For this section we need the following tools:

• Sysinternals Suite

• Notepad++

• HxD

• TrID (video will explain where to find the tool and signature definitions)

• Detect it Easy portable version

• lnk_parser

Download them onto your malware analysis lab, install Notepad++ and create a snapshot.

We will also use the following sites to research malware or lookup details about LNKs, I recommend bookmarking them: 

• Malpedia

• VirusTotal

• MS-SHLLINK format