957d04cab6ebe77caab110cc03fffc90d7841e826e130ff9a904701d411d13d7

Analysis

max time kernel
35s
max time network
37s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
19/07/2024, 17:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

trigger.vbs
Size

3KB
MD5

380063939b0d61e119103e115d5dc342
SHA1

11784f868ecf6a4706a883d77d00dcbd9ccd0351
SHA256

957d04cab6ebe77caab110cc03fffc90d7841e826e130ff9a904701d411d13d7
SHA512

ecd9f2e96487ae98b5f4e23d2b13d4722f1ca973b6ea29cbb6f3f69459d1d7d6c364f612df84ada94258b68a4e48d364eaf893c1af293375a470e0a7bdb55862

Score

8^/10

discovery exploit

Malware Config

Signatures

Blocklisted process makes network request 2 IoCs

flow	pid	Process
23	3084	WScript.exe
24	3084	WScript.exe

Possible privilege escalation attempt 4 IoCs

exploit

pid	Process
2512	takeown.exe
2500	takeown.exe
2576	icacls.exe
1224	icacls.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3419463127-3903270268-2580331543-1000\Control Panel\International\Geo\Nation	WScript.exe

Modifies file permissions 1 TTPs 4 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
2500	takeown.exe
2576	icacls.exe
1224	icacls.exe
2512	takeown.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
22	discord.com
23	discord.com

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeTakeOwnershipPrivilege	2512	takeown.exe
Token: SeTakeOwnershipPrivilege	2500	takeown.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 3084 wrote to memory of 4908	3084	WScript.exe	87
PID 3084 wrote to memory of 4908	3084	WScript.exe	87
PID 3084 wrote to memory of 2956	3084	WScript.exe	89
PID 3084 wrote to memory of 2956	3084	WScript.exe	89
PID 4908 wrote to memory of 2512	4908	cmd.exe	91
PID 4908 wrote to memory of 2512	4908	cmd.exe	91
PID 2956 wrote to memory of 2500	2956	cmd.exe	92
PID 2956 wrote to memory of 2500	2956	cmd.exe	92
PID 4908 wrote to memory of 2576	4908	cmd.exe	93
PID 4908 wrote to memory of 2576	4908	cmd.exe	93
PID 2956 wrote to memory of 1224	2956	cmd.exe	94
PID 2956 wrote to memory of 1224	2956	cmd.exe	94

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\trigger.vbs"
1⤵
- Blocklisted process makes network request
- Checks computer location settings
- Suspicious use of WriteProcessMemory
PID:3084
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c takeown /f C:\Windows\System32\hal.dll && icacls C:\Windows\System32\hal.dll /grant Everyone:(F) && del/f C:\Windows\System32\hal.dll
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4908
- - C:\Windows\system32\takeown.exe
    takeown /f C:\Windows\System32\hal.dll
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    - Suspicious use of AdjustPrivilegeToken
    PID:2512
- - C:\Windows\system32\icacls.exe
    icacls C:\Windows\System32\hal.dll /grant Everyone:(F)
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    PID:2576
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c takeown /f C:\Windows\System32\msvcrt.dll && icacls C:\Windows\System32\msvcrt.dll /grant Everyone:(F) && del/f C:\Windows\System32\msvcrt.dll
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2956
- - C:\Windows\system32\takeown.exe
    takeown /f C:\Windows\System32\msvcrt.dll
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    - Suspicious use of AdjustPrivilegeToken
    PID:2500
- - C:\Windows\system32\icacls.exe
    icacls C:\Windows\System32\msvcrt.dll /grant Everyone:(F)
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    PID:1224

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\s.vbs

Filesize
756B

MD5
362834df28860b9ab1aa787a61c9bb9f

SHA1
ba008515db84417d15fd97c356e33fdb80379d15

SHA256
70866acf071a5b9ee641bad7a206eb3f1e6e27df0bd1cb4cfa25cbf391f60ff7

SHA512
ef8f7b5aa4a99c7275c9ba8c27f06148b6e359f9c0f8357f07c685f835c7c8bcfac7b937334b4c9b282b410b300f55d729287a27c5327affe02e8aad3fa918c8

Download Submit
C:\Users\Admin\Desktop\DIE108.lnk

Filesize
1KB

MD5
b6753e4f913f86dbb16aa83e9a497c04

SHA1
0e608017f429d659a98d073869e7e07b81ea7f74

SHA256
5dc17b0bc6ca1a9be4fafae6c7e871fa26ca9625939d6ce5c412c25c68a2c510

SHA512
f629a8c1fe1ee2016a8ad869723ac559f0501d60eff910475bbc57be701971c3bc01cb61565f865c316676cc39c10be19875635fcff649d387905a6bfe93232d

Download Submit
C:\Users\Admin\Desktop\DIE113.lnk

Filesize
1KB

MD5
27b9e969b910cb36bc11529b7e28fca6

SHA1
df64081ebd49a0a5ae739603095afbc646a9e552

SHA256
ab958ddb215ee9f7a3e10d4e66217b2e81b2faedc73fdc4eeafc187b55714e09

SHA512
7f860688fe56fa2b2b9bb818aebab4fb12d7ceafd2f6467e9e74753c2d77ca0a2dd0c4405f9727ed7b206c66110c92d46f2cd0d0e8cb4fd5b92afb803e61f3c3

Download Submit
C:\Users\Admin\Desktop\DIE122.lnk

Filesize
1KB

MD5
91a549bc39e18ac8f87925544787feb2

SHA1
cadd3824f3d56c27899280e8f38f73b21cdd2406

SHA256
cd224b8806959b16858d91a53329fd06abd4eb36e73e5dc1086b8f1106f1e15d

SHA512
3d8e96af838c45ff5fbb8a7675c6881df602c16a072b1384c8b675174e513c822c14e3e4a0681545f1fa728425c6285ebfaf65630afeab6e0c22d2745642f1bb

Download Submit
C:\Users\Admin\Desktop\DIE127.lnk

Filesize
1KB

MD5
2957fc3670bb210474d98053dea1be28

SHA1
23f1c115d480906583f88beb171842aa10359d06

SHA256
a8065cfe785294f33840907d973afec7ed3a871a22d9b7d47a7b85ff93b176a8

SHA512
a0378a19c8bc210c7e0fdf519e3ff1ca163c89b0a4b6aac7922d806c8e6a3c7aa954a13eb68314823fb461b20137abd8ea5df7c7d24ceb7a9e6d5536214c2e4a

Download Submit
C:\Users\Admin\Desktop\DIE138.lnk

Filesize
1KB

MD5
57251e466d7cd2b14c77d4d90a48910f

SHA1
d30b297a4e516fb01121b111146c6ae8dccf5965

SHA256
b8bee9f563e2b38a85d59a1f8e82173122a6147bb09b09ad7111daf89cc5bc0a

SHA512
a05be5638590008435f8e007fb9ce6fc50be7db1c087dd9cc39b1ad8d7daf81f08c487d43745de4f0b1707faf95b114c1dfc6944aaebca395fd2b7c00d58cd18

Download Submit
C:\Users\Admin\Desktop\DIE144.lnk

Filesize
1KB

MD5
2cb235a807457f448865f2519ed4b01d

SHA1
1a782360f4c90eab8ab4083ee8f1cc859fdf5c1c

SHA256
a55a4ace1b1278d4af94abd5045eb72e5ac6cd8f0ffba86a8795cc78583607e4

SHA512
12de1dd1fbc25a705649aad87592fa062258925f7ec8a7e313e0d46149d8abd51fd90d03475e217a064e65b0f32c6d9e9b1ff4d89633966640dc8cfc34b3a301

Download Submit
C:\Users\Admin\Desktop\DIE151.lnk

Filesize
1KB

MD5
e849a8dda3ef6ba595b0f321b7fddc3d

SHA1
990287d3101f6af79b612b7c2b69f2a837516d96

SHA256
ff447abdaed3f58d915703a0ddffa1679fddd4f004a0a215469a1a9b0331d352

SHA512
66ebc854893e2fd465e43f80d486eb98d2189c7ff7b44e74d2170490957c70e90e89ada91bcc79e82456f669e22ac899befa40a21d789558cb8f29fe3f52c1cd

Download Submit
C:\Users\Admin\Desktop\DIE162.lnk

Filesize
1KB

MD5
e39a6122b457f4731e0097e392b82239

SHA1
ba27068ecb9f32b9a0738fe8225ee9298e379de4

SHA256
84e9926992c66ddaf850c54b56025cfa44951183b66de2a54bb54a4033c3a8ee

SHA512
0568549e83059fd9d9cffee970aa33971f28e782bdb0e9220fad63e6affdd9d147a89a190330d238df0109a28479ccb7b16724ff82dc56d741ff5f84f7be8b99

Download Submit
C:\Users\Admin\Desktop\DIE168.lnk

Filesize
1KB

MD5
760bcf665d91ad9f08807524b9a72688

SHA1
7134be1d45c9b11ceb23ca808247cad89a8cfc3c

SHA256
076bf8c5e859fa56fc5f4a0578ee0e491d9a6f8df369e0487c8f3dfb4b34d9c9

SHA512
56ab8823f268ca26124557927402102eab3b67782fb79cd4234a8d144e331a22515678ed90b6f343a60d738f17687c55cdb91c75903220a651bf27f5eab300af

Download Submit
C:\Users\Admin\Desktop\DIE36.lnk

Filesize
1KB

MD5
3fe0a90b8bc05953b4459612f397fe35

SHA1
635a3ed05467e10cef0b009e6c515211265e7101

SHA256
8ba0c1af5689cf0e574f72e3bb7786be7e28bdc15925c4a2a3e5f33bc27e9787

SHA512
49171e1e19e62633fd66a4d8257e1e2bfb064497f1405593d954785bd2ec942fa72bd1ad052390fcb3754baa6a87a1e081b660acc61a5a1a4a7e40943ab53a94

Download Submit
C:\Users\Admin\Desktop\DIE90.lnk

Filesize
1KB

MD5
3562eafef267fba9acd5046e080173d2

SHA1
529e48c752bf246a794c44fbda0729c257f544e8

SHA256
e1ac16a26238f21081e765f8104c84f2623ce6089025bf785bf9e773eead75a1

SHA512
05051f9b8a0711bd558ef7580e6e953d44afb66c15f0fdbb5c3129764c2ab24326ba427351a1eadaf32c79c2227fed80dcae25ed379bed75b7583b258bb2dc7a

Download Submit
C:\Users\Admin\Desktop\DIE98.lnk

Filesize
1KB

MD5
b0076cc44be7f1e39e26ff8fb39067ec

SHA1
ab82453020ed1ec7dd39a1fac78ab7c7bf3ea06d

SHA256
120a765dfa00ccb6299d27829a58d2af27d49545ef27e4c2fe69dd6981bcf0d0

SHA512
98fb325f04861d6b6c06f19051f9eec1bf414e7af190c78eb5c9cc2342300f3627d0095d5bbb199437ebbd5c7d77156005d9f22a7ddb61de19a6d3fb76923fe8

Download Submit
C:\Users\Admin\Documents\DIE13.lnk

Filesize
1KB

MD5
0f6b22c9c29f759d7901d5dfdd0b2864

SHA1
2b6193bbfdadfd0b145add5461defa5c0047646c

SHA256
ef5b5a22471bfdd8e3c6c9e44296b99d4c0e7ecf5fdbb91e12a0957f9ed08df7

SHA512
d71b2ee6702b3f01b190ace05269c03f1a69f3c1bb918eeaf33b7c695121579284f7875afd3d202612455a22f45c7e0837c6be83f511b6e774d50cc21af3de5c

Download Submit
C:\Users\Admin\Documents\DIE154.lnk

Filesize
1KB

MD5
1b812bd46f8b974f96becc7d6eaf94ac

SHA1
680ae116ab06ed9b529b3458e9fd87e6ec2500bd

SHA256
e6a56b42dfccbe9ee0dbf4100380356499ae31d4d3044e0e7cf7fceb4f2af259

SHA512
f9d1178c7001b6478a8e7897fd1b95aa37d808e0a61da1d0d2510e8aa4f7b33d5f7821ac199430dd00cbd21d96410d707c46aa1dee06da5466dac1e5d26ff16e

Download Submit
C:\Users\Admin\Documents\DIE180.lnk

Filesize
1KB

MD5
d4139486711a218e13207a305e52aa1e

SHA1
e28a3975e7222d300b2dfe310264194896228ad7

SHA256
500455826f46c83228749127183dc6bf76c56fa706226fcd85d4dbe5a539a091

SHA512
870fbef7dc48d4536296853ce07ebbc90e7724aa909037fe4c9915dd0e247d4e1eeba031b93f32325510a8afebcf7e850d7309582afd7dea3630460d8cc35a5e

Download Submit
C:\Users\Admin\Documents\DIE191.lnk

Filesize
1KB

MD5
0c03e587c6bb7e809f0ca83d8b59d3a8

SHA1
1fe7314301efffba5222a2ad6ef9aa8291def3ee

SHA256
5911ed3c4c940e5db736d9a1d7eb844c34bab608531ffd143e9b1d236d4e5438

SHA512
b378926357c871f012a739bbd5040659f0078cdf3b05619210a57321ce1211d9e2ffcb6150ef5b088fec418c7ac6d0fa400068cb16ecd53bbb7788b74632a96f

Download Submit
C:\Users\Admin\Documents\DIE199.lnk

Filesize
1KB

MD5
3f2b0de01df73d1c360f3e3ce44715b7

SHA1
e3f36de649b7ba51556d11efa95968e04989ed94

SHA256
e79ab62b23d84b46cd02d478d5e949b29673da7f294eac878be6d1e223006b3b

SHA512
941d18c49cbee4058352616cfbb1c74bc2814ff4855f5f11d0733e947b26c235e91761241202d742efdf4030148594017493683b87f7a043bb00140f5f4fc057

Download Submit
C:\Users\Admin\Documents\DIE22.lnk

Filesize
1KB

MD5
be6a96c98e85edb58d975e9310ad7c67

SHA1
090a1252d4c2925517699a49abacd482c01262c7

SHA256
9dcb3a098a7e41664dc6bce5e960ccc6ca645f81a48d9d77dff70d62bd68c7a4

SHA512
2a93a564e09630690dd075f55e168966d99a588330cbf4f51b5ddca9db491e3be0790d93a45bf14d730ff977a90050e4abf1e3e98e61da0aca34bbe0514c0b88

Download Submit
C:\Users\Admin\Documents\DIE45.lnk

Filesize
1KB

MD5
fc0457b228354f02b807e28a0ae2141e

SHA1
6adbe1d25e55c1718fa6d8279700acb788281cb5

SHA256
9c37571b9f1fc073ef2a69b23444a41938868efcdd807ae7be9f9a71da80c0fb

SHA512
adac41e12d57c45e29b42782cd3912ef859018b0aeced8eb80f319790a2190ae0a6a60e7fb40d896b052ecf847d243797702332ad2330606f2bc5f08156ed041

Download Submit
C:\Users\Admin\Documents\DIE64.lnk

Filesize
1KB

MD5
3fc227f975dad41d832b755df4a1b028

SHA1
cb35dcce02ebea92d1f14219d79903e1268814f8

SHA256
ceeda73d811db466a727a51b98ef2d078131b3e5bb36df4deca3000a20907ded

SHA512
33d778fe03cf1f0198f71a27852612cf1783be0d69e0805077284de47d625117c5ed2e5733537dee73ad3b501346d3ece544841c9496eddbc1180804dfd436d9

Download Submit
C:\Users\Admin\Documents\DIE78.lnk

Filesize
1KB

MD5
7e341eeba7a532837f4faec33965e7de

SHA1
8c7fef41bb4f166c91dbd976e855c5095cd27a48

SHA256
4736cd3ae561529cec19c4a64b9832bef84771edddb8241505b93abd9d84b0ff

SHA512
ae1010a20981822db729132877a2d40eb463c169a21f51a10c1eee33424e15557a535a0fdca92ac787b2dcedbbe53c044047666c2b129a2656f0db07d1770fd2

Download Submit
C:\Users\Admin\Documents\DIE93.lnk

Filesize
1KB

MD5
5dce538b7e4ab5f2e35f906428353137

SHA1
7eb7182f4f1017d703f7c587494c2c045a4ab3ed

SHA256
3cba2adbeb80e9f48bd4455e64a450ae2345b8108f1f50867f8d1cce7b423a81

SHA512
ea77908c8029fa729d1c99609427de80b883da30f86388d3d26f8d919de6053e506a963493abd1de30cab2b33e44c44fe5778d7005c125e32ecad3867f28ba46

Download Submit
C:\Users\Admin\Downloads\DIE118.lnk

Filesize
1KB

MD5
03e4f84b126b242ef9a1bc49adb492a8

SHA1
b9b62ad62d8a76ee3ab211da8b33a62c39aa0217

SHA256
e998575ed36da2809ce7aaebfc60bef7028384363e9bc57e50d3a210e8249895

SHA512
19ea4161e1f4ece8c72898697d7c4de6454c3d8748c0fd3dc75f819dc78df861c7079796971c662892d0f85491ef5d7534f1c3d6e07b3345eafcc16406fdbfce

Download Submit
C:\Users\Admin\Downloads\DIE14.lnk

Filesize
1KB

MD5
385958df3c68d3a8cf38dac63350c08e

SHA1
5e1ffde7c2813e2e0cba72abdd6b9d5ef78b2546

SHA256
b9cee06ee52cffa14fd90787648bb90a6227b804471e8b6e49a1e70dd55d66d4

SHA512
7265e2d228caaf4f71a56fa6b3ff9b146cb4011bad7b5eb12744ead7fd65c683f8ec80be4085e510f728f74443b49e6b8c083dd86bfbcbb3e8286cd535b2792c

Download Submit
C:\Users\Admin\Downloads\DIE156.lnk

Filesize
1KB

MD5
91c3ca3e04526d4383f2e43f8cb6ff17

SHA1
24433d3c9c516999f73913c93ddc6b31c6ac9c7c

SHA256
d469f9f38bbc4832745f329dc4e6218dcbae7a2c7e3ea1e2d0b4c4e12ff7ee2f

SHA512
d929982735b32902ea7172f91792e30c0af3d0f05dff24c42ed650c9cae0eb90c14ec1bb1be3cf2ac37e9f985cc43b5c831edadb1d896461ae6c9bcf727d5ef8

Download Submit
C:\Users\Admin\Downloads\DIE173.lnk

Filesize
1KB

MD5
aade0faf568ca971c6a46dad69ac46a3

SHA1
9383bea903e662b9204a2432f6b4de6260e0c34f

SHA256
50a6e1073c65e3a631e36bbc8ce040033d09975cc5fc30ef609881b5d8565ce6

SHA512
b7b315cfa77d76dd7262d7742c8a5f3487d53dfc57613ee9d2db45296837753ad5525a3e208ea61d73814028425e1bb024b57931f3931e1ac5156b4f8999d711

Download Submit
C:\Users\Admin\Downloads\DIE179.lnk

Filesize
1KB

MD5
a2d4aa7f91d10c95ab29e5adada5c76f

SHA1
d825db0ef49dc49f5a386259b6da6f793993243c

SHA256
2c3ff647ed0aa00df22e629913b700e1b0e57618b77c6ffd7287070682583d2a

SHA512
b5c865852ef74e19483b8c32cb29577ea02d3ab4474e9f95d46bd6ee74b4171f317c1c062c25932425bb54548f3c3fb111ceac3c5124f81b177084eb1f5907df

Download Submit
C:\Users\Admin\Downloads\DIE188.lnk

Filesize
1KB

MD5
84434e048cd49325ea7809e2436663df

SHA1
994ca34386cf3843071621db94712b75b1be5425

SHA256
af6f0282cd48fa8e70755434e0ffe9526b2de75248f0e1fc14fe6555337eefa8

SHA512
9147799517074f0918b52a265093f440b896045c6838b468113e3fd8b14d1cf5ffd46e40aad18330ebd9a3d20f1b3b36874a7a2d53d0f121d758c01f83ec1ccc

Download Submit
C:\Users\Admin\Downloads\DIE197.lnk

Filesize
1KB

MD5
01aee7c3c9d879436da85b9b73a554ce

SHA1
a417d8e2d7fa70961726efd17cdc75cdf1e8671e

SHA256
27f1101ca3643eda948dee426b4be8d12249e7cbf1885996f88f4ecacdd0b96e

SHA512
18d24bb677ab4d5f17e55f7e3d0435ff30e1454e1c064c39646d180e656bf4bd3216b3ebba25d44220427174c7ccc0838469c4fe7dbc02fad9c0f2e98d963941

Download Submit
C:\Users\Admin\Downloads\DIE23.lnk

Filesize
1KB

MD5
275cb2ef892e731cee19a01a04c7dcef

SHA1
e09600ef0549b81c5205ee121eb4218d88ed8eb7

SHA256
92cfee63dd5b05113648900874d1de72a11ca753bded6c003629d95d616a96cd

SHA512
476cd5011ab96e3d703f03ead1b5c889f9116972e145e3a6d875229c539c96d124a6d6255e7440a403ff1e2133f13f7da16067c77da27ec11c54f93801014cbc

Download Submit
C:\Users\Admin\Downloads\DIE28.lnk

Filesize
1KB

MD5
6a02e0d498e78ca3cab64227abe870da

SHA1
66c044481237085c070357f49d97f41f62ceecdf

SHA256
8abc70c2dad2112b699b782d14f73a522713855afb67c0a841771f6400166b11

SHA512
33ca97359ddcfb18132651cbecd3e661e683e0dec17e52665fec14295e9944456470420cbe29afb803cab7b5d1d5636d5b7da9be9c2df62e65b2ad8b6eec33f0

Download Submit
C:\Users\Admin\Downloads\DIE80.lnk

Filesize
1KB

MD5
bc44ec19ff00e6e0f683737a4c80db96

SHA1
3f530a8abb3101a3cb372a324a96e01faa8f6b83

SHA256
74284f71079d307047402486c3d6475c6ff48b3b28d0df1913afe1cc13653851

SHA512
3b6cecd357133e5fa0b3ad71496bb1707d08000e505fa9a98faeecf060c677b92aebb0ee224701ca7e87c04a015eb6c8e4a0ea67bf601e7fcf845a3b7829d46d

Download Submit
C:\Users\Admin\Downloads\DIE97.lnk

Filesize
1KB

MD5
24c75edf5021457d206ba37c1271b80b

SHA1
6c162278ec33350b6c5b29c4beccb11e5a87a052

SHA256
c697fc84c75d97211d77873d7b5f79396ee948efa98b243175ce305678445221

SHA512
204eb36fe2a2975bfe6a12f9bdae084a560fb6554def83643d04d5feafc6731a63ef91e3ec87849bc8fb3d97237bff5cfdd4b3c57b7ed022f7faa36a0ee28ebc

Download Submit
C:\Users\Admin\Music\DIE1.lnk

Filesize
1KB

MD5
a6369aeec1438f794526f6884b664487

SHA1
6acca8b3013ed7a3516908697bd175624e32df53

SHA256
cbd422f61c97ff2f4bd382414424c47213135b2e361bfc2256e95a99d95ed3dd

SHA512
231d082781a05f58dddca28ac98a31a6385a839b44697c0b6f7343dae0230cd82477a027836e208b27d8e485578763a2cc1a28a7b354c67324e1fadcc8daf4c3

Download Submit
C:\Users\Admin\Music\DIE101.lnk

Filesize
1KB

MD5
709f3fbbe4f24dba38520fc01d1f9c5d

SHA1
b1ad1a69330eba1a89b1888cb6babf6aba0e18b5

SHA256
31ea4aab41d4ab08d99c79ada0aa76b20865bc2ea98b451b5e4d0b8626a0ff63

SHA512
c16fb4b6fb162ffcb42ccd353463cb19c301b335c9fcddb45542aa6d7960250f3b9815939c5660b20edced1808e42113cd2bfd8d33bda20e7a3857c13d25e337

Download Submit
C:\Users\Admin\Music\DIE146.lnk

Filesize
1KB

MD5
d29375d9e51a0c440bd846b463c73803

SHA1
d4e6879625b3fe96c526b0c9ca15438996cb524d

SHA256
480af55d50d17b5430ed7d48a00b17430fd26fcefc1f4dcb61e544514b59e41c

SHA512
cb492c475cebf20c2365d75fd6ac9f761a8ff860f9c81bd55dc43a1cd4c05ac3745503e881611a0587621622a48ee89cbad7efa97f282f56a7cf425b6ea3c3c5

Download Submit
C:\Users\Admin\Music\DIE162.lnk

Filesize
1KB

MD5
86d756e8c4937b4f840c865acdccc64e

SHA1
6e42aa2e3347bef5866c79f28bc5294515f96ead

SHA256
174daa4c990202f7209a11355c776b91399e3ebeae25df0c7acc76a481e76b38

SHA512
0d9b78d2d48ab7d2c5f6fe7d8265c55c683ed3babb7467c0fd408da005b4d79f6783a944d515bd68a959e9cd7992c2aa6fbf3f3e606704a73df17c408c9aa6e4

Download Submit
C:\Users\Admin\Music\DIE199.lnk

Filesize
1KB

MD5
21ea46da915f6b19763170593a4a8ecc

SHA1
df099da1999f9f78ab09d7d550347af119353d7a

SHA256
c2bb9fe083aec1ed949ef76176ab676cdbd207c27bb726469513a8ab1a9ac47d

SHA512
d4b055a55131c06bdb40553fd9f6822e9515659dd0745077fb6d2372464e409ceb6b016ea6cf1b6cc84e60a504f23ab93494ea525aee0b3893e73742ec7f8785

Download Submit
C:\Users\Admin\Music\DIE58.lnk

Filesize
1KB

MD5
f6b9fc8ac95484cd1e7d639859dd2e51

SHA1
a156342d068969b82c35933f1f301f17d726afac

SHA256
f5ba56c23689d12d7dc6cf8c12e2682662a686715edf326ed22389718b1ca466

SHA512
80ce1d5f75c808a5504c9edb1bbc32ea87700683b9ee8817ab9b4ecb9841211dd7012d4ab2192d13778b482cd2591b1a5b8612723820b96fe0083af5875895a7

Download Submit
C:\Users\Admin\Music\DIE9.lnk

Filesize
1KB

MD5
01208d81b8a00a913ab7425fca8206e3

SHA1
ab748c019d0524e950667d3b7a4a58606e122975

SHA256
7d15753ee02b3a1cc7fc39e4e1e7a3935f221f784dd956b6df3f0d3228ca1b9a

SHA512
f3a31e5716f15fa2557bc77383fe1a9f13491c13851272bcb3b0cb14a59a6a7caced35b463ce99857d8d02631ffd017c9541c913004c6f87fb65d6a19b70c51a

Download Submit
C:\Users\Admin\Pictures\DIE104.lnk

Filesize
1KB

MD5
226755e239ad22e758ff6a41426e47a4

SHA1
9714c56d6403af109309e33b001fe003f8a28a4d

SHA256
119b147a33e2268cd98792816c85b30cd693c918af87fa79ca073a4059ab3794

SHA512
7975e18a1da91c70d8c6a75c9eab4099409011ab1c32ecc4c274a3f2241581eabb9f43297cbee02323d5121b0b6185ad4e9196c2e4fa7e4265077f97a94d270f

Download Submit
C:\Users\Admin\Pictures\DIE120.lnk

Filesize
1KB

MD5
a17a6d5b8bfb08bb55132d13f03b8086

SHA1
9dcbdfdf3594cc37591a120215ec577b1fdaa505

SHA256
702b70778614732c8fa14b69c3b94ae2c4e1d4b82cdb11f72497e3244aa46428

SHA512
b7ef08f579d99211c53550abf5f1bd3ef0b1267033e88ebb14ed7e4a94c308b404a6e282ed3babb2d047f00f57c720f116f5f6c6fadf9a5946daacaa5ad53703

Download Submit
C:\Users\Admin\Pictures\DIE163.lnk

Filesize
1KB

MD5
b1b49f8c54b9bc962ef43a1d7827dffd

SHA1
8a7d1901ae07d4e05aa9577fc26618b417f7489f

SHA256
1d2f87762d7900db401c93f722cf3b47e15a6ec6761a16921ac9c32c243641bd

SHA512
9d33409e2e6f26c82861d5d8f1c5238df827a9db5bf4bb3f51c47a74b18f508e257877933a5695ebd7b11e739fb8e33976f578c69914b27eebdf9f6d57ba2a8f

Download Submit
C:\Users\Admin\Pictures\DIE168.lnk

Filesize
1KB

MD5
8ee0225dc594858fac41266f34b72b63

SHA1
1fc5c0e9dd3de881136d48e1c9699ea6c1c9d22d

SHA256
0c97f8e84b4bd6322a0d4bbd9c45c693596709c3d85caa830a874253e8321070

SHA512
97601603fb4b379bae90912d361ad5d448490059a7eee35b89c9ecfcae1cd33bdda135c6f26967c3ea001ac3362986dc0f3c4623b6e89d7ccb6379ae12016a65

Download Submit
C:\Users\Admin\Pictures\DIE186.lnk

Filesize
1KB

MD5
a47dff32b3c78f12918dc5284c93c6bc

SHA1
b6c09522986c9fdf515c62c60f148eae798e99c7

SHA256
3dd8d0270aaaae14756ee305eccc002639edde227286c54286d79b84e459b236

SHA512
27b46aefe3bfa0dfc62a0759b7a6f93d15ea7e6a0b3e4d6f1cd7e84f7ed9c4fc240eed2d0b6d881130fe72641018584c8b25d18e26ab5c6234053aaa29844b86

Download Submit
C:\Users\Admin\Pictures\DIE24.lnk

Filesize
1KB

MD5
7755342977cd854eb6f5c168dcda02ec

SHA1
06943bad487b2e17fb0562427c13a83ca78015ae

SHA256
9c2cf06d358010903e193855dd88aec4fa0cb2be1744c26bd980937d265a1dbf

SHA512
22aa8dec57a2dc01757db4b653240650eca89756eee1f0c299b40ee6b7e654d730c4605db7e9eb0c2d7f50b0785b1c3331d32c447c7b7bf3cbd4df71ee852b16

Download Submit
C:\Users\Admin\Pictures\DIE44.lnk

Filesize
1KB

MD5
58087ac2022efa988e138c67cd9495d6

SHA1
8ebbb0dcbdfb5dd80c1854c32ab5ef5018ed308e

SHA256
5db2033404db419631e39b196627620e03e7809d25d0d7b32b66492da24b662b

SHA512
c2058b167e4271a54ce293a3d1363131da112b5671a657276b3b37ac2484151b3b9ee2c5a38ee4901b69d650042f5c3e4e1157c8ee6af669cde08f769c92df23

Download Submit
C:\Users\Admin\Pictures\DIE64.lnk

Filesize
1KB

MD5
24aa76960258ce4b5f31313eaa7ba614

SHA1
e5a7612a722a584b8ac595b8a4a6f72da2dd5478

SHA256
1cf6fc93b7dd42eeb3b50fb60aba5c936937f6968d03ffd4ca164dc524ca846b

SHA512
142d2eebd91e2b46c0445c478dd9b2a943c8d3682748561596bc1e63fe4b2f7457d847f4784ba7817c65b3098cd83cdbc4f928d04a3f161ad0e6fe45cd96d854

Download Submit
C:\Users\Admin\Videos\DIE101.lnk

Filesize
1KB

MD5
220e8fe4f4501f0c19815e6b2a61cfc4

SHA1
738de5bb66d85ffbb117910d023a26e1e20481ca

SHA256
9b6100514b71fcbdff37f8493ae832d96e6d361114126dc2316110893f101f27

SHA512
b8e40f2e52b0e990c554478a15e5bf068a8c9d86b9ff88c2301588f01f7ebcc700d65da74c536eac618cf225e76f25d7ffd1c6f208faec2f2ec78574d40fba98

Download Submit
C:\Users\Admin\Videos\DIE199.lnk

Filesize
1KB

MD5
da99e30a6aca3707bc9a133b734f61e8

SHA1
eea9295f8746d8c203529348e5dadd924afc76fd

SHA256
ca77abee90306d4fa0b1a747a8c046eafb21bea556f772a624857adaebce8a18

SHA512
d740901a437e7ba9cff3f364e681acd72e0c627fc39abf1be4b54a283fd97b77ad7347975dd9093712b292d1d8b8bb20778f401d6a184d8c7c0ebe45e1fbb26c

Download Submit
C:\Users\Admin\Videos\DIE28.lnk

Filesize
1KB

MD5
08ab393ea70a9cc54a2cbbaab5d6f5f6

SHA1
34fcdda6c689c6acb34bddab631c31225d418093

SHA256
f37bf2f14f61732b8f091f360a1b1f2f00fba1915c16ce140c64fc96d656020f

SHA512
2f6bffffb2bbae3116f91d511df35c95dfff953c02216b0d16f4f6a4bbb3c7b0d5353f91024d214d7bbc40435c48b9d4137c8f1d2ca87ef9f0f7a9e3cf77ed66

Download Submit