Home Articles Windows 10 Forensics

Windows 10 Forensics

0
2
37,347

In this article, we are going to take a close look at the fundamentally new sources of digital evidences that are typical for the new version of the Windows 10 operating system, such as Notification center, new browser Microsoft Edge and digital personal assistant Cortana. Also, we will study some of the sources that were in the previous versions of the operating system, but format of which was changed, for example, Prefetch-files. We are going to study in details the important source of the digital evidences, which appeared in the Windows XP operating system and that is used in the new version of the operating system – Volume Shadow Copy Service.

Windows 10 Notification Сenter

The Notification center that appeared in the new version of Windows allows programs to display messages on the screen just like it happens in the operating systems of mobile devices. These messages, of course, can contain valuable information for the forensic analysis.

These messages are stored at the file appd.dat, which is located in the following catalog:

<System_partition>\Users\<UserName>\AppData\Local\Microsoft\Windows\Notifications

The analysis of the file via hex-viewer shows that the records about notifications are kept in the XML format (ref. Figure 1).

Figure 1. Fragment of the file appdb.dat opened in the hex-viewer of the AccessData FTK Imager program

As it can be seen on the Figure 1, the XML markup version 1.0 and encoding UTF-8 are used. In this case, there is a notification about received message on the social network “Vkontakte”. The most valuable information is contained in the descriptors <image> and <text>. The descriptor <image> contains the link to the image of a user’s profile who sent the message. The descriptor <text> contains the name of the sender and text of the message. It worth mentioning that there is a set of meandering symbols instead of text on the Figure 1 as the hex-viewer does not support UTF-8 encoding. In order to decode text in <text> descriptors, you can use even some online services, for example https://www.artlebedev.ru/tools/decoder/.

 

Microsoft Edge web-browser

Starting from the Internet Explorer 10, Microsoft developers changed the format of data storing. They replaced index.dat, which was familiar to the most forensic experts, with the database in the ESE format that is stored in the file WebCacheV01.dat.

In spite of the fact that with the release of Windows 10 the developers introduced web-browser – Microsoft Edge, which had code name «Spartan», the traditional for Windows operating system browser Internet Explorer (version 11) still exists, its browsing history is stored in the following catalog:

<System_partition>\Users\<UserName>\AppData\Local\Microsoft\Windows\WebCache

File WebCacheV01.dat, which is stored in the abovementioned catalog, contains not only the browsing history of Internet Explorer, but also the browsing history of the new browser Microsoft Edge. Additionally it stores information about cookies. This database can be in the «Dirty Shutdown» state and it can be an obstacle for the forensic analysis of the data. In order to find out in what state it is, an expert can use the utility esentutl.exe that can be found in the following catalog:

<System_partition>\Windows\System32

In order to receive the information about the database an expert needs to copy the catalog \WebCache to the workstation then open it and put the following command in the command prompt:

esentutl /mh WebCacheV01.dat

On the Figure 2, it can be seen that command output contains, besides the rest of the information, information about current directory, in our case we can see that database is on the «Dirty Shutdown» state (ref. Figure 2).

Figure 2. The result of esentult using with the key /mh

In order to turn the database into the «Clean Shutdown» state, an expert needs to put log-files into it. It can be done by the following command:

esentutl /r V01 /d

The key /d is used in order to command the utility to look for the log-files only in the current directory. When the utility esentutl.exe will be run for the second time with the key /mh, the value of the “State” will be changed into «Clean Shutdown».

Software ESEDatabaseView developed by NirSoft can be used for browsing the database content. In order to get the general information about the types of information contained in the database, an expert needs to go to the table “Containers». In our case, the database contains 28 containers (ref. Figure 3).

Figure 3. Table «Containers» of the WebCacheV01.dat database opened with NirSoft ESEDatabaseView

As it can be seen on the Figure 3, the information about visited web-pages is contained in the containers 2, 14, 15 and 21. This table contains not only the information about the containers, but also the paths to the files with data.

The values of time stamps in this database have to be converted into hexadecimal form and then decoded via, for example, DCode program using the format «Windows: 64 bit Hex Value – Big Endian».

It should be mentioned that the information about web-pages that a user had visited in the «InPrivate» mode is contained in the same containers. These pages have value «8» in the column «Flags» [Muir 2015].

Information about user’s downloads is stored in the container 22 that has name «iedownload». Information in this container is in the hexadecimal form and has to be converted into ASCII.

Files that were cached by the browser are stored in the following catalog:

<System_partition>\Users\<UserName>\AppData\Local\Packages\Microsoft.MicrosoftEdge_***\AC\#!001\MicrosoftEdge\Cache\

Data extraction from the files for analysis in the automatic mode can be done via, for example, Belkasoft Evidence Center.

Cortana

Personal assistant Cortana was realized in the Windows 8 as an application. With the realize of the new version of the operating system Cortana became a part of the system. Even though, the personal assistant is not available in Russian now, an expert needs to understand what kind of artefacts can be found during the analysis.

Information about the usage of the digital personal assistant is stored in the databases in the ESE format – IndexedDB.edb and CortanaCoreDb.dat, which are located in the following catalogs:

<System_partition>\Users\<UserName>\AppData\Local\Packages\Microsoft.Windows.Cortana_xxxx\AppData\Indexed DB\

<System_partition>\Users\<UserName>\AppData\Local\Packages\Microsoft.Windows.Cortana_xxxx\LocalState\ESEDatabase_CortanaCoreInstance\

The first database contains information about data that was indexed by Cortana, the second one contains information about interaction between a user and assistant. It should be mentioned that time stamps of the second database are in the Google Chrome Value format and can be decoded via, for example, Digital Detective DCode.

Prefetch-files

As it is known, Prefetch-files contain metadata (data definitions), which are very important for a digital forensic analysis or computer forensic analysis. For example, these files contain information about the last run of the program and information about how many times it was run. Also by the analysis of prefetch-files, an expert can find out from which logical drive a program was run (including the information about the volume serial number), and get a list of DLL and other files that were used.

Prefetch-files in the Microsoft Windows 10 operating system are still contained in the catalog \Windows\Prefetch\ and have «.pf» extension, but as it was noticed by Francesco Picasso [Picasso 2015: Electronic resource], their format was changed.

Figure 4. Fragment of the VK.EXE-570D9FDD.pf file opened via hex-editor 0xED

As it can be seen on the Figure 4, the files have «MAM» signature and there are no strings. The fact is that the Xpress Huffman algorithm is used for compressing of the files. Francesco Picasso in his article shows the script that was written on the Python programming language and it allows to extract Prefetch-file of the new format. The script can be downloaded from the following link: https://gist.github.com/dfirfpi/113ff71274a97b489dfd.

It should be mentioned that the Microsoft Windows version 8.1 or higher has to be used in order to run the script. A specialized software, for example, Mitec Windows File Analyzer, can be used for extraction data from the file.

Volume Shadow Copy Service

As it is known, volume shadow copy service appeared with the release of the Windows XP operating system. In the Windows XP it allowed to make system recovery via so-called « recovery point» to the previous state of the operating system and it was a valuable source of the information in the context of the forensic analysis as it allowed to recover the previous state of the operating system register. With the release of Windows Vista operating system volume shadow copies start to contain not only the previous versions of the system files, but also they contained user’s data. In the new version of the operating system, this service is still a valuable source of the information for the forensic analysis.

The command prompt (with admin permission) can be used in order to check the list of the shadow copies on the working system. An expert needs to input the command vssadmin list shadows (ref. Figure 5).

Figure 5. Example of the vssadmin list shadows command output

There are programs with a graphical user interface, for example, Shadow Explorer (ref. Figure 6).

Figure 6. List of the shadow copies displayed via Shadow Explorer program

Of course an expert rarely has an access to the working system, usually it happens during crime scene investigation or search incident. Shadow copies can be extracted by VHD method that was offered by Harlan Carvey (ref. Carvey 2014).

First of all, it is required to convert the image (it is better to make bit-stream copy of a system partition separetly) into VHD format (Virtual Hard Disk), via utility vhdtool.exe.

This file has to be mounted in the mode « read-only» in the «Control panel».

An expert can check how many shadow copies there are via the utility vssadmin.exe (for example: vssadmin list shadows /for=n, where n is a letter of the mounted system partition image).

In order to get an access to the files, an expert needs to create a link to the shadow copy that will be analysed. It can be done with a command mklink (for example, mklink /d C:\<mount point> \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy\, a value after mount point can be copied from vssadmin). Then an expert will be able to work with the files stored in the shadow copy.

In this article, we took a close look at the most valuable for forensic analysis artefacts, which appeared in the Microsoft Windows 10 operating system and those appeared in the previous versions of the operating system but still relevant.

References

1.  Muir, B. Windows 10 – Cortana & Notification Center Forensics. – 2015. – URL: http://bsmuir.kinja.com/windows-10-cortana-notification-center-forenics-1724511442

2.  Muir, B. Windows 10 – Microsoft Edge Browser Forensics. – 2015. – URL: http://bsmuir.kinja.com/windows-10-microsoft-edge-browser-forensics-1733533818

3.  Picasso, F. A first look at Windows 10 prefetch files. – 2015. – URL: http://blog.digital-forensics.it/2015/06/a-first-look-at-windows-10-prefetch.html

4.  Carvey, H. Windows Forensic Analysis Toolkit, 4th Edition. Advanced Analysis Techniques for Windows 8. – Waltham: Syngress, 2014. – 350 p.

Authors:

Igor Mikhaylov & Oleg Skulkin

Load More Related Articles
Load More In Articles

No Comments

  1. HaroldDab

    April 9, 2019 at 6:56 pm

    Your comment is awaiting moderation.

    With thanks, An abundance of posts.

    http://cialismsnrx.com/
    how long until cialis works
    buy cialis online
    cialis tadalafil yorum
    [url=http://cialisttk.com/]cheap cialis[/url]

    Reply

  2. HaroldDab

    April 9, 2019 at 9:02 pm

    Your comment is awaiting moderation.

    You revealed this well.
    http://cialismsnrx.com/
    cialis neocalis
    generic cialis
    site fiable de cialis
    [url=http://cialismsnntx.com/]cheap cialis[/url]

    Reply

  3. HaroldDab

    April 9, 2019 at 11:09 pm

    Your comment is awaiting moderation.

    Info very well utilized..
    https://www.cialismim.com/
    quanto prima prendere il cialis
    cialis 20 mg
    temoignage sur le cialis
    [url=https://www.cialismim.com/]cialis without a doctor prescription[/url]

    Reply

  4. HaroldDab

    April 10, 2019 at 1:17 am

    Your comment is awaiting moderation.

    You have made your stand very nicely!!
    https://www.cialisfidel.com/
    cialis dura 3 dias
    cialis 20 mg
    urologist prescribe cialis
    [url=http://cialisttk.com/]cialis generic[/url]

    Reply

  5. HaroldDab

    April 10, 2019 at 3:25 am

    Your comment is awaiting moderation.

    Many thanks! Valuable information!
    http://cialisttk.com/
    can diabetics take cialis
    generic cialis
    what is super active cialis
    [url=http://cialisttk.com/]cialis online[/url]

    Reply

  6. HaroldDab

    April 10, 2019 at 5:33 am

    Your comment is awaiting moderation.

    Great data. Kudos.
    http://cialispego.com/
    comprar cialis en japon
    cialis without a doctor prescription
    que es mejor cialis o duroval
    [url=http://cialisttk.com/]cheap cialis[/url]

    Reply

  7. HaroldDab

    April 10, 2019 at 7:37 am

    Your comment is awaiting moderation.

    Awesome write ups, Cheers!
    https://www.cialismim.com/
    correct dosage cialis
    cialis generic
    reaccion de la pastilla cialis
    [url=https://www.cialisfidel.com/]generic cialis[/url]

    Reply

  8. HaroldDab

    April 10, 2019 at 9:41 am

    Your comment is awaiting moderation.

    You expressed this effectively.
    https://www.cialismim.com/
    cialis ne zaman alД±nmalД±
    generic cialis
    viagra cialis levitra prodaja
    [url=http://cialismsnrx.com/]cialis generic[/url]

    Reply

  9. HaroldDab

    April 10, 2019 at 11:48 am

    Your comment is awaiting moderation.

    Nicely put. Kudos!
    http://cialisttk.com/
    el cialis sirve para los diabeticos
    cheap cialis
    why does cialis work longer than viagra
    [url=http://cialismsnntx.com/]cialis generic[/url]

    Reply

  10. HaroldDab

    April 10, 2019 at 4:10 pm

    Your comment is awaiting moderation.

    You said it very well..
    http://cialismsnrx.com/
    adcirca cialis same
    cialis online
    cialis pret in romania
    [url=http://cialispego.com/]generic cialis[/url]

    Reply

  11. HaroldDab

    April 10, 2019 at 8:31 pm

    Your comment is awaiting moderation.

    You actually revealed that perfectly.
    http://cialismsnntx.com/
    cialis 5 mg commenti
    cialis online
    werking cialis
    [url=http://cialisttk.com/]cheap cialis[/url]

    Reply

  12. HaroldDab

    April 10, 2019 at 10:40 pm

    Your comment is awaiting moderation.

    Amazing a lot of fantastic knowledge!
    http://cialismsnntx.com/
    cialis para mujer precio
    buy cialis online
    cialis doktor yazarmД±
    [url=https://www.cialismim.com/]cialis 20 mg[/url]

    Reply

  13. HaroldDab

    April 11, 2019 at 12:50 am

    Your comment is awaiting moderation.

    Cheers. Wonderful information!
    http://cialisttk.com/
    comprar cialis generico urgente
    cialis generic
    sito affidabile cialis generico
    [url=http://cialisttk.com/]cialis online[/url]

    Reply

  14. HaroldDab

    April 11, 2019 at 3:04 am

    Your comment is awaiting moderation.

    Info certainly applied!!
    http://cialismsnntx.com/
    cialis brasil preço
    cialis generic
    mon mari prend du cialis en cachette
    [url=https://www.cialisfidel.com/]buy cialis online[/url]

    Reply

  15. HaroldDab

    April 11, 2019 at 5:13 am

    Your comment is awaiting moderation.

    Whoa loads of amazing knowledge.
    http://cialisttk.com/
    unterschied zwischen cialis und levitra
    cialis 20mg
    cialis a 40 anni
    [url=http://cialispego.com/]cheap cialis[/url]

    Reply

  16. HaroldDab

    April 11, 2019 at 9:33 am

    Your comment is awaiting moderation.

    Nicely put, Thanks!
    http://cialispego.com/
    cialis orthostatic hypotension
    cheap cialis
    natural replacement cialis
    [url=http://cialispego.com/]cialis online[/url]

    Reply

  17. HaroldDab

    April 11, 2019 at 11:44 am

    Your comment is awaiting moderation.

    Many thanks! A lot of advice!

    http://cialismsnntx.com/
    cialis tab 10mg
    cialis 20 mg
    donde conseguir cialis en madrid
    [url=http://cialispego.com/]cialis 20 mg[/url]

    Reply

  18. HaroldDab

    April 11, 2019 at 1:59 pm

    Your comment is awaiting moderation.

    You have made the point!
    http://cialismsnntx.com/
    cialis 20 mg para que sirve
    cialis 20mg
    red cialis viagra yan etkileri
    [url=https://www.cialismim.com/]cialis without a doctor prescription[/url]

    Reply

  19. HaroldDab

    April 11, 2019 at 4:15 pm

    Your comment is awaiting moderation.

    You actually revealed it exceptionally well.
    http://cialismsnntx.com/
    cialis super active testimonials
    cialis generic
    precio del cialis en espaГ±a
    [url=http://cialismsnrx.com/]buy cialis online[/url]

    Reply

  20. HaroldDab

    April 11, 2019 at 6:27 pm

    Your comment is awaiting moderation.

    Information clearly applied.!
    http://cialismsnntx.com/
    cialis da 5 mg effetti collaterali
    cialis online
    het verschil tussen viagra en cialis
    [url=http://cialismsnrx.com/]cialis online[/url]

    Reply

  21. HaroldDab

    April 11, 2019 at 8:39 pm

    Your comment is awaiting moderation.

    Nicely put. Kudos!
    https://www.cialismim.com/
    beli cialis di malaysia
    cialis without a doctor prescription
    opiniones comprar cialis
    [url=https://www.cialismim.com/]buy cialis online[/url]

    Reply

  22. HaroldDab

    April 12, 2019 at 1:09 am

    Your comment is awaiting moderation.

    Amazing facts, Kudos!
    https://www.cialismim.com/
    ou acheter du cialis sur le net
    cialis without a doctor prescription
    diferencia entre viagra y cialis
    [url=http://cialisttk.com/]cialis online[/url]

    Reply

  23. HaroldDab

    April 12, 2019 at 3:25 am

    Your comment is awaiting moderation.

    Thanks! A lot of content.

    http://cialismsnrx.com/
    generic cialis online fast shipping
    cialis without a doctor prescription
    viagra cialis levitra nebenwirkungen
    [url=http://cialispego.com/]cheap cialis[/url]

    Reply

  24. HaroldDab

    April 12, 2019 at 5:37 am

    Your comment is awaiting moderation.

    With thanks. Quite a lot of tips!

    http://cialispego.com/
    cialis modo uso
    buy cialis online
    si puГІ comprare il cialis su internet
    [url=http://cialisttk.com/]generic cialis[/url]

    Reply

  25. HaroldDab

    April 12, 2019 at 7:51 am

    Your comment is awaiting moderation.

    Valuable tips. Many thanks.
    http://cialismsnrx.com/
    quanto tempo antes tomar cialis
    generic cialis
    cialis 20 ou 10
    [url=http://cialismsnrx.com/]cialis online[/url]

    Reply

  26. HaroldDab

    April 12, 2019 at 10:00 am

    Your comment is awaiting moderation.

    Thanks! I like this.
    http://cialisttk.com/
    negative drug interactions cialis
    buy cialis online
    cialis for prostatitis
    [url=https://www.cialisfidel.com/]cialis 20 mg[/url]

    Reply

  27. HaroldDab

    April 12, 2019 at 12:08 pm

    Your comment is awaiting moderation.

    Nicely put. With thanks.
    https://www.cialisfidel.com/
    cialis generique effet secondaire
    cialis 20mg
    pastile pentru potenta cialis
    [url=https://www.cialismim.com/]generic cialis[/url]

    Reply

  28. HaroldDab

    April 12, 2019 at 2:21 pm

    Your comment is awaiting moderation.

    Many thanks! Quite a lot of info!

    http://cialismsnrx.com/
    cialis price in mexico
    cialis without a doctor prescription
    acheter cialis sans ordonnance en france
    [url=https://www.cialisfidel.com/]cialis 20mg[/url]

    Reply

  29. HaroldDab

    April 12, 2019 at 4:33 pm

    Your comment is awaiting moderation.

    You reported this really well.
    http://cialispego.com/
    ist cialis rezeptfrei in Г¶sterreich
    cialis 20mg
    cialis da 80 mg
    [url=http://cialisttk.com/]cialis 20 mg[/url]

    Reply

  30. HaroldDab

    April 12, 2019 at 6:42 pm

    Your comment is awaiting moderation.

    You suggested it wonderfully!
    http://cialisttk.com/
    preço viagra levitra ou cialis
    buy cialis online
    prendre cialis jeune
    [url=https://www.cialisfidel.com/]cialis without a doctor prescription[/url]

    Reply

  31. HaroldDab

    April 12, 2019 at 8:48 pm

    Your comment is awaiting moderation.

    Appreciate it, A lot of advice!

    http://cialisttk.com/
    does cialis prevent premature ejaculation
    cialis 20mg
    how long does a 20mg cialis last
    [url=http://cialispego.com/]cialis 20 mg[/url]

    Reply

  32. HaroldDab

    April 12, 2019 at 10:51 pm

    Your comment is awaiting moderation.

    Thanks! Very good information.
    http://cialisttk.com/
    can diabetics use cialis
    cialis without a doctor prescription
    cialis preis in Г¶sterreich
    [url=https://www.cialismim.com/]cialis without a doctor prescription[/url]

    Reply

  33. HaroldDab

    April 13, 2019 at 3:01 am

    Your comment is awaiting moderation.

    Terrific write ups, Regards!
    https://www.cialisfidel.com/
    precio cialis farmacias espaГ±a
    cialis generic
    comprar cialis rj
    [url=http://cialismsnrx.com/]cialis without a doctor prescription[/url]

    Reply

  34. HaroldDab

    April 13, 2019 at 5:10 am

    Your comment is awaiting moderation.

    Info well considered!!
    https://www.cialismim.com/
    cuanto tiempo hace efecto cialis
    generic cialis
    safety of cialis from india
    [url=https://www.cialismim.com/]cialis online[/url]

    Reply

  35. HaroldDab

    April 13, 2019 at 7:18 am

    Your comment is awaiting moderation.

    Many thanks! A lot of tips.

    https://www.cialismim.com/
    prix du cialis en pharmacie en suisse
    cialis 20mg
    cialis pocztex
    [url=http://cialismsnntx.com/]cheap cialis[/url]

    Reply

  36. HaroldDab

    April 13, 2019 at 9:27 am

    Your comment is awaiting moderation.

    Kudos, I enjoy it!
    http://cialispego.com/
    voucher cialis free trial
    cheap cialis
    buy cialis in canada online
    [url=https://www.cialismim.com/]cialis 20mg[/url]

    Reply

  37. HaroldDab

    April 13, 2019 at 11:35 am

    Your comment is awaiting moderation.

    Thanks a lot! Numerous forum posts!

    https://www.cialisfidel.com/
    pastilla cialis precio mexico
    generic cialis
    boots cialis prices
    [url=http://cialisttk.com/]generic cialis[/url]

    Reply

  38. HaroldDab

    April 13, 2019 at 1:44 pm

    Your comment is awaiting moderation.

    You have made your point!
    http://cialisttk.com/
    cialis von lilly deutschland
    cialis 20mg
    cialis wirkt wie lange
    [url=http://cialismsnrx.com/]cialis generic[/url]

    Reply

  39. HaroldDab

    April 13, 2019 at 3:56 pm

    Your comment is awaiting moderation.

    You have made your position very effectively!!
    https://www.cialismim.com/
    forum vendita cialis
    cialis without a doctor prescription
    can you buy cialis over the counter in spain
    [url=https://www.cialismim.com/]cheap cialis[/url]

    Reply

  40. HaroldDab

    April 13, 2019 at 6:06 pm

    Your comment is awaiting moderation.

    Really quite a lot of useful material!
    http://cialismsnntx.com/
    lek na potencje cialis
    cialis generic
    how long should cialis last
    [url=https://www.cialismim.com/]generic cialis[/url]

    Reply

  41. HaroldDab

    April 13, 2019 at 8:15 pm

    Your comment is awaiting moderation.

    Appreciate it! A lot of data.

    http://cialismsnrx.com/
    cialis senkt den blutdruck
    cialis online
    how much does 30 day cialis cost
    [url=http://cialisttk.com/]cialis generic[/url]

    Reply

  42. HaroldDab

    April 13, 2019 at 10:22 pm

    Your comment is awaiting moderation.

    You expressed it adequately.
    http://cialismsnntx.com/
    richtige einnahme cialis
    buy cialis online
    cialis costi in farmacia
    [url=https://www.cialismim.com/]cialis 20 mg[/url]

    Reply

  43. HaroldDab

    April 14, 2019 at 12:29 am

    Your comment is awaiting moderation.

    Thank you. Lots of stuff!

    http://cialispego.com/
    cialis rash treatment
    cialis online
    generic sublingual cialis
    [url=https://www.cialisfidel.com/]cialis online[/url]

    Reply

  44. HaroldDab

    April 14, 2019 at 2:39 am

    Your comment is awaiting moderation.

    Excellent posts. Appreciate it!
    https://www.cialismim.com/
    cialis hoe vaak gebruiken
    cialis generic
    cialis c20 erfahrungen
    [url=http://cialispego.com/]generic cialis[/url]

    Reply

  45. HaroldDab

    April 14, 2019 at 4:49 am

    Your comment is awaiting moderation.

    Reliable knowledge. Regards!
    http://cialispego.com/
    la pastilla cialis sirve para la eyaculacion precoz
    cialis online
    what are the strengths of cialis
    [url=http://cialisttk.com/]cialis 20mg[/url]

    Reply

  46. HaroldDab

    April 14, 2019 at 7:01 am

    Your comment is awaiting moderation.

    You made your stand very nicely..
    http://cialispego.com/
    can you develop tolerance to cialis
    cialis 20 mg
    cialis foren
    [url=http://cialismsnrx.com/]cialis generic[/url]

    Reply

  47. HaroldDab

    April 14, 2019 at 9:13 am

    Your comment is awaiting moderation.

    Amazing information. With thanks.
    http://cialismsnntx.com/
    cialis canada free offer
    cialis online
    cialis generica mexico
    [url=https://www.cialismim.com/]cialis online[/url]

    Reply

  48. HaroldDab

    April 14, 2019 at 11:27 am

    Your comment is awaiting moderation.

    You have made your point!
    http://cialismsnntx.com/
    how to take cialis daily
    generic cialis
    cialis costo df
    [url=https://www.cialismim.com/]cialis without a doctor prescription[/url]

    Reply

  49. HaroldDab

    April 14, 2019 at 3:53 pm

    Your comment is awaiting moderation.

    Fine info. Thanks a lot!
    http://cialismsnrx.com/
    hva koster cialis
    generic cialis
    how much does a cialis pill cost
    [url=https://www.cialisfidel.com/]cheap cialis[/url]

    Reply

  50. HaroldDab

    April 14, 2019 at 6:06 pm

    Your comment is awaiting moderation.

    Valuable write ups. With thanks.
    https://www.cialismim.com/
    comparar viagra levitra cialis
    cialis 20 mg
    il cialis deve essere prescritto
    [url=http://cialismsnrx.com/]cialis online[/url]

    Reply

  51. HaroldDab

    April 14, 2019 at 8:17 pm

    Your comment is awaiting moderation.

    Perfectly voiced certainly. .
    https://www.cialismim.com/
    cialis za srce
    cialis 20 mg
    que tiempo dura el efecto de la cialis
    [url=http://cialispego.com/]cialis without a doctor prescription[/url]

    Reply

  52. HaroldDab

    April 14, 2019 at 10:28 pm

    Your comment is awaiting moderation.

    Truly lots of fantastic knowledge!
    http://cialismsnrx.com/
    cialis cene beograd
    cialis generic
    brand name cialis cheap
    [url=http://cialispego.com/]cheap cialis[/url]

    Reply

  53. HaroldDab

    April 15, 2019 at 12:38 am

    Your comment is awaiting moderation.

    Nicely put, Thanks!
    https://www.cialismim.com/
    cialis 5 mg enough
    buy cialis online
    donde comprar cialis en monterrey
    [url=https://www.cialismim.com/]cialis without a doctor prescription[/url]

    Reply

  54. HaroldDab

    April 15, 2019 at 2:49 am

    Your comment is awaiting moderation.

    Seriously tons of superb info!
    https://www.cialisfidel.com/
    is 10mg cialis effective
    generic cialis
    how does cialis work on bph
    [url=https://www.cialisfidel.com/]cialis without a doctor prescription[/url]

    Reply

  55. HaroldDab

    April 15, 2019 at 5:03 am

    Your comment is awaiting moderation.

    Well expressed genuinely! !
    http://cialispego.com/
    uso de cialis 5 mg
    generic cialis
    is 20 mg cialis enough
    [url=http://cialismsnrx.com/]cheap cialis[/url]

    Reply

  56. HaroldDab

    April 15, 2019 at 7:17 am

    Your comment is awaiting moderation.

    Many thanks! A lot of information!

    http://cialispego.com/
    cialis gervasi
    cialis generic
    exces de cialis
    [url=https://www.cialisfidel.com/]generic cialis[/url]

    Reply

  57. HaroldDab

    April 15, 2019 at 9:30 am

    Your comment is awaiting moderation.

    Wow lots of wonderful knowledge!
    https://www.cialismim.com/
    prescrizione medica per il cialis
    cialis 20mg
    cialis und pep
    [url=https://www.cialisfidel.com/]generic cialis[/url]

    Reply

  58. HaroldDab

    April 15, 2019 at 1:55 pm

    Your comment is awaiting moderation.

    Kudos! I enjoy it!
    http://cialismsnrx.com/
    cialis se puede tomar despues de comer
    cialis generic
    cialis e analisi del sangue
    [url=https://www.cialismim.com/]cheap cialis[/url]

    Reply

  59. HaroldDab

    April 15, 2019 at 4:12 pm

    Your comment is awaiting moderation.

    Awesome stuff. Regards.
    https://www.cialismim.com/
    cialis bez recepty forum
    generic cialis
    cialis before training
    [url=http://cialismsnntx.com/]cheap cialis[/url]

    Reply

  60. HaroldDab

    April 15, 2019 at 6:32 pm

    Your comment is awaiting moderation.

    Good advice. With thanks.
    http://cialispego.com/
    does cialis work when drunk
    cialis 20mg
    maximale dosis cialis
    [url=http://cialismsnntx.com/]cheap cialis[/url]

    Reply

  61. HaroldDab

    April 15, 2019 at 8:40 pm

    Your comment is awaiting moderation.

    You said it very well..
    http://cialispego.com/
    cialis ve gebelik
    cialis 20 mg
    cialis pague menos
    [url=http://cialispego.com/]generic cialis[/url]

    Reply

  62. HaroldDab

    April 15, 2019 at 10:49 pm

    Your comment is awaiting moderation.

    Well expressed certainly! .
    http://cialisttk.com/
    buy cialis miami
    cialis generic
    minocycline and cialis
    [url=http://cialismsnrx.com/]cheap cialis[/url]

    Reply

  63. HaroldDab

    April 16, 2019 at 3:07 am

    Your comment is awaiting moderation.

    Regards. Quite a lot of tips!

    http://cialispego.com/
    viagra and cialis australia
    cialis online
    how long after taking cialis can i drink alcohol
    [url=http://cialismsnrx.com/]cialis online[/url]

    Reply

  64. HaroldDab

    April 16, 2019 at 5:18 am

    Your comment is awaiting moderation.

    Cheers. I like this!
    http://cialismsnrx.com/
    validade da patente do cialis
    cialis 20 mg
    best online source for cialis
    [url=http://cialismsnntx.com/]cialis online[/url]

    Reply

  65. HaroldDab

    April 16, 2019 at 7:28 am

    Your comment is awaiting moderation.

    Whoa all kinds of useful advice.
    http://cialismsnntx.com/
    cialis orodispersible
    cialis without a doctor prescription
    viagra or cialis alcohol
    [url=http://cialismsnrx.com/]cheap cialis[/url]

    Reply

  66. HaroldDab

    April 16, 2019 at 9:39 am

    Your comment is awaiting moderation.

    Many thanks! Fantastic information.
    http://cialismsnrx.com/
    what counteracts cialis
    buy cialis online
    cialis e augmentin
    [url=http://cialismsnntx.com/]cialis without a doctor prescription[/url]

    Reply

  67. HaroldDab

    April 16, 2019 at 11:51 am

    Your comment is awaiting moderation.

    Kudos. Terrific stuff.
    http://cialismsnntx.com/
    cialis forum erfahrungen
    cialis online
    how long before sex should i take cialis
    [url=http://cialispego.com/]buy cialis online[/url]

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *