03bb5d9425464244cb7574cba9929b3dc0e789916b46f2bf5a8e7b533034475f

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
19/07/2024, 17:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

trigger.vbs
Size

3KB
MD5

200f9345cf839af7b98457b9e408446f
SHA1

57752503ef0c8afe36376f5b2132582682577b2c
SHA256

03bb5d9425464244cb7574cba9929b3dc0e789916b46f2bf5a8e7b533034475f
SHA512

da53cdc6380854f54abea0a9917220dbf20dca448365eaa17a344eba2b1976aeac0f57acbd6244f5c001b3fb1e6e5d94e4fa6ab0ce4a844856e4d1189d98fffd

Score

8^/10

discovery exploit

Malware Config

Signatures

Blocklisted process makes network request 2 IoCs

flow	pid	Process
21	4936	WScript.exe
22	4936	WScript.exe

Possible privilege escalation attempt 4 IoCs

exploit

pid	Process
1260	takeown.exe
1016	takeown.exe
1164	icacls.exe
2364	icacls.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1750093773-264148664-1320403265-1000\Control Panel\International\Geo\Nation	WScript.exe

Modifies file permissions 1 TTPs 4 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
2364	icacls.exe
1260	takeown.exe
1016	takeown.exe
1164	icacls.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
20	discord.com
21	discord.com

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeTakeOwnershipPrivilege	1260	takeown.exe
Token: SeTakeOwnershipPrivilege	1016	takeown.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 4936 wrote to memory of 2928	4936	WScript.exe	85
PID 4936 wrote to memory of 2928	4936	WScript.exe	85
PID 4936 wrote to memory of 3972	4936	WScript.exe	87
PID 4936 wrote to memory of 3972	4936	WScript.exe	87
PID 2928 wrote to memory of 1260	2928	cmd.exe	89
PID 2928 wrote to memory of 1260	2928	cmd.exe	89
PID 3972 wrote to memory of 1016	3972	cmd.exe	90
PID 3972 wrote to memory of 1016	3972	cmd.exe	90
PID 2928 wrote to memory of 1164	2928	cmd.exe	91
PID 2928 wrote to memory of 1164	2928	cmd.exe	91
PID 3972 wrote to memory of 2364	3972	cmd.exe	92
PID 3972 wrote to memory of 2364	3972	cmd.exe	92

C:\Windows\System32\WScript.exe
"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\trigger.vbs"
1⤵
- Blocklisted process makes network request
- Checks computer location settings
- Suspicious use of WriteProcessMemory
PID:4936
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c takeown /f C:\Windows\System32\hal.dll && icacls C:\Windows\System32\hal.dll /grant Everyone:(F) && del/f C:\Windows\System32\hal.dll
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2928
- - C:\Windows\system32\takeown.exe
    takeown /f C:\Windows\System32\hal.dll
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    - Suspicious use of AdjustPrivilegeToken
    PID:1260
- - C:\Windows\system32\icacls.exe
    icacls C:\Windows\System32\hal.dll /grant Everyone:(F)
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    PID:1164
- C:\Windows\System32\cmd.exe
  "C:\Windows\System32\cmd.exe" /c takeown /f C:\Windows\System32\msvcrt.dll && icacls C:\Windows\System32\msvcrt.dll /grant Everyone:(F) && del/f C:\Windows\System32\msvcrt.dll
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3972
- - C:\Windows\system32\takeown.exe
    takeown /f C:\Windows\System32\msvcrt.dll
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    - Suspicious use of AdjustPrivilegeToken
    PID:1016
- - C:\Windows\system32\icacls.exe
    icacls C:\Windows\System32\msvcrt.dll /grant Everyone:(F)
    3⤵
    - Possible privilege escalation attempt
    - Modifies file permissions
    PID:2364

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\s.vbs

Filesize
756B

MD5
362834df28860b9ab1aa787a61c9bb9f

SHA1
ba008515db84417d15fd97c356e33fdb80379d15

SHA256
70866acf071a5b9ee641bad7a206eb3f1e6e27df0bd1cb4cfa25cbf391f60ff7

SHA512
ef8f7b5aa4a99c7275c9ba8c27f06148b6e359f9c0f8357f07c685f835c7c8bcfac7b937334b4c9b282b410b300f55d729287a27c5327affe02e8aad3fa918c8

Download Submit
C:\Users\Admin\Desktop\DIE101.lnk

Filesize
1KB

MD5
ebeba54ea9a834b84a627a4a0f3a6b89

SHA1
62a451344b09a4fdd97f9e9ad78e038fa6da26f3

SHA256
6789313c79a6b39e3420cabe2a4f98a19c29735f86566977cf3c62d665e82c41

SHA512
c08aaf6fcff4f0aa757b5b244eb01f8cbe12f6aed4d4a523604972e479812ab18a3a0960b6d2918eaa488112496e9e647cafb780ac5e30b023bd45bfba2fec31

Download Submit
C:\Users\Admin\Desktop\DIE122.lnk

Filesize
1KB

MD5
77a41e6ac07d73bb602e0cb28dcfefea

SHA1
c316aee8440f89d55677f7b91a6f7a223dc4be1a

SHA256
d558559dc2474efaa3abff57738b098cb419ade5a8741c370d91fd9cddcc742c

SHA512
3015bfe27b49a1a28dee36962478962d2f0014f54d94089fb6a1be0a3c678611704caa2d53a81c39ac78dd5e07e29928db78c3dfe03e15f70802bdf71b1825ff

Download Submit
C:\Users\Admin\Desktop\DIE138.lnk

Filesize
1KB

MD5
15d4be2d54b1f2172a8f45d776858336

SHA1
04de4348890b97e5d72283fd728a49d4c89725d7

SHA256
fc1454b7b904dc3e02fac933aa12fcc55deead7330fdc6d31f309da3773c5d77

SHA512
41ff1a4f30f18862ffade960371fe1da963a1c7b98357753d31db4ecd8d5f93f4be9c0d17cd50009169d9d1d1290492ddc1241b8f92ee05af4c1b491dfa7476e

Download Submit
C:\Users\Admin\Desktop\DIE150.lnk

Filesize
1KB

MD5
6c2cfaf0ec130724f341ffd676ed7d4f

SHA1
4732e8408b70281970a862a239f8fe3a37b44d28

SHA256
13db5f9027ddc484fbdd1c5fd95e690f6e2d1cab6be4d7f218ea18bff6732cab

SHA512
c8195c9a3918c3cdc65eb1cb51b69844c51a8e6540489dbce9d1e363ee8ae966a331ed2ba9ca46c65128db4933fedb772ca636bac93748cedd2c437ce3ae5490

Download Submit
C:\Users\Admin\Desktop\DIE159.lnk

Filesize
1KB

MD5
01b0289e450ad75e8d82453e48627674

SHA1
7d94021684a5a26a9881cb3bdaf75b51b3061c79

SHA256
e33d6aa75b64b52d2c39e78e21233e56ce71602365d407e135901de9edc49c9a

SHA512
23f328ec256630dec2ae5f480d8eefae1750240c5134544aa110914b8679abcf3a2aef155020acf8412192f674f7358ffc1a6b5f6c1d28ca507b2782e3c80a21

Download Submit
C:\Users\Admin\Desktop\DIE175.lnk

Filesize
1KB

MD5
3b51001c1281896730e6574885fe0b95

SHA1
2803a6f4b3b5043eea14b9ce277413fc287fc247

SHA256
d2ec7e340a6389e0afd2131ab0c15e23d3ac6b8a483503f46376f14e9f6c4cda

SHA512
16c0bbee76bcf1aed420b9222bdf59557f56b5c6dd34c96576c7d31d1d41a78c1911695b4dde37b91ca2dd82612306104be1c91c32e2ab504de1efdc0357f1c2

Download Submit
C:\Users\Admin\Desktop\DIE183.lnk

Filesize
1KB

MD5
272079e65fcfcb63da9c5dffe3282e01

SHA1
4e91d8c250a52d481c3793d761092100e825462a

SHA256
02173520ef8b5396454f04abbb1e875533608b8415643ad4567e2585c4d02c19

SHA512
29455bbde054f7685a54863859539d9592bb3c749c119bc67356c5145f45bc42d7e169232a9649cfe192e4fc28e7a9f7439e2f17f409bb82e2fa821c72405491

Download Submit
C:\Users\Admin\Desktop\DIE188.lnk

Filesize
1KB

MD5
f019b388aff4c86d908963544d60a365

SHA1
1a7ac9501f687f6c973ffe6cb932333ad8c9ae52

SHA256
1a2f89889ff64f8e45ee9dbb8f3a674676263e7517e4c7a21d70634e0f713aab

SHA512
04f25410f02e4567e490c29d55414b9d810e49497b4e36033bdf66c1c45cb22e4e6e85713731cd3149442b7022142ce88a63e4226ea5a42677070ca7a17b23eb

Download Submit
C:\Users\Admin\Desktop\DIE194.lnk

Filesize
1KB

MD5
92abbac71dcc370fe4bd418dcb5c7434

SHA1
47e5ad822fbfde899b522aa3bf8ded0b7b04ace1

SHA256
e04e7855a7570423e10e271288ec6f84f524f1e01dec4aa9d94402fed8df1c5b

SHA512
780d2700d5cca1b6f500a8546cdaa4881634f57c6d3b2361e59f43b305a25ad0e5a93a45664a1e08481fefae5e0b356a7b6a7ea41fd2280b97b8fde9c346eab8

Download Submit
C:\Users\Admin\Desktop\DIE31.lnk

Filesize
1KB

MD5
7ba6a6c9a39dc11eec6c003bc0fadcc7

SHA1
840656a3ffc16b439cdf98014735be24db06494f

SHA256
e9ab39087888c709e46f0ac27f146d70ec83fa96456886c9217a76ba29016f5a

SHA512
c7a379e75f88615667be157d47236ffe58570a2f84daa8d7994ece8d154cd1b666a27ff6803f30c3cb3d0b97a8daf82b276c0c7f5f8e0494fac20977cf482ee9

Download Submit
C:\Users\Admin\Desktop\DIE43.lnk

Filesize
1KB

MD5
a9d2d185a2820507c8a223ca51da060c

SHA1
b4d92dfb1d2f30a1a95596279568afcc6829c9ae

SHA256
8a7e3997e08057a48c7aadb7927a8ea1c67b931af9f2823bc93f902e74b256d3

SHA512
71c5ef7ed0b39757b3e2091a65e37cd9b46348245d8c08987b6ba9bda89588f1b22eb82dff67ec31d6643017ed88ca127dc977c3bb18a58bd982afd9614ee107

Download Submit
C:\Users\Admin\Desktop\DIE74.lnk

Filesize
1KB

MD5
c89dd3c5c856bbd848cffd5960c2c1dc

SHA1
daba65c21d8776ded12667a7d2d98a85f8a860f1

SHA256
c2abbfd9a8c476975e64a30f643b8e8d70506e326695dd445be10865d70b4b3f

SHA512
339a8f9f0f84eff81f18945d44a5ec21551cd6d5251addc22f8c4d4c4aaa3e0c8a176d7382cff25ac71e91e2bb6496cd504c3e1ea81b0122c54083dbc984b226

Download Submit
C:\Users\Admin\Desktop\DIE89.lnk

Filesize
1KB

MD5
4d380e15f7a55715a0abc94946d97bc1

SHA1
4132a551130fa324d6927fe10ac64e20a7c70d72

SHA256
c10a21b8137f687ac9c02ba75a891f6695700808a991c34e584d909f13290009

SHA512
a09c68bd794da1c8439772ac128347c3fccad261aae8239afc44d44a6980d97080d96404448f324a991279ce3adb3408bf146657565e001a3b9ea5a404d702a8

Download Submit
C:\Users\Admin\Documents\DIE103.lnk

Filesize
1KB

MD5
79a11e4ed8b6eb1d7654e1a26cc947a5

SHA1
4962d57f8800f8b7370e74e72c30f98eb59f562c

SHA256
4e54b818c6840f53d99eb89aab44198565aa660e602eb2609558dbae9dfb5f30

SHA512
c50c14a9b7b463ea4a65f18c4e523edb70f22febcf9e7427a815003c121b0dd76800ed37f77f65c10037ebdd29b2374a39be9531519496085d88d0681509ff0c

Download Submit
C:\Users\Admin\Documents\DIE110.lnk

Filesize
1KB

MD5
d88593855c340ad5e8ea0b4ed5876ef7

SHA1
fa552d2420c7f0f9c74f30c107a7410bcbf0a1a0

SHA256
68c92c59417ec91c7ba8d0262cc5c05395eeb7e2925c3396fe45d403067446ba

SHA512
e8c3f8474120c10ebfffe3a6723dc9feb92deff3b17528f53e22197cdb8582e86037e09a7074340a3d767e74e8b515fdd4246a46a26fbb97fe8fbdbf22317daa

Download Submit
C:\Users\Admin\Documents\DIE115.lnk

Filesize
1KB

MD5
39df1f1d803f47736c92770074d88291

SHA1
97051f20c81249faccd256ea25a504a3e4e041df

SHA256
e540e3a6c91a31d2c83bf03fbc9223382dcd03dd8abe392fb0fe55a87d501161

SHA512
68bffcb42ef58ad74c61df537ed2820a3b7f03450676464eabfd04bcd9970ef23a6c0fa97bcc5941272dfb7af74d0d7183cf6de100c38ebb3d7ccfc6c9dc01fc

Download Submit
C:\Users\Admin\Documents\DIE179.lnk

Filesize
1KB

MD5
5603e0aede9214e9cbba049438040118

SHA1
19de7d880aaf2e5da79d23d015f0dce3127ff19a

SHA256
398146509e50fca083c8133df8cbe45736e78b507040e4d21aaa95455b192da5

SHA512
cea4093b7c3348e11405569902ca06b787dea70ece712530c4777da266dba07da9389d08bc7189c69e542791963ff8bd17ff20e9d647eb6b79c0eb601e74ffc0

Download Submit
C:\Users\Admin\Documents\DIE187.lnk

Filesize
1KB

MD5
2cdc918c76bf8218ba11a0d71867127d

SHA1
0602578743adb14e5c4a10d784396ced48a4ae5b

SHA256
0fabc4b83bdd6a2d6f61e0bf50939592f5c0796faef60b40f20e84b8aef8a291

SHA512
50ba77499dcc74e36e361a3ace9a4a4a44765cb8e7055bb14fdbfcda7fd586ad73980839744b3e5ea006dc9cdd28920a8586fc28fb9d186ae035ec6659be1d0b

Download Submit
C:\Users\Admin\Documents\DIE192.lnk

Filesize
1KB

MD5
7829a9d02d255c8c0c68dca006586c4a

SHA1
22fd13cc669ab7a2ddfd92a8fab7203f71c1ebcc

SHA256
15f82df68824752c087450b0340d4239fd8c524cff608ee8d61d02b742a6abae

SHA512
63008175a40cd29310b0924f0a6ffe63fbbd639f0a528f42fbb087fd82086493b87bd81ceac105411d07e2f7f4864d529843f2dbe399a4b3533ea16375256079

Download Submit
C:\Users\Admin\Documents\DIE20.lnk

Filesize
1KB

MD5
9bf7e6ac48933f7541e52873c47a2f4e

SHA1
e03a31e2dce4f3f5f3deb17a0ec60b9ebbbe519f

SHA256
57c93423cf4e35a3fa45209524da1cbfe7dd88811ee5d9e3c2acefa1d8f270e7

SHA512
43f482d672bab98e6b3be86e2dc6a3bd2a32b22504cbfb172715bc8798564d2cb3ee60aa0d456bca6307c6b8da53e587174664b17301fc0c91b650421e0e41a1

Download Submit
C:\Users\Admin\Documents\DIE26.lnk

Filesize
1KB

MD5
079c29ba10f38dbd4b57ef19e59eed15

SHA1
4be4f94bf0a8a5f0b576ba6b8793e4a1e4bb91c9

SHA256
cc17fc0046c1678b78add2c5a62a0d0af686c8389a1315b107d5c38c6aa70621

SHA512
29f2357e1a027fd8f8c54ddfd5ce66ae8f522f37b76b518ba84496e2d1d804e58ee12fa0d462307d33c343c1da231128475891cc24cfab13f4bdf5cfb94cb05a

Download Submit
C:\Users\Admin\Documents\DIE31.lnk

Filesize
1KB

MD5
7c58761f45287b0fec65bfc644d6e20d

SHA1
6a2fc8cb3049a619b13855ffb576156d020908bb

SHA256
7a1eee94617520a0fca216f35e0ada6492e384ba54f105d09a1fb82c0bf7afc8

SHA512
08eddd606e9f422ca37e1c8d439f6c7f5313ffcc81f2a3d89b3237f3cc98b1c561592d8c5a54db1893b025b732d569177b84787877638c26a7f7a988c3022147

Download Submit
C:\Users\Admin\Downloads\DIE107.lnk

Filesize
1KB

MD5
564148047f65a42da39217f787c28400

SHA1
a5ce7161720e49fcbff85c162b6567e0ffa30641

SHA256
7b700106f673a0b5c3536ed7f878c6330fde501f9cc29ec19b26981828782a20

SHA512
9a5baef66bc685502bb06bb6407656c94f8d6c164e68fef7b91b28479335f8185c2baee2504d4803c3a8c1ec713e9a8e652e44c5f021842da24c21090bc37de1

Download Submit
C:\Users\Admin\Downloads\DIE115.lnk

Filesize
1KB

MD5
fb169a2337c6595af524c9111ce76a7e

SHA1
1bdb4f28c56043b76898e7185687dad5a3f4ff83

SHA256
77d19851cb24fdcf990a34f074c7d9ee4f8ccfe3b5594391973651b7b7b70779

SHA512
bed2d4dc6b49c0233eb89393a2e8ad6a55e0bb567e0e7120e3f80661ee4caf937e26941395662b0bc491f61698bd8621bc295adb0f3071c8c455085a5c39d455

Download Submit
C:\Users\Admin\Downloads\DIE141.lnk

Filesize
1KB

MD5
400b1140c4e9ac06e65cb252f205114c

SHA1
cfef1c4ee239d8dacb0fc58d717d4ed91eb36fad

SHA256
26cd21cd399b247c2d79deee1f820eae7390a459ec431e4d0038bac103b406b6

SHA512
1debc49e7dd50ad1ecd150666a4776ca2bbab3cba545a4b1faec8266441007b6ce136d9c0b9a44642fe9b7d3a5c7833f6b2d2388776fe414b517f5909345e1b9

Download Submit
C:\Users\Admin\Downloads\DIE153.lnk

Filesize
1KB

MD5
c59bb88d03c4b5caa981104d5dac03c2

SHA1
944c175d290096dbf47bab5df9c86844a9157ea0

SHA256
9833584d5530b952ac6b270c6e0a8c3fcaa47a0264e7670d64707ba61c5c505e

SHA512
dd6ab3190a1a16714cb6d43bd4fdc7b29eae33e46388aa9f3009d71e9a22f085ed939f71517ba1caf4e5110065a2d95e88508bf6c943c52f29413e2e3ea8e964

Download Submit
C:\Users\Admin\Downloads\DIE17.lnk

Filesize
1KB

MD5
a3f233b251386af11b124b5aba774bc7

SHA1
5c8d4f245eec5f984f1f3a83108b3c1f02e2a5ba

SHA256
35b1eda5e1671fc3d3fcf86adec2fe8b76eaaf9575eb91ef3c94f1b0de415dcb

SHA512
86731fe294dbafc8ba3d552a6d9746b2421a052d021166b826065525c0b647556bb93e57ce1c7885d0445e11448c24dd5eef294e7005eab28f13eb67dea74d25

Download Submit
C:\Users\Admin\Downloads\DIE172.lnk

Filesize
1KB

MD5
9560166e4999f95c5c044ae36f8e00a5

SHA1
029a34980574243b7355d7d229f8900585d2ad4d

SHA256
152cc8fa01477ea33adaf7736dc840e6e272184c874cf03118b330d5b88f85e5

SHA512
e20f7ba3e79a64846a826e545112fec414cd53d0f321796a724dce37c2043b212e686f0b4cdaadd66ed3160865b2a85534019440fe2bb2dcdbc85e7d8737ae43

Download Submit
C:\Users\Admin\Downloads\DIE181.lnk

Filesize
1KB

MD5
2ba4761437a93bc52bc05028a09d6c5a

SHA1
2025450ab449ba0cb5532e7be0da1f8910c4fe0f

SHA256
c1fe9d9db18391175fd6dc2b6208b2ba8cbea2c8db622a6c8d7fb08f054dc41c

SHA512
6067a2a0e3159a0f8215d7f2757a7c86d5d31d95acb7426379c2f30acf88255fa7431b3e57726b88ceb44dfbebf2db217bc281035fc1f03074487c8365a980a1

Download Submit
C:\Users\Admin\Downloads\DIE196.lnk

Filesize
1KB

MD5
e13744ed294c24adae737c40bf337581

SHA1
ed920a99e53bc02b12d8c21605713c95de90351f

SHA256
d09aedf77716cc0dc1af9c096f51d573d833fa7a3ed82946a522cdc04ada5ce8

SHA512
8d0f75e398a8d32d2ce721e3b4a9b13172215248c42f91eb465cdbeb9bde6566b0a705d77629ef54aa5641a06c3a49eaff84dfc87b740b0cdaed6e698a953a03

Download Submit
C:\Users\Admin\Downloads\DIE33.lnk

Filesize
1KB

MD5
a423963fa772c8448ead4be35466321f

SHA1
1dc76b5b61b39cc42399001b9d7e0927bb2ac049

SHA256
ad0668a4b8fa8c13187855164b49fcd0a2246b8e0e04c39788996ca755fb36e7

SHA512
6a7ab837bf11197025f53f4109e32f7ad56ef2f58269931bd51f0a05de317a6ab469dac36cd41c8f7bcc4617d662823a442746f1bb29a4fc7e7b48133173867b

Download Submit
C:\Users\Admin\Downloads\DIE46.lnk

Filesize
1KB

MD5
bfcc23120a511f4fe8a10a7226eb9c7b

SHA1
a932e5d0bb92e18ca70d812d0e4569d9a69154b7

SHA256
c374ed4665ab529fb8f770f55c8d1d0c4f672807ccc14a78d2d063dc58857df9

SHA512
f9c1956b083269ea380b780cb1afa8a8a551cb47d55a915c883f1160472a7b0b418b77e99e56a24e56267a0ec468bdb939ce9d337bded4507d994f36c9afe29e

Download Submit
C:\Users\Admin\Downloads\DIE5.lnk

Filesize
1KB

MD5
9e0e2601528193bdbf04e392240e01ff

SHA1
72de1dad30dd48b19561047f582bec5bf3879321

SHA256
8a45343df9fe0c68c753021c7cbf53220bbface093a767dfe8107727a6ede1ea

SHA512
601354bf11ae7e029f29346e3153e3126ed66a4eead69464d37786fb3bab9d44fcec67f3d0cb5f64bff7e9df9be61ea575f84f765eb63c5ca7799f5ba7f97bde

Download Submit
C:\Users\Admin\Downloads\DIE56.lnk

Filesize
1KB

MD5
c9c2f504ccaa379e45a563267f44e214

SHA1
4bdbaaf9478559e7ae432ce9041e5ecf8408ff41

SHA256
0b489934619211ffb787154d6046193e07b4f6eb2482b936fdb6767b99e2ecf3

SHA512
ed2a8cde2d96b1fddbee36deed8dbf81383e9a3bf2663debe71d6902a4ad82c5a49a305e52a03c9026c4a6f5b942c55194fed4ce18a781c7759f22372b3a10cd

Download Submit
C:\Users\Admin\Downloads\DIE61.lnk

Filesize
1KB

MD5
8275e81a84065eee7d6b377620f9c569

SHA1
a15fd21c7f0fb5888e2da12f0d09d2f6b0dbb64e

SHA256
1e3cd44eadcc91d70bf2dd87fb11e0d0113d349480c641bd09947bd43a921586

SHA512
ee406086c94c76ed3f17a3eb8f938ece632c1ceac30a51e01c80fd772b3565b86a125741e062bce8c5824a8fd011113ee074ae24b75b93f02c8b15cc82b9a536

Download Submit
C:\Users\Admin\Downloads\DIE92.lnk

Filesize
1KB

MD5
446f9ef9d8171ca90058194d9af38dbc

SHA1
9976485d673643fbe6f93ec050153ac564b3b04a

SHA256
f8a6681572e4f966f6a1d4724c0df8cd984fa44552ab2c1c20955b9ded8eb3fe

SHA512
309a1086381d9aae4f0b60f832557e4af5f97c612c477345877edce41be9ed0ef2c78ec77b4a03986ca42a966f990a5d8d6843330edc4a8f886f3e5d9936b8be

Download Submit
C:\Users\Admin\Downloads\DIE99.lnk

Filesize
1KB

MD5
82ebcd299b709f5d3d979b8e294f432e

SHA1
a22df0c059d52120643bb43a44e5a70ee6eeb33a

SHA256
7788c3baa029aa5dde5995a85e7146029103a6a12bb8b791a2d94972f80fc8ae

SHA512
87ef6c94f1db89b46deaa8614415567db2ce198dc39d1f410f59770cb73c48852b23e18e5c2643398ef11ea74ecddc57d5faf514de5f60c301b71a114eaa3d8f

Download Submit
C:\Users\Admin\Music\DIE105.lnk

Filesize
1KB

MD5
7f5280555e9fe90935f2951c974da5e1

SHA1
f93be7dfd289b32640ce302c56cf7c0c34ceef56

SHA256
aaa597b8338e2f2f8a6b3fe15c60a4aa1c1f1e638523f7b0253dbfe25bc07bb6

SHA512
7dfc9f3b335455ee7b2fbf3036f2660ec332680ff52e7880e225b2bf3f27d9ee523ab88bd05da4191a4e030c5aefcf8ba2edd2ac70fb01ed1cf7873fddee55fa

Download Submit
C:\Users\Admin\Music\DIE114.lnk

Filesize
1KB

MD5
26d03a6e8a1d3a16d671174a36502c91

SHA1
05f46f815ccad80d989f1c7060864dcceba98f8e

SHA256
51999cc234790840a7f92f372e6cfd3a120a3577d386d6005f7d2a071b405ae4

SHA512
42ff660a874c3b8aa99c31a7857b845101227ae5816bc4b2b6e36f9dc3f5da2bfaa8e8c6232b09e2475d87874d6fe5fc78e5e115ca8b95aad12cf7848207ac4e

Download Submit
C:\Users\Admin\Music\DIE129.lnk

Filesize
1KB

MD5
39fb8bc6515aa1ecabb1c5f35a2c9be6

SHA1
7b756c4c1e93edcbb7e270420b0745be654e6c25

SHA256
2ac1460379f957486f086862fc015c6b38f8d2beb24981a43d4cd71089b23b07

SHA512
f4611b5410f4dac2040fcf071bca1afb1e163479786b5fb55961f768d06081c83002c373089e3ccc7ff209872c22ee286772cb173a5f907747a22ce05e2db9c1

Download Submit
C:\Users\Admin\Music\DIE134.lnk

Filesize
1KB

MD5
c80c1e4d3f9da40e6b49e6968f382033

SHA1
26b2528212fd29d0f5c9c86ba80c9339ca7e1242

SHA256
510dace359cc5bb66e63a49b66418bc6207377d26f7b186999a42636a146949c

SHA512
339f0cbba73fd4b7380fdaf5cc65440968e24ca5a768fa0f2437fa8ca4a13f5421d27149b04fa606e74095d9ecb569588517d6e9bd2f67cfeb2f110689d573e0

Download Submit
C:\Users\Admin\Music\DIE139.lnk

Filesize
1KB

MD5
ec658d8fff65e09b39d6b1e11dd09162

SHA1
0ac1f4a727db70f175209652c38aaaad26224638

SHA256
c5605a0ac77bfb11e5ba87464676e50695cfb2c99ef1d8354800c03502f4a1a0

SHA512
f774682cfa0d085b1a86303125c0a8af38886dccbc4674bbf673032e751c3fa54e86a393ba2f2fa7c479b964afdb38a38cfa3092028e84ea90cb4b203be5a845

Download Submit
C:\Users\Admin\Music\DIE145.lnk

Filesize
1KB

MD5
153280d30c90b36148bac323022e5633

SHA1
bd3057ecb842a274547f5cab310658162cd41cd9

SHA256
aaa6f89c5c7d42f796f01a69457603a7639f38ff151669eb1147320b9449f128

SHA512
8e2b48015915941e8910df7334c3d044e8a6ca1abbb5ad48a324fb3a5b121d60c020d000590373a5181d48d9a7276456b4bd34199d71a9bff65be6256238a02c

Download Submit
C:\Users\Admin\Music\DIE17.lnk

Filesize
1KB

MD5
003ea4a441bfe033483f84697f4aa6c4

SHA1
81535d619f2b43358f84e5d68314023f3eaad441

SHA256
4a76b2f5891b4a9dec74363c2a208a2a32e656312ea5a0d1a88d6d96a86a4761

SHA512
e4f1f59954ec3652d7ee1a8ac89a78a2df9085f3b3081acf20b6c12b4f07b75b58f05132535796997f107c396368ab5716d5563b745115d435e386bdc95ae268

Download Submit
C:\Users\Admin\Music\DIE181.lnk

Filesize
1KB

MD5
7d74864eaaaa67481f5513773fc9c74e

SHA1
de25ab2860e3f429a9df8452087b3a02002fff47

SHA256
3de37a9ae396d3bef18ba75c246353d034f3206b998732c0087d94b04117d641

SHA512
d272a77d22665206a96414660b9724d82898b47181bdba3f15d3e0df991e1238a66fbac6cdd171be4de8518f019ef3b8e2bc71d0d620184f51be2e3e25334101

Download Submit
C:\Users\Admin\Music\DIE32.lnk

Filesize
1KB

MD5
79870626baf64dd0ffebad8099bc3b8e

SHA1
f4e834a72f483775606c30c10ad315401d8e256d

SHA256
afbc6521f37fed264a3de2b7b98158ba015d1d4e7671bb032603881e4112b4fb

SHA512
d7b9ae9975b11c263a40889b468f772a4a2791880732fce94d62ee4babca55913656ca3eeee6bbf14d20e91e33f7509d51ca79acd86c46fb4cd411af783e77ba

Download Submit
C:\Users\Admin\Music\DIE4.lnk

Filesize
1KB

MD5
1f9eafee4e2703188c772c4b7f2265f7

SHA1
5c1b43e78affbefd83b0765fb41b228697f1da6c

SHA256
63e97b557f7a6b9e180b9c11231fabce756d915bf1657f0f9439fb67d022ffa8

SHA512
fb90f5f4ce4203bd3dd4271f4974fb62dbd7e42bf51f3e869ec197edbffdba560d0ebe30649cff99cab74ed0d31e542041dcc2f5d6468f6b25dbd4d9e1ae7115

Download Submit
C:\Users\Admin\Music\DIE40.lnk

Filesize
1KB

MD5
3dac34742c39eeb589fb1cba818f70ad

SHA1
12a6636b42f9ac2e064d5e69e25221e212aff120

SHA256
7354ac1d43b6bbaad3bb74ac97f1c5383be8e649e168e810eeda562de958f654

SHA512
6c6f82937789aa17a3714ea512cedb6c6ac04ebe170b150dd5d4258eba2725d4ca7f48cb676673daaaaaa2089712f6727b560366707af6cc8bafde9b9f8717c1

Download Submit
C:\Users\Admin\Music\DIE49.lnk

Filesize
1KB

MD5
05bf58fe2dd1f15d0ed2f2b35cf64c9b

SHA1
3438d4f249ba92313b7bb7c63a0b4d64edbe15f4

SHA256
0d15142d47dd1c63b40d088141d39525f23522acff4f610a8f4baa54b8ecfb27

SHA512
54e19f6d4d849a12dd59df7dc1d6129fb9e9d3a534731eb59954f0d29c86821dd1969fea17cd7264e82e1e667d64e85f72b9ecaa4849ffa3420ded5bdd02cf66

Download Submit
C:\Users\Admin\Music\DIE67.lnk

Filesize
1KB

MD5
e5998e5d312e9c9a09d77f853673996a

SHA1
4e50cc9a39a1f27a62b738e8d770faacb56aa7a9

SHA256
f3cbcc1c3eeda736a21dd286a0bb0c28ef08aa929ced9afa4abf45a7b04f7b06

SHA512
87bbdfeacf44e1c74c8827aa3c2e1bd72aac0a82e0970428d1b18759b5fc866c6447712c4974f6f326d62fb6e54ef005cc223d2af8be62b5de48656d0cc0616b

Download Submit
C:\Users\Admin\Music\DIE82.lnk

Filesize
1KB

MD5
990f5fdd0291a371601ee9484dc3a186

SHA1
00753c704c8f0dcdcbd1fc4d598228c56b05ab8c

SHA256
262df71b420ce28a1a2ba22d9010768286601fcd37d5b4d1db2942359b833866

SHA512
4eccb5cd0988ea91b4773b6d35eacf0069655c206bbd65720e2eb0b3b6a6f7bd115c15a12a5abd2c1850f4b8279c74845f576f60e82c8eea617ff6a47c348335

Download Submit
C:\Users\Admin\Music\DIE9.lnk

Filesize
1KB

MD5
42978fc0f2ab6b501e40c0ef04d20bf0

SHA1
26388b961bc2ca5b82a5d16f062345f2d51734fe

SHA256
84388d5c3ae80f280f63fdcd6b9721bcdfb7585dc549aa0997b43f9e2268dd04

SHA512
73b5a50046ad7f92a7130c8927878d2e1c4459bd1737cd525b05640730c5e0684e96f7779430a9e739a7581213119eb04167451fbf629f96844ffda36a8c7168

Download Submit
C:\Users\Admin\Music\DIE90.lnk

Filesize
1KB

MD5
dc83373b885c5fe10048c2fa5d286acd

SHA1
3576e3eada0a2e004d47df452dffa02d1bb0abf2

SHA256
01ed2a3fe8f8bf1be2d7ca66c31838e6de79bdc34db1e6ef00e0f6113ec4967d

SHA512
2d23dd86effff1f6c74ac0f8e47b64f0ad49e8f6bb04c80ed80bddd3d3e0f8ea326018f56bf3d06ec5821e2fb7d176414d78376aa54ec7995a6cf94cf2ac3357

Download Submit
C:\Users\Admin\Music\DIE95.lnk

Filesize
1KB

MD5
82d4eeb434954e0b5a11fced6bf8f681

SHA1
2e2e1f0f0c18f38c68b981b8c127e684e4139628

SHA256
fce7edbf977d5a4ed445ad863de6595458693ae6db5288cc4cc5fc608ef1321b

SHA512
e3012df5ae51ff2ba587663d7d5d7ec0a9a90a61f67577340baed2625f0785c3c4efcc073e06dde89fba1253d32e275973ed94b9e80879256a75fbde931b9df5

Download Submit
C:\Users\Admin\Pictures\DIE143.lnk

Filesize
1KB

MD5
0cb58e6ed95285a56d57f492052fd6a4

SHA1
515cf04c6b6559f942c08c1db9714cad032466ae

SHA256
cab30a5209cfe5a5ce74d75b278a7d3da95e8db13c562655a934152e8cedaa43

SHA512
becd383afa14420a0c569eb96953abdd5d1f9efad197da12e598d260c68b51b2626b7b7c6d09e1f68a4afb268f9a5df28762396bc4247604e76eb6f2bf436b59

Download Submit
C:\Users\Admin\Pictures\DIE151.lnk

Filesize
1KB

MD5
dc7dd4dcebddfc7403eb8faea6dea021

SHA1
6848c524e236cdb9b4de6a4d9804b046ec761c19

SHA256
80bf5dad510bc1ca6b7abac009de7753f3a17489d732cd81fee42d12917d5b21

SHA512
19bc0769af8234358bf0565eb8624c8fa7255c20721b6d33786e9ffd5c149e7916b0e5e81113d45b290a329b8a24e854c1ee0e9e1b7f3902f0cb94a62e6f75ec

Download Submit
C:\Users\Admin\Pictures\DIE182.lnk

Filesize
1KB

MD5
745f69610bdb3bd223f75b3cbc3d7bae

SHA1
d39185c35ebd006c21edb8c1b929343010928f58

SHA256
8d449a167e6b536f6b96534f953290f29616555b1da75ee1a38df7f02b7ca2f0

SHA512
41d0e2bed04c3b5c6c2422a2e8c17d212ed077916ae442fe88d7f2799e83359464a69deadf392a1d2902d3fb03f34b0042bf5150150b35a443cf9bab1c927703

Download Submit
C:\Users\Admin\Pictures\DIE195.lnk

Filesize
1KB

MD5
6b1ea8ce37937886b5a653c3313d8ec5

SHA1
ab27b198e65092239348c7fdb8e7b851a2eb4bfb

SHA256
47e91aea3233e3debe416673e57a4fb761880c21dffa4b0bbee91d4a7d6e434b

SHA512
8da2f73e01769e7314fc2464a71c8aa50b55e8e5845fcd5738c916f44da0b8f7d1f9a8e2cb07ff49a4377a6cf07e6ad1b2e7cdc791143bfa44e6420576d7be19

Download Submit
C:\Users\Admin\Pictures\DIE23.lnk

Filesize
1KB

MD5
76f17950ca3c1747705f379ab66c8d89

SHA1
6d815c522bba0824b036b7dc79a0313a6634d7e3

SHA256
e824ab7a45d405972daa044c5f0f0f70e1afd9cf2797470c4a2485c90b350ee7

SHA512
f021e7f81b13d1efc8521a86b400c761a84b14cebe0b367c55f275e73f305f9429b51082a03be2fd5e9e50a1a69129402b7fc0bc4a03b14f0c85108208a938dd

Download Submit
C:\Users\Admin\Pictures\DIE29.lnk

Filesize
1KB

MD5
9dfcf42e111a6d0528138516f3e1e2eb

SHA1
b0041d43ea7e872f9976ef98ff9e2e0913e80e88

SHA256
39419931b1c5775d7c4a9380fee9003e3ca4319deebfb6700489dab51c85cdde

SHA512
3aa00e91329a6d79b79026ddd08e0a7c864306bc84d0e29356f52fca215fe6b1921a4f8ec153dca46e468e5bcc0d0c8f8412c75d08c08be61246a94192aa1d4b

Download Submit
C:\Users\Admin\Pictures\DIE3.lnk

Filesize
1KB

MD5
3a03206bed45802097860bd7f4c5541c

SHA1
598603026afd51b08e54daf56725f2356e52ba52

SHA256
d6750a5215cb5953f6af7f934e419415e2bdf27422ec769878b03fd9252f9083

SHA512
381d02bce4207a30a1f2ce22c88f10e3841d8a8a852dcd55f3ebaba3ce0a1faa305540246a207cc1ee29efbefd25f33faf73953ad7f8a483d61a80ff66d90294

Download Submit
C:\Users\Admin\Pictures\DIE44.lnk

Filesize
1KB

MD5
f45fb90b183fe913ef48a007f1b51ec9

SHA1
3bf1f15e2f16ec58582eb1c532b4f3b906ce7742

SHA256
2deab0a750a151ed37e913c043bbed65aa9c656c63787376292044bb97e58928

SHA512
14c88527448266de34e8a5bbf2fe20925a2557f940e9224509d9dfa10f4305a8def57b7f438aee7388231484e8f7ef3b278ca06c2e266f031ff55701d735368e

Download Submit
C:\Users\Admin\Pictures\DIE51.lnk

Filesize
1KB

MD5
ed46d270c9ad7c00ac9208ed2461f2e7

SHA1
36c35141e04a5b9e9ce4b37e1235e35f0624f473

SHA256
53839a5311f87df7dbc7587082d9fbe88efa021cbd8aea197163ca0422e59f91

SHA512
249e9adc442898d9f266fab0ac8ca7500ebf8f7ae6d99d4d3dd83f55d7b44cdd9abc933678618305dc430d7414286d017d03dc56f9139d6dd667a2f9ee749521

Download Submit
C:\Users\Admin\Pictures\DIE66.lnk

Filesize
1KB

MD5
ea410c375bbb2905e4b789e2207c2602

SHA1
eacdacc974455a8df5dd50a40588d52f2e6d8898

SHA256
5c17f961a8331802bff384c523c2c5636012267d7686c67f5f7e47771c2f724f

SHA512
e230ca8d6d2245b6a9da4928d06c8163fa59dbd9a7faec4609af5d15695085361611aecab02c9dd188107d95a6c82f0b75e1e3fc19bf562f3cb2fccbd64ede64

Download Submit
C:\Users\Admin\Pictures\DIE76.lnk

Filesize
1KB

MD5
34fa5232cd361a4cee0ccde5e4af75d9

SHA1
daf422599cc3272a1b199b9fbe1bf6fbe1538553

SHA256
1742ba3d012f0068508953af9dde9009212510f44666a6bdab233342780cf3ac

SHA512
feade7f196150cf05194fa246b51c5aa59f03df05abbe46f556d7d2535ab40f908b94f4d09236387f4fc11d78a58bafc183e0f5558a2be549a75516b004eeb40

Download Submit
C:\Users\Admin\Videos\DIE115.lnk

Filesize
1KB

MD5
092ed667ed3a315882eb555e09d49d26

SHA1
70b281573a941ea62286c1b4def08371978d60ce

SHA256
526d4870bffbdd24abd8f3a5d546fa16c9453ea24836dafc8a043f1dab88c143

SHA512
2d8c9a79a278ea32dc4b32c6e374e3dd5de98215e53334f8fb3326164f63177d51f03382eab3c7e5ed70faef4d778031950092778e29c2fad27cf3f964427091

Download Submit
C:\Users\Admin\Videos\DIE167.lnk

Filesize
1KB

MD5
f26245c9f3c932631f3d4c49d58e944a

SHA1
7445fbfa413644d72bc143cca3158bb739053c2e

SHA256
e7e7e6859a56bc71574b73a0bc6dec0fbc5652c9657cb8cd72282987a3d96e23

SHA512
804b7f9420c0468def90225fa32222aa2dc000b7c9339b5ec8daeb4880d03985ca6fcc496d7ba553b234a31c62d497dc23297ec9b0ebeae5c3d68e4852d8abb9

Download Submit
C:\Users\Admin\Videos\DIE29.lnk

Filesize
1KB

MD5
de61842cdedd26de6c99dbfbb0bff8a8

SHA1
aad9935e6f4bc2fbfa3434c4abc16c3cbbb91ead

SHA256
1c51575099acbc1fe7ab911be59c38a57c7f3422cd2194fc47db9ec1a0055642

SHA512
2360c80d21d8408501dc22df9577da706598144e3038a340eff45be7cf7d7a73071ee5c35fd0caab51d52eecea030df6e0804f61a9da713f3144d7dc0e282ae6

Download Submit
C:\Users\Admin\Videos\DIE54.lnk

Filesize
1KB

MD5
46086fdeddcd8b70d7247c8c6808cc68

SHA1
3bb79f930ee3eedfd0f09e5316715da640874c14

SHA256
f8361bc2123dda35722f29c8edef0ac6a9d41f1f6a6b90cb75a4c0beb77d09e5

SHA512
bb3eefab83a8f30b7d642ae9911118a2bb8273f2d58ae5e65667417ec26726e2507ecfb204cf19932673e9386d17ca3d4648b3fd14475ae1506ce8e120f2dc4a

Download Submit
C:\Users\Admin\Videos\DIE59.lnk

Filesize
1KB

MD5
6630fc6f3d6dba76f828aea86c1284c3

SHA1
3fa803ff77fa55bb2f2d3deaeca544b00aed628c

SHA256
9537d268fb48711fec049ad996cdb3044fa1c6c08d4547678e60f32561f38587

SHA512
bc54abc6810307dfed3302cf0c9402bc65d85f7800ea542859e9f7dbab8ebf24a1ad33e4642dbb61bfbbbb1ab143c40bff29c2f78cd7e96d58915806e6fe3ded

Download Submit
C:\Users\Admin\Videos\DIE67.lnk

Filesize
1KB

MD5
341b045df54938c63aacaaf87cf582ea

SHA1
7ae627cdc9ae8bc3fa638428f664f1af47f71c8f

SHA256
774dc4e1cee480f59e48ed0c1ea07064cbc671062547696cb5ebd52df5136ac7

SHA512
a7363266b826757f3760323472edf4e8496ef332233b5c7e40ce72cae4e691020380cc953c2784df10c2fb25301f87f21d345de08a90b7195f576abb1b68f1ef

Download Submit
C:\Users\Admin\Videos\DIE93.lnk

Filesize
1KB

MD5
771d6337daf9bba3f19f79f2992510e1

SHA1
1c7d2ca7982be819883906b7b3d6205bc794d906

SHA256
b8fba644e578da42d93431ae2876b88ba1c642c4ea7b511c3d5598880edf44d4

SHA512
3c9f1e06c82d2d2ed3f722324e768d3a4a7f32992c526cc09d44195332a043e327e3f14325ae5afc4379938d1294293722d4274d010e06184011ae3112dad3fe

Download Submit
C:\Users\Admin\Videos\DIE98.lnk

Filesize
1KB

MD5
fe5efb7569b4524b1195d3745c04d04a

SHA1
9152d0c27d6a5db7c33fd17c98e3cc78bb7213d7

SHA256
e79b68d2bd486baec4d7061db0a286d59075ac357c04882bb3ba39d7cef50ccc

SHA512
71aa42c8093dd9eb402fafe04322cd1a4bc96f0bf727cbf4e27c0d10eb6ca5e106e408597a79f2ff3daf577f9928608e720f696cf5232a0330c9d82e28e5faa8

Download Submit