming\cSNqZS9a5.mp3 |
C:\Users\aETAdzjz\AppData\Roaming\cXiPOuPeDAfg.png |
C:\Users\aETAdzjz\AppData\Roaming\fdK992CeLlgp.odt |
C:\Users\aETAdzjz\AppData\Roaming\fmH7NEE2Bp1XS.avi |
C:\Users\aETAdzjz\AppData\Roaming\gqRyL 6EU2py.m4a |
C:\Users\aETAdzjz\AppData\Roaming\tXk913oRsxm.bmp |
C:\Users\aETAdzjz\Desktop\-PDZF4SPpJv.docx |
C:\Users\aETAdzjz\Desktop\Am9jaGVrkUVbOpeSpZjc.doc |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\2QLroFTPTfkbuaD.docx |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\DyCN5c.m4a |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\KZZLhU_1.jpg |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\MJxuO.jpg |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\Q7ZRa UGS4.bmp |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\YRdo.xls |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\eIsG.xlsx |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\sZXPI4gzsV6J5mM |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\sZXPI4gzsV6J5mM\AXzDgJYFl0.doc |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\sZXPI4gzsV6J5mM\GqjJSMCkI1kiIQM8.mp3 |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\sZXPI4gzsV6J5mM\H7UVpapEREXFM |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\sZXPI4gzsV6J5mM\H7UVpapEREXFM\3x28.swf |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\sZXPI4gzsV6J5mM\H7UVpapEREXFM\iqkMJ1jVs587zTtNQSt.swf |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\sZXPI4gzsV6J5mM\H7UVpapEREXFM\lOYtSpe6zfjS5auIWLyd.avi |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\sZXPI4gzsV6J5mM\H7UVpapEREXFM\zfx2.jpg |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\sZXPI4gzsV6J5mM\Nwa86wjjBa.jpg |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\sZXPI4gzsV6J5mM\fbRyo_VnBl-3dc7E.gif |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\sZXPI4gzsV6J5mM\hj 6RDm.bmp |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\sZXPI4gzsV6J5mM\t241rU3Z.png |
C:\Users\aETAdzjz\Desktop\An7WPkvweAwqwS\sZXPI4gzsV6J5mM\tMWU6GaL.csv |
C:\Users\aETAdzjz\Desktop\Lqa3kyHW5xb5NJEooK.xls |
C:\Users\aETAdzjz\Desktop\MIMqwBTQ.mp4 |
C:\Users\aETAdzjz\Desktop\NYcKDBVCpQbelJe20z4g.flv |
C:\Users\aETAdzjz\Desktop\O12kXF2o.ppt |
C:\Users\aETAdzjz\Desktop\QtA_Wm5Xc3m.flv |
C:\Users\aETAdzjz\Desktop\VFmxLhcIcWAet.mkv |
C:\Users\aETAdzjz\Desktop\WnsH8Rafz0mB c.swf |
C:\Users\aETAdzjz\Desktop\Z8-dJ.swf |
C:\Users\aETAdzjz\Desktop\aRRAr7w9pAF.bmp |
C:\Users\aETAdzjz\Desktop\a_kzyTC.ots |
C:\Users\aETAdzjz\Desktop\iMGoln1z2yNNb.ppt |
C:\Users\aETAdzjz\Desktop\kks-vMjp_3b9mYPMxlH.m4a |
C:\Users\aETAdzjz\Desktop\sQSjLY3SqzB7uMbJS N.gif |
C:\Users\aETAdzjz\Desktop\uTg8PKRDp-lkvAk.avi |
C:\Users\aETAdzjz\Desktop\wE0Rp1l3HUO_gi.wav |
C:\Users\aETAdzjz\Desktop\x8HxZRhPOrOEuh.m4a |
C:\Users\aETAdzjz\Desktop\xxVN6H3PFk8N8Vutf.png |
C:\Users\aETAdzjz\Desktop\zU2nJ Ca1M4.docx |
C:\Users\aETAdzjz\Documents\5OdSkvuw3v_B.xlsx |
C:\Users\aETAdzjz\Documents\6WJtP1erY.rtf |
C:\Users\aETAdzjz\Documents\6rgv-VCM_.xlsx |
C:\Users\aETAdzjz\Documents\7IfF6A8y.doc |
C:\Users\aETAdzjz\Documents\B2ZqMNsAFs79OP0O.doc |
C:\Users\aETAdzjz\Documents\Bdp zB.xls |
C:\Users\aETAdzjz\Documents\CT6i80l_w31KTNmU.xlsx |
C:\Users\aETAdzjz\Documents\Db8QtgR6WXQ26.rtf |
C:\Users\aETAdzjz\Documents\Fplj D34Cms01aZH.xlsx |
C:\Users\aETAdzjz\Documents\Gv-59jr2DKp7jZY6_kc8.pptx |
C:\Users\aETAdzjz\Documents\JeKLRcjHvus.docx |
C:\Users\aETAdzjz\Documents\_- 4N4 |
C:\Users\aETAdzjz\Documents\_- 4N4\-smokd20l-ty.ots |
C:\Users\aETAdzjz\Documents\_- 4N4\1muz8B1Wnu7m.rtf |
C:\Users\aETAdzjz\Documents\_- 4N4\DkCfzrGOlISqu7ZmE.docx |
C:\Users\aETAdzjz\Documents\_- 4N4\N4KQCwa0YWBdfMiE.xls |
C:\Users\aETAdzjz\Documents\_- 4N4\PvpQfXQe |
C:\Users\aETAdzjz\Documents\_- 4N4\PvpQfXQe\7Nla83M9WU4yHiC.doc |
C:\Users\aETAdzjz\Documents\_- 4N4\PvpQfXQe\8-_Hvqfym20K-gei.pps |
C:\Users\aETAdzjz\Documents\_- 4N4\PvpQfXQe\fEE3KGgv_WgXgyHY-fT.ots |
C:\Users\aETAdzjz\Documents\_- 4N4\PvpQfXQe\nk7glAZ.xls |
C:\Users\aETAdzjz\Documents\_- 4N4\PvpQfXQe\pw6JuRu3DjFQV5UCqQ8G.odp |
C:\Users\aETAdzjz\Documents\_- 4N4\PvpQfXQe\rC7mOKUtDWNWQ.rtf |
C:\Users\aETAdzjz\Documents\_- 4N4\PvpQfXQe\woszvbrf1_q2.ods |
C:\Users\aETAdzjz\Documents\_- 4N4\Rcf4nITvkmBc2Z1TG.xlsx |
C:\Users\aETAdzjz\Documents\_- 4N4\VWbXrLvK__5T8DXPiLx.pdf |
C:\Users\aETAdzjz\Documents\_- 4N4\Xpb38G_.pptx |
C:\Users\aETAdzjz\Documents\_- 4N4\_cCLk.odp |
C:\Users\aETAdzjz\Documents\_- 4N4\hwh0d1 FrWL.docx |
C:\Users\aETAdzjz\Documents\_- 4N4\iGbQYpKVjRI.odt |
C:\Users\aETAdzjz\Documents\_- 4N4\o1PSlc.pdf |
C:\Users\aETAdzjz\Documents\_- 4N4\qfTvgluPG.csv |
C:\Users\aETAdzjz\Documents\_- 4N4\xG1PYCB8Mx.xlsx |
C:\Users\aETAdzjz\Documents\bBUy4ZEoDjYKKdkWCN z.ots |
C:\Users\aETAdzjz\Documents\g6GQyWE42xIp.docx |
C:\Users\aETAdzjz\Documents\gQooKziA.pptx |
C:\Users\aETAdzjz\Documents\gbRL.ots |
C:\Users\aETAdzjz\Documents\htDXl4Q.docx |
C:\Users\aETAdzjz\Documents\jXsEulpRFySWdDlgcK_.pptx |
C:\Users\aETAdzjz\Documents\lgwCsS55DMAk.xlsx |
C:\Users\aETAdzjz\Documents\qLPYJzB1i5Wv.pdf |
C:\Users\aETAdzjz\Documents\rle4cBJfikjVTD22-tVN.doc |
C:\Users\aETAdzjz\Documents\rpY5GXHlDRfLJZ.pptx |
C:\Users\aETAdzjz\Documents\u22EHDawC66Clg8q.pptx |
C:\Users\aETAdzjz\Documents\uGyMWRkxOr.docx |
C:\Users\aETAdzjz\Documents\vm5UNgZD.pptx |
C:\Users\aETAdzjz\Documents\waQRn.docx |
C:\Users\aETAdzjz\Documents\wiuzOWCNQnESm7.odt |
C:\Users\aETAdzjz\Documents\yuQhsmfg6jPSEYTO4.ppt |
C:\Users\aETAdzjz\Music\C5zAoNJM2 a28.m4a |
C:\Users\aETAdzjz\Music\D1C3dauqDEe6wJo5pmV.m4a |
C:\Users\aETAdzjz\Music\L-8mC51nszh60Q0.mp3 |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13 |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\7R1o6dHwm8cte2r1yz.wav |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\G0wlPo8fG.wav |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\Mgy9LEQCfWKR6GmRRHH.wav |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\XMqhh7j-NbFwT_gVRVF.wav |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\faj g2BLZuqH.m4a |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\g_FCoqh1G_.m4a |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\llXvXh0VpO5Zk.m4a |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\pFI1WXJ-qR |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\pFI1WXJ-qR\5ftR.wav |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\pFI1WXJ-qR\DYzdjFxN15.wav |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\pFI1WXJ-qR\WX 7PkEXy6eJaOz.wav |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\pFI1WXJ-qR\jMn8b1RzTGpalrKq_LSD |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\pFI1WXJ-qR\jMn8b1RzTGpalrKq_LSD\1vLuHKRB.mp3 |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\pFI1WXJ-qR\jMn8b1RzTGpalrKq_LSD\I9lnK NM6TuWLFZpOzT.mp3 |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\pFI1WXJ-qR\jMn8b1RzTGpalrKq_LSD\oGz4ZhV8hf.m4a |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\pFI1WXJ-qR\xNAUTMAxqMHCf8M |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\pFI1WXJ-qR\xNAUTMAxqMHCf8M\8jl892lJM_.wav |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\pFI1WXJ-qR\xNAUTMAxqMHCf8M\R6WjrCibl7.m4a |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\pFI1WXJ-qR\xNAUTMAxqMHCf8M\WNI7HwMKRdX0OcF.mp3 |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\pFI1WXJ-qR\xNAUTMAxqMHCf8M\j1oI1.m4a |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\pFI1WXJ-qR\xNAUTMAxqMHCf8M\rn_BHt9D0O2WKnOOofIp.wav |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\pFI1WXJ-qR\xNAUTMAxqMHCf8M\vs51l6K5X8J06RkiK6S.m4a |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\CNtsY13\znv9V.m4a |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\QJsK4_v.m4a |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\TTuBIFD.wav |
C:\Users\aETAdzjz\Music\M4fM47wQA5hOxmSQm\b08 mHm.m4a |
C:\Users\aETAdzjz\Music\MojNb.mp3 |
C:\Users\aETAdzjz\Music\exL6D.wav |
C:\Users\aETAdzjz\Music\iGJuR7vG.m4a |
C:\Users\aETAdzjz\Pictures\AjELwTeDRg.bmp |
C:\Users\aETAdzjz\Pictures\IFbmAIlr_mUV.gif |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\1hGUCB08Nowz-x.bmp |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\BKPh8nsAYxciu0KQdOE.png |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\GNE3zSa.gif |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\TBsJMpg.gif |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez\4UpD-XR8wsKvm.jpg |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez\8IGJ_DIs8E23zNji83 |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez\8IGJ_DIs8E23zNji83\0n5xvvBHcalKl0_pVn.jpg |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez\8IGJ_DIs8E23zNji83\0sATJovsS.gif |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez\8IGJ_DIs8E23zNji83\9PXM26sB2Li.gif |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez\8IGJ_DIs8E23zNji83\AeUNl3.png |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez\8IGJ_DIs8E23zNji83\pfJxNI.png |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez\A3XeA5Kpjanq2.png |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez\BCkiVX0Zo.jpg |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez\E3U8wwmaccpKq9K |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez\E3U8wwmaccpKq9K\yD -1.png |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez\E3U8wwmaccpKq9K\zHPB-8cqirL.jpg |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez\Ma9Q9cDy-2lgzQ3Wpgb4.bmp |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez\U3gJ7grW4e-.bmp |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez\UsfTsFmU.jpg |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez\Vt0BiK2U.png |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez\tOcmeUCfVEzrJ3Qmoth.png |
C:\Users\aETAdzjz\Pictures\SH2COzpioX1DDqB\rMQUFfIN6oLez\x5Bc2mDy94iWyw.png |
C:\Users\aETAdzjz\Pictures\TwXrsSUj I.bmp |
C:\Users\aETAdzjz\Pictures\ePWGWnOKT.jpg |
C:\Users\aETAdzjz\Pictures\nsl8sfQalgV.jpg |
C:\Users\aETAdzjz\Videos\JjxhHYMhm.mp4 |
C:\Users\aETAdzjz\Videos\LCMn0 u0TB9eAv.mkv |
C:\Users\aETAdzjz\Videos\ijpK |
C:\Users\aETAdzjz\Videos\ijpK\1DIp9-w4YyooZc6 |
C:\Users\aETAdzjz\Videos\ijpK\1DIp9-w4YyooZc6\242gUsTtzLqwmW6nbq.avi |
C:\Users\aETAdzjz\Videos\ijpK\1DIp9-w4YyooZc6\7pWA52cEYJfVxluQ.swf |
C:\Users\aETAdzjz\Videos\ijpK\bH3F2LoAigfiUuWHP.swf |
C:\Users\aETAdzjz\Videos\ijpK\dlwIsgOXktVyC.swf |
C:\Users\aETAdzjz\Videos\ijpK\q8tmlSan9.mp4 |
C:\Users\aETAdzjz\Videos\ijpK\xH6vpn7zMEhgVA9l.swf |
C:\Users\aETAdzjz\Videos\ijpK\xPXnV--l8X4F-.swf |
C:\Users\aETAdzjz\Videos\ijpK\yNVV voRlM.swf |
C:\Users\aETAdzjz\Videos\ijpK\z5CJJKb |
C:\Users\aETAdzjz\Videos\ijpK\z5CJJKb\Jv84GaStV1vvoK.swf |
C:\Users\aETAdzjz\Videos\ijpK\z5CJJKb\P08tn.flv |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2 |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\17ymsf4GQTNBsb62_ae.avi |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\2mKnsThUPqvayD.avi |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\8I_PE1VroTyYiSiUwX |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\8I_PE1VroTyYiSiUwX\C0neGj.mkv |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\8I_PE1VroTyYiSiUwX\DVXjTX.swf |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\8I_PE1VroTyYiSiUwX\II-4.swf |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\8I_PE1VroTyYiSiUwX\pkawCJG |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\8I_PE1VroTyYiSiUwX\pkawCJG\3xWy -5wZAP0r.mkv |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\8I_PE1VroTyYiSiUwX\pkawCJG\R1w0zLhD R8K |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\8I_PE1VroTyYiSiUwX\pkawCJG\R1w0zLhD R8K\6LwB_bvxPArGD9.flv |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\8I_PE1VroTyYiSiUwX\pkawCJG\R1w0zLhD R8K\qyMb.flv |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\8I_PE1VroTyYiSiUwX\pkawCJG\R1w0zLhD R8K\yl3 J.flv |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\8I_PE1VroTyYiSiUwX\pkawCJG\R1w0zLhD R8K\z9sa.swf |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\8I_PE1VroTyYiSiUwX\pkawCJG\hwddazpiJ8A.mp4 |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\CMWheFilOfB |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\CMWheFilOfB\A4m2.mkv |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\CMWheFilOfB\KrSjiIeI5WEYjco.mkv |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\CMWheFilOfB\NlVRRVm7md-SLyvhbFvu.swf |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\CMWheFilOfB\R6HzVT23EcIi-4.swf |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\CMWheFilOfB\x_3uD6jLnMI.mkv |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\FnPv_1ZRlciv0lpG |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\FnPv_1ZRlciv0lpG\afta6-.mkv |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\t-ak |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\t-ak\S9e8dK5mN.mp4 |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\t-ak\TJ_KNTo.flv |
C:\Users\aETAdzjz\Videos\qxCXtFTjWiuUALCO2\t-ak\quVOZfHx.flv |
C:\Users\aETAdzjz\Videos\s7V6t5jr1DnJ.flv |