VTI SCORE: 98/100
Dynamic Analysis Report |
Classification: Dropper, Downloader |
e6ba4bd149bfa84ab57c7926c7635e162e459d0e9e419bb3c8d8af8e41c043c9 (SHA256)
sample.doc
Word Document
Created at 2019-02-21 17:24:00
Notifications (1/1)
The operating system was rebooted during the analysis.
Virtual Machine Information
Name | win7_64_sp1-mso2016 |
Description | - |
Architecture | x86 64-bit |
Operating System | Windows 7 |
Kernel Version | 6.1.7601.17514 (3844dbb9-2017-4967-be7a-a4a2c20430fa) |
Network Scheme Name | def |
Network Config Name | def |
System Information
Computer Name | YKYD69Q |
User Domain | YKYD69Q |
User Name | aETAdzjz |
User Profile | C:\Users\aETAdzjz |
Temp Directory | C:\Users\aETAdzjz\AppData\Local\Temp |
System Root | C:\Windows |
Sample Directory | C:\Users\aETAdzjz\Desktop |
Software Information
Adobe Acrobat Reader Version | 10.0.0 |
Microsoft Office | 2016 |
Microsoft Office Version | 16.0.8431.2079 |
Internet Explorer Version | 8.0.7601.17514 |
Chrome Version | 59.0.3071.115 |
Firefox Version | 25.0 |
Flash Version | 11.2.202.233 |
Java Version | 7.0.710.14 |
Microsoft Project Version | 16.0.8431.2079 |
Microsoft Visio Version | 16.0.8431.2079 |
Randomly Created Artifacts
This section provides information about processes and files that were created before the analysis was started. This is one of many steps designed to make the analysis system look more realistic and prevent evasion by environment aware malware. The number of randomly generated artifacts can be changed in the configuration.
Processes (21)
»
Filename | PID | GUI |
---|---|---|
C:\Program Files (x86)\Adobe\hobbies malta.exe | #1400 | |
C:\Program Files (x86)\Internet Explorer\mardemocraticmobiles.exe | #2108 | |
C:\Program Files (x86)\Microsoft OneDrive\julia.exe | #452 | |
C:\Program Files (x86)\Uninstall Information\pathology_wrote_rejected.exe | #536 | |
C:\Program Files (x86)\Windows Media Player\damecopyrightprepared.exe | #1896 | |
C:\Program Files (x86)\Windows Portable Devices\custody.exe | #1660 | |
C:\Program Files (x86)\Windows Portable Devices\unapatientsslight.exe | #2060 | |
C:\Program Files (x86)\Windows Sidebar\papers_mars.exe | #2076 | |
C:\Program Files (x86)\Windows Sidebar\rochester.exe | #956 | |
C:\Program Files\Common Files\wt-islands-cry.exe | #2140 | |
C:\Program Files\DVD Maker\vanilla reasonable whats.exe | #688 | |
C:\Program Files\MSBuild\computedeasy.exe | #2040 | |
C:\Program Files\Microsoft Office\blocked forward.exe | #1476 | |
C:\Program Files\Reference Assemblies\chris-dispatched.exe | #940 | |
C:\Program Files\Reference Assemblies\circumstances.exe | #1772 | |
C:\Program Files\Uninstall Information\emma_brands_dv.exe | #1640 | |
C:\Program Files\Windows Journal\civilianvoid.exe | #1972 | |
C:\Program Files\Windows Journal\prostate-featuring-techniques.exe | #1044 | |
C:\Program Files\Windows Journal\rough.exe | #580 | |
C:\Program Files\Windows Mail\spencer.exe | #2092 | |
C:\Program Files\Windows Media Player\amazon_retired.exe | #2124 |
Files (255)
»
Filename |
---|
C:\Users\aETAdzjz\AppData\Local\Temp\-FIncNOyyHfhA8G.swf |
C:\Users\aETAdzjz\AppData\Local\Temp\0AX BffF7B4wgi.gif |
C:\Users\aETAdzjz\AppData\Local\Temp\0H0W.swf |
C:\Users\aETAdzjz\AppData\Local\Temp\4RrNKkheMM4uc.ots |
C:\Users\aETAdzjz\AppData\Local\Temp\5swhRUpbWJJUw.mkv |
C:\Users\aETAdzjz\AppData\Local\Temp\81RNePc1IfPBeNnTGG.odt |
C:\Users\aETAdzjz\AppData\Local\Temp\BQGi4gj.pdf |
C:\Users\aETAdzjz\AppData\Local\Temp\DcjSr2e.bmp |
C:\Users\aETAdzjz\AppData\Local\Temp\GC9JYiVo3Np27VlJuS.pdf |
C:\Users\aETAdzjz\AppData\Local\Temp\Igd5WTCERg.rtf |
C:\Users\aETAdzjz\AppData\Local\Temp\NF-b2XAU x5Zuy.png |
C:\Users\aETAdzjz\AppData\Local\Temp\Pn9I9ykPb.swf |
C:\Users\aETAdzjz\AppData\Local\Temp\YzK57n0VNN_IJum 4q-F.gif |
C:\Users\aETAdzjz\AppData\Local\Temp\aG51kVQy0.m4a |
C:\Users\aETAdzjz\AppData\Local\Temp\c0ds77qfyqtE.xls |
C:\Users\aETAdzjz\AppData\Local\Temp\cnctcma.pptx |
C:\Users\aETAdzjz\AppData\Local\Temp\fBjcm5qlbe9V4xCUdk.avi |
C:\Users\aETAdzjz\AppData\Local\Temp\jFucs12axpNWmc.pps |
C:\Users\aETAdzjz\AppData\Local\Temp\jQwNZFiGQGgIju.mp3 |
C:\Users\aETAdzjz\AppData\Local\Temp\o-NOIvh_puA9G9_UfhIv.gif |
C:\Users\aETAdzjz\AppData\Local\Temp\p-hH91wkylod5.swf |
C:\Users\aETAdzjz\AppData\Local\Temp\qiNhVddK7xMTT8w.flv |
C:\Users\aETAdzjz\AppData\Local\Temp\ypheu4trJYdAo.avi |
C:\Users\aETAdzjz\AppData\Local\Temp\zZDCDnriA5mdaeOl.mkv |
C:\Users\aETAdzjz\AppData\Local\Temp\zcSDmHGPa7S82Td.flv |
C:\Users\aETAdzjz\AppData\Roaming\2vsn3ydqVxmcDkKdqi8.flv |
C:\Users\aETAdzjz\AppData\Roaming\3uCOHDiuxWVBY1 aE.wav |
C:\Users\aETAdzjz\AppData\Roaming\6kUY.mp3 |
C:\Users\aETAdzjz\AppData\Roaming\6vSHQJM544h1cVQMfsM.swf |
C:\Users\aETAdzjz\AppData\Roaming\AIUsBkGxBAJD2.mkv |
C:\Users\aETAdzjz\AppData\Roaming\D5sgD.doc |
C:\Users\aETAdzjz\AppData\Roaming\DBSOs65fX1J5Uxn4wPwy.odt |
C:\Users\aETAdzjz\AppData\Roaming\FH8r2TDNmxFGZTMM5X_.mp3 |
C:\Users\aETAdzjz\AppData\Roaming\IwAUOvZhtH O1YJZVI.m4a |
C:\Users\aETAdzjz\AppData\Roaming\M5plvtg- FJx4-S.odp |
C:\Users\aETAdzjz\AppData\Roaming\OG1i4X33.bmp |
C:\Users\aETAdzjz\AppData\Roaming\PGHa.wav |
C:\Users\aETAdzjz\AppData\Roaming\Qp5UjO5lcRx.mkv |
C:\Users\aETAdzjz\AppData\Roaming\R5hsf yeB6e6Kt8olx.rtf |
C:\Users\aETAdzjz\AppData\Roaming\TLxq.swf |
C:\Users\aETAdzjz\AppData\Roaming\WTWAqAcDjz.mp4 |
C:\Users\aETAdzjz\AppData\Roaming\YTy6QMqdshDq2e.jpg |
C:\Users\aETAdzjz\AppData\Roaming\ZJu0lrRFke4Jt5.bmp |
C:\Users\aETAdzjz\AppData\Roaming\Zk8ljoRQFqq9x_Mm.mp3 |
C:\Users\aETAdzjz\AppData\Roaming\_d12 1 uAwvhlR9y-.avi |
C:\Users\aETAdzjz\AppData\Roaming\awC8 jyifl.wav |
C:\Users\aETAdzjz\AppData\Roaming\gD5nrUcmKjaqZf.swf |
C:\Users\aETAdzjz\AppData\Roaming\j9LeZTUbGV2xB70 SVD.jpg |
C:\Users\aETAdzjz\AppData\Roaming\lP0eFd.wav |
C:\Users\aETAdzjz\AppData\Roaming\mwt28p6vVR.png |
C:\Users\aETAdzjz\AppData\Roaming\p8psJm.csv |
C:\Users\aETAdzjz\AppData\Roaming\uAtje5vSYutQm9Np7o.m4a |
C:\Users\aETAdzjz\AppData\Roaming\z0Id.avi |
C:\Users\aETAdzjz\Desktop\-87yn7wyfDDo.mkv |
C:\Users\aETAdzjz\Desktop\0VCLBtMrUnIl3XJ-RvVK.png |
C:\Users\aETAdzjz\Desktop\0XYAA.avi |
C:\Users\aETAdzjz\Desktop\4YvOTNU8pgt7v S6AT.csv |
C:\Users\aETAdzjz\Desktop\6I1r.mp3 |
C:\Users\aETAdzjz\Desktop\94DlAN4RhR9.gif |
C:\Users\aETAdzjz\Desktop\9Brl5.ots |
C:\Users\aETAdzjz\Desktop\CfLXryC1B7zc8Vo.odt |
C:\Users\aETAdzjz\Desktop\DsJz0ioGauj220VmLMn.bmp |
C:\Users\aETAdzjz\Desktop\G1WqoOZcWKASZNOno.gif |
C:\Users\aETAdzjz\Desktop\GIeK.rtf |
C:\Users\aETAdzjz\Desktop\HxzaKqmUv5qkI1.csv |
C:\Users\aETAdzjz\Desktop\Mciwj |
C:\Users\aETAdzjz\Desktop\Mciwj\4J-HMLkhqrdh6tde.bmp |
C:\Users\aETAdzjz\Desktop\Mciwj\BZcufKTS9fbys.pdf |
C:\Users\aETAdzjz\Desktop\Mciwj\DnHil2aEFidFsCePd.mp4 |
C:\Users\aETAdzjz\Desktop\Mciwj\OXumea6w2 |
C:\Users\aETAdzjz\Desktop\Mciwj\OXumea6w2\-GOve08314m.mkv |
C:\Users\aETAdzjz\Desktop\Mciwj\OXumea6w2\HPd-k3PBOP.png |
C:\Users\aETAdzjz\Desktop\Mciwj\OXumea6w2\IKsip7 geMqU.pps |
C:\Users\aETAdzjz\Desktop\Mciwj\OXumea6w2\Pb19Rn05YZ.odt |
C:\Users\aETAdzjz\Desktop\Mciwj\OXumea6w2\Q14kUuEcc3kB.doc |
C:\Users\aETAdzjz\Desktop\Mciwj\OXumea6w2\l2ydFAnLogTp44UQfL.csv |
C:\Users\aETAdzjz\Desktop\Mciwj\OXumea6w2\sWj_av1PIa3xNup.xls |
C:\Users\aETAdzjz\Desktop\Mciwj\S2p0GMK7BaO98Xn.swf |
C:\Users\aETAdzjz\Desktop\Mciwj\k1573Mw4RSNRkJ dJRv.jpg |
C:\Users\aETAdzjz\Desktop\Mciwj\rA i |
C:\Users\aETAdzjz\Desktop\Mciwj\rA i\RekRjx7lmhpwLq.mp3 |
C:\Users\aETAdzjz\Desktop\Mciwj\rA i\Yp5w4Gv_1Pv.mp3 |
C:\Users\aETAdzjz\Desktop\Mciwj\rA i\cfmSoEIiPDTkESaVl |
C:\Users\aETAdzjz\Desktop\Mciwj\rA i\cfmSoEIiPDTkESaVl\HD68l_Y.m4a |
C:\Users\aETAdzjz\Desktop\Mciwj\rA i\cfmSoEIiPDTkESaVl\Ql3N6i7ckcgLd3D.mp3 |
C:\Users\aETAdzjz\Desktop\Mciwj\rA i\cfmSoEIiPDTkESaVl\cdIjLRexOzXs5W.mp3 |
C:\Users\aETAdzjz\Desktop\Mciwj\rA i\k9Af5JTScP8Q5vd.pdf |
C:\Users\aETAdzjz\Desktop\Mciwj\z68fr12ANxRR.flv |
C:\Users\aETAdzjz\Desktop\OBs5cbPZT2zrehqpuJ5.bmp |
C:\Users\aETAdzjz\Desktop\PWFVx1zImmD.bmp |
C:\Users\aETAdzjz\Desktop\UJxCyZByEVH.avi |
C:\Users\aETAdzjz\Desktop\VvoTWhtO9tRd7.png |
C:\Users\aETAdzjz\Desktop\b4rq.gif |
C:\Users\aETAdzjz\Desktop\e JuXRg5.ots |
C:\Users\aETAdzjz\Desktop\eTY2iH3k8MLDsa.xlsx |
C:\Users\aETAdzjz\Desktop\hVsl9HruDwfP1Ve8k.gif |
C:\Users\aETAdzjz\Desktop\roA pgA0 |
C:\Users\aETAdzjz\Desktop\roA pgA0\KE3j3SuYw9ecxln3DI.gif |
C:\Users\aETAdzjz\Desktop\roA pgA0\WmFkwgVKoMc7FTy.png |
C:\Users\aETAdzjz\Desktop\roA pgA0\hmeURks3.mkv |
C:\Users\aETAdzjz\Desktop\roA pgA0\ocYAawj7Dzdxl.flv |
C:\Users\aETAdzjz\Desktop\vqhBGP6fZNh.bmp |
C:\Users\aETAdzjz\Documents\-W3gEroX5FuuBYnJgTo.xlsx |
C:\Users\aETAdzjz\Documents\2Gfu3Zmx-6q _J-1232.docx |
C:\Users\aETAdzjz\Documents\2JhDw9ZjLj.docx |
C:\Users\aETAdzjz\Documents\3v-9.odp |
C:\Users\aETAdzjz\Documents\72T2Uz46hTMy |
C:\Users\aETAdzjz\Documents\72T2Uz46hTMy\7 mPEsqSSpip6u.pptx |
C:\Users\aETAdzjz\Documents\72T2Uz46hTMy\JZnIRN.xls |
C:\Users\aETAdzjz\Documents\72T2Uz46hTMy\VmbTaT7CrhBFLMs.pptx |
C:\Users\aETAdzjz\Documents\72T2Uz46hTMy\WtMw6.csv |
C:\Users\aETAdzjz\Documents\72T2Uz46hTMy\i21rn9kR.rtf |
C:\Users\aETAdzjz\Documents\72T2Uz46hTMy\nThl5Rjza0jZA |
C:\Users\aETAdzjz\Documents\72T2Uz46hTMy\nThl5Rjza0jZA\AGBQqqiVbTh.ots |
C:\Users\aETAdzjz\Documents\72T2Uz46hTMy\nThl5Rjza0jZA\cDmN7LPaJf7.xlsx |
C:\Users\aETAdzjz\Documents\72T2Uz46hTMy\nThl5Rjza0jZA\gh7eyWzDgE.rtf |
C:\Users\aETAdzjz\Documents\72T2Uz46hTMy\nThl5Rjza0jZA\luQDyT.ppt |
C:\Users\aETAdzjz\Documents\9gQ9vWmhj.pptx |
C:\Users\aETAdzjz\Documents\9nW8vwFfL.docx |
C:\Users\aETAdzjz\Documents\Bpu8Na3.pptx |
C:\Users\aETAdzjz\Documents\EkwjkPMFSo3n.xlsx |
C:\Users\aETAdzjz\Documents\F7jtHrXMCZJEH_lJerzA.ots |
C:\Users\aETAdzjz\Documents\Gkk6A0U5XqgWWCUb1i7.xlsx |
C:\Users\aETAdzjz\Documents\K4cpS3cwbJgDjxq84Dc.pptx |
C:\Users\aETAdzjz\Documents\R-DG_Fy2qdKJfT.xls |
C:\Users\aETAdzjz\Documents\RA5HnUV1DpFFyPji.pptx |
C:\Users\aETAdzjz\Documents\UkMb6x mL h.pptx |
C:\Users\aETAdzjz\Documents\apMz.docx |
C:\Users\aETAdzjz\Documents\epDU5OPWXM0pO7S7MPCo.docx |
C:\Users\aETAdzjz\Documents\g4_Fy2ht5xImVDxZEueb.xlsx |
C:\Users\aETAdzjz\Documents\hCzwDcnH |
C:\Users\aETAdzjz\Documents\hCzwDcnH\IF63cB.doc |
C:\Users\aETAdzjz\Documents\hCzwDcnH\KCxoKOk.ppt |
C:\Users\aETAdzjz\Documents\hCzwDcnH\XpL9IK-tdnxtPC.odp |
C:\Users\aETAdzjz\Documents\hCzwDcnH\xnH5JvKm-.docx |
C:\Users\aETAdzjz\Documents\i0jOH |
C:\Users\aETAdzjz\Documents\i0jOH\BA74 Eo4tBg.xls |
C:\Users\aETAdzjz\Documents\i0jOH\Grw0mOUh9wc9FnOOVGhZ.ots |
C:\Users\aETAdzjz\Documents\i0jOH\NluDUKQQMAC Wo |
C:\Users\aETAdzjz\Documents\i0jOH\NluDUKQQMAC Wo\Daan6uoo6rI-ZZl.ods |
C:\Users\aETAdzjz\Documents\i0jOH\NluDUKQQMAC Wo\NrCZWw.pps |
C:\Users\aETAdzjz\Documents\i0jOH\NluDUKQQMAC Wo\OzALmI.pptx |
C:\Users\aETAdzjz\Documents\i0jOH\NluDUKQQMAC Wo\UstDVmS.pdf |
C:\Users\aETAdzjz\Documents\i0jOH\NluDUKQQMAC Wo\mQhyuzibc1BPNg.docx |
C:\Users\aETAdzjz\Documents\i0jOH\TBEq-UGkv3N-KnQ.pps |
C:\Users\aETAdzjz\Documents\i0jOH\XnyfkmdJgZJNLGz3.xls |
C:\Users\aETAdzjz\Documents\i0jOH\ZiUavILlJNO7kD57xc.ppt |
C:\Users\aETAdzjz\Documents\i0jOH\_JOZTUhxNEfwYcCsDQ |
C:\Users\aETAdzjz\Documents\i0jOH\_JOZTUhxNEfwYcCsDQ\-eWLe.rtf |
C:\Users\aETAdzjz\Documents\i0jOH\_JOZTUhxNEfwYcCsDQ\FuCV3avLnFmFsxPT.doc |
C:\Users\aETAdzjz\Documents\i0jOH\_JOZTUhxNEfwYcCsDQ\PR0c Ko42K1qDkbOTj.xls |
C:\Users\aETAdzjz\Documents\i0jOH\_JOZTUhxNEfwYcCsDQ\S n-P0VGSfIkjJ9.doc |
C:\Users\aETAdzjz\Documents\i0jOH\_JOZTUhxNEfwYcCsDQ\yFUUSHSdo8.pps |
C:\Users\aETAdzjz\Documents\i0jOH\mjLebOZGOuvze.odt |
C:\Users\aETAdzjz\Documents\lDWC_l6Z1Jbsj7c.xlsx |
C:\Users\aETAdzjz\Documents\pvtykxREPZR.xlsx |
C:\Users\aETAdzjz\Documents\qu8PJ5eT2AOr.ods |
C:\Users\aETAdzjz\Documents\yqmm0gAYN.docx |
C:\Users\aETAdzjz\Documents\z40k.rtf |
C:\Users\aETAdzjz\Music\-FBrb7F9ZJ 0lyrP.mp3 |
C:\Users\aETAdzjz\Music\0GOxvMpl9bXb.wav |
C:\Users\aETAdzjz\Music\73vA0JKcoGGhP1 |
C:\Users\aETAdzjz\Music\73vA0JKcoGGhP1\6AV- |
C:\Users\aETAdzjz\Music\73vA0JKcoGGhP1\6AV-\7MbuBvGa P.mp3 |
C:\Users\aETAdzjz\Music\73vA0JKcoGGhP1\6AV-\8SuaRS.m4a |
C:\Users\aETAdzjz\Music\73vA0JKcoGGhP1\6AV-\PBIbpbOd3KxRKT.mp3 |
C:\Users\aETAdzjz\Music\73vA0JKcoGGhP1\6AV-\TpjS3ihsr5dZzI.wav |
C:\Users\aETAdzjz\Music\73vA0JKcoGGhP1\6AV-\VpJKg-.mp3 |
C:\Users\aETAdzjz\Music\73vA0JKcoGGhP1\6AV-\VvIX.m4a |
C:\Users\aETAdzjz\Music\73vA0JKcoGGhP1\6AV-\ku4aERwb5EnxYK IKHl.wav |
C:\Users\aETAdzjz\Music\73vA0JKcoGGhP1\6AV-\wsoCLA7.wav |
C:\Users\aETAdzjz\Music\73vA0JKcoGGhP1\WygFxditnyZY2_rt_fg.wav |
C:\Users\aETAdzjz\Music\73vA0JKcoGGhP1\YQF6Q7K8csQPtgJ0.wav |
C:\Users\aETAdzjz\Music\73vA0JKcoGGhP1\qFOl266Y- RQ8Ls.wav |
C:\Users\aETAdzjz\Music\73vA0JKcoGGhP1\xE1BhxM.mp3 |
C:\Users\aETAdzjz\Music\KCAFQpSxZz.wav |
C:\Users\aETAdzjz\Music\PrV2JEGus2WLO1UZqe.m4a |
C:\Users\aETAdzjz\Music\Swhuh.m4a |
C:\Users\aETAdzjz\Music\WJAbURth57XP |
C:\Users\aETAdzjz\Music\WJAbURth57XP\2 qDWSHLb9MqNbQ_VyG.mp3 |
C:\Users\aETAdzjz\Music\WJAbURth57XP\4iPovAQaF5r3 |
C:\Users\aETAdzjz\Music\WJAbURth57XP\4iPovAQaF5r3\Epadh6nmVZ0kHZy9D.wav |
C:\Users\aETAdzjz\Music\WJAbURth57XP\4iPovAQaF5r3\YWkZ-t1vovHdjg6qU_n.m4a |
C:\Users\aETAdzjz\Music\WJAbURth57XP\4iPovAQaF5r3\crL2vJ9HG5rwYYk77vXR |
C:\Users\aETAdzjz\Music\WJAbURth57XP\4iPovAQaF5r3\crL2vJ9HG5rwYYk77vXR\7GVUoB.m4a |
C:\Users\aETAdzjz\Music\WJAbURth57XP\4iPovAQaF5r3\crL2vJ9HG5rwYYk77vXR\IzpRXeHzLq.wav |
C:\Users\aETAdzjz\Music\WJAbURth57XP\4iPovAQaF5r3\crL2vJ9HG5rwYYk77vXR\OKAwpIS_hRGnbzDJ.wav |
C:\Users\aETAdzjz\Music\WJAbURth57XP\4iPovAQaF5r3\crL2vJ9HG5rwYYk77vXR\oNRVXk.wav |
C:\Users\aETAdzjz\Music\WJAbURth57XP\4iPovAQaF5r3\crL2vJ9HG5rwYYk77vXR\wUolsJk3zoUHwfotjZB.mp3 |
C:\Users\aETAdzjz\Music\WJAbURth57XP\4iPovAQaF5r3\o LF1 fzN PL.m4a |
C:\Users\aETAdzjz\Music\WJAbURth57XP\GYgz_ZmE5yqYC3f7.wav |
C:\Users\aETAdzjz\Music\WJAbURth57XP\Q Fh.mp3 |
C:\Users\aETAdzjz\Music\dLBg-.wav |
C:\Users\aETAdzjz\Music\kVY5DUg4gVjC5uUo.m4a |
C:\Users\aETAdzjz\Music\kpHuZwlXSo8EMlI.m4a |
C:\Users\aETAdzjz\Music\q4j_OHc.wav |
C:\Users\aETAdzjz\Pictures\2j0dpVsa8Q.jpg |
C:\Users\aETAdzjz\Pictures\94wtgx.gif |
C:\Users\aETAdzjz\Pictures\ArQE |
C:\Users\aETAdzjz\Pictures\ArQE\7CECf0of.jpg |
C:\Users\aETAdzjz\Pictures\ArQE\9oOxIoFFsWKQAD.jpg |
C:\Users\aETAdzjz\Pictures\ArQE\IKwxw3aVTZ.png |
C:\Users\aETAdzjz\Pictures\ArQE\KOh0I9eH5d3Ei.png |
C:\Users\aETAdzjz\Pictures\ArQE\QLEkBPYKS0hf.jpg |
C:\Users\aETAdzjz\Pictures\ArQE\ZtZORcA.bmp |
C:\Users\aETAdzjz\Pictures\ArQE\_EA1Lrm.jpg |
C:\Users\aETAdzjz\Pictures\ArQE\bQ6tfK-IZXJ.jpg |
C:\Users\aETAdzjz\Pictures\ArQE\i26QZ48dvP_ZUaLqI.jpg |
C:\Users\aETAdzjz\Pictures\ArQE\ik DPQNEOjU.png |
C:\Users\aETAdzjz\Pictures\ArQE\wi4Dl3-swV8XzNnf83f4.gif |
C:\Users\aETAdzjz\Pictures\ArQE\y_8yxjP.png |
C:\Users\aETAdzjz\Pictures\F4X8E7oD.bmp |
C:\Users\aETAdzjz\Pictures\Hq4ZwH.bmp |
C:\Users\aETAdzjz\Pictures\IqtZfb.bmp |
C:\Users\aETAdzjz\Pictures\JwZ9-9E-2qvj.gif |
C:\Users\aETAdzjz\Pictures\MeInf.gif |
C:\Users\aETAdzjz\Pictures\NnRI5c.bmp |
C:\Users\aETAdzjz\Pictures\OfmA.jpg |
C:\Users\aETAdzjz\Pictures\UFvC7iAW1 T.png |
C:\Users\aETAdzjz\Pictures\flzQ6FwRBNsZMLPoitX.gif |
C:\Users\aETAdzjz\Pictures\gEXEO CNo-.bmp |
C:\Users\aETAdzjz\Pictures\giyI0Gd56d-gy.png |
C:\Users\aETAdzjz\Pictures\hO Acu43aI_xNL.bmp |
C:\Users\aETAdzjz\Pictures\lKIBd.gif |
C:\Users\aETAdzjz\Pictures\qmNCW.png |
C:\Users\aETAdzjz\Videos\4JV0.mkv |
C:\Users\aETAdzjz\Videos\HJ EZikT.mp4 |
C:\Users\aETAdzjz\Videos\MlAqij.mkv |
C:\Users\aETAdzjz\Videos\bSwiLHm_J dx5S.mp4 |
C:\Users\aETAdzjz\Videos\f-w2L.avi |
C:\Users\aETAdzjz\Videos\iU2S-H-SqxlcC7FZ |
C:\Users\aETAdzjz\Videos\iU2S-H-SqxlcC7FZ\7nCPH7y7Be9CngKXg.flv |
C:\Users\aETAdzjz\Videos\iU2S-H-SqxlcC7FZ\PEYRTy.mkv |
C:\Users\aETAdzjz\Videos\iU2S-H-SqxlcC7FZ\v7oUf4U |
C:\Users\aETAdzjz\Videos\iU2S-H-SqxlcC7FZ\v7oUf4U\CbCRWnsL.avi |
C:\Users\aETAdzjz\Videos\iU2S-H-SqxlcC7FZ\v7oUf4U\FxmFNKHWdjTe4g4.avi |
C:\Users\aETAdzjz\Videos\iU2S-H-SqxlcC7FZ\v7oUf4U\GLRto3.swf |
C:\Users\aETAdzjz\Videos\iU2S-H-SqxlcC7FZ\v7oUf4U\I5Lh.mkv |
C:\Users\aETAdzjz\Videos\iU2S-H-SqxlcC7FZ\v7oUf4U\SyO5Bup9-TKrCx.mp4 |
C:\Users\aETAdzjz\Videos\iU2S-H-SqxlcC7FZ\v7oUf4U\ZI1QzRh3hZUU9.avi |
C:\Users\aETAdzjz\Videos\iU2S-H-SqxlcC7FZ\v7oUf4U\pzpNUc7oa bA.swf |
C:\Users\aETAdzjz\Videos\iU2S-H-SqxlcC7FZ\v7oUf4U\z94PSEJQcuk.flv |
C:\Users\aETAdzjz\Videos\iWuxTw1BMTzy |
C:\Users\aETAdzjz\Videos\iWuxTw1BMTzy\2wUWAu9W8HM3zQ5Z.flv |
C:\Users\aETAdzjz\Videos\iWuxTw1BMTzy\CmPDcgxaYF4Dyf6O 1hV.avi |
C:\Users\aETAdzjz\Videos\iWuxTw1BMTzy\N8GpB5MyZboZVIwbgj.avi |
C:\Users\aETAdzjz\Videos\iWuxTw1BMTzy\OPq P-WdYwe.mp4 |
C:\Users\aETAdzjz\Videos\iWuxTw1BMTzy\Q_iH-.avi |
C:\Users\aETAdzjz\Videos\iWuxTw1BMTzy\Uv5g r s6TzsdomFx.swf |
C:\Users\aETAdzjz\Videos\iWuxTw1BMTzy\XqqmG.flv |
C:\Users\aETAdzjz\Videos\iWuxTw1BMTzy\YoQ9ARYd.swf |
C:\Users\aETAdzjz\Videos\iWuxTw1BMTzy\ZDNlFsV53O-4l_AOloHC.flv |
C:\Users\aETAdzjz\Videos\iWuxTw1BMTzy\eWRCyPxeRm.mp4 |
C:\Users\aETAdzjz\Videos\qkqgKIG2SbU-JY.mp4 |
C:\Users\aETAdzjz\Videos\uHLFAK1hrGTAuD3INxgn.flv |