Home Articles Windows 10 Forensics

Windows 10 Forensics

0
2
36,170

In this article, we are going to take a close look at the fundamentally new sources of digital evidences that are typical for the new version of the Windows 10 operating system, such as Notification center, new browser Microsoft Edge and digital personal assistant Cortana. Also, we will study some of the sources that were in the previous versions of the operating system, but format of which was changed, for example, Prefetch-files. We are going to study in details the important source of the digital evidences, which appeared in the Windows XP operating system and that is used in the new version of the operating system – Volume Shadow Copy Service.

Windows 10 Notification ĐĄenter

The Notification center that appeared in the new version of Windows allows programs to display messages on the screen just like it happens in the operating systems of mobile devices. These messages, of course, can contain valuable information for the forensic analysis.

These messages are stored at the file appd.dat, which is located in the following catalog:

<System_partition>\Users\<UserName>\AppData\Local\Microsoft\Windows\Notifications

The analysis of the file via hex-viewer shows that the records about notifications are kept in the XML format (ref. Figure 1).

Figure 1. Fragment of the file appdb.dat opened in the hex-viewer of the AccessData FTK Imager program

As it can be seen on the Figure 1, the XML markup version 1.0 and encoding UTF-8 are used. In this case, there is a notification about received message on the social network “Vkontakte”. The most valuable information is contained in the descriptors <image> and <text>. The descriptor <image> contains the link to the image of a user’s profile who sent the message. The descriptor <text> contains the name of the sender and text of the message. It worth mentioning that there is a set of meandering symbols instead of text on the Figure 1 as the hex-viewer does not support UTF-8 encoding. In order to decode text in <text> descriptors, you can use even some online services, for example https://www.artlebedev.ru/tools/decoder/.

 

Microsoft Edge web-browser

Starting from the Internet Explorer 10, Microsoft developers changed the format of data storing. They replaced index.dat, which was familiar to the most forensic experts, with the database in the ESE format that is stored in the file WebCacheV01.dat.

In spite of the fact that with the release of Windows 10 the developers introduced web-browser – Microsoft Edge, which had code name «Spartan», the traditional for Windows operating system browser Internet Explorer (version 11) still exists, its browsing history is stored in the following catalog:

<System_partition>\Users\<UserName>\AppData\Local\Microsoft\Windows\WebCache

File WebCacheV01.dat, which is stored in the abovementioned catalog, contains not only the browsing history of Internet Explorer, but also the browsing history of the new browser Microsoft Edge. Additionally it stores information about cookies. This database can be in the «Dirty Shutdown» state and it can be an obstacle for the forensic analysis of the data. In order to find out in what state it is, an expert can use the utility esentutl.exe that can be found in the following catalog:

<System_partition>\Windows\System32

In order to receive the information about the database an expert needs to copy the catalog \WebCache to the workstation then open it and put the following command in the command prompt:

esentutl /mh WebCacheV01.dat

On the Figure 2, it can be seen that command output contains, besides the rest of the information, information about current directory, in our case we can see that database is on the «Dirty Shutdown» state (ref. Figure 2).

Figure 2. The result of esentult using with the key /mh

In order to turn the database into the «Clean Shutdown» state, an expert needs to put log-files into it. It can be done by the following command:

esentutl /r V01 /d

The key /d is used in order to command the utility to look for the log-files only in the current directory. When the utility esentutl.exe will be run for the second time with the key /mh, the value of the “State” will be changed into «Clean Shutdown».

Software ESEDatabaseView developed by NirSoft can be used for browsing the database content. In order to get the general information about the types of information contained in the database, an expert needs to go to the table “Containers». In our case, the database contains 28 containers (ref. Figure 3).

Figure 3. Table «Containers» of the WebCacheV01.dat database opened with NirSoft ESEDatabaseView

As it can be seen on the Figure 3, the information about visited web-pages is contained in the containers 2, 14, 15 and 21. This table contains not only the information about the containers, but also the paths to the files with data.

The values of time stamps in this database have to be converted into hexadecimal form and then decoded via, for example, DCode program using the format «Windows: 64 bit Hex Value – Big Endian».

It should be mentioned that the information about web-pages that a user had visited in the «InPrivate» mode is contained in the same containers. These pages have value «8» in the column «Flags» [Muir 2015].

Information about user’s downloads is stored in the container 22 that has name «iedownload». Information in this container is in the hexadecimal form and has to be converted into ASCII.

Files that were cached by the browser are stored in the following catalog:

<System_partition>\Users\<UserName>\AppData\Local\Packages\Microsoft.MicrosoftEdge_***\AC\#!001\MicrosoftEdge\Cache\

Data extraction from the files for analysis in the automatic mode can be done via, for example, Belkasoft Evidence Center.

Cortana

Personal assistant Cortana was realized in the Windows 8 as an application. With the realize of the new version of the operating system Cortana became a part of the system. Even though, the personal assistant is not available in Russian now, an expert needs to understand what kind of artefacts can be found during the analysis.

Information about the usage of the digital personal assistant is stored in the databases in the ESE format – IndexedDB.edb and CortanaCoreDb.dat, which are located in the following catalogs:

<System_partition>\Users\<UserName>\AppData\Local\Packages\Microsoft.Windows.Cortana_xxxx\AppData\Indexed DB\

<System_partition>\Users\<UserName>\AppData\Local\Packages\Microsoft.Windows.Cortana_xxxx\LocalState\ESEDatabase_CortanaCoreInstance\

The first database contains information about data that was indexed by Cortana, the second one contains information about interaction between a user and assistant. It should be mentioned that time stamps of the second database are in the Google Chrome Value format and can be decoded via, for example, Digital Detective DCode.

Prefetch-files

As it is known, Prefetch-files contain metadata (data definitions), which are very important for a digital forensic analysis or computer forensic analysis. For example, these files contain information about the last run of the program and information about how many times it was run. Also by the analysis of prefetch-files, an expert can find out from which logical drive a program was run (including the information about the volume serial number), and get a list of DLL and other files that were used.

Prefetch-files in the Microsoft Windows 10 operating system are still contained in the catalog \Windows\Prefetch\ and have «.pf» extension, but as it was noticed by Francesco Picasso [Picasso 2015: Electronic resource], their format was changed.

Figure 4. Fragment of the VK.EXE-570D9FDD.pf file opened via hex-editor 0xED

As it can be seen on the Figure 4, the files have «MAM» signature and there are no strings. The fact is that the Xpress Huffman algorithm is used for compressing of the files. Francesco Picasso in his article shows the script that was written on the Python programming language and it allows to extract Prefetch-file of the new format. The script can be downloaded from the following link: https://gist.github.com/dfirfpi/113ff71274a97b489dfd.

It should be mentioned that the Microsoft Windows version 8.1 or higher has to be used in order to run the script. A specialized software, for example, Mitec Windows File Analyzer, can be used for extraction data from the file.

Volume Shadow Copy Service

As it is known, volume shadow copy service appeared with the release of the Windows XP operating system. In the Windows XP it allowed to make system recovery via so-called « recovery point» to the previous state of the operating system and it was a valuable source of the information in the context of the forensic analysis as it allowed to recover the previous state of the operating system register. With the release of Windows Vista operating system volume shadow copies start to contain not only the previous versions of the system files, but also they contained user’s data. In the new version of the operating system, this service is still a valuable source of the information for the forensic analysis.

The command prompt (with admin permission) can be used in order to check the list of the shadow copies on the working system. An expert needs to input the command vssadmin list shadows (ref. Figure 5).

Figure 5. Example of the vssadmin list shadows command output

There are programs with a graphical user interface, for example, Shadow Explorer (ref. Figure 6).

Figure 6. List of the shadow copies displayed via Shadow Explorer program

Of course an expert rarely has an access to the working system, usually it happens during crime scene investigation or search incident. Shadow copies can be extracted by VHD method that was offered by Harlan Carvey (ref. Carvey 2014).

First of all, it is required to convert the image (it is better to make bit-stream copy of a system partition separetly) into VHD format (Virtual Hard Disk), via utility vhdtool.exe.

This file has to be mounted in the mode « read-only» in the «Control panel».

An expert can check how many shadow copies there are via the utility vssadmin.exe (for example: vssadmin list shadows /for=n, where n is a letter of the mounted system partition image).

In order to get an access to the files, an expert needs to create a link to the shadow copy that will be analysed. It can be done with a command mklink (for example, mklink /d C:\<mount point> \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy\, a value after mount point can be copied from vssadmin). Then an expert will be able to work with the files stored in the shadow copy.

In this article, we took a close look at the most valuable for forensic analysis artefacts, which appeared in the Microsoft Windows 10 operating system and those appeared in the previous versions of the operating system but still relevant.

References

1.  Muir, B. Windows 10 – Cortana & Notification Center Forensics. – 2015. – URL: http://bsmuir.kinja.com/windows-10-cortana-notification-center-forenics-1724511442

2.  Muir, B. Windows 10 – Microsoft Edge Browser Forensics. – 2015. – URL: http://bsmuir.kinja.com/windows-10-microsoft-edge-browser-forensics-1733533818

3.  Picasso, F. A first look at Windows 10 prefetch files. – 2015. – URL: http://blog.digital-forensics.it/2015/06/a-first-look-at-windows-10-prefetch.html

4.  Carvey, H. Windows Forensic Analysis Toolkit, 4th Edition. Advanced Analysis Techniques for Windows 8. – Waltham: Syngress, 2014. – 350 p.

Authors:

Igor Mikhaylov & Oleg Skulkin

Load More Related Articles
Load More In Articles

No Comments

  1. ErnestRit

    April 9, 2019 at 6:55 pm

    Your comment is awaiting moderation.

    With thanks! I enjoy this!
    https://www.viagrawithoutadoctorsmim.com/
    order viagra today
    cheap viagra
    liquid viagra alcohol shot in london
    [url=https://www.viagrawithoutdoctorbnt.com/]viagra online[/url]

    Reply

  2. ErnestRit

    April 9, 2019 at 9:02 pm

    Your comment is awaiting moderation.

    Many thanks, Wonderful information.
    https://www.viagrawithoutdoctorbnt.com/
    songs about viagra
    buy generic viagra
    viagra cialis levetra
    [url=https://www.viagrawithoutdoctormsn.com/]viagra without a doctors prescription[/url]

    Reply

  3. ErnestRit

    April 10, 2019 at 1:15 am

    Your comment is awaiting moderation.

    Wow tons of very good advice.
    https://www.viagrawithoutdoctorntx.com/
    viagra by mail
    viagra online
    when was viagra released
    [url=https://www.viagrawithoutdoctormsn.com/]generic viagra 100mg[/url]

    Reply

  4. ErnestRit

    April 10, 2019 at 3:22 am

    Your comment is awaiting moderation.

    Nicely put. With thanks.
    https://www.viagrawithoutdoctorntx.com/
    viagra controlled drug
    generic viagra 100mg
    ciala vs viagra
    [url=https://www.viagrawithoutdoctorbnt.com/]buy viagra online[/url]

    Reply

  5. ErnestRit

    April 10, 2019 at 5:30 am

    Your comment is awaiting moderation.

    Lovely facts. Appreciate it.
    https://www.viagrawithoutadoctorsmim.com/
    side affect of viagra
    viagra for women
    viagra profesional
    [url=https://www.viagrawithoutdoctormsn.com/]generic viagra 100mg[/url]

    Reply

  6. ErnestRit

    April 10, 2019 at 7:34 am

    Your comment is awaiting moderation.

    Wow plenty of fantastic material!
    https://www.viagrawithoutdoctorbnt.com/
    plant viagra natural
    generic viagra
    buy viagra online in
    [url=https://www.viagrawithoutdoctorntx.com/]viagra without a doctors prescription[/url]

    Reply

  7. ErnestRit

    April 10, 2019 at 9:37 am

    Your comment is awaiting moderation.

    Really a good deal of very good material!
    https://www.genericviagracubarx.com/
    genuine viagra in uk
    viagra without a doctor prescription
    natural alternative viagra
    [url=https://www.viagrawithoutdoctorbnt.com/]viagra without a doctors prescription[/url]

    Reply

  8. ErnestRit

    April 10, 2019 at 11:43 am

    Your comment is awaiting moderation.

    Regards. Wonderful stuff!
    https://www.viagrawithoutdoctorntx.com/
    watermelon like viagra
    buy viagra online
    where to buy viagra in amsterdam
    [url=https://www.viagrawithoutdoctorntx.com/]buy viagra[/url]

    Reply

  9. ErnestRit

    April 10, 2019 at 1:51 pm

    Your comment is awaiting moderation.

    Reliable material. Many thanks!
    https://www.viagrawithoutdoctormsn.com/
    cialis beter dan viagra
    cheap viagra
    viagra pages generic edinburgh sample search
    [url=https://www.viagrawithoutdoctormsn.com/]viagra online[/url]

    Reply

  10. ErnestRit

    April 10, 2019 at 4:03 pm

    Your comment is awaiting moderation.

    Whoa lots of excellent knowledge!
    https://www.viagrawithoutadoctorsmim.com/
    whats next when viagra dont work
    cheap viagra
    overnight viagra brand
    [url=https://www.viagrawithoutdoctorbnt.com/]viagra without a doctor prescription[/url]

    Reply

  11. ErnestRit

    April 10, 2019 at 6:14 pm

    Your comment is awaiting moderation.

    Many thanks! I value this!
    https://www.viagrawithoutdoctorbnt.com/
    viagra drug zenegra
    buy viagra online
    cheap generic viagra from india
    [url=https://www.viagrawithoutadoctorsmim.com/]generic viagra online[/url]

    Reply

  12. ErnestRit

    April 10, 2019 at 8:21 pm

    Your comment is awaiting moderation.

    Nicely put, Thanks a lot!
    https://www.viagrawithoutdoctorbnt.com/
    diabetes viagra
    viagra for women
    viagras lowest price on the internet
    [url=https://www.viagrawithoutdoctorbnt.com/]viagra for sale uk[/url]

    Reply

  13. ErnestRit

    April 10, 2019 at 10:28 pm

    Your comment is awaiting moderation.

    Factor certainly used..
    https://www.genericviagracubarx.com/
    chanson viagra
    viagra without a doctors prescription
    online viagra sale
    [url=https://www.genericviagracubarx.com/]buy viagra[/url]

    Reply

  14. ErnestRit

    April 11, 2019 at 12:37 am

    Your comment is awaiting moderation.

    Many thanks, An abundance of posts.

    https://www.viagrawithoutdoctorbnt.com/
    pages edinburgh search viagra charles
    cheap viagra
    lady viagra testostrone libby
    [url=https://www.viagrawithoutdoctormsn.com/]viagra for sale uk[/url]

    Reply

  15. ErnestRit

    April 11, 2019 at 2:50 am

    Your comment is awaiting moderation.

    Wow many of helpful advice!
    https://www.viagrawithoutadoctorsmim.com/
    fun with viagra
    viagra generic
    soft tabs generic viagra
    [url=https://www.viagrawithoutdoctormsn.com/]cheap viagra[/url]

    Reply

  16. ErnestRit

    April 11, 2019 at 5:01 am

    Your comment is awaiting moderation.

    Thank you. Loads of information.

    https://www.viagrawithoutadoctorsmim.com/
    pic viagra woman
    viagra for women
    viagra super force
    [url=https://www.viagrawithoutdoctorntx.com/]viagra for women[/url]

    Reply

  17. ErnestRit

    April 11, 2019 at 7:11 am

    Your comment is awaiting moderation.

    You actually expressed this adequately.
    https://www.genericviagracubarx.com/
    is taurine like viagra
    generic viagra 100mg
    oral jelly viagra
    [url=https://www.viagrawithoutdoctormsn.com/]viagra online[/url]

    Reply

  18. ErnestRit

    April 11, 2019 at 9:22 am

    Your comment is awaiting moderation.

    You’ve made your point extremely nicely..
    https://www.viagrawithoutdoctormsn.com/
    cialis viagra ranbaxy
    buy viagra online
    coumadin and viagra
    [url=https://www.genericviagracubarx.com/]viagra for sale uk[/url]

    Reply

  19. ErnestRit

    April 11, 2019 at 11:34 am

    Your comment is awaiting moderation.

    Regards! Numerous content.

    https://www.genericviagracubarx.com/
    reviews on viagra web suppliers
    viagra without a doctor prescription
    how does viagra work
    [url=https://www.genericviagracubarx.com/]generic viagra 100mg[/url]

    Reply

  20. ErnestRit

    April 11, 2019 at 1:48 pm

    Your comment is awaiting moderation.

    Nicely put, Thank you!
    https://www.viagrawithoutdoctorntx.com/
    natural alternatives to viagra
    generic viagra online
    viagra free sites computer
    [url=https://www.genericviagracubarx.com/]viagra for sale uk[/url]

    Reply

  21. ErnestRit

    April 11, 2019 at 4:05 pm

    Your comment is awaiting moderation.

    Effectively expressed indeed. !
    https://www.viagrawithoutadoctorsmim.com/
    viagra and nitrites
    viagra without a doctor prescription
    viagra niaspan
    [url=https://www.genericviagracubarx.com/]viagra without a doctors prescription[/url]

    Reply

  22. ErnestRit

    April 11, 2019 at 6:17 pm

    Your comment is awaiting moderation.

    You’ve made your point pretty nicely.!
    https://www.viagrawithoutdoctorntx.com/
    viagra and watermelon
    viagra without a doctors prescription
    side effects from viagra
    [url=https://www.viagrawithoutdoctorntx.com/]viagra without a doctors prescription[/url]

    Reply

  23. ErnestRit

    April 11, 2019 at 8:29 pm

    Your comment is awaiting moderation.

    This is nicely put. !
    https://www.genericviagracubarx.com/
    mccain viagra birth control pills question
    cheap viagra
    latvia viagra
    [url=https://www.viagrawithoutadoctorsmim.com/]generic viagra 100mg[/url]

    Reply

  24. ErnestRit

    April 11, 2019 at 10:42 pm

    Your comment is awaiting moderation.

    You definitely made the point.
    https://www.genericviagracubarx.com/
    viagra young healthy male
    viagra without a doctors prescription
    viagra price comparsions
    [url=https://www.viagrawithoutdoctormsn.com/]generic viagra[/url]

    Reply

  25. ErnestRit

    April 12, 2019 at 1:01 am

    Your comment is awaiting moderation.

    Factor clearly applied.!
    https://www.viagrawithoutdoctormsn.com/
    viagra timing
    buy viagra online
    is watermelon the new viagra
    [url=https://www.viagrawithoutdoctormsn.com/]viagra without a doctors prescription[/url]

    Reply

  26. ErnestRit

    April 12, 2019 at 3:17 am

    Your comment is awaiting moderation.

    Cheers. Loads of information!

    https://www.viagrawithoutadoctorsmim.com/
    generic viagra contains sildenafil citrate
    viagra for sale uk
    cheap generic viagra substitutes
    [url=https://www.genericviagracubarx.com/]viagra online[/url]

    Reply

  27. ErnestRit

    April 12, 2019 at 5:30 am

    Your comment is awaiting moderation.

    Incredible lots of valuable information!
    https://www.viagrawithoutdoctormsn.com/
    effects of past due date viagra
    viagra for sale uk
    viagra cialis herbal substitutes
    [url=https://www.viagrawithoutdoctorntx.com/]buy generic viagra[/url]

    Reply

  28. ErnestRit

    April 12, 2019 at 7:44 am

    Your comment is awaiting moderation.

    With thanks, A good amount of facts!

    https://www.viagrawithoutdoctorbnt.com/
    viagra pro online
    buy viagra
    viagra sizes
    [url=https://www.viagrawithoutdoctorbnt.com/]buy generic viagra[/url]

    Reply

  29. ErnestRit

    April 12, 2019 at 9:55 am

    Your comment is awaiting moderation.

    With thanks! Useful stuff.
    https://www.viagrawithoutdoctorbnt.com/
    viagra withour prescription
    viagra 100mg
    viagra pages edinburgh search find free
    [url=https://www.viagrawithoutdoctormsn.com/]viagra generic[/url]

    Reply

  30. ErnestRit

    April 12, 2019 at 12:05 pm

    Your comment is awaiting moderation.

    Cheers, I value this.
    https://www.viagrawithoutdoctorntx.com/
    viagra effects after ejaculation
    viagra generic
    citrulline viagra
    [url=https://www.viagrawithoutadoctorsmim.com/]viagra without a doctors prescription[/url]

    Reply

  31. ErnestRit

    April 12, 2019 at 2:21 pm

    Your comment is awaiting moderation.

    Terrific postings. Thanks a lot!
    https://www.viagrawithoutdoctorntx.com/
    viagra afghanies
    buy viagra online
    edinburgh uk news pages viagra feedblitz
    [url=https://www.viagrawithoutdoctorntx.com/]viagra without a doctors prescription[/url]

    Reply

  32. ErnestRit

    April 12, 2019 at 4:35 pm

    Your comment is awaiting moderation.

    Regards. I value it!
    https://www.viagrawithoutdoctorntx.com/
    investing in a herbal viagra scam
    viagra without a doctor prescription
    will viagra make you larger
    [url=https://www.viagrawithoutdoctormsn.com/]generic viagra 100mg[/url]

    Reply

  33. ErnestRit

    April 12, 2019 at 6:47 pm

    Your comment is awaiting moderation.

    With thanks! Quite a lot of knowledge.

    https://www.viagrawithoutadoctorsmim.com/
    viagra ireviews
    viagra without a doctor prescription
    viagra eye problems
    [url=https://www.viagrawithoutdoctorbnt.com/]viagra for women[/url]

    Reply

  34. ErnestRit

    April 12, 2019 at 8:56 pm

    Your comment is awaiting moderation.

    Amazing plenty of beneficial advice.
    https://www.genericviagracubarx.com/
    q a viagra
    viagra for sale uk
    picture of a penis on viagra
    [url=https://www.viagrawithoutadoctorsmim.com/]buy viagra online[/url]

    Reply

  35. ErnestRit

    April 12, 2019 at 11:03 pm

    Your comment is awaiting moderation.

    You actually explained this fantastically.
    https://www.genericviagracubarx.com/
    viagra online at
    buy viagra online
    amoxicillin zyrtec no prescription required viagra
    [url=https://www.viagrawithoutadoctorsmim.com/]viagra 100mg[/url]

    Reply

  36. ErnestRit

    April 13, 2019 at 1:11 am

    Your comment is awaiting moderation.

    Thanks a lot! Useful information.
    https://www.viagrawithoutdoctormsn.com/
    picture of viagra’s office
    buy viagra
    does viagra have an expiration date
    [url=https://www.viagrawithoutdoctormsn.com/]viagra without a doctors prescription[/url]

    Reply

  37. ErnestRit

    April 13, 2019 at 3:21 am

    Your comment is awaiting moderation.

    You’ve made your point.
    https://www.genericviagracubarx.com/
    purchase viagra online consultation
    viagra 100mg
    pfizer viagra blue pill
    [url=https://www.viagrawithoutdoctormsn.com/]viagra 100mg[/url]

    Reply

  38. ErnestRit

    April 13, 2019 at 5:33 am

    Your comment is awaiting moderation.

    Superb forum posts. Appreciate it!
    https://www.genericviagracubarx.com/
    viagra price uk
    generic viagra 100mg
    european viagra
    [url=https://www.viagrawithoutdoctormsn.com/]viagra online[/url]

    Reply

  39. ErnestRit

    April 13, 2019 at 7:45 am

    Your comment is awaiting moderation.

    You actually reported it well!
    https://www.viagrawithoutdoctorbnt.com/
    find search viagra edinburgh free
    viagra for women
    viagra sudden blindness
    [url=https://www.viagrawithoutdoctorbnt.com/]viagra without a doctor prescription[/url]

    Reply

  40. ErnestRit

    April 13, 2019 at 9:57 am

    Your comment is awaiting moderation.

    With thanks! A good amount of posts!

    https://www.genericviagracubarx.com/
    can viagra make penis bigger
    generic viagra 100mg
    viagra cialis levitra order online
    [url=https://www.viagrawithoutdoctormsn.com/]buy viagra online[/url]

    Reply

  41. ErnestRit

    April 13, 2019 at 12:08 pm

    Your comment is awaiting moderation.

    Awesome forum posts, Thanks a lot!
    https://www.viagrawithoutadoctorsmim.com/
    k p viagra
    buy viagra online
    blindness due to viagra
    [url=https://www.viagrawithoutadoctorsmim.com/]buy generic viagra[/url]

    Reply

  42. ErnestRit

    April 13, 2019 at 2:22 pm

    Your comment is awaiting moderation.

    Regards! Loads of facts.

    https://www.genericviagracubarx.com/
    viagra and side effects
    viagra pills
    viagra with atacand
    [url=https://www.genericviagracubarx.com/]viagra online[/url]

    Reply

  43. ErnestRit

    April 13, 2019 at 4:36 pm

    Your comment is awaiting moderation.

    You made your point.
    https://www.genericviagracubarx.com/
    free viagra by post
    cheap viagra
    civil suits against phizer viagra
    [url=https://www.viagrawithoutadoctorsmim.com/]buy viagra[/url]

    Reply

  44. ErnestRit

    April 13, 2019 at 6:48 pm

    Your comment is awaiting moderation.

    Thanks a lot. Numerous information!

    https://www.viagrawithoutdoctorntx.com/
    can you chew viagra
    buy viagra
    viagra fed ex
    [url=https://www.viagrawithoutadoctorsmim.com/]viagra online[/url]

    Reply

  45. ErnestRit

    April 13, 2019 at 8:58 pm

    Your comment is awaiting moderation.

    Thanks. I enjoy it.
    https://www.viagrawithoutdoctormsn.com/
    viagra the risks of recreational use
    viagra for sale uk
    alprostadil uprima viagra interaction
    [url=https://www.viagrawithoutdoctorntx.com/]viagra for women[/url]

    Reply

  46. ErnestRit

    April 13, 2019 at 11:08 pm

    Your comment is awaiting moderation.

    Truly quite a lot of awesome information!
    https://www.genericviagracubarx.com/
    generic viagra overnigh
    cheap viagra
    viagra message board
    [url=https://www.viagrawithoutdoctorbnt.com/]generic viagra[/url]

    Reply

  47. ErnestRit

    April 14, 2019 at 1:18 am

    Your comment is awaiting moderation.

    Many thanks! I enjoy this.
    https://www.viagrawithoutdoctorbnt.com/
    discount bulk viagra
    viagra generic
    information about viagra
    [url=https://www.viagrawithoutadoctorsmim.com/]viagra without a doctors prescription[/url]

    Reply

  48. ErnestRit

    April 14, 2019 at 3:28 am

    Your comment is awaiting moderation.

    Thanks, I value this.
    https://www.viagrawithoutdoctorntx.com/
    jamaica blog negril sex viagra
    buy generic viagra
    nascar viagra car
    [url=https://www.viagrawithoutdoctorntx.com/]generic viagra 100mg[/url]

    Reply

  49. ErnestRit

    April 14, 2019 at 5:40 am

    Your comment is awaiting moderation.

    You made the point.
    https://www.viagrawithoutdoctorbnt.com/
    viagra generic
    viagra for women
    viagra fraudsters
    [url=https://www.viagrawithoutdoctorntx.com/]viagra without a doctors prescription[/url]

    Reply

  50. ErnestRit

    April 14, 2019 at 7:52 am

    Your comment is awaiting moderation.

    Thanks! An abundance of data!

    https://www.genericviagracubarx.com/
    john mccain viagra comment
    buy viagra online
    walmart pharmacy viagra price
    [url=https://www.viagrawithoutdoctorntx.com/]viagra without a doctors prescription[/url]

    Reply

  51. ErnestRit

    April 14, 2019 at 10:04 am

    Your comment is awaiting moderation.

    Really a lot of excellent tips.
    https://www.viagrawithoutadoctorsmim.com/
    panax ginseng or viagra
    viagra generic
    young adults viagra
    [url=https://www.viagrawithoutdoctorbnt.com/]cheap viagra[/url]

    Reply

  52. ErnestRit

    April 14, 2019 at 12:18 pm

    Your comment is awaiting moderation.

    This is nicely said! .
    https://www.viagrawithoutdoctorntx.com/
    using viagra and cialis
    generic viagra
    u 2241 viagra
    [url=https://www.viagrawithoutdoctorntx.com/]generic viagra 100mg[/url]

    Reply

  53. ErnestRit

    April 14, 2019 at 2:31 pm

    Your comment is awaiting moderation.

    You said that adequately!
    https://www.genericviagracubarx.com/
    viagra cialis phentermine soma
    viagra without a doctors prescription
    viagra interaction with nebivolol
    [url=https://www.viagrawithoutdoctorbnt.com/]viagra without a doctors prescription[/url]

    Reply

  54. ErnestRit

    April 14, 2019 at 4:46 pm

    Your comment is awaiting moderation.

    Really loads of awesome facts.
    https://www.genericviagracubarx.com/
    free viagra pills
    generic viagra 100mg
    viagra lexipro difference info
    [url=https://www.viagrawithoutdoctorbnt.com/]viagra pills[/url]

    Reply

  55. ErnestRit

    April 14, 2019 at 6:58 pm

    Your comment is awaiting moderation.

    Kudos. Excellent information!
    https://www.viagrawithoutadoctorsmim.com/
    buying viagra over the counter
    viagra without a doctors prescription
    viagra supplier
    [url=https://www.viagrawithoutdoctormsn.com/]generic viagra online[/url]

    Reply

  56. ErnestRit

    April 15, 2019 at 1:34 am

    Your comment is awaiting moderation.

    Thanks. A lot of advice.

    https://www.viagrawithoutdoctorbnt.com/
    purchase viagra soft tabs
    generic viagra online
    online viagra quality
    [url=https://www.viagrawithoutdoctorntx.com/]viagra 100mg[/url]

    Reply

  57. ErnestRit

    April 15, 2019 at 6:01 am

    Your comment is awaiting moderation.

    Whoa lots of superb material!
    https://www.viagrawithoutadoctorsmim.com/
    viagra and heart disease
    viagra without a doctor prescription
    viagra pages generic edinburgh sample search
    [url=https://www.genericviagracubarx.com/]viagra pills[/url]

    Reply

  58. ErnestRit

    April 15, 2019 at 10:28 am

    Your comment is awaiting moderation.

    Whoa a good deal of fantastic info.
    https://www.viagrawithoutadoctorsmim.com/
    viagra loss of vision
    generic viagra 100mg
    find viagra free sites
    [url=https://www.viagrawithoutdoctorbnt.com/]viagra for women[/url]

    Reply

  59. ErnestRit

    April 15, 2019 at 12:41 pm

    Your comment is awaiting moderation.

    You actually mentioned it perfectly.
    https://www.viagrawithoutdoctorntx.com/
    silagra brand name viagra penegra cumwithuscom
    generic viagra online
    viagra cartoon
    [url=https://www.viagrawithoutdoctorntx.com/]viagra generic[/url]

    Reply

  60. ErnestRit

    April 15, 2019 at 2:58 pm

    Your comment is awaiting moderation.

    Fine posts. Kudos.
    https://www.viagrawithoutdoctorntx.com/
    discount viagra
    viagra generic
    best instructions for taking generic viagra
    [url=https://www.viagrawithoutdoctorntx.com/]viagra pills[/url]

    Reply

  61. ErnestRit

    April 15, 2019 at 5:16 pm

    Your comment is awaiting moderation.

    Reliable facts. Cheers!
    https://www.viagrawithoutdoctorbnt.com/
    viagra empty stomach
    viagra without a doctors prescription
    viagra cialis better
    [url=https://www.genericviagracubarx.com/]viagra for sale uk[/url]

    Reply

  62. ErnestRit

    April 15, 2019 at 7:32 pm

    Your comment is awaiting moderation.

    Seriously a lot of fantastic facts.
    http://viagrawithoutadoctorsntx.com/
    can viagra cause peyronie’s disease
    generic viagra online
    uric acid and viagra
    [url=http://viagrapego.com/]viagra online[/url]

    Reply

  63. ErnestRit

    April 15, 2019 at 9:40 pm

    Your comment is awaiting moderation.

    Superb content. Thank you.
    http://viagrawithoutadoctorsntx.com/
    photo galleries porn viagra coitus
    generic viagra online
    purchasing viagra in bali
    [url=http://viagrawithoutadoctorsntx.com/]cheap viagra[/url]

    Reply

  64. ErnestRit

    April 15, 2019 at 11:46 pm

    Your comment is awaiting moderation.

    Well voiced certainly! !
    http://viagrawithoutadoctorsntx.com/
    psych viagra falls
    buy generic viagra
    viagra find online pages edinburgh free
    [url=http://viagrapego.com/]buy viagra online[/url]

    Reply

  65. ErnestRit

    April 16, 2019 at 1:53 am

    Your comment is awaiting moderation.

    Many thanks, An abundance of content!

    http://viagrawithoutadoctormsn.com/
    how to get viagra perscription online
    viagra generic
    theres viagra in the waters
    [url=http://viagrawithoutadoctormsn.com/]buy viagra[/url]

    Reply

  66. ErnestRit

    April 16, 2019 at 4:02 am

    Your comment is awaiting moderation.

    Fine write ups. Thanks!
    http://viagrapego.com/
    q viagra btng search meta
    viagra pills
    pages edinburgh search viagra charles
    [url=http://viagrapego.com/]buy viagra[/url]

    Reply

  67. ErnestRit

    April 16, 2019 at 6:11 am

    Your comment is awaiting moderation.

    You actually said this really well!
    http://viagrawithoutadoctorsntx.com/
    india generic viagra
    viagra for sale uk
    order zenegra viagra
    [url=http://viagrapego.com/]cheap viagra[/url]

    Reply

  68. ErnestRit

    April 16, 2019 at 8:20 am

    Your comment is awaiting moderation.

    You actually reported this adequately!
    http://viagrawithoutadoctormsn.com/
    online viagra order
    generic viagra 100mg
    minister viagra
    [url=http://viagrapego.com/]viagra for sale uk[/url]

    Reply

  69. ErnestRit

    April 16, 2019 at 10:29 am

    Your comment is awaiting moderation.

    Great material. Many thanks!
    http://viagrapego.com/
    viagra uk chemist
    viagra online
    prescription free viagra canada
    [url=http://viagrawithoutadoctormsn.com/]cheap viagra[/url]

    Reply

  70. ErnestRit

    April 16, 2019 at 12:40 pm

    Your comment is awaiting moderation.

    You actually expressed it exceptionally well!
    http://viagrawithoutadoctorsntx.com/
    coumadin viagra
    viagra 100mg
    viagra prostate removal
    [url=http://viagrawithoutadoctorsntx.com/]viagra generic[/url]

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *