Based on our review of these larger than expected .lnk files used by Trident Ursa, the file contains random 10character strings that we assess were appended during the creation process. These are used to confuse analysis, and