VTI SCORE: 100/100
Dynamic Analysis Report |
Classification: Spyware |
fb4077e5ef55027b2972e94fe54eca985dfb933702f09a640a799f31b2181834 (SHA256)
clifind.log.exe
Windows Exe (x86-32)
Created at 2018-11-14 12:09:00
Virtual Machine Information
Name | win10_64 |
Description | - |
Architecture | x86 64-bit |
Operating System | Windows 10 Threshold 1 |
Kernel Version | 10.0.10240.16384 (c68ee22f-dcf6-4778-95c5-4a862be16567) |
System Information
Computer Name | LHNIWSJ |
User Domain | LHNIWSJ |
User Name | CIiHmnxMn6Ps |
User Profile | C:\Users\CIiHmnxMn6Ps |
Temp Directory | C:\Users\CIIHMN~1\AppData\Local\Temp |
System Root | C:\Windows |
Sample Directory | C:\Users\CIiHmnxMn6Ps\Desktop |
Software Information
Adobe Acrobat Reader Version | 18.009.20050 |
Microsoft Office | 2016 |
Microsoft Office Version | 16.0.10228.20134 |
Internet Explorer Version | 11.0.10240.16384 |
Chrome Version | 58.0.3029.110 |
Firefox Version | 53.0.3 |
Flash Version | 25.0.0.148 |
Java Version | 8.0.1310.11 |
Microsoft Project Version | 16.0.10228.20134 |
Microsoft Visio Version | 16.0.10228.20134 |
Randomly Created Artifacts
This section provides information about processes and files that were created before the analysis was started. This is one of many steps designed to make the analysis system look more realistic and prevent evasion by environment aware malware. The number of randomly generated artifacts can be changed in the configuration.
Processes (21)
»
Filename | PID | GUI |
---|---|---|
C:\Program Files (x86)\Adobe\father.exe | #3064 | |
C:\Program Files (x86)\Common Files\medicare.exe | #364 | |
C:\Program Files (x86)\Google\distributed deliver.exe | #2988 | |
C:\Program Files (x86)\Google\pdf_incoming.exe | #1052 | |
C:\Program Files (x86)\MSBuild\cincinnati_relating_endangered.exe | #2284 | |
C:\Program Files (x86)\MSBuild\isolated_latinas_ir.exe | #1788 | |
C:\Program Files (x86)\Windows Media Player\interactions miles.exe | #1972 | |
C:\Program Files (x86)\Windows Multimedia Platform\skirts-naval-groups.exe | #2760 | |
C:\Program Files (x86)\Windows Photo Viewer\westernrangestremendous.exe | #1480 | |
C:\Program Files\Java\counters-boc-tracker.exe | #2332 | |
C:\Program Files\Uninstall Information\carb-cohen.exe | #1072 | |
C:\Program Files\Uninstall Information\sp visitor.exe | #936 | |
C:\Program Files\Uninstall Information\uni.exe | #1264 | |
C:\Program Files\Windows Journal\contained immediate.exe | #2260 | |
C:\Program Files\Windows Journal\neil-maui-observation.exe | #632 | |
C:\Program Files\Windows Multimedia Platform\campaigns-worthy.exe | #1716 | |
C:\Program Files\Windows Multimedia Platform\singer was sailing.exe | #896 | |
C:\Program Files\Windows Multimedia Platform\statute lan output.exe | #1472 | |
C:\Program Files\Windows NT\unlimited.exe | #424 | |
C:\Program Files\Windows Sidebar\gravity sale netscape.exe | #1932 | |
C:\Program Files\WindowsPowerShell\thai_combo.exe | #2836 |
Files (263)
»
Filename |
---|
C:\Users\CIIHMN~1\AppData\Local\Temp\1DjE-vrTmGwvsv5.m4a |
C:\Users\CIIHMN~1\AppData\Local\Temp\3UdHhrniSKVrxD.jpg |
C:\Users\CIIHMN~1\AppData\Local\Temp\4e FceAL.avi |
C:\Users\CIIHMN~1\AppData\Local\Temp\6uRak-KELnMqc40Q.jpg |
C:\Users\CIIHMN~1\AppData\Local\Temp\8G994vY-raTS1.xls |
C:\Users\CIIHMN~1\AppData\Local\Temp\ARw8c.png |
C:\Users\CIIHMN~1\AppData\Local\Temp\DjxYQec.mp4 |
C:\Users\CIIHMN~1\AppData\Local\Temp\HAn1VUf7jQNwyoKG.avi |
C:\Users\CIIHMN~1\AppData\Local\Temp\HjpY.ods |
C:\Users\CIIHMN~1\AppData\Local\Temp\LQN.wav |
C:\Users\CIIHMN~1\AppData\Local\Temp\LZ1wdWXWhDc.swf |
C:\Users\CIIHMN~1\AppData\Local\Temp\MP5dJABGNxvE.odt |
C:\Users\CIIHMN~1\AppData\Local\Temp\N5-8TnelJF.m4a |
C:\Users\CIIHMN~1\AppData\Local\Temp\NV1la.bmp |
C:\Users\CIIHMN~1\AppData\Local\Temp\PV-9IfKofon.flv |
C:\Users\CIIHMN~1\AppData\Local\Temp\YvcmKaxh0LsKpLPdz1t.swf |
C:\Users\CIIHMN~1\AppData\Local\Temp\b8HwbatbNA.mp3 |
C:\Users\CIIHMN~1\AppData\Local\Temp\bOqojuLqJAr.flv |
C:\Users\CIIHMN~1\AppData\Local\Temp\b_EsYXAnnb-LQb-vtD9.mp3 |
C:\Users\CIIHMN~1\AppData\Local\Temp\cPUoAPL2B.mp4 |
C:\Users\CIIHMN~1\AppData\Local\Temp\e6Ko.png |
C:\Users\CIIHMN~1\AppData\Local\Temp\hbpD7hT26y.swf |
C:\Users\CIIHMN~1\AppData\Local\Temp\n1GHKjYEpQjUOZ.png |
C:\Users\CIIHMN~1\AppData\Local\Temp\q7_8 y4KxTKxFn25.mkv |
C:\Users\CIIHMN~1\AppData\Local\Temp\r2TJLkgeLbR9rDbS.mp4 |
C:\Users\CIIHMN~1\AppData\Local\Temp\ruzoRK.xls |
C:\Users\CIIHMN~1\AppData\Local\Temp\sbd597KI1Dh4m.m4a |
C:\Users\CIIHMN~1\AppData\Local\Temp\uPA8bAge.wav |
C:\Users\CIIHMN~1\AppData\Local\Temp\uRMrwouO6us3.pdf |
C:\Users\CIIHMN~1\AppData\Local\Temp\v8-qjyp.m4a |
C:\Users\CIIHMN~1\AppData\Local\Temp\wiZvd8uR3T.mp3 |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\-CGzojWnDccKhYixd.wav |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\2pqXt_30Y2vw6D4EWd.wav |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\4KDjrTY.m4a |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\6AHm0eklRle4rm.m4a |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\8hlLlz3B.jpg |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\BqWIB.mp4 |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\ElgQs9BZXNEigx3rP.m4a |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\IOM-hHmvr-.swf |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\KCdlcttWIEAS.mp3 |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\OrmLhHyLebhzLnjN.bmp |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Q6GJKhKV4Vy276BU.ppt |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\S7sH.mp4 |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Sr9usYOvX.bmp |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\XYyCk_wdodCSQJK.m4a |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\Z u0f7kxklopS.gif |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\_M SaSNLGu1vOuF.odt |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\abk7XDdCVRzv5cCm6N8.avi |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\b7xzhGoev3X9BBg.m4a |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\cY8Nk6sFLmF.mp3 |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\eUGN69NGgOLvp.gif |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\gZ_-HyJA7iAqF.avi |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\gsaRmfQDB.m4a |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\i9cM.mp4 |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\kmR9kBDNHOqM.bmp |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\mD 1j3vOJ uzyA9Qb.csv |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\n_LGCtdcSJipjA966eKV.mp3 |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\o HBrBfA6GQyGA4C.flv |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\pB3N_43KsThjENr.ppt |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\pG502Jp5nRx8w.mkv |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\rI02IIctJrwILA.png |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\uVSXgiee_FPql8HtgD0.gif |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\ubmGacECDEw6Yu-oof.png |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\vR2JyEBZSxNTYQ7.png |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\vVXLHj FTcqF.wav |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\vipj.gif |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\zS-NQYoBwt6DYQ4m.swf |
C:\Users\CIiHmnxMn6Ps\AppData\Roaming\zwOYRPU5iqEU5e5eT0Uf.jpg |
C:\Users\CIiHmnxMn6Ps\Desktop\-nudFN6WocceSxryTx.mp3 |
C:\Users\CIiHmnxMn6Ps\Desktop\0C0.png |
C:\Users\CIiHmnxMn6Ps\Desktop\1XlvNbUJs3AzRcs_WFD.flv |
C:\Users\CIiHmnxMn6Ps\Desktop\5r33n39xVV66R2vNvYq.m4a |
C:\Users\CIiHmnxMn6Ps\Desktop\AaauAGR.gif |
C:\Users\CIiHmnxMn6Ps\Desktop\AiEhgG-Mp6nWEZ.bmp |
C:\Users\CIiHmnxMn6Ps\Desktop\AnEDjYEzonMqEC zqEs.mkv |
C:\Users\CIiHmnxMn6Ps\Desktop\DF6.mkv |
C:\Users\CIiHmnxMn6Ps\Desktop\GNCiUalOrgI.m4a |
C:\Users\CIiHmnxMn6Ps\Desktop\Kk9.swf |
C:\Users\CIiHmnxMn6Ps\Desktop\L7ZibcW7w.flv |
C:\Users\CIiHmnxMn6Ps\Desktop\LEbBr6Cr_.mkv |
C:\Users\CIiHmnxMn6Ps\Desktop\Lra-tG7H4I.pptx |
C:\Users\CIiHmnxMn6Ps\Desktop\M amB_mHWW4t_Vtw.mp3 |
C:\Users\CIiHmnxMn6Ps\Desktop\NJXmD3moPKLm9yQj |
C:\Users\CIiHmnxMn6Ps\Desktop\NJXmD3moPKLm9yQj\1jWSCDbR sUk.xls |
C:\Users\CIiHmnxMn6Ps\Desktop\NJXmD3moPKLm9yQj\2pq oFqJggE98il.rtf |
C:\Users\CIiHmnxMn6Ps\Desktop\NJXmD3moPKLm9yQj\2vJhYatf5e.flv |
C:\Users\CIiHmnxMn6Ps\Desktop\NJXmD3moPKLm9yQj\GS6eheCU_-FQ23T7gN.swf |
C:\Users\CIiHmnxMn6Ps\Desktop\NJXmD3moPKLm9yQj\HA8g6Qe.gif |
C:\Users\CIiHmnxMn6Ps\Desktop\NJXmD3moPKLm9yQj\MqX9ra6K_.gif |
C:\Users\CIiHmnxMn6Ps\Desktop\NJXmD3moPKLm9yQj\OmzypprK.gif |
C:\Users\CIiHmnxMn6Ps\Desktop\NJXmD3moPKLm9yQj\VYh0iqTjCb3u_dn_B4.mkv |
C:\Users\CIiHmnxMn6Ps\Desktop\NJXmD3moPKLm9yQj\XuzHkhc6.mp3 |
C:\Users\CIiHmnxMn6Ps\Desktop\OOUtj4Vs.gif |
C:\Users\CIiHmnxMn6Ps\Desktop\QF2_0dGVxpwwa96.swf |
C:\Users\CIiHmnxMn6Ps\Desktop\XjUcf.wav |
C:\Users\CIiHmnxMn6Ps\Desktop\_lDc26R4Lw.mp3 |
C:\Users\CIiHmnxMn6Ps\Desktop\c5_8ORDmw26XaN51.gif |
C:\Users\CIiHmnxMn6Ps\Desktop\f0OqqfVAj45B.odp |
C:\Users\CIiHmnxMn6Ps\Desktop\fxXvCYCNP7f.png |
C:\Users\CIiHmnxMn6Ps\Desktop\g-b6BZr.png |
C:\Users\CIiHmnxMn6Ps\Desktop\hBMaC7Mu-fS5eg9.png |
C:\Users\CIiHmnxMn6Ps\Desktop\hsqzxM1.png |
C:\Users\CIiHmnxMn6Ps\Desktop\iiuMKm.m4a |
C:\Users\CIiHmnxMn6Ps\Desktop\nQcjlxg34VF.flv |
C:\Users\CIiHmnxMn6Ps\Desktop\ooLzkZClwHez_AB.flv |
C:\Users\CIiHmnxMn6Ps\Desktop\ovhd.ppt |
C:\Users\CIiHmnxMn6Ps\Desktop\ppfX nLvd.avi |
C:\Users\CIiHmnxMn6Ps\Desktop\rGXp-In3.ots |
C:\Users\CIiHmnxMn6Ps\Desktop\tUFR3Cz2TDJLDqsX.mp3 |
C:\Users\CIiHmnxMn6Ps\Desktop\wNHKafE9mE99o0Pop.mp3 |
C:\Users\CIiHmnxMn6Ps\Desktop\wW Ml21I UU.mp3 |
C:\Users\CIiHmnxMn6Ps\Desktop\we6-ckAGXE0.png |
C:\Users\CIiHmnxMn6Ps\Desktop\yta ZBO5sNE33GOc-_.bmp |
C:\Users\CIiHmnxMn6Ps\Documents\-WEEr.pptx |
C:\Users\CIiHmnxMn6Ps\Documents\2tWH8w1NOsMvuk5I1.docx |
C:\Users\CIiHmnxMn6Ps\Documents\4Qz8WsMg.ots |
C:\Users\CIiHmnxMn6Ps\Documents\55dxYOlk43L1VG.ots |
C:\Users\CIiHmnxMn6Ps\Documents\80rgh8FRs2P.rtf |
C:\Users\CIiHmnxMn6Ps\Documents\9Qkq.xlsx |
C:\Users\CIiHmnxMn6Ps\Documents\CJ9YIyRuRXAh.pdf |
C:\Users\CIiHmnxMn6Ps\Documents\Cl98q7AckKjgihmy4j.docx |
C:\Users\CIiHmnxMn6Ps\Documents\He A.docx |
C:\Users\CIiHmnxMn6Ps\Documents\LDGlvXJ1O-nM0cf.pptx |
C:\Users\CIiHmnxMn6Ps\Documents\Nm3Hy1HyV-.xlsx |
C:\Users\CIiHmnxMn6Ps\Documents\Qcw- w.xlsx |
C:\Users\CIiHmnxMn6Ps\Documents\_0loUGVKBdnQTO0JsIF.pptx |
C:\Users\CIiHmnxMn6Ps\Documents\_NgPmi_NwyPvvqARZ.xls |
C:\Users\CIiHmnxMn6Ps\Documents\a2rXi6afDXDQ.xlsx |
C:\Users\CIiHmnxMn6Ps\Documents\ijN95a9qMl01 |
C:\Users\CIiHmnxMn6Ps\Documents\ijN95a9qMl01\6IVp6KbS6NSkRMXsM.xlsx |
C:\Users\CIiHmnxMn6Ps\Documents\ijN95a9qMl01\R0G28cUeI.odp |
C:\Users\CIiHmnxMn6Ps\Documents\ijN95a9qMl01\RKmU-2kuJ2tCqyk.ots |
C:\Users\CIiHmnxMn6Ps\Documents\ijN95a9qMl01\_Pgp.doc |
C:\Users\CIiHmnxMn6Ps\Documents\ijN95a9qMl01\eZVZC.ods |
C:\Users\CIiHmnxMn6Ps\Documents\ijN95a9qMl01\v4vEtIIvYQ4qx7.doc |
C:\Users\CIiHmnxMn6Ps\Documents\k-r2Xby2xELvU.docx |
C:\Users\CIiHmnxMn6Ps\Documents\n4jINr.odt |
C:\Users\CIiHmnxMn6Ps\Documents\n4pF7Zu5nuMFsFDF |
C:\Users\CIiHmnxMn6Ps\Documents\n4pF7Zu5nuMFsFDF\GbEcp.ods |
C:\Users\CIiHmnxMn6Ps\Documents\n4pF7Zu5nuMFsFDF\JIs4Cw5t.ppt |
C:\Users\CIiHmnxMn6Ps\Documents\n4pF7Zu5nuMFsFDF\KaB0Wlfu8zWgtAQCIUI |
C:\Users\CIiHmnxMn6Ps\Documents\n4pF7Zu5nuMFsFDF\KaB0Wlfu8zWgtAQCIUI\3FbPqbsA8J_ZEkcT.xlsx |
C:\Users\CIiHmnxMn6Ps\Documents\n4pF7Zu5nuMFsFDF\KaB0Wlfu8zWgtAQCIUI\FgXlAr-nNI.docx |
C:\Users\CIiHmnxMn6Ps\Documents\n4pF7Zu5nuMFsFDF\KaB0Wlfu8zWgtAQCIUI\PDs-GwHKlfU5-gvEG5d.rtf |
C:\Users\CIiHmnxMn6Ps\Documents\n4pF7Zu5nuMFsFDF\KaB0Wlfu8zWgtAQCIUI\SiobL_.rtf |
C:\Users\CIiHmnxMn6Ps\Documents\n4pF7Zu5nuMFsFDF\KaB0Wlfu8zWgtAQCIUI\dwAJAXERcS4WQZbgB.csv |
C:\Users\CIiHmnxMn6Ps\Documents\n4pF7Zu5nuMFsFDF\KaB0Wlfu8zWgtAQCIUI\z8yh4.pdf |
C:\Users\CIiHmnxMn6Ps\Documents\n4pF7Zu5nuMFsFDF\PfiT-W.ppt |
C:\Users\CIiHmnxMn6Ps\Documents\n4pF7Zu5nuMFsFDF\PtMm2-.odt |
C:\Users\CIiHmnxMn6Ps\Documents\n4pF7Zu5nuMFsFDF\a96V6UUm_0.ppt |
C:\Users\CIiHmnxMn6Ps\Documents\n4pF7Zu5nuMFsFDF\drpN.doc |
C:\Users\CIiHmnxMn6Ps\Documents\n4pF7Zu5nuMFsFDF\hUWKXz.ots |
C:\Users\CIiHmnxMn6Ps\Documents\ntrJFXNtrdZNu.docx |
C:\Users\CIiHmnxMn6Ps\Documents\pW9v8t1yPD6K.doc |
C:\Users\CIiHmnxMn6Ps\Documents\q9VvbZ97BV.xlsx |
C:\Users\CIiHmnxMn6Ps\Documents\qghRafx.pptx |
C:\Users\CIiHmnxMn6Ps\Documents\whE6.pptx |
C:\Users\CIiHmnxMn6Ps\Music\-i8aiejY-Ox |
C:\Users\CIiHmnxMn6Ps\Music\-i8aiejY-Ox\8hfKWmQ427_unk |
C:\Users\CIiHmnxMn6Ps\Music\-i8aiejY-Ox\8hfKWmQ427_unk\ArnwsPR_MHsiGg_-iJ8b |
C:\Users\CIiHmnxMn6Ps\Music\-i8aiejY-Ox\8hfKWmQ427_unk\ArnwsPR_MHsiGg_-iJ8b\KxAZMmf9ZC.mp3 |
C:\Users\CIiHmnxMn6Ps\Music\-i8aiejY-Ox\8hfKWmQ427_unk\ArnwsPR_MHsiGg_-iJ8b\PfxO5 a.mp3 |
C:\Users\CIiHmnxMn6Ps\Music\-i8aiejY-Ox\8hfKWmQ427_unk\gTULUOkd T5yj0_bL.wav |
C:\Users\CIiHmnxMn6Ps\Music\-i8aiejY-Ox\rTq9OvcTzZbSOJ |
C:\Users\CIiHmnxMn6Ps\Music\-i8aiejY-Ox\rTq9OvcTzZbSOJ\6zCF5_61lqSET_v2.m4a |
C:\Users\CIiHmnxMn6Ps\Music\-i8aiejY-Ox\rTq9OvcTzZbSOJ\Hbtqb.m4a |
C:\Users\CIiHmnxMn6Ps\Music\-i8aiejY-Ox\rTq9OvcTzZbSOJ\ZIJZb1Js5.wav |
C:\Users\CIiHmnxMn6Ps\Music\-i8aiejY-Ox\rTq9OvcTzZbSOJ\yVJ-1.m4a |
C:\Users\CIiHmnxMn6Ps\Music\0-deXw8XD8lqO9Ux |
C:\Users\CIiHmnxMn6Ps\Music\0-deXw8XD8lqO9Ux\2aLWgx1kRZlK5GeFPq7 |
C:\Users\CIiHmnxMn6Ps\Music\0-deXw8XD8lqO9Ux\2aLWgx1kRZlK5GeFPq7\9cv9.mp3 |
C:\Users\CIiHmnxMn6Ps\Music\0-deXw8XD8lqO9Ux\2aLWgx1kRZlK5GeFPq7\DKxyYxS2S.m4a |
C:\Users\CIiHmnxMn6Ps\Music\0-deXw8XD8lqO9Ux\2aLWgx1kRZlK5GeFPq7\F6p_.mp3 |
C:\Users\CIiHmnxMn6Ps\Music\0-deXw8XD8lqO9Ux\2aLWgx1kRZlK5GeFPq7\Y-3X.wav |
C:\Users\CIiHmnxMn6Ps\Music\0-deXw8XD8lqO9Ux\2aLWgx1kRZlK5GeFPq7\_IQefVscf3U.mp3 |
C:\Users\CIiHmnxMn6Ps\Music\0-deXw8XD8lqO9Ux\3KERQl6j9Yok.wav |
C:\Users\CIiHmnxMn6Ps\Music\0-deXw8XD8lqO9Ux\Idp7.m4a |
C:\Users\CIiHmnxMn6Ps\Music\0-deXw8XD8lqO9Ux\XFbEc10OTGQj_1 |
C:\Users\CIiHmnxMn6Ps\Music\0-deXw8XD8lqO9Ux\XFbEc10OTGQj_1\2OX17PE2UPKQ1.mp3 |
C:\Users\CIiHmnxMn6Ps\Music\0-deXw8XD8lqO9Ux\XFbEc10OTGQj_1\6HTocON-HM4-jC0.m4a |
C:\Users\CIiHmnxMn6Ps\Music\0-deXw8XD8lqO9Ux\XFbEc10OTGQj_1\6kEutjzOkX6ln19F.wav |
C:\Users\CIiHmnxMn6Ps\Music\0-deXw8XD8lqO9Ux\XFbEc10OTGQj_1\Po Ld.wav |
C:\Users\CIiHmnxMn6Ps\Music\0-deXw8XD8lqO9Ux\XFbEc10OTGQj_1\ktfO7Cvts5Cqmf.m4a |
C:\Users\CIiHmnxMn6Ps\Music\0-deXw8XD8lqO9Ux\XFbEc10OTGQj_1\tOTDnfrljL.mp3 |
C:\Users\CIiHmnxMn6Ps\Music\0-deXw8XD8lqO9Ux\XFbEc10OTGQj_1\wsq49nCwLDvoTJMyX.m4a |
C:\Users\CIiHmnxMn6Ps\Music\0-deXw8XD8lqO9Ux\qsyZLy.wav |
C:\Users\CIiHmnxMn6Ps\Music\L0jX43rl.mp3 |
C:\Users\CIiHmnxMn6Ps\Music\TEEDsKwBuumB.m4a |
C:\Users\CIiHmnxMn6Ps\Music\ZGlYL.m4a |
C:\Users\CIiHmnxMn6Ps\Music\bsOre2V_VLQbDcTMWd |
C:\Users\CIiHmnxMn6Ps\Music\bsOre2V_VLQbDcTMWd\R FFPWEjK.wav |
C:\Users\CIiHmnxMn6Ps\Music\bsOre2V_VLQbDcTMWd\wQMxSWpQu4SG.m4a |
C:\Users\CIiHmnxMn6Ps\Music\bsOre2V_VLQbDcTMWd\xZAWiuTLlEOIQjv.mp3 |
C:\Users\CIiHmnxMn6Ps\Pictures\Ljnp2 5wq.bmp |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9 |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\TPJFljDcfLa5j |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\TPJFljDcfLa5j\0ydv7Os4jKj.png |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\TPJFljDcfLa5j\17q2IyZR7N15tLz7-L.png |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\TPJFljDcfLa5j\EE6Gq.jpg |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\TPJFljDcfLa5j\O6 bcDmEPr9tbsiR |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\TPJFljDcfLa5j\O6 bcDmEPr9tbsiR\05IqsBsaK6G7e3bTU1HF |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\TPJFljDcfLa5j\O6 bcDmEPr9tbsiR\05IqsBsaK6G7e3bTU1HF\fUbtUSOV.gif |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\TPJFljDcfLa5j\O6 bcDmEPr9tbsiR\05IqsBsaK6G7e3bTU1HF\jlnlskgV--j.jpg |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\TPJFljDcfLa5j\O6 bcDmEPr9tbsiR\05IqsBsaK6G7e3bTU1HF\q2240ZoE8l.jpg |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\TPJFljDcfLa5j\O6 bcDmEPr9tbsiR\1cNZRhbHairVl.bmp |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\TPJFljDcfLa5j\TGn2.gif |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\TPJFljDcfLa5j\ZQFSqNus5 I |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\TPJFljDcfLa5j\ZQFSqNus5 I\BFNs5zJTdcq_nm.gif |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\TPJFljDcfLa5j\ZQFSqNus5 I\Eq xM_Ib8v6.bmp |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\TPJFljDcfLa5j\ZQFSqNus5 I\rbMyx |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\TPJFljDcfLa5j\ZQFSqNus5 I\rbMyx\Rlc.png |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\TPJFljDcfLa5j\ZQFSqNus5 I\ysA9HkWRxb.bmp |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\TPJFljDcfLa5j\n1FGDye-U.jpg |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\VSB87SzAPekSrq.png |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4VIvR9\uOYPN.bmp |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4o71DtOrIVri |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4o71DtOrIVri\2tgp6Pwp 3Uxc.bmp |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4o71DtOrIVri\9S25PKD1Nd_BfrDqr.png |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4o71DtOrIVri\EX JCaY |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4o71DtOrIVri\EX JCaY\4IcsOLWut6Z.jpg |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4o71DtOrIVri\EX JCaY\6Aqzrp.gif |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\4o71DtOrIVri\hWHb.gif |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\7ZDAH8 kwcU1qOZyAL0h.bmp |
C:\Users\CIiHmnxMn6Ps\Pictures\cl 9wel\kNIu4Rb.gif |
C:\Users\CIiHmnxMn6Ps\Pictures\yb2ufqxCr |
C:\Users\CIiHmnxMn6Ps\Pictures\yb2ufqxCr\01SFP7Ks.png |
C:\Users\CIiHmnxMn6Ps\Pictures\yb2ufqxCr\hGHuJL.jpg |
C:\Users\CIiHmnxMn6Ps\Pictures\yb2ufqxCr\iS30zDVwh2BWeasD8nG.jpg |
C:\Users\CIiHmnxMn6Ps\Videos\-8hVVZaBd |
C:\Users\CIiHmnxMn6Ps\Videos\-8hVVZaBd\2L0VVm24YyJPTHgWSU.mp4 |
C:\Users\CIiHmnxMn6Ps\Videos\-8hVVZaBd\E0gJ7iYOP5Bkv.flv |
C:\Users\CIiHmnxMn6Ps\Videos\-8hVVZaBd\Fjv CoL8A-zW4bOGsxXG.mp4 |
C:\Users\CIiHmnxMn6Ps\Videos\-8hVVZaBd\S9odk3EgCjFRAdpmo9j5.swf |
C:\Users\CIiHmnxMn6Ps\Videos\-8hVVZaBd\V yaU1Y0.mp4 |
C:\Users\CIiHmnxMn6Ps\Videos\0tN0ifd5R6S0CGU- rW.mkv |
C:\Users\CIiHmnxMn6Ps\Videos\3vtS4BF.avi |
C:\Users\CIiHmnxMn6Ps\Videos\96EbURpfbFv |
C:\Users\CIiHmnxMn6Ps\Videos\96EbURpfbFv\01nN6c6g5WZtZOxuid8.flv |
C:\Users\CIiHmnxMn6Ps\Videos\96EbURpfbFv\Gfi0yuaIeq9JRxAxGHx.flv |
C:\Users\CIiHmnxMn6Ps\Videos\96EbURpfbFv\Ht8D6uXGW62Q6.mkv |
C:\Users\CIiHmnxMn6Ps\Videos\96EbURpfbFv\chlk9kh4IOrafcLMa2.flv |
C:\Users\CIiHmnxMn6Ps\Videos\I_xOQGevC-XVqUrN3t |
C:\Users\CIiHmnxMn6Ps\Videos\I_xOQGevC-XVqUrN3t\EuQ8ce9kJ6Cvy.avi |
C:\Users\CIiHmnxMn6Ps\Videos\I_xOQGevC-XVqUrN3t\YeB49-ysRtaMu0qg.mkv |
C:\Users\CIiHmnxMn6Ps\Videos\I_xOQGevC-XVqUrN3t\YwluYLoCT2pAF.flv |
C:\Users\CIiHmnxMn6Ps\Videos\I_xOQGevC-XVqUrN3t\h5r3Yv-0V.mkv |
C:\Users\CIiHmnxMn6Ps\Videos\I_xOQGevC-XVqUrN3t\i0fZgpxwB0r-0jmLgH.mp4 |
C:\Users\CIiHmnxMn6Ps\Videos\TpxT6gJ.avi |
C:\Users\CIiHmnxMn6Ps\Videos\_0cT5p |
C:\Users\CIiHmnxMn6Ps\Videos\_0cT5p\-ZXC.mp4 |
C:\Users\CIiHmnxMn6Ps\Videos\_0cT5p\4PIa-uAJgZN1m3.swf |
C:\Users\CIiHmnxMn6Ps\Videos\_0cT5p\EHGIayzKnA.mkv |
C:\Users\CIiHmnxMn6Ps\Videos\_0cT5p\MLd7s9VNnP.avi |
C:\Users\CIiHmnxMn6Ps\Videos\_0cT5p\dM9Sx7zZKY6WkchN9h.mkv |
C:\Users\CIiHmnxMn6Ps\Videos\_0cT5p\rti-6F9FbTnL0V-z0K |
C:\Users\CIiHmnxMn6Ps\Videos\_0cT5p\rti-6F9FbTnL0V-z0K\CcZtPwU9FABJJ.mp4 |
C:\Users\CIiHmnxMn6Ps\Videos\_0cT5p\th72nUvBhGSe-.flv |
C:\Users\CIiHmnxMn6Ps\Videos\_lZBCzyR9fESmNkThqF.mkv |
C:\Users\CIiHmnxMn6Ps\Videos\ojHBv42W1qXR9 |
C:\Users\CIiHmnxMn6Ps\Videos\ojHBv42W1qXR9\-FNxp_6jnkKCRqZAUca.flv |
C:\Users\CIiHmnxMn6Ps\Videos\ojHBv42W1qXR9\2Z tB mggE4VP2qyF.flv |
C:\Users\CIiHmnxMn6Ps\Videos\ojHBv42W1qXR9\qsznpsjNpmmdxgGx.avi |