2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229

Analysis

max time kernel
148s
max time network
132s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/08/2026, 04:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
Size 7.5MB
Sample260814-e2fctsvcka
SHA256 2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229
MD5 9755fc54ec2ad265b59950640ced7f7d
SHA1 50bb628c5e25fea08197b1c9292bcb1d96dface7
SHA512 7c086942488d2743789a1dea359640e3e991741d3fa3369de88fd046f030636bfa451d0a914c9faa75fb877a818b57d6bbefa89c7d0b231f53668edb5b1b74cf
SSDEEP 98304:zQPq9FVyI7rFde1HwlUJiM/ftZ15xbNwOjcETFP2bT1QA4Ts8Ch/Y7iY:zdre1Q0//weiQA46h/YGY
TLSH
T136869D01FB8644E9C0BAC470861647335A7578DA1B31BAFF42D482792F76AE05F3C76A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution persistence

Malware Config

Signatures

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File created	C:\Windows\system32\Drivers\PROCEXP152.SYS	handle64.exe

Sets service image path in registry 3 TTPs 1 IoCs

This determines the executable launched when a service starts. It can be used to establish persistence.

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Windows Service

T1543.003

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\PROCEXP152\ImagePath = "\\??\\C:\\Windows\\system32\\Drivers\\PROCEXP152.SYS"	handle64.exe

Executes dropped EXE 9 IoCs

pid	Process
1244	autorunsc.exe
3764	pslist.exe
4592	PsService.exe
1288	Listdlls.exe
2044	Listdlls64.exe
3792	handle.exe
720	handle64.exe
5104	tcpvcon.exe
2136	pipelist.exe

Drops desktop.ini file(s) 7 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
File created	C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\$Recycle.Bin\S-1-5-21-668679576-120646659-2289335452-1000\desktop.ini	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
File opened for modification	C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\$Recycle.Bin\S-1-5-21-668679576-120646659-2289335452-1000\desktop.ini	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
File created	C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\$Recycle.Bin\S-1-5-~1\desktop.ini	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
File created	C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\desktop.ini	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
File opened for modification	C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\desktop.ini	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
File created	C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe

Enumerates connected drives 3 TTPs 24 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\K:	handle64.exe
File opened (read-only)	\??\L:	handle64.exe
File opened (read-only)	\??\S:	handle64.exe
File opened (read-only)	\??\U:	handle64.exe
File opened (read-only)	\??\X:	handle64.exe
File opened (read-only)	\??\F:	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
File opened (read-only)	\??\G:	handle64.exe
File opened (read-only)	\??\M:	handle64.exe
File opened (read-only)	\??\N:	handle64.exe
File opened (read-only)	\??\Y:	handle64.exe
File opened (read-only)	\??\A:	handle64.exe
File opened (read-only)	\??\R:	handle64.exe
File opened (read-only)	\??\T:	handle64.exe
File opened (read-only)	\??\W:	handle64.exe
File opened (read-only)	\??\P:	handle64.exe
File opened (read-only)	\??\B:	handle64.exe
File opened (read-only)	\??\E:	handle64.exe
File opened (read-only)	\??\H:	handle64.exe
File opened (read-only)	\??\O:	handle64.exe
File opened (read-only)	\??\Q:	handle64.exe
File opened (read-only)	\??\V:	handle64.exe
File opened (read-only)	\??\Z:	handle64.exe
File opened (read-only)	\??\I:	handle64.exe
File opened (read-only)	\??\J:	handle64.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Discovers running processes 1 TTPs 1 IoCs

Running process information can be used to identify security tools or plan follow-on actions.

discovery

Process Discovery

T1057

pid	Process
4924	tasklist.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
1368	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 7 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Listdlls.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	handle.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tcpvcon.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	pipelist.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	autorunsc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	pslist.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	PsService.exe

System Network Connections Discovery 1 TTPs 1 IoCs

Attempt to get a listing of network connections.

discovery

System Network Connections Discovery

T1049

pid	Process
2908	netstat.exe

Gathers network information 2 TTPs 3 IoCs

Uses commandline utility to view network configuration.

System Information Discovery

T1082

Command and Scripting Interpreter

T1059

pid	Process
2908	netstat.exe
4400	ipconfig.exe
4632	ipconfig.exe

Gathers system information 1 TTPs 1 IoCs

Runs systeminfo.exe.

System Information Discovery

T1082

pid	Process
1580	systeminfo.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
1244	autorunsc.exe
1244	autorunsc.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
3764	pslist.exe
4924	tasklist.exe
4924	tasklist.exe
2044	Listdlls64.exe
2044	Listdlls64.exe
2044	Listdlls64.exe
2044	Listdlls64.exe
2044	Listdlls64.exe
2044	Listdlls64.exe
2044	Listdlls64.exe
2044	Listdlls64.exe
2044	Listdlls64.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
720	handle64.exe

Suspicious use of AdjustPrivilegeToken 35 IoCs

description	pid	Process
Token: SeDebugPrivilege	1244	autorunsc.exe
Token: SeImpersonatePrivilege	1244	autorunsc.exe
Token: SeSecurityPrivilege	1244	autorunsc.exe
Token: SeDebugPrivilege	1244	autorunsc.exe
Token: SeBackupPrivilege	1244	autorunsc.exe
Token: SeRestorePrivilege	1244	autorunsc.exe
Token: SeDebugPrivilege	2908	netstat.exe
Token: SeDebugPrivilege	4924	tasklist.exe
Token: SeDebugPrivilege	2044	Listdlls64.exe
Token: SeDebugPrivilege	1368	powershell.exe
Token: SeDebugPrivilege	720	handle64.exe
Token: SeDebugPrivilege	720	handle64.exe
Token: SeLoadDriverPrivilege	720	handle64.exe
Token: SeIncreaseQuotaPrivilege	1368	powershell.exe
Token: SeSecurityPrivilege	1368	powershell.exe
Token: SeTakeOwnershipPrivilege	1368	powershell.exe
Token: SeLoadDriverPrivilege	1368	powershell.exe
Token: SeSystemProfilePrivilege	1368	powershell.exe
Token: SeSystemtimePrivilege	1368	powershell.exe
Token: SeProfSingleProcessPrivilege	1368	powershell.exe
Token: SeIncBasePriorityPrivilege	1368	powershell.exe
Token: SeCreatePagefilePrivilege	1368	powershell.exe
Token: SeBackupPrivilege	1368	powershell.exe
Token: SeRestorePrivilege	1368	powershell.exe
Token: SeShutdownPrivilege	1368	powershell.exe
Token: SeDebugPrivilege	1368	powershell.exe
Token: SeSystemEnvironmentPrivilege	1368	powershell.exe
Token: SeRemoteShutdownPrivilege	1368	powershell.exe
Token: SeUndockPrivilege	1368	powershell.exe
Token: SeManageVolumePrivilege	1368	powershell.exe
Token: 33	1368	powershell.exe
Token: 34	1368	powershell.exe
Token: 35	1368	powershell.exe
Token: 36	1368	powershell.exe
Token: SeDebugPrivilege	5104	tcpvcon.exe

Suspicious use of WriteProcessMemory 17 IoCs

description	pid	Process	procid_target
PID 3812 wrote to memory of 1244	3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe	93
PID 3812 wrote to memory of 2908	3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe	94
PID 3812 wrote to memory of 1580	3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe	96
PID 3812 wrote to memory of 1144	3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe	97
PID 1144 wrote to memory of 4108	1144	net.exe	98
PID 3812 wrote to memory of 3764	3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe	99
PID 3812 wrote to memory of 4924	3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe	100
PID 3812 wrote to memory of 4400	3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe	101
PID 3812 wrote to memory of 1368	3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe	102
PID 3812 wrote to memory of 4592	3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe	103
PID 3812 wrote to memory of 1288	3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe	104
PID 1288 wrote to memory of 2044	1288	Listdlls.exe	105
PID 3812 wrote to memory of 3792	3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe	106
PID 3792 wrote to memory of 720	3792	handle.exe	107
PID 3812 wrote to memory of 4632	3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe	108
PID 3812 wrote to memory of 5104	3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe	110
PID 3812 wrote to memory of 2136	3812	2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe	111

C:\Users\Admin\AppData\Local\Temp\2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe
"C:\Users\Admin\AppData\Local\Temp\2c850bfd99155f6ac5bcf05fffe6963bf5ee8c06fce3ecf52ea65cef40ab4229.exe"
1⤵
- Drops desktop.ini file(s)
- Enumerates connected drives
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3812
- C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\tools\autorunsc.exe
  "Aralez_Tigmgolm_2026-08-14_05-26-01\tools\autorunsc.exe" -nobanner -c /accepteula
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:1244
- C:\Windows\system32\netstat.exe
  "netstat.exe" -anob
  2⤵
  - System Network Connections Discovery
  - Gathers network information
  - Suspicious use of AdjustPrivilegeToken
  PID:2908
- C:\Windows\system32\systeminfo.exe
  "systeminfo.exe"
  2⤵
  - Gathers system information
  PID:1580
- C:\Windows\system32\net.exe
  "net.exe" share
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1144
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 share
    3⤵
    PID:4108
- C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\tools\pslist.exe
  "Aralez_Tigmgolm_2026-08-14_05-26-01\tools\pslist.exe" /accepteula
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  PID:3764
- C:\Windows\system32\tasklist.exe
  "tasklist.exe" /v /fo csv
  2⤵
  - Discovers running processes
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:4924
- C:\Windows\system32\ipconfig.exe
  "ipconfig.exe" /all
  2⤵
  - Gathers network information
  PID:4400
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  "powershell" -command Get-ComputerInfo
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious use of AdjustPrivilegeToken
  PID:1368
- C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\tools\PsService.exe
  "Aralez_Tigmgolm_2026-08-14_05-26-01\tools\PsService.exe" /accepteula query
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:4592
- C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\tools\Listdlls.exe
  "Aralez_Tigmgolm_2026-08-14_05-26-01\tools\Listdlls.exe" /accepteula
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:1288
- - C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\tools\Listdlls64.exe
    "Aralez_Tigmgolm_2026-08-14_05-26-01\tools\Listdlls.exe" /accepteula
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:2044
- C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\tools\handle.exe
  "Aralez_Tigmgolm_2026-08-14_05-26-01\tools\handle.exe" /accepteula /a /nobanner
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:3792
- - C:\Users\Admin\AppData\Local\Temp\handle64.exe
    "Aralez_Tigmgolm_2026-08-14_05-26-01\tools\handle.exe" /accepteula /a /nobanner
    3⤵
    - Drops file in Drivers directory
    - Sets service image path in registry
    - Executes dropped EXE
    - Enumerates connected drives
    - Suspicious behavior: LoadsDriver
    - Suspicious use of AdjustPrivilegeToken
    PID:720
- C:\Windows\system32\ipconfig.exe
  "ipconfig.exe" /displaydns
  2⤵
  - Gathers network information
  PID:4632
- C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\tools\tcpvcon.exe
  "Aralez_Tigmgolm_2026-08-14_05-26-01\tools\tcpvcon.exe" /accepteula -a
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of AdjustPrivilegeToken
  PID:5104
- C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\tools\pipelist.exe
  "Aralez_Tigmgolm_2026-08-14_05-26-01\tools\pipelist.exe" /accepteula
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:2136

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Connections Discovery

T1049

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

.aralez.log

Path C:\Users\Admin\AppData\Local\Temp\.aralez.log
Size 4KB
SHA256 6672bebee02495f0d86fe2b986dbd0e8823c0e8dbad45bae4dbca22245b73900
MD5 aef07499c67621fd87cbfafeeaede85a
SHA1 344f7cdb3fd7319fbd59b2751acee92dc8302f63
SHA512 50556360a3b128903b22d521f5b3fcf000c8e9a7090cafbea275b4e7a6bee0880df8c3d2a8dd57eab2b341dd12f0bb9a347542648cba35c380b11c27a0ad3cc0
SSDEEP 96:oSjqsxIaWKmWBWpWIWigWXIWDW5IWhWnIWEJsWZzIWZ4JsWmIWLJsWrIWyWb1IBu:usxIaIuc5VgaIgoI0uIjJs+zI+4JsdIA
TLSH
T1D6A1D6236CD95872DC2FB459C88EBFD251A0F26742C26E546749299F9C98E721CBF00C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$Boot

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\$Boot
Size 8KB
SHA256 85bf127825baa79f397c8f4e26b39fa45795fba7422afc0fc402ef9090bd48b9
MD5 101c232667ccc7abd5e72554f39cb0f4
SHA1 e6d0967846a55594c75dc91d54f0c45cb9f8de28
SHA512 593db3e0282cdf8cdea09dca9aaeebe7394b33df28411e8065cb77714e44e4668a8b59059ccdf002b5d45c8b898d6b38664a08a2909325911476206583726ca7
SSDEEP 96:vVaNcdCmGUyH52j0V6nPt4ihC/U8remKrQUqjfyJB7y4AIwVoouE:w2d/5yHEj3Pt4ihCvresUDBm4lwV
TLSH
T1BBF1C5F72C06291DD0C16779DF4DDC266CB76CD4AA7087B4A190B83A210178066BFFB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$Tops

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\$Extend\$RmMetadata\$TxfLog\$Tops
Size 100B
SHA256 782b07b797f6dd5b6c8510c675d77c6f77f8a0c514acb9e9740e2777ee97fdcc
MD5 c4ce16a47f6289bd6239d6479454c971
SHA1 3083ad7a5b63d1f2bc6d5dbbb46c0722f92a3950
SHA512 d7dc529a293362247ddcf584aab0da69854de50dc9a75a50d547aa3b1a347454face6447668d83976bbe22005512cf0051c17384ffdd6651c5a795ef87f6a4ec
TLSH
T129B00205B659D556D40864788D74C5E4A1003C455C5914C37450B30D4475557D429505
MD5 SHA1 SHA512 TLSH

Submit Download

$TxfLog.blf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\$Extend\$RmMetadata\$TxfLog\$TxfLog.blf
Size 64KB
SHA256 95f19a0a38f1a8ed3652a7e8f80d41f6f31023c62c1cb98ebf26ac765c914b4a
MD5 5011bd4aa72f29a18889d3ad15496f77
SHA1 983898318b8248f8a622b234da3c151d61ce064a
SHA512 deea8c3841475193f310effff98a8879a375c45a4cc4f74300c78ca88177c83085b9d6b620ae848918775f8a4e1c5ce29c1d94016830556bcef268dc9360ca2d
SSDEEP 96:TVXtqltOTMF+IS0NZaH3ov6N8kKKVS9AXtqltOTMF+IS0NZaH3ov6N8kKKVS:52OILo4A2OILo
TLSH
T1F2537984AEB1690EE55DD2F2D8FB61675735DF2149C94F09603CBB3A69B220F123CE21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$TxfLogContainer00000000000000000009

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000009
Size 10.0MB
SHA256 71521929133cf33a56cd4b3f4d5e8cad19a5619c2843003be7ce1c8a16c8311f
MD5 9002c360d48873b89905a0def92db1ea
SHA1 b79d10730454e147fc9ad427822aaa8980736e22
SHA512 74db0b4e0c253ab4c5cd6b600d9ccfb49b0fe27afaca446d682ce83404fe6187b721735be464be008037b926171932f677b19b836a54547fb1573eaed449065d
SSDEEP 24576:owe6l6gbkIeTkheeVkqQb07JM1/9ZEPSUx:G6l6gbkIeTGeeVkqQb07JM1/9ZEPSc
TLSH
T144B6BC106BE4071BF2B74F3498B65B167B32F887AD819F8E4046D2580D23B91EDB5B1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$TxfLogContainer00000000000000000010

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000010
Size 10.0MB
SHA256 296d30375a0ece7e8f37bf783801991107954394053eb03bf299fa07d55c6b65
MD5 3b95dd90398d580d61c97607ddb25c03
SHA1 cfff7ef1ba0db76747a57bb934b6fddacdb569cb
SHA512 73ab2a0557c5a4700893fc21f2617abcef718507bb02f142cb3395d077ad3a04d9d6a81926c490986ac443e6b72f351c1e94b7eb39d34f8d5a528c64f1223ce9
SSDEEP 196608:Ee6paY1cw4RbvJLvevOqGpaZsxgNrFYAmS0RKa+1bpUh97MYttcjLE08XD9hztWr:Ee6paY1cw4RbRLvevOqGpaZsxgNrFYAz
TLSH
T1A9B6790067E50717F1FA0F35D8B257657A36F88AAA41CF8F400792680EA3B61DDA5F1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\$Recycle.Bin\S-1-5-21-668679576-120646659-2289335452-1000\desktop.ini
Size 129B
SHA256 e1b9ce9b57957b1a0607a72a057d6b7a9b34ea60f3f8aa8f38a3af979bd23066
MD5 a526b9e7c716b3489d8cc062fbce4005
SHA1 2df502a944ff721241be20a9e449d2acd07e0312
SHA512 d83d4c656c96c3d1809ad06ce78fa09a77781461c99109e4b81d1a186fc533a7e72d65a4cb7edf689eeccda8f687a13d3276f1111a1e72f7c3cd92a49bce0f88
TLSH
T169B09B0A41476664B05ED15DAC60E147117D547A4D14A2008EF0B345D1A33550778D69
MD5 SHA1 SHA512 TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\desktop.ini
Size 174B
SHA256 cdb11958506a5ba5478e22ed472fa3ae422fe9916d674f290207e1fc29ae5a76
MD5 7f1698bab066b764a314a589d338daae
SHA1 524abe4db03afef220a2cc96bf0428fd1b704342
SHA512 4f94ad0fe3df00838b288a0ef4c12d37e175c37cbf306bdb1336ff44d0e4d126cd545c636642c0e88d8c6b8258dc138a495f4d025b662f40a9977d409d6b5719
TLSH
T119C08C38D2E9322141728D33BCB4A002DBB1F8212C1BCF9E06C0918B08A0A09EB32B43
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 8c24b66b55bef2d89d1ac69204ec3d5d7b191ba051c7c4c4cddcd66d92575d04
MD5 0f709d9a7125f5d69ba52e8846867f41
SHA1 e9e554385d503e88a18665f5fa36d4b8f9d49fb9
SHA512 9969ad8f86e8c40d9d609e65c091565e14ce550d9191c3ea0d1c62ce51d076a79b20078f556667e96f012dffd60578ef82a8cc245676db78d3b6b2b3d9d71711
SSDEEP 96:3XIU+bGz83uy3+u4tgp4DLjGQLBze9z39jBHMsDEuspU0wbtqrOQpPfR4J+MCXki:3Xf+G83uy3Ct7XBBKjH7DXspU3i
TLSH
T176140F0E5F243721CDBD917629E644B35D7CF03F8B5266DA686114B4CEE3A52A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BACKUP~1.CMD.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\AppData\Roaming\BACKUP~1.CMD.enc
Size 467KB
SHA256 7e19ff7c58d793e2e3821fe52d2b5c75263f55c53bd3233b4f195aabfc10914a
MD5 70dadd678f57c89479f4b0893d5874ab
SHA1 5b1e4464bc08bbf9693f239f8e3575bd3f66771d
SHA512 01058535787a9af4ba715f7ab3a86ff147941edd9934eeeda86ffcaf546bdd69b4d4c58c80fb7b50c778e3df3467ba9bf179b547fc6a2cd844f8c9c79f50d475
SSDEEP 6144:FsnUZxw2hTAdORmSbUH7VU5aBFUrOP9ZOoAWGbwxy6k+UxE4ceb56JD66sbNgrVl:K+R5UHZJIyP9ZC1bwLUx7bMJ+/mk9B7Y
TLSH
T1CEA4239013B1A174EF1DD16B6F46E1DD10FD88E078648AFE521B88E493D95E8731B372
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupOut.cmd.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\AppData\Roaming\BackupOut.cmd.enc
Size 467KB
SHA256 5914a8858edf166b6d9420b6fc586a5c7ec6137536304f428083dcd4d3689141
MD5 1ecae2afb9bdee8ae54e4124567633ad
SHA1 d53d750e4e8443ff2950c69a68b339006d5ec2bc
SHA512 96614eb471bda7a0e131974af9e19c48ee6e67c8a395583f3bfd072c1ce47324fd7771417b96f13fcfe2ad7cac998fbebf1bd7754e9f1fde23969c4ec925086c
SSDEEP 12288:gDHeD4RQQkYYVFl8Woz1vZPsQU/mHrLMH1:DUQNVFO3BBjU+HrLk1
TLSH
T15CA4234846E216409AA931E2DFCC01E1EF8F0C311326ED15F22B8D75E18AFB67D76AD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CONVER~1.XLS.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\AppData\Roaming\CONVER~1.XLS.enc
Size 677KB
SHA256 9c541dccf2b75dcdd210bb360e2bff133b8aa96bf2bb56a9ce13606ef5958d84
MD5 1664e06671fa86674abf2ddb890d0056
SHA1 caeb06b03191e69aa6c872ee2dd3db911bee8fe2
SHA512 d5616e61fbac8c4f92c2ece2bc62893a101ce867a5b4abac005d7f9243c1fedb2e3570182b9ed37bb902aa63663d3287add50a27990646e52bfc16547ad8b686
SSDEEP 12288:nz8wggKGhD34V+hF6tHZA2GtGh+5eYAi3WLPYJpPpNs0N3ks1T3tPt39ZkoCASS:nz8BgKGhr4V+mK3G85eYAi3swpN/j1LL
TLSH
T1B8E42318B22E299189E737A01BDF041EB129E17789E5811344787B7FD26005FABD3BDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ApproveLock.xlsx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\ApproveLock.xlsx.lnk
Size 656B
SHA256 c7ab3cc9afa3c811c1688849c995f3907c4b756e3b9c2965a617aad5aed4aec1
MD5 23a04ed0560211d0e148bd2f59e3da45
SHA1 59df87c6eb9755713a3e3ccc581427eeec7552bf
SHA512 09cf26c2669591aaadadcfde8968f76f4de59c5e9f5a0c1ba340af7ffd41e7a03e0f2d4cea419d772820f56b1f61c80212aa1faf61bcc22264b51238e992df26
TLSH
T1A6F0E1A61AD3BF4AD224C77746570720C7742850DD70A3CE30126C40ACE9907C860FAF
MD5 SHA1 SHA512 TLSH

Submit Download

ReadStop.docx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\ReadStop.docx.lnk
Size 651B
SHA256 e1a99dac7012fb6cebca23e7614eba4ba8e93edddea23a43c2086486786bd82c
MD5 b508d8c61bfac60c44a70816c6a120f3
SHA1 b4c11467c971d8072a6639c3a94fe00f66f85a98
SHA512 1f28d71a2e9b1d3f8867457a88207d5bba34a0a5ee93df88f23da5acc5a5b8e1b36d441c0e5e27ef15912932481047e02075b3c9f0d56c2117e0183a8bd6852c
TLSH
T117F081941BE73F45D6918736427743119FB97C44EA60678C100D61CC2D18D0E8E78FDB
MD5 SHA1 SHA512 TLSH

Submit Download

RepairGrant.docx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\RepairGrant.docx.lnk
Size 666B
SHA256 8c232afe60fac041ecd83553d96e25186d8c5adc923ff75999973e53a98bdc75
MD5 c53cec93c20d659a8c759e76ae2360da
SHA1 5d1db1d9363d908b23be522e4013eaf8a8023c11
SHA512 53edd148d02171636b3287de0f78eb81070daf63bce926324598ef02344b2bc31237072863ef53dce1b71fa18ea1277353b60cb5c705cc0668ebdb02917a7903
TLSH
T148014CA90BD7BF4AD5B24736012A03519A767C89FA24B74C101631481D3CD079AB9FF7
MD5 SHA1 SHA512 TLSH

Submit Download

SetLimit.xlsx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\SetLimit.xlsx.lnk
Size 651B
SHA256 55b2a40e6d3ce39d93be4b40c6aebdfc37f271ebcbf36c4187a9ddc67f31adca
MD5 55fcc18faf887093251cc61c8cb5e85d
SHA1 52538f5590c49ddf9b376a972d7fda3ed7b8b077
SHA512 e4b1d1465ecf2a4e4b3e4cf3066955f03fd4f29b4a692f6f697919f4c95c97cce8a204667677dff138b98dd0add190bc411fecd649fed37611979f5ec681d8d7
TLSH
T1A5F0EB6804DB3F89C2E00A36027903139B38BC80EEB0A38C284129481C59C07C7FCFEB
MD5 SHA1 SHA512 TLSH

Submit Download

The Internet.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\The Internet.lnk
Size 104B
SHA256 b68e121586ef846dc2be14897087566ac72f6e6339f193609a5fc6f766e5c4aa
MD5 2de82bdf2e1adaf6aa6cbf2f26a3cf2b
SHA1 5aea7998b55ef5f89414e631853e8ee4493c33f9
SHA512 585eb16da499c0e215d3752679ce3f44786126b813dbe3e137383b62cf8a3f48e79c63db2021ed71cc744d446b9d69bd4d0223fad9a081e54010c7b3f83f7439
TLSH
T104B004D053711C43CC150F31C0DCD7D1571C74515FD15541113435FF5CF50405453140
MD5 SHA1 SHA512 TLSH

Submit Download

ms-gamingoverlay--kglcheck-.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\ms-gamingoverlay--kglcheck-.lnk
Size 172B
SHA256 b7d2024010549a7091fb4a422bc5783808f135ca097f123323091dd46c198b5c
MD5 b3552dfb34753d463eb712f1a58d7ee7
SHA1 b8b3c198f44cc488d42d7047fb542b512aeace69
SHA512 086e84f149113f10832c4ed70662d6e545010fb5541a48099c82f6c9d53d33049ba6d2158e0520792acd384c46c6e6b38c9905f67c0cc9d4047435a8217b6a5f
TLSH
T15EC0122043A61D4CF4320F7DDCFA87400F34F8101A90881B1130309A9876CC0EC6274D
MD5 SHA1 SHA512 TLSH

Submit Download

SHOWFI~1.DOC.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\AppData\Roaming\SHOWFI~1.DOC.enc
Size 397KB
SHA256 f4eb542dca14acdb14de09ed50d098a6c8bb5525b772a1eab2d95c5077544070
MD5 5b17c2d0918484dd2729299365eef94f
SHA1 3cd9160e1dff9f337e10dbc54f54611bf47ca381
SHA512 549bda75e45c2d237b5f5eba296fada4ca9a6cc265ffa44a1fa251ebe7c718e8f61bd370eac8f8da136d68e80c53358eea98ee85809010598755dab578425c43
SSDEEP 6144:63FPDwbfTIyWMpdT4NzZQ+fjFzLpWyDmSSjVfR1CAjqV18KyC5u2OYlcdX1wJ:QDwHO4+bFnDmSSjFX/KB8qm6J
TLSH
T1998423D5006207E4189FDDE0CCDF5756EB4076B3232559F894385AB2A89DE6B7D002ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShowAdd.js.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\AppData\Roaming\ShowAdd.js.enc
Size 700KB
SHA256 9e18388963ffc7a03f6ecdcc3ae678d13a23e8810ecaf39b7c1e87dee6fe70cb
MD5 721bcf27652b31c7b50db91b787bb2dd
SHA1 d4eb71fcde462aa2bbe654949d5f67b1b0290634
SHA512 80b943237a1bf024c547e82472b975683776c6be4d50c3acbe1a8715616685f2bbfd1cfef7fe9102e24d569e38c155415c434e41f0c051b57df8f0f72050b6cf
SSDEEP 12288:dGRwd90BtB9DOOOBACyEsh7idSUMeoAvnY1UvP1zPwtJCVK91lwGoMbOb:d0wd90Bn9OOCDy/deo+Y1Q1a1lwGIb
TLSH
T1D3E433263A7924D3B1EA43D91E2E6E64E1F25CEB434B1B1BA1078D747F01C0851D6FAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ShowFind.docm.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\AppData\Roaming\ShowFind.docm.enc
Size 397KB
SHA256 832f2a70157b4f529e6c199fb476369f1a401a838d5cc5c5e318f66cc52059f7
MD5 14f556e06981224a59a24d9cac4e8e51
SHA1 41736e653e0d97d47d58db415a0997ef4ee45773
SHA512 d6223d82ae6f4bd5a1f6fc0a3155d7cb0610a2c90752c77150640000395e6b4133ec2d4ee0d26fe19a13f56883c4a9aba055090caabd962e19ab0feaafeb4a8a
SSDEEP 6144:wTaiHZ9d3OZQffXLyXM8tMDZe0TDlaqglv2mSauIvDYcvznnG0cU/OBEV:whDX3ktGZNXlWRAarDJzf
TLSH
T1F98423013C7F541A388ECC29483E65C7D5B5E22EC167E9C4B3E1966084A96339E8DDEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

APPROV~1.PS1.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\Desktop\APPROV~1.PS1.enc
Size 643KB
SHA256 3eb4b61444fed11fad8b4624dd52b104fa2b4d912987d0f73cda935d205a1cae
MD5 89436ac7f8d3f45b76bd2b83f95c0c5d
SHA1 217ec0567099acc3af87d0c9f421a9b36035010a
SHA512 8621cf4b6b5596c1510cdb6c8236cb6eb0d996d2bdd3e6622ebeddae75b8b3607653f5b006cef7d30fddef5ca662a1a376a09d2f84f47d0bd8f6f23013a4d80e
SSDEEP 12288:jJHoxIDC2GwinR8O2yYoHah9xYVi8Zef5S39856uRB7Fw9EEsT:ZpQt2Frx6i865S398vFw9GT
TLSH
T18FE4236D3D483E4EFD8A9890D3FBDD714BA5A0828C18B15A4D9FB84CD5F6118C9FC0A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

APPROV~1.XLS.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\Desktop\APPROV~1.XLS.enc
Size 10KB
SHA256 bc3296cfbdec86a337802d8291aab28f750825fc6c811e4c2853f9c8f80d2551
MD5 e90cbe9631ff6b02a6fef8755ad09437
SHA1 337fd373857d4accacaeb88a7a3357b2633c3143
SHA512 915f4210657f172a7cfefec42117722418ff1c6348fb1721277204ef86f9b9151b7466d47a049ed7ca4e6c12c40312a122e21adfe878d78f14df4e490baa2e88
SSDEEP 192:Rl7hGo56lPvJ1YrYzI9sRbVyc/oJd7Wz3aQrAFOhqS0reGrtA:Rl7R6VvTAdiV1A77yKQUiviBA
TLSH
T1B132BF0AAAF7685613EEE77257815358D7A054A4477F48AE18727FABEB20CCC6201F08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ApproveLock.xlsx.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\Desktop\ApproveLock.xlsx.enc
Size 10KB
SHA256 b065866d66601ab5fdb4af5277cbf2994429872d59e050882a68b12a3019b9ed
MD5 65ed0504a600b7ab963c14a53e068224
SHA1 98dda771661b3b216deff690d706addab7fb2226
SHA512 790cedbd83670338beb0f9c4f4e1271370995bab428c719ad7bf54e64ebc0f662e93040f48665003ec054da9dc870028c928821e3d176eba57d2244dddbea562
SSDEEP 192:k/yKswX5KMsIF3vqbQVw3PKMq4Hxqjhb+7kdGAFNCgl3+m90tRzC1vYO7pgttO:bl+7J9SbQVw3y54RibrdGuCgl3oDzC1V
TLSH
T19A32BE49382DCAAC39A4AD8C88B9AFA0EF6736CD216CC44C8063EFA51310E5B1C65007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CONFIR~1.CMD.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\Desktop\CONFIR~1.CMD.enc
Size 597KB
SHA256 c92798221f5afdec2246630df290c2b6c4d3d8ad22fe778a56cc2360701627a3
MD5 c85dc96f504b65c0276588e8b2833c3c
SHA1 c4f3771b724f219484be140b217995589db8b628
SHA512 36f763a13f31e8e494e14c7eee418b8906ecd67fe505b8c1e141dfea10fd3abf0621b5109dbff1353c8140e2c5f72ecf89da22866d1a85cbf66ccc220b571d09
SSDEEP 12288:iQr6UMOwQL/FGy25n9NJaFUwY1PxfG6I72uATOqC7IC42dEna:iQr6UCQLAfjJaMP4CHsIT2H
TLSH
T16ED423457B6D376DBB62F2F80918E56F0152F70E98A2A9A1560384334B81323F7D74BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConfirmUse.cmd.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\Desktop\ConfirmUse.cmd.enc
Size 597KB
SHA256 6fdc9fcdcc3d4cb3ae21239dc64224bf497770657ac7595690130bfab008d8e4
MD5 36aece56c9929c79b759204f15405b42
SHA1 c5bb998bd4b8dca72ceab1c4a7715b2264a49420
SHA512 4ccbdd9ad163519123482696dc602bdd2856faa594f07d55fbd593a308a6764e8831d2654845d95643a4784cd863e794b629fa36e0f5bea224a89432c98f1637
SSDEEP 12288:OTpF6Az4IUp2+EWfNj8sLVwMj8qB5fjXWxT7jxAu1lcgAqrHBrmd1:OTpoAz4jpvEW1gsnRyPjxAuU2Hlmd1
TLSH
T104D4239741E744CF8FA8DEE1CBAA697294A70E8C60B66CBE7479C7580C71EB130C854D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MOUNTP~1.DOC.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\Desktop\MOUNTP~1.DOC.enc
Size 733KB
SHA256 c15f167682c053a6670083ba03e57ff6ee931049aa7cc647f5495cbaaa8c7f9b
MD5 7072be4fcd3c78044587779a644bacf7
SHA1 0a0404663690f3f47c6ae7a614bf7eb5ccec6e30
SHA512 216e62b3095e3945d0ba564bdb4fd93fd70fc84d352fc4886048536da451897ec79d435feb932fc2866c2f7ccf3e8974deb72bbdab7ae67b34e01f7889a0ba6d
SSDEEP 12288:47bBkIqWOBl+H/rmNTI7RCTIZJQc38JuwMdo9Mjj86jzwovH6Gz+CVJE8myxW:GBTqWOETRCEQw8JuEMM6PfvH93u
TLSH
T12BF4339C2DDD60BBC708313DAC5781E45E40D4EEC2899AF788E47AEB0E64C3FC995949
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MountPush.docx.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\Desktop\MountPush.docx.enc
Size 733KB
SHA256 4353a1f7a4c3aa9a99cab1e7a2175f41e736710d9e432b076860560186c78e9a
MD5 097a9d95335b653e322dc21b0ee469ae
SHA1 03395e019a098aa25e0841e7e12b5aaf14e40f0b
SHA512 b19a978a14564d477cf865b10c2bf52fca409a86c96a861abd78fabaacb3231b04c3ba0d8d294dba5a270f59eab0976b5583dd3edf05adf67614b5646aef7f16
SSDEEP 12288:gP+/04M5ELSD7C6qtUQxdDjKCka+MwqTw8G03lgBsXs5EeW+XjNnPDNRdtb2CETn:8c04M5ELG7DorrDjK1AVZs5b9p3nleum
TLSH
T190F433B41F0CF29F655E07C9F0AD66C5E52740EA654D3E28CA033E437EE3EA56AC5902
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FINDST~1.XLS.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\Downloads\FINDST~1.XLS.enc
Size 546KB
SHA256 11ccfc1d6e2b5d6a75e18b543cff4b981fdcc26f3b184e80560fe7d39ceaeb5b
MD5 1f4c6eb9c4348811b019ff7394c34fac
SHA1 449caf4356298c02a523a737b90da80d79e5483c
SHA512 fcbf105c25a242405c406dd05f46b72f95debd000d32ae7253cedc7ed32ae3602449a88558146616e466e54e6e5a44dc2f6bbf5b5dbe6160e8289edbd4c19b0f
SSDEEP 12288:R5dgkB5UpwkJgt9kfVpri6oWpBgkP6oH9bWHJ9d4mhGv3R2mxzMzNunoT1chaA:BgCOXaULiZWpBRiodbQd4mhGv30mxz62
TLSH
T10CC4231DEF79309E4EB89B98C054254A6E892467CC59CE1B10E0EFFDB7143712A939E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FindStop.xlsm.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\Downloads\FindStop.xlsm.enc
Size 546KB
SHA256 7cea5697f87707b76d7637a0fc44a3686b35b6dd3130ef4e15fafab02114dd29
MD5 b53ad24dcc9cee9af656dbc62d74c6f0
SHA1 3a2d595b768b48c63d87049c431c5da061a9c0c3
SHA512 b2b26ef46ed390f4a2e80cee4f78054e8a675e634d5cf497cb6896f3778140e34962c63a36e35b69f1d78c7bdf899df3ea67601e319fff9a83873a473085df91
SSDEEP 12288:Rqlrc5nm94Ud3IzQLNfB+TehRVF+BAjn0WIhtKyEzOiKdA6mS:R6chmVlLNBThnFKm/IhtKyEsdA5S
TLSH
T1EEC423A816AFF1961B3A5271ECDB8C2F637D315B7EEC1588CF8247C419EAB3C6604512
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MERGER~1.XLS.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\Downloads\MERGER~1.XLS.enc
Size 529KB
SHA256 c31a928b2d8a185c20e80365132a809cac03b4bf00bbfe0256cfc8b8d6ce5008
MD5 106bd29f9be368f4462cf1577ba479c3
SHA1 a1bc4baedea2e9c5613ae285f07d6b80bf072328
SHA512 781b6fe8f725c6085c1404d379d2051493b90bb789f0737941bc8e1f7e0cb6432183a77e18a6fbf4588ff2e5b029997ba4d322cef5b7a5245796ac01dbfeee17
SSDEEP 12288:O4e2CI9+VsNqQBn8zHnAMiqjE1rARo6KsiHAcq135:Re2CIDqa8kfzVyviE5
TLSH
T158B42382976DB73A6E838508A5A1D05786F49516CF0A6ED6FC04FCC876CF0F74F88964
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MergeRestart.xlsx.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\Downloads\MergeRestart.xlsx.enc
Size 529KB
SHA256 dafe1359a45000f1a2fc9fa96cb9c366eab46dddd9a16a10b5cc20aa0eadd6bb
MD5 46419908426e4c8d5f696d3e4160ca02
SHA1 3af40b1e1a94e027f05fabf11e19ba00f5fdb1ee
SHA512 794611d4ee783d81fee37d66a45147a954dd11d0b207b363ec4c2d433419dfea6b7634777334d52c8ef63cf3362b80047431569e7e1f1acb481a5f3fa7a1dce0
SSDEEP 12288:aQN2e7dj/ke1tKk09MvYr3lszllGQKhb2Ld7VEgTAJD:DHj8e1tkyvEmvGpKBtTAJD
TLSH
T144B423CB0DAD71E132E39DD056045F4C92BE4D0CEAF4104B48D71E9AB35DBBABB4A846
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SUBMIT~1.CMD.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\Downloads\SUBMIT~1.CMD.enc
Size 631KB
SHA256 4a9248f145a686eb1d3c6999f00cfa1b3416a64ef04fbd541012e7b0994bc36a
MD5 f7b83274d8aeefc204063ea5cde2e0c5
SHA1 fd5838f52a031c62996d55d40454a7e88cfbd688
SHA512 18c4aa6d89dfd5f936530dc0cd71395fa81c3701ec7a5fe02c37c211af0498ff82f5967577e326493ea78f57da0c276496363b20708f16cbb481b8213d1c4e07
SSDEEP 12288:9K8chF+74LJySY2vtGG+c8q8KP9+eyCFH/eiICtObduMo/nwlAXgi9:9KdhbTkG+cljAeyCrttscYlAXx9
TLSH
T1DBD423FFAC4BA1827FA579B50C2391D8D0C5FE88716E1FA85B40BA1157AF0453BD62E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SubmitReset.cmd.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\Downloads\SubmitReset.cmd.enc
Size 631KB
SHA256 e1e7dca25e7f45eb8c7be53a5637e207a44bec5542d4eb0611fe4170c902d8f4
MD5 aec3b9e57aa362b1b900256e5f7688a6
SHA1 4cc634439bb4417df91a237ea12790c90b93ef6a
SHA512 2fb6531df5623b9bd43fd4b0f4ea1fe010af2ed5c67e182045c7d462526471b024faa1c98744661d84b009a3f1c0ff8fab2818e3fa15afdbfc553d60cf3241dc
SSDEEP 12288:dB3sDTWgZPtk9wPA00NihLxGCNw0fqRGySdlPlS2y3gSsj2ueuVHRIWjwgSfgaVu:dJE9Jtk+PA0yqGCFKEQ2y3gr9eunIdg7
TLSH
T1C4D4335C5F985FD814B3662870AC3C863967E7D13E0E6F196961316FF1E28AF0246C3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UNINST~1.XLS.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\Downloads\UNINST~1.XLS.enc
Size 750KB
SHA256 bf05d7b8f42210507a7568f37dc01b8e860f7bf0161133b33316a2b378c0eaeb
MD5 41300edafe57e407014edba5a1589f46
SHA1 a8a44d73049fd9e71de4fff020d4e852ed855f61
SHA512 86b400b69a94e2bab242a5d0356d9b2cd25aaca0321c48ff935a3e7ac18e4c1fd9bdc1ca017a21453a5431fbebdf9d0fff61ef8e10c9902cee329dc3718222ee
SSDEEP 12288:DSUBo9JwZBEfurMKEAtK+B9BH6bz9jQU5GN9TtcWp1Bgi/3bQ/NdZviaFS93qJ23:DSUqaBJHf9BH6nVQUa9Zl8kbQliyu3qc
TLSH
T10BF4235E558049B0A780D00553FDDA8A22DBC985A0334C58FFBF76C98A36BE9B2ACD51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UninstallLock.xls.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\Downloads\UninstallLock.xls.enc
Size 750KB
SHA256 59e7801f9640e28870fdf8f41596ed1e87b8c7bf14cc848a898bd4b66a6974c1
MD5 ec8953e754b97474b99d4d8b8d0f762f
SHA1 9894da3079717c4ebef86d06af4880874297ea83
SHA512 5cfecbc3548e5b7efc11480376f9f0c844dab3963434b63d5b61e6ee3ff299620863476347b40dc89abe7cdb8afd5dc641195e92baa7ddceafdc83102d13edd4
SSDEEP 12288:rixNF5w68aIJ9J4tIQoZtP2Hdqjr5AQStM3sX1JjJHqk3DewAkj3pJ:rUNFu6GJr4tM20P5AQStb1KkzeRkj7
TLSH
T121F43342D57612E3FC8097AB623252EEF48525F5576882BFD2E8B5B643CFE809C119C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NTUSER.DAT

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Admin\NTUSER.DAT
Size 2.2MB
SHA256 825a058631f645a87b97542a218dc61093692b5f1e54380c77b6229531ce3e9e
MD5 6b70f4c08b40cc387089d678dd482c0d
SHA1 b75d63018a2cfe5dae4a9d44f83a09837ea6f40f
SHA512 ec621586c4de5ed44a4924b6c6a60e40b8ecb7701993b8159ebf3d8c2eadd6738a2bf9e79d360cdc79cf62aa96d8c3e148952ca78266b0ce57c672db664c4098
SSDEEP 24576:rNnANbFMMr6RcO6k0z6x9tsM6U24saqg6ZY1a:rWIM2ca0m9tsI24saaY1a
TLSH
T11AB57354F863D492D362C6714EA16BAB77F37F832D084E13218D2BAE0C7F11A9489D6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NTUSER.DAT

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Users\Default\NTUSER.DAT
Size 256KB
SHA256 e727daddbf24a69ef247d05523574a59b90c37d146fd49ebba1e561dca8019d5
MD5 584893dd6c0362a14524f9018cd1daaf
SHA1 84167faa2718cdba8927fe0997cff3fca004f936
SHA512 2cc16ca2e15f9c8f10fee73fb0b2e1d1e356eb4c04ed256eb4f03d7719928c3eb537268ff03d25b32b8c3bdc9200b40376908d207eb37484806a977854395871
SSDEEP 1536:xeJ8RO/kmGNm5zkBmjAXU6fMo06+YKJofN:u8RO/3dz/ANUohrG+N
TLSH
T16E442301BB95C6C9D1B649329CE6CFD62335FD919E9287473380332F8EFA745AD12682
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

-HTLCH.EXE-B56F70F8.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\-HTLCH.EXE-B56F70F8.pf
Size 3KB
SHA256 f823940cb8a6f24caf159ab8a71592c11be5b9b800a49f133e1559097c0265ad
MD5 f194c7f89ce33a9e367461724a548c98
SHA1 86627ccbda5aa47956c44aed5f858ea5372690cf
SHA512 11db2be441911fb0bedf316b7b71dc54e8dcf6cfcf7d60eed95156258737f1ecdb0da914935c1459bb1e2d1e497932d0e55dafc577b3cfc1944d18c03c96a879
TLSH
T1BD716E79E60E5105FA1DEFBD91B449E7F7E28154465A492D3FCD11882C8733077B862C
MD5 SHA1 SHA512 TLSH

Submit Download

APPLICATIONFRAMEHOST.EXE-CCEEF759.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\APPLICATIONFRAMEHOST.EXE-CCEEF759.pf
Size 11KB
SHA256 f6c7f2968c6ca4a2a4b3095f9b6774832818ab06a3b19cfd4db611df36f76f94
MD5 62e55f6e83688422c615cca1a6038434
SHA1 a2479857b0a2e9b7346467622e2a8df51dd45339
SHA512 309458007f419e12261aef497cf82cf21837d0b5cfafc8313f3bd21a534427eda602a9af2f19e8ac26802cff1bbd1041689f248a211c1991baba30a4186c727e
SSDEEP 192:CNS3ysOKjLUSEiWs20SzPNTG27u3fRoNP+HksrErSz8DuBeihq21/9RBN/NIk+c:EUnUSE9s2RzPpu3f6+Esrus8SBZT/nB7
TLSH
T13D329EC0616D702D6D99DD0D566D9D8ABA8C02D9754A53A5B100F1FBD7CE826AF3230C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AUDIODG.EXE-BDFD3029.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\AUDIODG.EXE-BDFD3029.pf
Size 4KB
SHA256 46811fa5ef9ca51266a5e310d31770c3a7c37e3c5926728dd6a9beb615d0100c
MD5 bf4955e41af0838118b1f6c2edee4ea6
SHA1 8329fe2121f724c91fa4c93e691fca27a436a6d4
SHA512 dcb2ea8b6f52f3f5467f2c868410dc530d31ec31af3a14d09acb84bc4969b443496ff2212e144f36fcc3aa10508830e550ca78ab09e3aa51c9f129aa81f85273
SSDEEP 96:DJIpQhQMlyYdp9fXEpt9DH5s/BjCIkoHsTsuVck3d7X:DOahQYPw9r5yXkMsTsuVXdj
TLSH
T157A16B127A44C3FFEE439AB87EBDC5C4B612750CCA7F4698DA450E24A8C8CB20F516A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BACKGROUNDTASKHOST.EXE-145A3777.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\BACKGROUNDTASKHOST.EXE-145A3777.pf
Size 19KB
SHA256 0567f16387faf8a1950c7d173a329586ef659341f011fa2bf7e7d506f56f19a6
MD5 8e959a1f8a4e1d378e6e05fb74ca7dac
SHA1 9d7aab2ca0a7d4ceee4fd8468a5c1908c4baa831
SHA512 d3b795602cf1911370daafcb4368df52121895d850ad2c2bea81d69a05aae9231568ef9c6ac641907abba27d3feee8f2ee312ad7fca243d005966ccfcaf351d9
SSDEEP 384:HWd8bVocWlHgjHEATNRiaWjhXQqFv5DwWOHFHewL/rWS:HVGV9kHEATbWj5Zt+lCS
TLSH
T13292CF4D02842831CB9D1EF97E34EA9F030AEE1FCA9D536455F5B8FEA98183C6D1560A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BACKGROUNDTASKHOST.EXE-ACEF2FA2.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\BACKGROUNDTASKHOST.EXE-ACEF2FA2.pf
Size 8KB
SHA256 01e2577991764eb80f6086e45124a69c500bf407be5cda14302a557b7279fc4e
MD5 443f7d35118dfa4ce07c1160b8efff22
SHA1 b04e3cd689775b67730f570e5e93f6b120e34ddb
SHA512 044e01378a561113e129555cdcd33d78d398a86a39498139627b7d56804845cd9235923e7d3be6a510df587900f1770afb65722fb24c0178dcc201ee8ca0581a
SSDEEP 192:JcfOBXVErA9eKNsGU5Y+K3o1B3939inrk57o8K2O6E:Jg+LG5xnirkxtcV
TLSH
T15F02AF2512484BBEC834D96B74CF911DAEDEB6CE5AF2321CC10C6A55B01A1B697A4B18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BYTECODEGENERATOR.EXE-C1E9BCE6.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\BYTECODEGENERATOR.EXE-C1E9BCE6.pf
Size 5KB
SHA256 17a3873ca9f3f78f94a6995b9818013bb0fa70eee1ad0fd43d413c7276a6096d
MD5 5fb9cd5929557a7d38d27cd365175021
SHA1 b67695907878d532f83ddfbf706997d348541f56
SHA512 83812f87851be8f4112152dc3d7ef2d51c55d38b0cfe3abc2481685a6ab9d84a03e5aaac26eba293fc6df8b0df813727f4d8120e84c2e6f8ed2235b2343e0356
SSDEEP 96:nbrYyg+7Cht9W+KnW5yWU44TR1vIMxyXFWbLX8Bvu35RTGrpdSO6oKJlHm:nbJut6n0oQlEbL+vuTTSd2/Jhm
TLSH
T14FC17D3044D72DD5EF2BDEF0EAFC46CE05B38BF6838775105A9158F120A2A8E12557AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CONHOST.EXE-1F3E9D7E.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf
Size 5KB
SHA256 e648d4b2c9f40d34152a5253a1b7d81e11ec8c195b33da3292bf9b4db9d38c04
MD5 f4701fbe3cf06559e6f5a41dff18f07d
SHA1 3ec14ba9efb3dbcbb5c2179eeb6748cc4805f6df
SHA512 2fd8416ce31b2affd011c3332d0c1c7c189e3c8b1e789d0b86aeb7cf9a33b078c21b3be7eb7a4165500a61d53975ed519ddfc24e4dad9a795c51737ca040fcfd
SSDEEP 96:xqtw9R1fq9klM0QVboyOPV7avU3xfRoMNOxL5HbJvWimLJR7/pf0Zg9atW2ESd84:Mw9Hq92M0z/PVavUBfF89BbJvWimVR7K
TLSH
T1D4C19D80080F918FF5208F679C1EB35572E2AABE345021B8B830E6795752347FE9172C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLLHOST.EXE-28A8211F.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\DLLHOST.EXE-28A8211F.pf
Size 4KB
SHA256 93d8c358a223e21ea7e9b476ee7a910ec97730c7562e02898d1254640be8b3a1
MD5 b8328a45946af40803f8292c2f10e7f1
SHA1 aff94a19432750fc3be8e1e1044c792dee5a665f
SHA512 d7dcb137ba368843dbb0757f8dc39d6e66f789297e731ea6cc2ec032de001120d1c7f037604dc3d773b12ba6321ed43eb9f0fb358b2fc6a5c265e706bc384971
SSDEEP 96:+NliiWP6GAsYq4P6ZRg3cK3piCkqlLNnhAaPxiSDnu48cVSlyXiaK1//:+iiWNAsnRgT3pvDqaPlZ8EyyyaK13
TLSH
T1EEA18DD01C60E468D6EDF4F798ECCBA10B1B085C5BB83EE4116A9A64F893D074B2F100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLLHOST.EXE-5E46FA0D.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf
Size 8KB
SHA256 655fdd5762edcd323ccd0d8bb6e766047d472af4b84913a118d86874f55fb463
MD5 cb75aeef7313732272d6b3cb15a58af4
SHA1 aada8d18b9ef66852ccdb60377df8f0b1273c040
SHA512 0edad447dded372a086529c789dc06f8af61f79413e12eaee81eda1333eccf9581b550154505b3823b8f814e34ea02dcd14b119c06eb004ba39a2595ee5bfaca
SSDEEP 192:n8RqPKHedPovuHaipL5wqooDSKSm0KyuecyxcO72C5WBb/kIkO1:9SHedQy5wJmSm0Kyuecje2CUBoC1
TLSH
T1D0029EE5D281C891E6038E7645F815C74FC4EF8941DBD20F20E0EC56A6B586F5BE439D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLLHOST.EXE-A73FB9CB.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\DLLHOST.EXE-A73FB9CB.pf
Size 3KB
SHA256 bbdf6c11b17e45f591a2404d9fb1a0419928a1305747d9f281da9b078ba98acd
MD5 e68fde1ad1df27d3d192941e928ff475
SHA1 50eb42e758e2e14cd2f8710bd68baf86cf1cdb8a
SHA512 ae8a75fe060db3b9835c1cc643793f45bbd091105a20bffd1040da84aedc5e770fd3332247fdc0119916e8601a96130e34a55288423e4e700d3e3cd5a3eeb6c3
TLSH
T15A814A3D510B0F82CECCBD386FE96F2826A0DF37768D69A62AD8F956902107C0A71009
MD5 SHA1 SHA512 TLSH

Submit Download

DLLHOST.EXE-FC981FFE.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\DLLHOST.EXE-FC981FFE.pf
Size 4KB
SHA256 8c5f98ac1beecf1ab40a19ed440e9f2d193fbe127d89471d459550e0bdccd871
MD5 bad83225a710d9bc33baa343fea55374
SHA1 deac8b03613e27ab84108bd58e27ac517ba0e141
SHA512 819255d7fc594ebb10c623a5d13e91a9785e74d76c79b48bfef690e7db7638d14430bd0b414bb7054584deea8ad1fca32b47db2049c60ac75a83a3f86a7eb305
SSDEEP 96:jANw9M+r6s6ZctVZ0UVcGFBVRIi09sUKWjk92HNjeR1RPtsmPM8I9:j4ns6grTVv/RM9sUKWjk6Njq1RPumP89
TLSH
T1D5916E5481CF8C6DC9C945BE3BFB66CF289A701A1DC46B24D948CBC1CC96CFC6505A1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FILESYNCCONFIG.EXE-33763EB7.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\FILESYNCCONFIG.EXE-33763EB7.pf
Size 6KB
SHA256 2eecc2709800161f1b22228b24047c509f11e0b4f3eed718f94534fb49f4890d
MD5 c1bdd0ab235f42dd16d5b4ed18b2fb0a
SHA1 0c4178de4086d18353b72726b1ef82017c4fd35f
SHA512 48fae6c95b3c7d26ebed310273fbdd1fd172173aaaacfc4005f5f99facb48d2bfeaf27c22ca90a39a2bf90b9d6a989080d0a956cb8279137768255f2e904ecf2
SSDEEP 96:W3cMTb2oBn4sKKGTpxSF5o0ANrZyFg9JqipsvyXunId4FK/buEUCLIRsfm5Vec62:icM2ois9VjIyFgCnH0xLosfqM3mf4RyT
TLSH
T13ED1AF4C6049E20ED00EA9A773DF6D3A781A4546B46E65C1693430AD986DEFCFB83C08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FSQUIRT.EXE-BBD9646E.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\FSQUIRT.EXE-BBD9646E.pf
Size 6KB
SHA256 40809e6c1f1ced3722c773b34e8d3909fd5102511e9b9fef50a5e5c2b9d24d82
MD5 1bb91857beaba17a8f9acd4355198b6c
SHA1 9bed8b766955aaab0552cdec62e767b9866698e9
SHA512 036f8950b74d71c8628ec595359bd23c7a19be3063745b827d9d6edf07ac98821850bce8c10c4fadd62a6b6d766a4519b422bbd11ef3c49f5d639c8747f3ab98
SSDEEP 192:5/8p382qa3KPGlALpEuvMHzw0Hn95AQM0mqSHUAWN:5/8p3RVKp3ML9CQM5jHU9
TLSH
T11DE19ECAC9D2AC6FC4495EB6A31E0F4CCB8306D65DCD3BC84A65E02864D8C785A26498
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MICROSOFTEDGEUPDATE.EXE-C4317749.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\MICROSOFTEDGEUPDATE.EXE-C4317749.pf
Size 10KB
SHA256 e4e2faa5c7bb725becc5e67781460c6d927cf96bf49c8611a8a312773a092814
MD5 a7090768b2eebd1af686ea0845701b14
SHA1 d528931f8992ea906c0b9e3b85c53b91356f8981
SHA512 e704b31e8ff67aa7c7d61b4fb96f52cf9dbd48cff55741c2be7a2ee38eb2990daed439399eaa59903514137cbee8d8f966a2e0abfe871fe34c0b8374e7405f9a
SSDEEP 192:0d6h5Aw7LDPqtPTLyvzbt23SrZpYXkh1HuF+mw4L+EKCWW+Dens5mJ2IOu3MuIpC:0a2wLPqZTiF2Cjy+mwmwDensA2tu3M1C
TLSH
T14C229F382C8C088485B97C725AB619E47FD8AFB65AB6135C963D38DC74432EE1734A85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MOUSOCOREWORKER.EXE-681A8FEE.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\MOUSOCOREWORKER.EXE-681A8FEE.pf
Size 11KB
SHA256 3652b27f4e60df6c1e0f290ead4a1b8a9f9021e137e6114fc3f2936de461502f
MD5 78ecfee6e15c7881882e71144bad3db9
SHA1 e9888c78af505dc97aaa509bf0fe43ac1aa434ec
SHA512 9e9b0e203631fac4da15af3ecea66b9eda7d4933ebe0409a7af68feedb73f6ccde8c37ec5eab6ada5d01694fc71c69cedb175e6ed033c004b86fbe90dc3bd247
SSDEEP 192:+Dk/MtAnCsDzQ7w+NpM8bNhCfN0Se0WAllaejb+/xkWRaWTyMfWT67:+DBFsDd+5WNrC/nT1uO7
TLSH
T1C932A032E78A1E3E55FC6C8C0FE2944A732FB074D485F2D9E36C60F55AA380A5747A20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ONEDRIVE.EXE-96969DDA.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\ONEDRIVE.EXE-96969DDA.pf
Size 23KB
SHA256 694ebfb6cce6cc0673a68018f38f10b94eb37a158f0abefbe59e933696d83980
MD5 803d987e8270b1a2776037c5aff792ce
SHA1 711a2e132f0d324f34eb39e15aa3e299fce9bd70
SHA512 08e5dbf33dcf57b1b37012c0f1ad0490a1bb8e0d8a10911121e3deb1cd9acec61c069156ec076119f453ba5cd519e306bf6f6f3f2d398bab999c35a85be472c7
SSDEEP 384:mOYOXw6dYEFZUxAg94tqEKRk0FeQy2jIlBnDWXPuOGFJxBUMccoDw/R6S+rR:mhOX6EFZstitqEKf7IrcsxBUFcU0R6h
TLSH
T1BCB2C00A3CE5BC168A282DD53F175F5F6756E93E4B5C5B09919BECF620808B40212F8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ONEDRIVESETUP.EXE-8CE5A462.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\ONEDRIVESETUP.EXE-8CE5A462.pf
Size 6KB
SHA256 21d5aed7b6527df99b0ce53585d144fcd65c1b93b23e57cca06204ba403de519
MD5 4d26d2d52d2664385896bce6c62d1ce3
SHA1 f94305a9b766c7dcf8e1c63f85197c47a748f804
SHA512 0e6b51be2671bf83df2b1907f1aaf54b887a35b243a7ea0aff7cf573b4cc3a43912697af72dbf0c211e6a5c2441ae145515caf184291ce803f93533c1d17b41d
SSDEEP 96:hqGGc+ihXSkdq1u4/kVOJ5/1IIWG5oLu5haov0MaQDl2R/eklEd+lFuR5SrMhegm:nPXGkSyZWoL6VpaQR2R/eK1ZrMVm
TLSH
T11BE19F6F11453E5CABE31EA4691E076A5AEED57C1098380932F47A37FEC1E34397A21C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ONEDRIVESETUP.EXE-ADFC0EFD.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\ONEDRIVESETUP.EXE-ADFC0EFD.pf
Size 41KB
SHA256 7f15148f90d3216a5aa2f492e45d138acdfdaa4579e830ff4b86c565df5af94e
MD5 0ea689014ade9afd61f603c06914c66c
SHA1 1d6451a7ebbbe55d093f68fcebc1c40cd869d2c2
SHA512 85801c19e093b3964f8c298bda78c9a3231c832a99c6924210410b979463685c065e009038132ead5c284fcced517e2aa8363aef4e819c9498ed67ef08447685
SSDEEP 768:53iyyOv9/RfImLveW3ZIJFMvbWPeQPstQyCIE1LUSWLTT3zu16fzO6iwwJdFQnpX:5yynV/RfImLveW3ZIJFMvbWPeQPstQy/
TLSH
T1B8138E6986AF2EBFCF6B0D3F50D4F0046BD4514B965148B22D88FA13948BE260FE8D59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

POWERSHELL.EXE-920BBA2A.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\POWERSHELL.EXE-920BBA2A.pf
Size 32KB
SHA256 9926e1f6269cb5be0988c5f58403792e434edddb0a62edf27d42356683db6416
MD5 e9e9063645898e66596194853d688eb8
SHA1 f483408f7d617c3fd2612b8c32b070d0285cca22
SHA512 b89d504fd1cfb4c466ef75479472ff9aaa7795130b0e89b426fab39ff46dc3dd2afe2e8393d76015e693f740bd8ab9605b194998f7fe7924ebfec2468231b254
SSDEEP 768:ir6HKXycvfmNzm6hSGjX4M7m77hukuRv1Hgyu5INfkpBC1:/q2z7hpL4287hukuRtDFNfknC1
TLSH
T19DE2D04D4C1F9BF8F2E8CFF6592D916D8BDC0B1BB4A613263504291F7C6D805867282B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

REG.EXE-E7E8BD26.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\REG.EXE-E7E8BD26.pf
Size 1KB
SHA256 bbd1c5e368c0714a8d4139bc74d8aa84356a81039a40a2226d128eb2a9b9c71c
MD5 948025fae0ce67fdd9f494a4eddf7419
SHA1 f644acbbb387665a76f08d240945dc8e69c99d51
SHA512 e8cd011f42b981192df0ffe0eab86757b2fac7574a9cd4b153ae55962e1428768a7b242c22094881dcc385c0a8756dbec78997e72954859a884e2f5f98c872d7
TLSH
T1BF31FACC445500B4CA23C53885935A83490832A62DF65ACB3035DD83EFECDFC72BA6D8
MD5 SHA1 SHA512 TLSH

Submit Download

RU0D93~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU0D93~1.PF
Size 6KB
SHA256 270d432d350863899ce1efa9a22d35fadb747a9d33e5dd48091284e46f597578
MD5 79fb1c08f2b027d6f40ecf8d828912ba
SHA1 bfa02a9865d19a94696485a5747902ba02b4c113
SHA512 140bee5e008d1e0c6f24000df0165c96ef46e895b47138a9b1b53cc23aececca883ab74166df96a95fc0f765ed3f66a77c01f33a1a4b7185e830d7920d2e6ec9
SSDEEP 192:eLS8meAoZPUpTwdnjWrpFfnj0KoF2bQbZ:hoZisdGgKotZ
TLSH
T19FD18E7545947414DB182D2A2E6DCFCFF2660C89E1BF587CD5AD3C4E3C4463148956EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU100E~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU100E~1.PF
Size 6KB
SHA256 3b0dc635dcb094c05c230104552bbeba40e8ebadadd0e35843e3c4d84d320914
MD5 f25d679ece78b27a627ddadbcf009b85
SHA1 c8bf11080e0f06892192856a765b68ed6ffd8049
SHA512 719a857d9b3347c13c221eb1d739cbadefe533928fac8ef3aefc32469e1fefb16c2fd7ea4d0f01ba21e340e3500ff3473df204c136a579bccc7d6417e9560b50
SSDEEP 192:T7I+01Yg/yPfad+VyguwObjcotl8ttlSCKaUJ6ua:Q+g/yPA4rueotMSCKpJva
TLSH
T192D19E29B26F83B5A2018B0342699B84B594AD07144F604FF31AB6EDFFDF3198DD9948
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU119C~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU119C~1.PF
Size 6KB
SHA256 a0c21d53af5af9df4e282d96151dd510bcf4c51d69f4e6c04ccd3177a6660ac6
MD5 8e4ff3af7f87a41a02136355538a7c28
SHA1 40114020e07a644efb43280a8c34506ebac18445
SHA512 2ab733e1163285d5ac5b993a4b078a0b5e14c3c269402ebbdbad48a8b46078df9fb889708caedc1e8a68ce21a14ca387a3178539e715fb4f01c43df44f104e0e
SSDEEP 192:B3/WNpZe4tgUMztdOQP5pY9PUZ4f6x8un:FIpZe4tgUMFR47u
TLSH
T198D19DA2A1C765A0FF5AB7B96DC443477589840283262D1C03635971BE6202DFF6B7D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU13F9~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU13F9~1.PF
Size 6KB
SHA256 ef923cdd080065ce3422ce7ad75771917ad049b6ec9c5012485c5376d373060b
MD5 d4c8ec5b25ce8a18d164bd5c5e35bdd6
SHA1 1c2efdaa35d3478477027d494d6343307e7fa78f
SHA512 6177d22dc6017071810226ebc3c31e70c3e4b6830feb4fb8a3a4f177aacec3699001eecf6d67405df94e40e10188e90ea90312493b8ad9014bb1aa72e7a017d1
SSDEEP 192:VqzLkkSXT4VrwtWECaulUbSGhmA7D8w2prTpApI49:6wXTawt63+8w2prlApI49
TLSH
T178D17E48061F9AF4FA37F5734DB6083E6A048AB3845D1B65904BDAC03CB3465BCB1A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU1A5A~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU1A5A~1.PF
Size 4KB
SHA256 2afa6b800c09183af00151d6026bb00eda0ea9270891f89a02cf4c1f0021d92b
MD5 1e2dd57c79025dc4731f0634d8bffbbc
SHA1 f5109b8f4f127c939bc361074eb840990b3f6836
SHA512 beabfa0e5a83aeef2000ed48d52db52e3adc56731eb9af7bce1e9fca2ec399df49d0bc5f099032db7980777cbbf0034e8048ee80953dce063ebcea6aeedf52cd
SSDEEP 96:YxoXcvqRVAqyG2rIEQChYEXOnwQvi3gQgiVFLtt:TXqqRVAzTrmIenwz3gQgirLj
TLSH
T132917DBCD18F7D2AF9C071712C982F1DE7527C22B92475B36716ED863405820ECA224C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU27DB~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU27DB~1.PF
Size 6KB
SHA256 8ae9dffc6c472a946ee1367be3cb0c71209a5af6630e5129c5b1eb6bae03089b
MD5 8e579aba4f2bd6cefec59377dc3b0c42
SHA1 ec0322a8637c846d11af020854dfda27c35dc4a8
SHA512 1f392da32b906c12e3f7c6ab94614d5eb63830513335a9f9a8f6d7ab60b7e8827f10ab367611e71fbdc7d0f8e3213a0ee3ab3206d37625fc389677f3551624bc
SSDEEP 192:uMqqdkwzQlLrj4oD+UhF3/jWd12Rp6dcJ3LyAA0ZuHIArE/4:hq6QlU63/jWL+3+AA0Z2Is
TLSH
T163D19F366AE0870BC61F4F146890134F73B92357DA2CBB98F3EC1E20658AD9C5D54A05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU2C60~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU2C60~1.PF
Size 6KB
SHA256 97c2acdad53961479ebdc81d34cea7f1c2296bcdbac4fd440d3769e45defec07
MD5 5e9dc718e2c75a76a289294bacea2163
SHA1 f654e7bc2d54d996d99c4e419b429461196ffeb0
SHA512 7e31378b802e48b4ec9dde7a83d8020a2fc575538a3886a7c12feb9b3e9413af61fa05d817d927cbd84277dd6f538b529536fac75d31e04397d463cbbb55ae0f
SSDEEP 96:7ik7NIb33HiIxe3TosB9jWmKUHEB9GpFasl8TGUVWM019/1OOOOYAXJk5xwsTZBo:Ok7GSTnBHKsErGjzyEMkdVcxw8g3
TLSH
T130D17E4A6F29290CD44F0528E0EEE5DCAF29A28CB4540CB0A2736D59469421BFFD1F36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU2D37~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU2D37~1.PF
Size 6KB
SHA256 fd1da00fca97786d5cd18b924f10a2883aaf20ddd1b16b6156aebea495d8e870
MD5 fd979bf9eb2a160d0393df9605d8ab2b
SHA1 2c8b6464507900eb44f1c3ac4c17e7249245d422
SHA512 25129857e2361acbc08a6598ab593d2846a4902da4274f424b1fb1d00811faa3299411f2372121bc6e97eb6eedb9ccc7b12ddde44f6ac03676f3396e8e550327
SSDEEP 192:O8+Bv+3XU5Ck/9jx9dyVMy2MJyYT+/y8I:MBv6k5CLGM0YTuy8I
TLSH
T18FD18E94C9C1BCC9C32D4F741EFD8A6DC9815042C0EFCAFEA57383F8789122E8215265
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU42A9~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU42A9~1.PF
Size 6KB
SHA256 ca11bdc2703ac01ae75bf51d0f2e9b170a757a322905deb1cd8c283f95600252
MD5 dab1a94cd8f12d7afaebe7a7e04bb558
SHA1 7ab7f140545bb474c98d7c029e6af500d10a13e4
SHA512 1ce1ee0ad3db2ea87c4e42abf4ef03686e10ba4d7adbcbec64d05028830cd07c3099f5f12805d4197e6faa2fe95252be091fcf45c470b2f709f0db582a82a0a2
SSDEEP 96:rPsoWdx0vv91Ohohp+U7bt06lLeF3SRe0iq1RszTyMaDok08AYnsIMfH+pce:7so+Kvyhob+UF1LG3+czeMwi/Y4+pf
TLSH
T161D19E3CDA7BF1C4E0DF7731E4A61F587CB819219603869E5E9FAC961CBA1066064F50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU4819~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU4819~1.PF
Size 6KB
SHA256 7893e6204c1aedcf211669c85a0f82edd4b0b67b6392bb2c866e646b3a9840d8
MD5 4300baaf183666dcee62a8fe76209b9e
SHA1 ba85523c8aa4ab2775217695c7d5a73b5c4fe4ae
SHA512 520ad93f5fc8eeb08abd98701a08c559550ae1ad75c74cfc81f9301b5eb5bb4bd0ffd1f6292fd8b74f2598ca04eb1bdd0d3e48295ebedb1b3310b9a32426d74a
SSDEEP 192:Rod8PDPSTs/YW1PlEJJNYjr5gg15Y3FMP:uKwswW1SJJNYvD1aqP
TLSH
T179D17DA0518629C0F953BBBAD3D44E5AB3FB09015C5E3FF8D0B678496C6712EA48672C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU4F7B~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU4F7B~1.PF
Size 6KB
SHA256 385343556be6490adc8e262ae6eb4115d6d10b23021d0136ae04a517cf2f2691
MD5 ee2095a62c880c95230c0f53f530ea40
SHA1 7cfe546a0b28e032be0dadbfdca939240669dbba
SHA512 fdce76e6aa8a905610716808ccd80fde66aa48a6212c4bffbb39e4c34f78a23454e98e9bf676c08a46bee41362460bdea19d566d8ae4b056b00a98020fe9f1c9
SSDEEP 192:roeRpzXU88IwfL/qEVJIRgOvnj6WJSsmLjQd:cUzXU88zS9vnj62S53K
TLSH
T109D18D051ADD9F1FA86EEF641E2D9514F4B80B2B0C8BA378EA317CD07A62CCD140CA51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU5359~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU5359~1.PF
Size 6KB
SHA256 f46cc0b3a5f17f37777c911e028a97509227763f396640ffcda369d935fcc0cb
MD5 b7249b34d2e7e4378c9f8cadd058a081
SHA1 fd7282944acd18ef3a51aaa03ed1f4dd13667a07
SHA512 aba541de8c8d498c059e37d9da80c25c80bf8464163d87f10f99ad6b3c4a1e4521876c971523636d8519989232729e4601a319d83022febe1396ac7e964948e8
SSDEEP 192:OooTL65FhJyehNTWc64cu/awq7xVSyWswTvEiXwC5:B5hyy6m2dVN9Ir5
TLSH
T173D18F1F4AE31F48CF1E9F609CC586F647260543B0DE6C2E0EA229B46C75C6A9AB6119
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU58EC~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU58EC~1.PF
Size 6KB
SHA256 d0a89ae776e98393280b88504baadf08b53a01b8cc7fd42c3ebecaf780653995
MD5 764213490a6952762adb1caa42cb2d82
SHA1 ce9bef4477c018f0f4b2046e51f2c8d1263e94bc
SHA512 478dce3933c1961738b21cd51c28ad278028de7e91c797465c3fd736aee36981cdda6c831ef9c6bd8808ace44f4861fa81500756482a487eff6e0f13ecd40c2c
SSDEEP 192:D7QyOR611PDyZmvMT/9BhIZCX1f57AmW4WmUf:2smT/VIZA77AmWft
TLSH
T1ABD19E3C3A553E60CEEFB61D2E70635D4E884942DC27337E75236CE23911205B85BD49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU5BEC~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU5BEC~1.PF
Size 6KB
SHA256 dcc205e6b5db0d0b4c2e50ca0bd5bd8f50cdc20d794ea03d1a141f1f8032cf4c
MD5 42a2580c9d5ef50ade66351ddc1bb2dc
SHA1 88e80ece9e5f489981488a38b90c5ef7544843a9
SHA512 c1c26a32ed58cbe3ec187ac20e855ea2f37742fa5e1ca0d201950d898f7cc65c1c4cd7ce704a9fbe3b0f1c3db1214a452b18f63fa828dd6d787e81083a68dff2
SSDEEP 96:eUnuhVMA5jSH6AK1+ha/4NJM8XWbixl1yY7B7MmcoEq0FMYmYSE9GGFIP4FPfuLm:e2jsSHFZm+Fvcol0FHmJGFq4f9
TLSH
T153D18F60986ACBF0C6AC7DFC5E37C7DA9629D6C9880F56D0DD710B211F960460CA1DE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU6569~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU6569~1.PF
Size 6KB
SHA256 b0efb37f7d3dd7df7bc5c7c17e129a1ce94fcbcd6ea8ef80d1c5649b9b0a21ac
MD5 4a601fef5cf09c903ff2e5fe56767148
SHA1 866607daf1f6bc57fd3ec6b863616b7fb76aefff
SHA512 db8eea202c65c8c63fe1f033333fe8bae77c29e01b28333d11156e389181ed58b11bac623d1df598308316f50de60f1223b5d51a5f559017b09ee62bcd5d6651
SSDEEP 192:ObaEP/53nVNto00JCMHnnkr3gqBNIiHIZMBAi/QtnlW:b6hXVNu00YMHnSgMkoAi/2lW
TLSH
T16AD18D840F9E292FA79E7F3C24EC9FB95C54203A2A8D74DBA4EA66C110AD06B14CD741
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU6BBA~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU6BBA~1.PF
Size 6KB
SHA256 9aff4b878dac5b00d2bcdb4dac05459cda0132e1e339f511b7b854f5239d9ed6
MD5 329172387ea49366c7b1415e6dccb373
SHA1 a209febb9a81e2174cd448193fe4c6a54101120d
SHA512 5e09cd687f35c1b53a465579478c8acc5564e2717ee4a141bc676e9ccf997062352e4d9a311b63fd6485d57c3225d9db5740919a792d69e92bc936f0051257e0
SSDEEP 96:82XHYw6kvO/vogPI4r6aVX3FR/vR5eUz6XOnqOUxd1JGvUbGgmWUDOs6tvq/Vox/:823x6kwI4r6aVTKVXGUnGvtKiatvCalL
TLSH
T1DBD17D8AB41B0001C99EEE1C3D54771C7241E467064F2A5E07A37E95B1D245EED18D7F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU6E3E~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU6E3E~1.PF
Size 7KB
SHA256 e6703524b18b23721c39d811e9af35b681925190d092f7ed6875970376514f85
MD5 5db9f51b89945b9fb58ad46077bc1318
SHA1 4693d2030925de2c76649c874ac8425ac827d672
SHA512 f8378e6d2cb9f56959987be250e0647ca7b80d7028b7e7a340665dd8d8a0c986da37b79d9dfb6d1a29bab8b911944540153941deae90ab757d0579572cc49a37
SSDEEP 192:vPEaADVRNy1dqP4bq/xYWeWCPZE/FlQR2JTzlK9UWaYAGgTFTx:vsaIVWjqwW/iWwBE/3LJTzuzA/TFTx
TLSH
T12AF1BFE48F03FC53F5A364F62FEA17C5A3D28714D1B1375AE824CA453E2A4D02A62C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU6F6B~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU6F6B~1.PF
Size 6KB
SHA256 3986889165f338d6d0fc9242a1d8b2b50e49821a2b96751b2137e532ba191906
MD5 3c34ca2b9eaaca7b9742cce02211d348
SHA1 dcf2556d7e37a6e4b261e38c62f52e314cb2b22f
SHA512 04fbf52d8b2b146e7c3675ddc1d8c41fc9789d05f759a49ba82379a779b1eca0a983d10745ddad1e79be2ea7ef00b7a143cbfa403df950420977e9db13883726
SSDEEP 192:WqV615MDnaiO7EqW06jl9zSmBqwl57q2PuXlGHaQcB:B615MDnsXW06jmoqwD7q2PuXlGHmB
TLSH
T13FD18F62A86335C2DDBF9F30E5F4CF8C3B5A3646695B3256C1A50A39B4E6DE12A00217
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU7778~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU7778~1.PF
Size 6KB
SHA256 ac42d8b5c5a3b71a281e5b9ebe6e77743f54a9b6eddfa866a421a8146ba7a0a3
MD5 ce9556e8f3c8ddf8f0a140e01543047f
SHA1 8529b5627513bf439fd07f8f9fb3c6ab44c44dbc
SHA512 71aa6ca2bf29f0626e2406befa3077d9a49581e5cb437c7ab57ef725491c01e738168fa0fffb7d6c2e13839e79a9861877d2ba826f49c5dc25826ca46dccb539
SSDEEP 192:+mefKUvIx2VJv/in/yQ07D7fdtTl8QOBq+x:hdoQQ3i/jInfdNl83c+x
TLSH
T1E4D1AD0C3C5C3F51091ED9BBB396EECB52B26F0A40005AB77BBC2E810079E5E5C0C9A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU792E~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU792E~1.PF
Size 6KB
SHA256 e879a4628e8564ca8d003bc55331db27dc76c44d027d04f9b89d05a4b383fac1
MD5 030dd513dc7cd5f9f696151284819273
SHA1 dcf1c032f2ceb5272c545116571a176e2c607f72
SHA512 98d90dd9a8a7707e8a8b396037d7c2ebccafa24e8a6839611bec4267471dbba21c0ed37496ef7e38b09a6ef825c2adcd7da1d2e7b1702c2607b8069cef740d93
SSDEEP 192:x1lOKpNZWA3PDykzuCmRMqlTWbMKlyIY7z:x2er737y/CzqpolK7z
TLSH
T1BDD19E84B39485A4FDFF3E7F50FDC33F3E00759E9A02A926B56052C592D5E2890A4A70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU7A83~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU7A83~1.PF
Size 6KB
SHA256 83271f6d4930892a72c0bde8ef5192f78ae22752b5dd8132c8b69425c44e27c9
MD5 f506d2d05e7123841c2ff2f0ae62cebd
SHA1 69ed92d95b4de781ed886287b17edf815f23fb57
SHA512 6b2a167b2a8b1ee97f7ef55e42adc5ed7ce9a5bdba0d291f7b3233841aef046c9654e46876c2a2278cf7811d2e095007d45f68e03fbd6073f1375bfd3b72a0f5
SSDEEP 192:Dy1C8oqANueonGnCWifRr7AKAdwDAgrLFkjs1P+/LCcSXl03AL:18onXQl3h7u+VtYLCcSCAL
TLSH
T1FDD17C2CE12A24BDD6BBA5BD4125021F37D039C9692B30EC28D9A9C4BE620665C7C17D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU7BCA~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU7BCA~1.PF
Size 6KB
SHA256 a40d25fc9dea422439904dd97230b3e5426bce156c2732f2f393704904ab03bb
MD5 2071c5b28bd2a43d29ab4952e0279b01
SHA1 24f9c9f5b338b042c5d15ca1f0fd6c1452edf5be
SHA512 93f2fd1508286a1009111e16b7bdfb909b168667c3e2efbb13bad3e874031dca5861e245eac6a6c63033b87cb85af3c74681b5b673c4bd0992aab70bc06808f7
SSDEEP 96:7isrArCPupxlOXJXcdK31wTkKbNwk0j/otNBi66XdnB6ilbMmGEtLqLW3CDi4zpk:OgArCPmUXxcdA1sk5iNBGgabxZWWAGKA
TLSH
T12CD18F5050EE45818BCB2B1414A0DBCDB25FA78BA0773BADB1B76D40BDD3426E644654
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU7CCA~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU7CCA~1.PF
Size 6KB
SHA256 6b40da76271a15195b723720638a11990abcb0f3731ad61ccc2cd71f39821009
MD5 7161aef3af05dafdc943d45332bbd7ea
SHA1 9a8eabc9fbe1fb09708447b3b36febf367c8a1aa
SHA512 69b4fc6d10900d4b1c34886c3c975984a0c9f7a6f652035ddbaa6d84420d8163193c9b7e349837dd53e7f35cc8052a268a009577b1556dae0ce1771fd04041cd
SSDEEP 192:blilFDlO/Nlh+O0Z6dl7ix8A8SueMMchz4RSml:+dIyZF8AFbdS8Rbl
TLSH
T121D18D2C2005B89F655F6A28E0E56F8D3677B90388C34F6070ABF07546CFD4AE4DA819
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU84B4~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU84B4~1.PF
Size 6KB
SHA256 05a30a0ed6459ed9c19324990da0546353d7e38cd7fe58f1e2ebd68df4e34f8c
MD5 dd27893b07c9005c5da6ec64f9c332fd
SHA1 9c1367cece8ff5cf0c896e8cec8acb1307ca7df5
SHA512 bc557152ce3a6fd919cdaf6c49d3bbaabefd7f9d05a6e4cd76755bd13c26e215ca25aa62c33104f05dd60233a7789850737dbf3f85070fbcebfeabb12207eb9e
SSDEEP 192:DLINsVYTNzkjte+iICAwQ/XVziQwyaN0D:NSFk+ICVEXVzHwyU0D
TLSH
T148D18F6804826BC3C8EF3F2A1DA505DF517EE8012898E056D7FF7930BE13059E45687B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU8F7C~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU8F7C~1.PF
Size 6KB
SHA256 25e8f73226ea40cc97e21011d9290b1ab9eb7f20f7712ad03884899a1f34ceb2
MD5 60118036c1f40b6bef7a699ef38047df
SHA1 8d01e22c61319d913d3991f5bca20e16158f7bd8
SHA512 45e018486e9c04c771b174a9ca394a8cb21a799b17dcfe6ccad4dbb1ada4eff19e7c3cc0dbc1d3235dfff48d2716d054a72912e48fdab129d85fd24d830f5e9b
SSDEEP 96:OZLOPynOtzcm9UcC1f2VJ+jKmsqRN3dCsHkSz0Hu7BAf6vQuqkqvjOclkTu:OcxtzhUlN2/msqRN3dtEDaCfJ/vjCTu
TLSH
T128D19F99DC5FC24FC2BA0375E82280449FED4B56C7A1B1F52932CF9E9964051F35609B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU90B9~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU90B9~1.PF
Size 6KB
SHA256 ce9be1481f97619a33bf0ee49c939b3cf231472eb8a2c77326fd66805e2b231a
MD5 85073618a9314d36fd8dbbe089677629
SHA1 13b222df67fb8db4bfe80356e8377e602557ca6e
SHA512 d891f0ed86ee64bf7bce699ee85580e65861eec8dece457d32708c4557d60a7918523ec58d34082a98884493d8c5938fdf13ff675268948e766e48d950e6af34
SSDEEP 96:DzT9kPJlexLolAqzWcEAj2kU05PFUsHdqPtMiIUYPBtjFHA4uMZ6m8gd8HapZbbt:DP0QxLIn9Eo2kvx59jplBI7m3d86pgi
TLSH
T1A2D19F44559DAF86EE1CFBF86CB2535071C7100E0A7E50DDEA264ECDFBF6A4806A0954
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU938F~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU938F~1.PF
Size 6KB
SHA256 303191e9fe7e5d80d59a077edb57f8cbfbf63d67aec920313d6d9ccc4c63a246
MD5 ef17b4167adab0277fcbdc1939749159
SHA1 d6d72be4d3883a9b79bb3bfc909124b4559404d0
SHA512 45485d85ee474dc04a90bb7ca9c9940150b85e3b23d9300be7a15d73f8d9c7c588678e6e181d0c7788122251a36421e2a977312d2a24643d2d4c1c7ead1c0e76
SSDEEP 192:OuGNczlQoZB5fJ5wtyes2JYwlMzm4S1di:1G6lP1fY3JBSF
TLSH
T1F7D1AFC4E89577ABD1C82BB7F3B607950F4BCC41E53F917A3207059633A69BD0964403
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RU9520~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RU9520~1.PF
Size 6KB
SHA256 223f47b838e2b414c2744902215b97f9dc3190bcbed62d49395a7b6dd1b109fc
MD5 95985e41573976c3ec49e67403c53251
SHA1 e16c6f6379f91cb359ddc5f38461ea807053ab96
SHA512 4d956c3812162d14caca1b66c03e8e253e96d75c65566cc2f76ea4af51428b377ca7f9ab45ecd96cfdc05c8f4b18dff5e3d46978b89e7b4a584e4328c5ffe8bc
SSDEEP 192:tggatJZJumRygTluMJEpaX3U3j91iYcF5cPTN7YKd:wZJumRyC33U3x1ibF5qT9Ld
TLSH
T10AD1A04416B9355B882B5FDBB40D97868B372E0900F009EB1D4A9473DBBFC74D6A7E04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUA5CF~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUA5CF~1.PF
Size 7KB
SHA256 95cd9416dcca7a3110b9276dc2be458506c388ccefed8391580ae6139f80bb17
MD5 066a883f8e96288c11ccf0a9ef5713cf
SHA1 68d49633b1268ec9ece96c9a591fe224dba06eb7
SHA512 b098c09f02f0a3f57d524009f6cdd8bcfbce39530a99c01e34b226012989d1574c3f28fde64221849a2bdf09cf7f9d477efb0324ea3258c61303a99b05cd5fcb
SSDEEP 192:pBtQOln7liHJLJlwIdS/a7vRRRv4s1sBBOpsijq:pwSBCnddRRt4MuOOiG
TLSH
T145E180A5948FED1BEA32093F011465551AC5EF1441C64E74CDCA21B71682D42F2BDB7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUA75F~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUA75F~1.PF
Size 6KB
SHA256 d60f1b1679197cf734dc3257e5485d37609ab292cc6a865caae410fdcdcd1cc9
MD5 b1ef74925bc31ebc84c5d4b37592a98a
SHA1 3aa36680fa51fd431699679e6970c532ed26672a
SHA512 be3d17500055c6ace82554e7ead78d7c4c307b792565bbc8929ad9c073c17963a3a19044372c7a1c489461e3614fedb2884efd8f61d7a3b8e54e096c24dcdc5f
SSDEEP 192:T7jDrhFIRGYRT4FKYK5YFCkZQ1YtSWoXF:r3mGe4vFCkm1AloXF
TLSH
T121D19E3E55EFA679D67CE73014634FFE3371D19B045B5184913164A821E71E840C0B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUAC24~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUAC24~1.PF
Size 11KB
SHA256 db7df8d4a9449b44d0926df35dd64bfe6518257ff6866dcae69c037dc49f880e
MD5 70f7b1aa89c904398e8e02a5b00863f3
SHA1 84ff90c4060a92eaa688c64cbc5f211e60a8df99
SHA512 5b222bd36e06f480e2c6a65e592007b9d031a1c44484d6e5d2d2083506fb751412f7ed57665311e6733aa45d766cb2b72d11857387da8b397495bfce6dc30a30
SSDEEP 192:RNsoiC5YFDPBHVAo94yGVXNHsMWhJAWtKy6nl17hRmBhiSmQLBobriTtY1kL6CV2:77KFDPpt9XoXNMMgrts7hR6hqQLirwtI
TLSH
T19732BF00304001F1EC577477798B0E8FEADBAF3C62DD4135D8AAE45718CB29BA621B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUAF9C~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUAF9C~1.PF
Size 6KB
SHA256 c0083e8aaeefee9ddbf5a656ad5acf33d427926a4116d2b791b32f2a766c445d
MD5 6820bd0a3649c9f23e56cb82f3d2a47f
SHA1 cac5d08a150cd9e976111d829a3c3bea7586e5cd
SHA512 c8d1c39bbe147604e810ce5dd255b2bf22f215f08bf026e0123d26f9f3fdffe324b1c5fc5bc5a1b023511322bf7c88bbe2135b6ac0b7166bd49546106afbee70
SSDEEP 96:7yRYvtTBgZovWUYNGfD65xPGWhgpokrD2HNCJocp9rwB6+6NDX4PbMtXJKRr2h3d:ewtNgZoXYNi65xPG9Ccq+1h9tM0nJ
TLSH
T1CAD18D5154DA1E3DE969EF7690A017073FD9376CD492B285217B294C2C01A2B52B8FB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUB201~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUB201~1.PF
Size 6KB
SHA256 9054124724da183aaa1cf0b19966ba67d6cd14c87db714fefcfc3b440298d3bb
MD5 39038c336c03eab7f9068826db7be747
SHA1 917528542a726a45d7dc941d6aa437e968436580
SHA512 cc0c6a7ddc50ad396196407df95cb91386c92447b74b72fe8854fb9bca1328095042a88b2723b152e31d08c8651fdd6bd1204dad01497ca9fc99cca6832fe13f
SSDEEP 192:TbpfjdaAAfZh50M5RnS4gm6XrQF2d5nsq//x3P:VjdanfH50mFp6Xry2LsMx3P
TLSH
T1EFD18D609887625589EDD7B9ED36E3D8B7AE3B0A0C57A00CC0A21CCEE7D96419253423
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUB255~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUB255~1.PF
Size 6KB
SHA256 04d78d233a2e380dab7dd2c3d80c493cc38d308d35b8eae50773eb76135981e2
MD5 fcd1189a4e299951ebbb58f6537acc37
SHA1 f4c53bd98fd663c8a775e26e1439170820054931
SHA512 389aac93c40ed4504abcebda4a88521f8fb33c6cceafd8110d12dae07c4ae3a49c4c74dd09f532447d5541e8b3c5545a0c522f2785579540ef98ec4ba478101c
SSDEEP 192:OFS/QjfN1bioPnB09CA1vVkSJiZqLddGT9DCxIOz:eSWfzbpB9suSuqLT+izz
TLSH
T1F7D19D2DE4C07FBECD68717DAA34C19FDE198EC01D36A674514EE34B69CE46C12201C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUB28F~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUB28F~1.PF
Size 6KB
SHA256 fdcefdd334b57d1399a0ce5eda8caca0a9706a0a65485020d5648e4ef7d4d697
MD5 e9f82288f2e80960332c1a30d18881dc
SHA1 67650294f9432f76950b80134ed952a0a35ba59f
SHA512 ccf25d278bd7f1cc7853079df6339165d9727c9e426dff9029e98090bc43ad267b0c656ffb266a3bc660a45e959fcd23d95e195a852f361ef6f91123ccdbcf22
SSDEEP 192:T1EC/mtDwp4ucWPFsW3usiq/QkiMFl3QWXoe:pz/8Dwp4ubiIQkiMFl3foe
TLSH
T182D1AF95B2F5834CD2194CC4C9BF164FB92F525B0AF93267C4FCAB7C248383C9102AA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUBE49~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUBE49~1.PF
Size 6KB
SHA256 818461a6990f8cc0a6cbf8f7ed8accb4fdeceeb027b0f076d3a6d4784ebf9924
MD5 d11d47721ab78679ac9ff83f33d3106e
SHA1 df165438c798f95c66e7aefec1ced566a6919817
SHA512 c21be07c575c0e11345d85f827fde6b44f91bd056687c5b181693db4cab47a59564635a9340c429193713166a896839ca2840883b259838d28cde5341cfa39d1
SSDEEP 96:qdf9p5XMzh8QXyDVsDtMnMyMRg+rjt4aIp3JECrcA/8seiS+E0zwq:iXMzifVsDSMTjh4VLcA/8pWcq
TLSH
T100D19E679037FA46CD8F8C50E08A6FDF23E45B49544FA759B383DA30E8538342827A88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUC3DD~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUC3DD~1.PF
Size 6KB
SHA256 4bbd698fc381b013e2e0705d403b535b9a0ac0e51c204c9b81446cf4f47b861c
MD5 41f62f23bd2ff5d203995f2555d6b0a4
SHA1 52a15dde3522c4fc9cb836b2c4f6b98c826e826f
SHA512 8973164a50be1542526572f40f901ed48aaab62dacb86d14eadab2dd684c37794652b21044f04eee159697817fc05f5f5fbaa56f8d330fa9bcf8623613161439
SSDEEP 192:OHnr/sNw4yIENhkF9EBR+VFcgJzGbK8Uc1h78:m/ArEzkfRLzGboc1h78
TLSH
T1F4D17EC486F85A45861E5306C4B3CFF94A36904EAC7FAD9E19B37CAA6DB3440C20FC94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUCBB8~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUCBB8~1.PF
Size 6KB
SHA256 fcc30e0e8334595e1e081b3d05f9d22108e00de56c71ce51a4e4a8926fc270e4
MD5 2d706e969534a535d2c2e925444bc0ae
SHA1 6c9301abe608dd342032d76ffa3ae51fcf5c46da
SHA512 7624401d00dd5a5df8253e1ca28c5adcf9d4e1e4de65ac243c92fa604abd1dc39d1abfe8c69ff491d1ddcbdc36340b2b50eafa8cab0b8e3e627f240b941f4e0e
SSDEEP 192:O3rAGeR3+Hbi5SZhZ0kwyHBw+TrYhfarM:urneR3+Hb+ahJbjTrYhfJ
TLSH
T10ED18F07E45C2761DD16BF29B1FD5075C845D48C2C2DC2F89D6BDDE53AC2C786CA48A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUCC0F~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUCC0F~1.PF
Size 6KB
SHA256 ae314fc01834db9c71dc96180bee5368d872eb59282c9a54cdf3c5073ada9913
MD5 f16d8449c29be361bdcdffc355323fcc
SHA1 072b1db147c9533205c2b3a2c9a87c3a4212a10b
SHA512 bdbd593718650ec795ec19c8e2cf47eccca16ed624470f0acb354dc487f3f6ae3e9677dd8feea2b414f30ff5ac986d2bea9f0e76d17589c70074cfd8726c1bac
SSDEEP 192:zQe0dr3WC6QZCLm3WUTViTeP4tFPwVa1nO2VnJc:0+xQCcKFHK839Jc
TLSH
T176D1BF2AEAC55614D14CE6306F6E01CB27A01BE0259F3078C6DFE6124CBD81B678820D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUD0C3~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUD0C3~1.PF
Size 15KB
SHA256 631ed8db0c1a2ec07662d00f5fbfd5d4724775b772d539f07620741bdb261223
MD5 f63af17dc9b332f41f01bafcad787249
SHA1 cf51fe65821a1675031236ac546697d640891c9a
SHA512 7ddd98bbd352b9db271cd918364ea03528c8e33d1e25a864de42b036c7601368535a1dd5f05a2496a558c97b76f66045158a1f807bbc30ed7f1ecb43f01a061b
SSDEEP 384:fTdl2A9qR/BokjVLM8djtXJo9zDwjObxIcya/:fiPRSQx/Jo9zksth
TLSH
T1C962BF9B3646AF64DFB37DB8D9EE49045FFC468606AD88344802EC9C2F88E08597443F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUD6A6~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUD6A6~1.PF
Size 6KB
SHA256 124ac4fa895acabb4e563955f25e819ed6a414980ff71784e3bc941309bc60f7
MD5 b54f5dfcf5e5961f4bf8ca84e5f0a221
SHA1 0a5993c153cb535900b8eebc8790c234be0c800c
SHA512 66ce2e7d47da797ff4ef6ddc0829520fd2e58390787f2e3058f8dcb8c8da79ca6df6472a746ec5864e5fb1dd493081ff6ab49c40eb3397f69346380dc55b3e1c
SSDEEP 192:jKBf0sQXf252FHhWmrcORn5ckoKNiQPPb2czYiyJ:80sQXfnFFRn5ch2b2c1yJ
TLSH
T1AED19F44464AAD704DD0BBB01F34B18CEF625256CA6B90AE72B311961A3FC290C24F1C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUDC57~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUDC57~1.PF
Size 6KB
SHA256 8b93408f3955166ac8dde594ff127acd23ff2c09ddad0fbad71c337260a72840
MD5 8d3278c5159b13fef5ee4929cd072c06
SHA1 13f292c9ab51e0e60a43e9a5e77266dffa5df897
SHA512 6560bfce01b9935a3c3731cb1ab2cd3b5bec3294a2fb441ebbc58bf955b2476f771a0c00081cd3b4698b47e6cd2baf7debd61bff161d9261a9755e8c694a9f7a
SSDEEP 192:eIm97+T9TVIhsM28OMLf1mG5zb8a5UjaLSO/:M7ehIhn2nhG955Ust
TLSH
T175D18D1DA84D2B8A8451FFBA4A20C7DEF3C33486C42978F052556AEA6A8F12F4157716
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUDE31~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUDE31~1.PF
Size 6KB
SHA256 38fdfa13d782b5d7d67b94d88c68c7f78da9af964360f58ce8c88dd926a4601f
MD5 574f0c1ef28d5ce94699a97fc69f16c4
SHA1 b862f2b22a795d82c865e536448c333d62f680a7
SHA512 f0b226a8c602a76a316c73d1a6a25a101c3f750eca431a625e98a9fbe30153347c74c9cbff0e309a3c8047d6c71787a6fe7caba08b6a2051208ce974e4bd56f7
SSDEEP 192:DPbvwPWe40Xgd1pQj3b0ae3fGyNe07jdgJ990qELoQw:XoPt4kGpQ7gP7Y0vdi99DEL1w
TLSH
T1ACD1BF40DC0E35F0CA665F18537263AB86BA70505FA935F2A7614CDC6EB40C0A7C5B68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUE244~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUE244~1.PF
Size 6KB
SHA256 5e69faa3bbc888b6819fbdea8168be836e7540ab61c2e93211d6cdc5f4b86a97
MD5 bf73b57309b22617cdfb46221972c023
SHA1 fe6763bf6adf02ed3e4d312edd54ded44696a637
SHA512 98c0b95b698e07f2be0bd10834f9ee270a7142c5656d98ef026af437f07d2f6d487737dc76c0b78db08b5a1afa76453ab5e9f4bc1bca7ef04279427309d2edac
SSDEEP 96:7yOsiHUP1Z2uxjLz0WJgflr26R7mdmrMTB772uPLtWAxdqURBIydKMP3WuHkptGA:eOsHUuR0WJgRZGBOCsAlBNdXPmuEpX
TLSH
T181D17D388AA556CFEA4BFE3B3818C7AD71847F02487732A8E77716B576410628AC4C24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUE5AD~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUE5AD~1.PF
Size 6KB
SHA256 5632ac05de2034283ad189932a20214dc88138963f6e506f60bbd1162b064f10
MD5 d45803c7ea02dc0a6eaf3f1ed11a0173
SHA1 cf302083dcfe9898325108c78df05c03adc3d288
SHA512 bbef4bf169634e332e1c97d41b11a143455eb0497f6d2ac9d4d726f6bd9201f13289a02071927e96d4a65fff6494a650fd47ff6c1b5b8539537b1d50eecf347e
SSDEEP 96:W6ClYM5wXp1xqj5rzQHQAsyEYKQDD5I5iQ2sg+J3FwjANVLQNSI8QlP9adHVp6eG:W6lM5K1Q0wmzq52+FNR4SI8QlP9yHVK
TLSH
T12DD17D1CD35269B8842551B9817A433937083C51A7B805AEB3A7BCF5F283A71F0BAE17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUEB38~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUEB38~1.PF
Size 7KB
SHA256 8d331fc2a7e7c006d453983be70a16ce4feb3d9bc043503c12d68ff466f5bd73
MD5 596b80d2f92ee0c7a8c7a0e6d108b3be
SHA1 43d6689874df24d9a79510d10b7c8deb99079b66
SHA512 f33f0e08bef07dffc156177b3218385d2d42a249f40ace070d6ef82c41b9deaca8552dc8eb0414e4efa3e17bb9a874988e68faa35863abf00bb5fe88257caa75
SSDEEP 192:ekTOXC+wkH9vr5jJuYLhfk/zhgNhyY6LvpO7u:ekyXjbHRlJuYL5kivLkvpOu
TLSH
T1DCF19FED46F1FD82F721B2983C52C035B340243640B1A76A160B00ABD6555E71BF6327
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUEEAA~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUEEAA~1.PF
Size 6KB
SHA256 2f7d1701e960b0c83946c07b3571db190b54a7def4ec544a82ffc69b995f2b51
MD5 075b7e14806d3dd933c65a9f6c4c8de3
SHA1 a8358f9965e53cf58eb3c2e1c1a857bd52309365
SHA512 0047919e750417fd3e478353fe0a51c5187cafc27277cb9911c4ba8db1120439593de16116ce4b1bf50b12f631185b08ad8686e4df388556869d7c25c661ff8a
SSDEEP 96:7MGxggn/wjI/fyNYJtjpOohZ1gbpiqRuW/IUtg7dfNMpqj63s4ykPlunmBH:jxggd/fHj7Z16AqZ/VtgROpqOnyfnmx
TLSH
T140D1B0AFE42E2780E0195FFD5AAF4A84BBD1DAA4CE553E8831F302924C6D614D5D51F0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUF544~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUF544~1.PF
Size 6KB
SHA256 746362759403b2bcbe2923ead424a004ea2f1a3589657bb283bb9775d793fc8c
MD5 4af1c53bb11af3a05325e55ea7a92a83
SHA1 08185d91d19d190d036f2e2b19218eb4c535f3a1
SHA512 137d0ebb858db4ff2712f4e6b498f437c4b62695d0d1dd18d705c435199f5e7d4998b968051f25f4b61956f199cea1ef25b040263de288ef5a8f1eab68e913d1
SSDEEP 192:AW2DyARk18DmFs7mzNJ8frIDIAXv7MsZioscVe:12DdRQ8as7G3yrASQe
TLSH
T1A6D1AF6C0CE95FB1D14C5C67E778165CEF9038A1CFF06464A546ABF804729C690B028F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUF5DE~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUF5DE~1.PF
Size 6KB
SHA256 6564b8f3b3445a250cd01f8d7f817f2ff238472889acedf0d1fadcf5d8c33902
MD5 3e6d806ee6ee288ae1dee8e41bac643e
SHA1 4f09289bb4277e18fed36d8e43be640366809200
SHA512 abc1e6dfd426060da5ddfa6e180558b3ab5217046f5a517eac8539921f42f22195f8e6d6d80e66e2f0a44d1b9d52ff4240a6bae8d3ac1f7e1d42703fdd953bf6
SSDEEP 96:T88UOpts5blfNaEPldeHrYkvgne3WvVQ9GaroXR4IpEwjiHhX2q6:T88bElPd0HZge0Q97r06OfkVe
TLSH
T1F7D19EB04AC3CAA1DF2DBAA93456CBD25370333A194D721F3E225ED80CE6D555A8DC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUF708~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUF708~1.PF
Size 6KB
SHA256 3853535e59ed7dbbed94e031eef4e152c69d83d158ef10b33091f24a75fa0ba3
MD5 51f0c332bd08e5d3ba29ee2ee78c248b
SHA1 4cd7688494c10446052ba1241417249301e668a1
SHA512 b9fd8352cd18a8ae6f494ca3ba85f61b2f81e21360cf9df261d6e219c7d4d26c91e129e02e6637c441b8a661eb460cf97847112cc239d6c19454b82dbcbcbefe
SSDEEP 192:MxLlIwcGPBr/xvB2+ov5vLocFnNlnbqcQ9bmg+Qcvl+:MLXckB4lvhFnNRbqcQcQcvl+
TLSH
T1D5D17DA8A5EC6F89CA4D7BF0B7784DFFDBEC4A052550093F71B330A4BDD180A401951A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUFCB4~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUFCB4~1.PF
Size 7KB
SHA256 ee9bbb1780da59079df87f9974a305fcfcb422426eb5803a91b5dbeac4830205
MD5 c25efc7ed78ad445e963168e3c841193
SHA1 6add9398b29244a3b09fa4d892769bd3fc936780
SHA512 25e687d4819993f2cf3adc9e793b7758a175e83d20c7f2a9d9eba21c2a6c906b6b642db3f0ad5a369e87abd4c6a95803405b3ab367b61004a247610de33a6ef9
SSDEEP 192:O4c4tKWkGfsDj6tT1CY9dJewy86pdH66kIuKAdZ06Tqko5auxep5:iJNG2WAY30wQpd8AAd7TikWeb
TLSH
T19FF18EEA08DDDCE97256EBFC97D2D8773F46D42A04D5B6274E008942CC0CB5D4B81629
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-08AF006C.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUNDLL32.EXE-08AF006C.pf
Size 6KB
SHA256 ae25f6ad1e4306b45e38ce4474b3f572d5558e6abbc02f6da08c2d5158866ed9
MD5 615ec4ec28cf9805c8696ad9ff353ad3
SHA1 deb8acc5f6a9fc695cac6103c8b49847e69f03cd
SHA512 e81784af207ac09a7a2dd1db222188aa0fe6188f61798dab2b5bcc856a15d210343fe0947afe145784ed13683afe17abe23e46cdcfd0452efc884570e699cbe7
SSDEEP 192:Giai9TkawJNfkYAs7GOQOOA/FGxoOQL3gxcZg:VtkplAs7GO9OAY8IcZg
TLSH
T12BD1AE18AB93419DC04C471474D72F926305E80C37C8B0BA9B5B78B931E2CB450BEC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-7BCB4814.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUNDLL32.EXE-7BCB4814.pf
Size 6KB
SHA256 636dbc9e7aaf89e4cfcf6e7aedd6c9b4078ec70b2e129ca48a1a369a745af499
MD5 13ba794711214ac52f0451e1a7967b9a
SHA1 f42e3cd122cc035f525db05f46681c03e3345c0c
SHA512 a8f73f46432321235c41d67288e7c9632bf9f79e8d4e786ba2a7a0f30003572fdec290e8b9e0105f5d2f77ae753111632e2e33fa1ef0d1bd52fa5d24ad942393
SSDEEP 96:BrCHEkFlHyc3NdY1NJTa22vyplDwTRJVhhWg7OwGHexukMpXGLwmlT6Hdkn0c:BrCHyc98hpwTpWg7R2exEXGLwmWc
TLSH
T148D1AE238C275FAEFF0F6735B18B06C81309B25619A3C2541D286E2C7A23026A1417AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-976DB280.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUNDLL32.EXE-976DB280.pf
Size 6KB
SHA256 6f02074aece7179e01eaccc557edce3bdb634e088a895ee55f070d643f8fa750
MD5 f1a80d2389d8ab0b3b544e7b47f0d7a0
SHA1 ad3107446172f9bc1686f623c6275ef4fcafffc1
SHA512 7ee6d2f94a8255daa8836e995cab400c20bbe81f11f4305dd3564013fa747cb42e3cdb3900ae978c6a171ec777ff0626b6f06d08524a35c8e692ebfdf9c4f816
SSDEEP 96:5ED5cZr2vLOZwQeePU63OGFSomk87mOLOiNEsYp2ULTldF/OFKsJnf9Eo0EDqhr0:5ED6jtYa87BcpBldF/wXFMTrxSdf
TLSH
T11AD18DDCD7A2083FC5F98FB74E6B6949344498121F48E5ABD803A5E9F2468436045E3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-97BCF638.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUNDLL32.EXE-97BCF638.pf
Size 6KB
SHA256 85a279f4ea6d7f5984af30cfcf331617911f9574b11f2c33e019a63ae2bf2338
MD5 cfb56a8a6aa3f0907927c692485d32a6
SHA1 f867ed829ccccf69d257a96f0c33de7d5d0f9817
SHA512 db4b2787f31a04298c9dc296a19d1ef3576cb0051fad2e8ac32878b16d49e4bae2e240942da3abadec5ec8bb1c3f25e5a4c776b4517f16edf0b2a2176d360ecb
SSDEEP 192:Rjfuda16glkpNztHjWFkDtWplmNU/vY50q0jbjStn/:VH5lWtHjWFOtWplmN56Dbjq
TLSH
T149D1AF18B727148FC474F6720C2C5A2DAAE5066E45A6FE7F8D47C715B82823EC2304D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNTIMEBROKER.EXE-005D3145.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUNTIMEBROKER.EXE-005D3145.pf
Size 13KB
SHA256 0b1daec4d0c040d4cb35b990d06eb59d260590d228328656780ade9d8bdd35a2
MD5 bbe95ece170d670638157fd625251c31
SHA1 2b05d751e13f711d859696011d1f9e7d853c09f6
SHA512 5797b6aec57f94a075e2600c4cd4f768e9d094f06b4e4e23e975e701120ba00e00791d6b25befb55875d8d7f8ac9324cb25596a4cafd7b39a43f97d956f388a3
SSDEEP 384:gMNxFvSPOa1Sij/oVLaGTelojUnXXT+3/kwZecGUh9BI5QhgDnkFx:gGq5jIuHojOaxZhYyWD6x
TLSH
T10952AF3834CCF73FA3FE58E4A42D8097FF52440507C5A1A5E251E1055ACB47A5F963AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNTIMEBROKER.EXE-06226CEB.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUNTIMEBROKER.EXE-06226CEB.pf
Size 4KB
SHA256 558511ca2fe73d36239454cd578f58cf99e2544f02736d446a2f62a4669dfba4
MD5 73fc739631e03b4ecea187819455600e
SHA1 bc95d641ee373f758aa57f84a651173dee4aded8
SHA512 abdf4953fc65a512a04f65666fb16a5684173701b01fd462f11f9e73f3a95914473397b8e6b4d4d33bc592764f2eb7bc8d0bcf55df8ed3935eed09c68b5378f2
SSDEEP 96:glg+wYBh+/6ZzxEk0hDwt7amBc22UnHYfEoiL94faihn:gLh+/6Zb0h0t7Fn2UYKL8a+
TLSH
T154915DCD456B78F07B012CF160F306E0090FDD22C29D81F8D1A5DE1FFB8429515289A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNTIMEBROKER.EXE-94A02D86.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUNTIMEBROKER.EXE-94A02D86.pf
Size 9KB
SHA256 6eb3fca64f2af1e4040038660b82861f9ba24d811852f6e355429de9aeab9e14
MD5 327f2c6ee6c5382d84c52ba79185645e
SHA1 b5f4e040f0fd3e7dbfa989f64f8c92dc7d4f273b
SHA512 5b1cf2c501f37d52efa242e7a69cfaf4d43faabdb215ad3496fb8b3a3caaec3dc7b0547edc9f531808c5feafc370e05cd7c28f374ed1f46d7e07c9bd800afe1e
SSDEEP 192:eMY2mgGgSYfHuUSWsQEZ4QGxCYW7XQK92c20S3ShQ6uCKks5fn:TpmlNYfHuUXsQXQGxCYRKrdS3Si6uks1
TLSH
T1AC228DC46E1B9D8424BEE83D4C748004E8D0B981916C1CAACC13657EA7DE67C53A7FFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNTIMEBROKER.EXE-98F22970.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\RUNTIMEBROKER.EXE-98F22970.pf
Size 17KB
SHA256 ebdca4c048923cfa941d21b39ea3b588124bd56eb971948e84c306e66d812e87
MD5 669f7946b5ee1af9a281f4a0e7f166b0
SHA1 a002b2b1ef60a49c59de66c770a5ed55b24832de
SHA512 fa073f1586c6156e29f20dc5001f00fb16d184bf55ed6e455b6ab7c8ca890462b1cec9072c15a9c60daed4a8af96d810445540170c5ea2b2e53c816b560f58d3
SSDEEP 384:ETlDK4W8W1p3rfOdhO1oNKJBjHPM3uWU5W/MG0ucfec1dgpCpNyDbaSt:+O4W8W1NGm1ZBDMexehAW7pCpcKSt
TLSH
T1FF82C0A368836CE8C9E408B0ACC57B082EDBC93154D9593866418DF7EECD5BC3B53A71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SEARCHAPP.EXE-0651CA85.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\SEARCHAPP.EXE-0651CA85.pf
Size 25KB
SHA256 b521b3c26d0d05080bcfb1b641c3955e3ce83c1a75fb82ec516a73e759c233ae
MD5 4a915a18b7666f59e5a686cf35557dc2
SHA1 755be80269bd4e147e7de96fa4e134e4aacd7235
SHA512 c18eb1d98d714caed9e78d441da8ac9eef065119e62c18275b71d5453544895284a760ed78cc76f458e25e2d511a18a9166c7e1571cff6ae640e477b9a04e064
SSDEEP 768:m9dWvqtARYFBwBEBK8dC0z6lO8sXkxCy8:MsvqmNBaptUn8
TLSH
T143C2BF0D04DA7E998D5BAFF5FFAE8D4B1A58CD3A069D29443151F9F9B182CE81324388
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SETTINGSYNCHOST.EXE-2521C7ED.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\SETTINGSYNCHOST.EXE-2521C7ED.pf
Size 5KB
SHA256 05ba58e66e114fdd2b25125625c322d8d8ac022c6bd048de01ec38d2d2aeb83c
MD5 fe1b684d4fea053efa0023c0b001b322
SHA1 8aa65e06c4fdaf002ed3e2b30e1bbf98168fc46c
SHA512 f99e1a390a81aa88b2c2a0798027bbead6d3daf45a38595b070741997add36a009024af7ea0071788cc82d1ffad149bb092b242bbc0ab490a639187811ba0e9e
SSDEEP 96:dSbsG+ZmIXYsLKYIjlcErUinqyPJxK9HKq49YNBG/5il6z8douJzOOznNF/qWcWK:MbiXXYKKfjdrVfPJxK1K79YNBUil6QoH
TLSH
T15AC18E08021922CDD764A529AE09D32D2E3B279D1681D133EB38D11B8E5743AF3F73AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SHELLEXPERIENCEHOST.EXE-A3608B1E.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\SHELLEXPERIENCEHOST.EXE-A3608B1E.pf
Size 20KB
SHA256 6ea3fe09ac549570569c2f2e431354efb2a60d24218ca24ca5d62bb7708f1a32
MD5 00ad085501f1367ba6b73f6857efeafe
SHA1 b8ebf0a88e147866183444ab0694a4054efd1cb8
SHA512 372973674c91771282332cdb13cda66bf264dbddff06dad300d9827c2cdb8949a9c55d794de349187225a51ff85db107d4f3b33377dd488b7a9dacbd6e027c2f
SSDEEP 384:l19VCk01Sl+h7/91g3nvNNF21vbwxYHnNO7rjlRwkj53SlGXRVtXa:bCkQp1yn81vbwxYH8/jlZ59P8
TLSH
T1D492BE0B08AC38149A5ADEB97F6D5A5FD69ACF6108C8974C75DAF8EE75091340A2FC0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SHUTDOWN.EXE-E7D5C9CC.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\SHUTDOWN.EXE-E7D5C9CC.pf
Size 2KB
SHA256 b1d2163e5cc89bb4fbe84e728ad10580cc1b7a42952c9669f7c7b6a92851e3d8
MD5 84d196a9229ca46aee3b12126b15bec4
SHA1 0588b15eae72059690cd317422d726fe0a81d72b
SHA512 d2c84f995c0fb7a78687653136f3c02e2376242ebb62d435792e76134a9af338f344fb5b306dc11ea57659b5880bf0943bd6f88160bdb04906155192356fe7fd
TLSH
T1A951AEAC11BFF083E81814B0C24C8F8823385634403A1ADD6C76D962DE8F92E628BB42
MD5 SHA1 SHA512 TLSH

Submit Download

STARTMENUEXPERIENCEHOST.EXE-D80E778C.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\STARTMENUEXPERIENCEHOST.EXE-D80E778C.pf
Size 33KB
SHA256 4501ee686eedb4f1f93482d2ab3d3781b93ba0602e59262361ad2b0571c21c10
MD5 822997c711cffd80528db05d746fb7d7
SHA1 43a4fc356c865d5a12152901a4ac267e5e3c8ae7
SHA512 436ea98563f0f969b940e7c34fc960823fb61c18009c273564cb15abbc1476ae3f26c6eff3e39f34db473f3350cbfe700a8d039efbba22f9720e8ab34d1d94bf
SSDEEP 768:5TIP1YNEFsnjX2FNA0GdrPuBye5V+TJdCE8z6PgJkwWxXWqMfI:JhqFeXqNvGpuf+TJt8mxGqMg
TLSH
T198E2CF8C05981560A8ED1FBD7F9DDEC27796C82E47E80B487205ECACF90A0B90D7AF55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SV0DFA~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\SV0DFA~1.PF
Size 6KB
SHA256 6b52541f9d8eb791bfb5d2624ce1d559495c0bedab58a8546a2bd751b9f33259
MD5 52ccf39c3a0df5395ac308b749d5b7c8
SHA1 7e05b3be5561f811c1290c4688538a22478993aa
SHA512 7bf8893700808d3119654a6be7765f26ddbd430bf2565a367680461d830986acfe797b95d7c4bf30eec3d0cc6eb903648fdf9fe458c97efa811508417bddc9e6
SSDEEP 96:JG+zPWtG9UvbCU4mcHlVk4CWAisrYifshrlJhLa9JW1j2GUNdttIZ/Lshf35/wSB:g+ytXODLHliWor7OlJhZrOttE/ihlR2C
TLSH
T105D19E584E8C063EDF8E19261A9BD68C636590B6638F07F9722C334021E1DF7A9088ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SV9A03~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\SV9A03~1.PF
Size 8KB
SHA256 baeb8687c3ebc436fc22fac7ebe926dae3b0f745ec3841052de19441ccaa368b
MD5 2b63f4012e230d772fad8169ca293cf4
SHA1 5d1dab76f2d594a2c133710f457567890628667b
SHA512 6fa7a17de52afebbb19544019358feee7bfc7ba7be279748275f58a0a2c30c29c9d9993c27cc5c9e17b3cceb8cfa7792d99e9b2ba666ef51f9431d806f314ac2
SSDEEP 192:LEWM6YDdyoLBZVimDZ1fyOBmEpwR0lgUEKdwesDVil0rikfu:lyHnVic+OB71ScdrsDfrPu
TLSH
T198029FD11FD1BD284D1C37FB782A594AB410C411898DBE8D91B9A99D13CE21B77BC28C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-033BBABB.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\SVCHOST.EXE-033BBABB.pf
Size 4KB
SHA256 fe6680ccec786f17f4492cb0c647fb8b5835111bad268108737f07f3bc8b4b1e
MD5 3fe9c8aa43dba9e4be0ae2ee7606bec6
SHA1 62df93d3e917aa0716be2b1f923ca7c06077122a
SHA512 da893ffa0891690cd3599c83818a0b81a4532e83fe985b2c0bfd4416bb6f9db0c8dad3b7646e6613a7facd1880eb9ae004044652f6d6deec3447c9df2f8a3a57
SSDEEP 96:agKT6+v9SCTjHYcWSCE21hp+lQ5qpdHOnc7+yrtz9Gl9akpwK1ha4ntY8:agKu+lSCHHVWfL+YcCewMSZntJ
TLSH
T1B6916C146044D58CC5370C7CB0FACF4A9D20E26B87C593686252B238DFC157DD9B6D94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-9F4DB6F5.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\SVCHOST.EXE-9F4DB6F5.pf
Size 6KB
SHA256 05428365d99b2c51e7b24eb84aaba0a99b391f3fc9e8c11f8c032e30c9195e27
MD5 0f62df87af522e38fb37bd82b1c5e7a3
SHA1 a33871d21e869810f57391e208037c064e03395b
SHA512 b2c1fe7acd9cc55de5a362eab00f49a0b430c82aef729f3f3d794001f683ec959da011269b0cda252895c971aab13f025d5915cd3e78d5f12c9e51a858515b74
SSDEEP 96:ChRefXbz72QJyUJW23IQR8Km5qsM9li/8gDxT0pgfoGfYX5IZvIPG5Bgt4F:WKLz72ZTAJiKm0ji9F0IFLZaGctG
TLSH
T122D17DF2429174E1B589973C1BDA5D3C4754DE6C22F0D2F26A9DBD21350E232AF2287A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-C49E779A.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\SVCHOST.EXE-C49E779A.pf
Size 9KB
SHA256 e7f60d66c1ce325c7369cc7a148d0cbc9e18122c08d7499fba37467357897015
MD5 ec6514215b6f3ffe1363d7b5623ee3d6
SHA1 fc6aef4bf6e71bd661780bc0d6576771118289dd
SHA512 9d4cd352667db9c3cdb12d129fd4bb2efeddb07e9474b59170ec99e5df1b69e1101837e44ad21f2b88df6b25eb53419192085869e719b9af4ddddb70a08e0213
SSDEEP 192:3a+IvIXeSN2rEo6GhZwNjSNBxKVwuaOKuueis0cJZAk4wf2okfq5koeAuzH:3ahvIurmsZwlkc5ajcJZx4+2Ff6kxzH
TLSH
T160128E7A3585F2CCE8B8AB3230898EA33BE1A659665943744409AD81770B4F073957BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-DF3D779F.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\SVCHOST.EXE-DF3D779F.pf
Size 5KB
SHA256 85d65aadef35de04a209f9deefed1acaaaa2a18ee140e2289aaf464dfb0c46ea
MD5 17a842d96394ee919f05ec27a582b888
SHA1 feb40d212c517ac4a2fea46c4f5e1e4200b633f3
SHA512 9fa3fbcb62b1de6a71d7133c5a0640b57ae3676718d6874a91dd9c735bcc6777eab05152952ae08a37ac1f6f2d1c6ec7f67090884b2d9bc2ff1969c90a7834f6
SSDEEP 96:BhxMUKWYhmeprx0JZXPClWraU7i1cnO5RP7IQ34FhTqpLO0zS7mW:nqO4dpreJZXObSOPzyFiL527mW
TLSH
T170B19E4E260C7471D674DF3649B646994944CF0300CA8818E60B875AEB07ABA6FDAF31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-FF8EBD82.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\SVCHOST.EXE-FF8EBD82.pf
Size 3KB
SHA256 bba10b6ec576eadc6f293e137194a958a171c8061a9ae03b8385eb5ee0aab6cd
MD5 3cd8cf9823a958c20764b267812d6363
SHA1 47d643148690a5d89fe59d84501ad0451c9e63cf
SHA512 0d064880bdf5b8c75f384750d1aa263be0a744f59eae5cedb1a2c7029e2df028130752acfcf58879659697b2112f15decb0b309f81ffe82762453f4d36a61d02
TLSH
T184517DD3C4662E20E67914324B03483B24BFBC336C1A9F9E87625186CC82481C81F21F
MD5 SHA1 SHA512 TLSH

Submit Download

TAKEOWN.EXE-A80759AD.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\TAKEOWN.EXE-A80759AD.pf
Size 2KB
SHA256 a374931bf1346e21203ae6fc3759746beb0a75b853f631b640371f8aecb0deee
MD5 7f5f34dea066261139873921ab50c9bb
SHA1 b0c0c0d92439623cec33a80c8eb11e820144b36c
SHA512 927021e2531c1b731e324e09c4f1745b5e1f1b9b3b4a57b5dfd90be8442cf3290b6cf4da11317e2aee29c582c3f3f432cac7905ba5e4e17d5823c825e9396913
TLSH
T10C410A8F1BC7B369C81D90F9A8D55355F23CE0247AE3147D1566D262916E7208770F04
MD5 SHA1 SHA512 TLSH

Submit Download

TASKHOSTW.EXE-3E0B74C8.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\TASKHOSTW.EXE-3E0B74C8.pf
Size 5KB
SHA256 4276883251a0941dfc1f926ca8601baafe1f999b9ac400b59b3d45086c9b86b5
MD5 c41e40dbe2c937fa643cbf72fb156c66
SHA1 608c1389d99fafb65da4bec84b057998ef249416
SHA512 3ffae3c9bab4802ce83cc066532b865503a25e0ae15055c496b9b96ba47f8d0e9ef38f5ab5de9dbf42624dc08ba1bd7720c28d15c08dba3bbca537d999588b69
SSDEEP 96:Az+6bZTAz/Qmvuf1glybaJIg20jydJLm6JRNrDcTewoREoJYVX:+3bZTAzXkbav2VVbNrDSewo6oC
TLSH
T190B18F4411D9BEA3E4608D7B8BDCAED5B1FD1D1109C4316608AAA9DF7B4083A97474AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TASKKILL.EXE-8F5B2253.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\TASKKILL.EXE-8F5B2253.pf
Size 4KB
SHA256 d062a0f6f6121a6fc0669b95309933f12cf9c5e5362118bccc8226a2498600aa
MD5 2786d21508b7c06d3e1908c346ec2d97
SHA1 406c0309284140d35e72367e5acfaa53cc59b0aa
SHA512 2c2c9760a1910a1474f31ced11c868bdfb092d5f6952297add97f8b32afacd40e44793ccefbadab2634001e29809ef246f41493365a53971d911063a2e250ae2
SSDEEP 96:TdG9mPpba0hLC5TN6+EKuz8NZJhC+4MsGXM5fTpe3q+iuRp:RG9ypbfCP6+wwD+7cM5fTpe3BRp
TLSH
T160A15CFE93CC289AF3295B353ACE967875CAAE02F44DC05F2E513246548606DD0D5F90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WLRMDR.EXE-C2B47318.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\Prefetch\WLRMDR.EXE-C2B47318.pf
Size 11KB
SHA256 1c77f544982956f108ee7fa30aeb3d60acdcee7b3ad380e5726ed686c7ded08c
MD5 0e35fa349503e57db78e43652a0d5945
SHA1 7604bf736faca9af74a00051fd5e79e406edeb7c
SHA512 3612bd14168c2da86690bd8cb3a040e760fcb479a28dc8e8765ce0cf08c9c50101ed7b6fd445f043a86e50a9396477fed617cafbea52dfb099ff02a427e4d364
SSDEEP 192:kNeQL8TR0dmagecgvLPu3wmdqnXpcCsQjpDkoySXJxCLUKay0iut2YEsrSzPEiY:q8Tn/eHDPu3wmqXm8pDkowX02YZ0E5
TLSH
T12732AF9D1585D494EE39C6348F05405DF3BB92D98D328367AA64A89C2B4FCC528F714C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LwtNetLog.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\LogFiles\WMI\LwtNetLog.etl
Size 64KB
SHA256 d52a795fb84a2697e24034e453a46881e90e5e7d2402b2283e54cd79796ad443
MD5 bfa48887c9d4f467c77a7ea40e4bfe92
SHA1 cfba6be4cfe621b7003bd4cceb09e9d83e78d737
SHA512 2e348ad5fb6e5c42cfd861b6dff1e93978232a1d244cbd9dab1e149025fd103a9cd801d5e2c8c3640b53fa5b611bf979e8c196ba619702fdf45d62eefc0ac830
SSDEEP 6:Xl+O2MIosMcln8MclC1ElUhRah3n+SkyGkRkJ+lr8ClqRau7:XEODIDncC1dRa+Uc+pERf
TLSH
T1E0538616BFE15A5BE2258732EC7662481772AC255A22CE0D0514B17E0C703405A61F85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Rdp-Graphics-RdpIdd-Trace.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\LogFiles\WMI\Microsoft-Windows-Rdp-Graphics-RdpIdd-Trace.etl
Size 64KB
SHA256 7a96390ff1804e526c0ea518b2d205cb29d8e25bc9b33b7e57dbb674ef161387
MD5 1de4581aa12fbc9919c427e911f97ef6
SHA1 90b9554f0b3b9bf371c538a71da0b388855e99e6
SHA512 1c1adc6cd99ee710011d8614baac4503ea69be0beeab7a4167090d287d687d0ffd0509a1e1c1ef5d77b803974b0e403940beb8ca88db3f3206c65cc0c4cee4c5
SSDEEP 6:GSYwIosMcln8MclC1ElUJSlj+SkIlirLAOn+SkSJkJ+l9uROhlj+SkIlirLAmgz:GSBIDncC1FSU8i7+f+HfU8iDc
TLSH
T16D53A0107BE20A92E1B38B316CBA06441A76AC540E0ACD8E060472AE0C70B95E8B1F57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NetCore.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\LogFiles\WMI\NetCore.etl
Size 22.0MB
SHA256 0e0d42a25e90089603593df4982b38d6af387fa874062dcd0f2ed2b7d8546535
MD5 300262c0a1bd5658112bca22e66519b6
SHA1 84a8462c48645e11f7c7ea6c66a184b984d3dc85
SHA512 45ad9b7d34d54889bb5a4251b8d84e35e0123d15fb761a1d372e76a95db6c974a57aa2d7e0187eea7fbcaef2e67bd2e5d88739c12b8c76e1de6a7fc32017fba2
SSDEEP 6144:zFTd+QY6KfSUa8W4inDnEJxyrxy5O++W86iuseHJCMF2jvA/rqb0Ipe8apKVTVH8:hYOAIpeXbpjKZd2SgDOJqwRMlp9i6ae
TLSH
T178373DFDBA59576CD40E10B04FC98EBD39365CDF70510B06331C78067BB66A8962BAAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NtfsLog.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\LogFiles\WMI\NtfsLog.etl
Size 4KB
SHA256 1daa37ba4342236e2d37e478945ad323241416180604e55d538cedfda850eb92
MD5 29c5b57f01636c6102d5e9290b134f04
SHA1 9755a11e982d7968ec29d9abbb44a2cbd25acc47
SHA512 9802f4116b9990a5f2ae3fe98700fd1d312708cabfa2223bcef6e721f1d3f8f0d6309b7d66cf01d589ee65a18296385b998c0ae122e08df3dcad2deb5deb0eac
TLSH
T10E812B10BBF08697F333AF72E93353042332DE20AF1F8A0D850572AA0C3170289B0A85
MD5 SHA1 SHA512 TLSH

Submit Download

RadioMgr.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\LogFiles\WMI\RadioMgr.etl
Size 6.0MB
SHA256 a399341dc0214af036609130a81c2d8ba8b67033c39f6f5f43b8331de260f6e2
MD5 a9e25509534e20de706c59d7539c876f
SHA1 8612c5489ea0a5404171f3bab4ddb0daa3b98084
SHA512 6e6525e1801eaa0771789149b86c681f6ea412069386a2e3b5f65902e2707c55a406a10aca5f9dfd9fe4a69588e24292400b521788c6f21623b0bfe188209f84
SSDEEP 6:sbWIosMcln8MclC1ElUcyI9m3n+SkyGkRkJ+lr8KlvyITZ5X:XIDncC1QyI92+Uc+prlyIr
TLSH
T14F56CD15AFF14697F272C735FD76C30466737C15EA128A1E054572BE0C727544461F42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Wifi.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\LogFiles\WMI\Wifi.etl
Size 80KB
SHA256 0bf74ffdb7ad97a8f0c57ff654efd9ad901cf7fa4701550cd3fcc648cb12e548
MD5 7851ee54b1d8c18e9d58d2bd72019489
SHA1 e1f52d3b812e7474caebad461abad9f82e5bef07
SHA512 2dee9de7ad52ec164c8cdd945a61e47037e943e1657876b925e792a14cfc8d7a8d4d803fb33f0c4618c9ef253a00f398b65da6e9d07df28051cb41ea92da551b
SSDEEP 6:1hSgy0IosMcln8MclC1ElU2vMw52n+SkyGkRkJ+lr8flaDD5lnqUYWPUZoanVT:1hrIDncC1y552+Uc+p1XjqUYW+vh
TLSH
T187832B15BBE04553E2B18B72AC76670036329C25AF57CA5D0515B1BD4C72780D875A81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BootPerfDiagLogger.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\WDI\LogFiles\BootPerfDiagLogger.etl
Size 29.0MB
SHA256 cf674071a52d3aeee4c00f612313dd36b68e0681490b71053cf7eeeac3b5efca
MD5 b4a78bc3e00e79d81a77d1a44f10e762
SHA1 9df16412b25088d3f9ec125b8e803b98ae7de8f4
SHA512 5629b591228ab1fd126dccd05324349996dd8a8c740d682f339f9555e60ba9be7388f88fb300848160b8df8c230d6d38f4f8633b27292fc57c9537657137bd4e
SSDEEP 196608:rphCH9RWTgF1L8hC7QC9BUFZwy7hN/iqkbKi/n5HRGd5nKqV4Wni:FhcTL8hC7QC9BUFZwahgqkbKixyKqyJ
TLSH
T1B6672C0D76F8AF14E3F24B35743B23218633BDA16A51C34F21AC7A564D71BA1EA62713
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DEFAULT

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\config\DEFAULT
Size 2.2MB
SHA256 e723381873af3808a2e82f54029d583b1c73f72c3774524b900b91e10b61e4ba
MD5 eb3add58756ede7d3d023d626bc56eac
SHA1 cc5c41d243cb81f5674203600daffa5f0dda95c6
SHA512 3c670ac6cf3e621a215433f857146c3d2a60b49a8435c81ff8f9da1093ed71d566f188ff8cdab3f24d0cc0842e9be2f46d4f937e043174a3cfe829bc401e94c9
SSDEEP 12288:cNJHtCP8t44VkmSk2c5gRJdYUvLC6zIB00Pr2a:ctCPGSuufm6zIa0P
TLSH
T11DB59C257BD9E684F2B3C6305C34C3A06A2EFC92EDB4874F7640F78D9C3651186A2E59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SAM

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\config\SAM
Size 64KB
SHA256 9b313724c5ae3ffdbdd592f42a038c09e31be9dd5721da8111831db17c1e8287
MD5 a0be668a562ae039cac396b8567f626c
SHA1 97b2af5e1daf37467a044b44778b3048620c73b0
SHA512 0cd66ccf1b347650957968e0108771b4fec36bc88613a24d16503b5cd3e2e379bde5c74cdf4a0e7dc19e0f21acc1669cf1ebe28074d5148875e4e123e4106c5f
SSDEEP 384:L+BkLMQXhtVEJ45zyVft365cij1T9oG3wLrrB7ihMCpDigYWl:dQQXfVEJ45zyVl365cipZoGgLrrlHW
TLSH
T17D539B41BAC4D686E4B61B31CCB74BA07B76FC915F72930B3215233D2DB5B809E9271A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SECURITY

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\config\SECURITY
Size 32KB
SHA256 bdb5d7933eb17d16db3bc476f3a8cd08182031746891704120db880315235855
MD5 66d7131dbe13840f99871de5747fdc8e
SHA1 7d7be2c9d9d2800d481b4b63c0b47728493b4a98
SHA512 c5c0112a9990cc8b28bf78fe4cd616d96bf6aff68bfb5dc879fc7fbab073bde75bb7d87b702791d8e81379a643312b4188abe3c009374be63c483aa6acaefb53
SSDEEP 192:YNUr0M06++QblraVkqXy9Jv4x382mkvyaf44vMpa15Jf/L9:Qf02qXy9Jv4x3XtvtMpGT
TLSH
T16FE24201BA40C6CBC0A99A73AC67CBD53776FC169E6242073295335F6DFA782EE17045
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SYSTEM

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\config\SYSTEM
Size 10.0MB
SHA256 b6ae4fc306e53d7d7b93bde62d05b7571fc6105179c10459a55ce9aa976dfc26
MD5 a9f7c06ff38da26fa476ca095afda137
SHA1 97d0fb38267c9dc2d9940d6ea5a3066a92faa536
SHA512 d330d04b23b59a2a4d5c7883e387fc90492014b30cb6c28c00db21d82319e3024ec3759a4571cc2ca1f782c5934a84b8b0f941072fc2ed08c64106ab85d2851f
SSDEEP 98304:JrSdOZZJRsCyVcm2QxiU8wAYDuuG4ydGFxeA:JrSUZnRI2Ue
TLSH
T1B7B62F00BFD5D5D4F2A64A329CBACF855A32FD51AD214A0F33D4330F8DFAA81A917625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Application.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Application.evtx
Size 1.1MB
SHA256 f032796994d11bbb91b63c91eab77609ac1ac27b099ac482b989e0be7b2ba551
MD5 7531c892cbd7cab5e4894feaec9661ad
SHA1 d38ac770d4a97422088c00a8bb331f10979ade39
SHA512 1fc73e66fe6edce3333563bf53f50f92bfd689a33446acc4caf5b054e8207c8086e6f763a2bf46ad3ab7bf52bd2e74a6002697588373b985df9a29d5a32815ed
SSDEEP 3072:6v6R8Zc9c0svd9bJhtj8oEB2l5/lZWOhcu95uiXDHv1cQG8RAlnc:2j8huzw
TLSH
T1833578199AF42167E0B3CB34A5F301576B36BB012E35CE0BA19053891962D4D6F9EF8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Key Management Service.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Key Management Service.evtx
Size 68KB
SHA256 f5f9e97a6b1ec8d46a9bd5b9d4ccae96521b85517b0337b248814d2e974a968b
MD5 1f83dae35478669aef357fe90594264a
SHA1 c70bfff0a559af8cb76ad80a504dd55bd6cc484d
SHA512 94cee3ba110b815812fbb1339e54cf4b7b2942b0145315019d2a5acee75a90326a6bb0e74388ff5545afe23f85856c1404bf35698b5bdd6fdfe2be6645ce84d5
SSDEEP 3:MgAWl1l0c5MfaltpRTtPl2tVRl/l:Mk8IMijRM
TLSH
T16563020476099812D1080A3944878B81BF70FD501F7A9753A960363CCD753421952F59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Client-Licensing-Platform%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx
Size 1.0MB
SHA256 d49773d3e502b226ea5e3c1132a6c8109a561e5a683beeae64000dc129c37d90
MD5 61c55d7deb3bb10b2d488b57e891371d
SHA1 aaac23f0748da34bcb9025e42ec597b757fa4634
SHA512 7093eadbffd2eec79a0f7dd71cb6f99c509b376d00ec17d3e20bb7ca2337da64aa66b3e0fc13f5183f843b71e9a53a93ba747359084af8863e6e69fc5ef54cda
SSDEEP 3072:BwrMdDKFoMmV6yd5rLo7galw8A/n+sv03jfedw20HBKLqd3RL+YEOTUJ2jMsyvbb:BwrMx6yd5rl66yd5r
TLSH
T13A25031A1BF9253CE1F29B75E8B247982F32F8507A119E0F1155225C4C63F939E60FBA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AAD%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-AAD%4Operational.evtx
Size 68KB
SHA256 a625041f6915fb4d3a8b6b6ab100bca13f8e02a3d1505113b830ee9de86513c0
MD5 799cf747bf2202e63555d4a1fb6e3525
SHA1 e7fd002bb281f5aecd1264b8deb0a1eb9319f62b
SHA512 40d0cdb04c8167558a869d1f6e912cced18e4ab8d3b1b246d1a218e69f5ee2ba5a3daaa15cc0d3396f496d804fbc0f5710c0f408e6e8637f2cc1c04d460322b0
SSDEEP 384:l0hlKMyKWG4LBKhbKcKaTG7J/xUhrCmPLCviTQfnLkRWXUcl1bQcP445OQXqy150:exqG4LLr/Eh4bQ295Ogqy1dUTzV
TLSH
T15F63F6421FEC590DF0FB9FB07ABA81A5E622BE259E10D53F7045225D5874B80CEF172A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppModel-Runtime%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx
Size 1.0MB
SHA256 9f7b1676c61f02ab3d6bbd982858f1ad03f7d8844e8fe6f871055380e5ea5ac6
MD5 b609b6ed58e5c53c7a30d7499241693a
SHA1 b51a4982cd2312e6092d0aa0010b12b14287b596
SHA512 f4c15cf1724c63fbb357f801cc0d5567a81c00b6cffd683ae84c000226670e89907c846f7ae32a4b2c6b09c5f1cdd44888c8d57b57c97f181020c6c58b7c3bc2
SSDEEP 3072:XvUNAjxjcdBBhQ8JJTuSzKJa/LRpk7Cg+fnQ9Y8WbwU4f3NGWQzWKzex/G3YJ2Ni:XM
TLSH
T1F325AF113EF80674F1F28B35C8F35B14967BF5A89E619A8F0124A15D0C67E658E30FAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppReadiness%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx
Size 1.1MB
SHA256 8fe80877054eac973b5da6f2bb062baf474c2f984dc0fe02874ff18ff0dd4a1f
MD5 f65c7e24cd2e928338b8b20fa365e806
SHA1 e6681e97505f0681a9b8851f50d764f288541c52
SHA512 c34787ee896d31647602e12a52bbdf48e554e20406e066d3246882332ead4455dbdd0a5a43ee7ab9ef8b7ad443b89d8c706b0227081122f3305d825db8ea8694
SSDEEP 3072:vFe1zxtAf2SJQwn37GKoQBf1mf0vHtf4AwYv7Obsn2Do6tvgXBoTGVA7lGWzfVsI:
TLSH
T1CC3546242AF52434E1F3CF3AD1F35B18A5BAB8503E415D8F00A661985D57A62DF30FAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppReadiness%4Admin.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx.FileSlack
Size 832KB
SHA256 13df1b6b49dd17e47a1162286446485633aa23414c1e42c319d2609844fd2799
MD5 66aad51f256ddde21bdf47b61f6db068
SHA1 3dec71f43d9daf160dc9cbe7c72fc319710c3f83
SHA512 9b62f119534766a90006a6216302d7fd4c02d8ec1828fe96f6d4f0b8de3bcb4ea2c6df43cc8b994ab712fbb6617d4554899be3c4ec8af9300cb391d2885d09ea
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

Microsoft-Windows-AppReadiness%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Operational.evtx
Size 68KB
SHA256 7130fd07d68639c687a01a15445b9889f6224ca526277d8c593bee43f6f51d69
MD5 b17aca951dc7da5dfc120f9865fe7864
SHA1 2552fc35d3800d36d6e535c66d239fba19e346f7
SHA512 cb59f871492092c3518042356775c561a7482530b29cf13d399d55097b7674994b5192bd83fce7039bb1e910dd48fcd084867cf2591068f3b54af8ce0abf1fa7
SSDEEP 384:K3hmISIQLIMInINIGIKI3uIJIdINFIqYCuICIsmIRqIDzITII9IkIOIdI:0uA/ICszdm
TLSH
T12463AB066EE82534E4F39F3C88F30724257F78549E83898F1594B1B81E56A61DF70FAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppXDeployment%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx
Size 1.0MB
SHA256 8de5eb148cf57003178566891072678e11254fb0ff43d28e85a7e67bbedb6d3c
MD5 56663250731ffec1ca0375b97489dba9
SHA1 96bec50c4066e5d5882d6940cb10c2cd499573fe
SHA512 ee49c4d62b73cf61089404d40a7ff7913e069950069cdb1462e3b624ca30633821a2a68ebb044c4db5de00f21d835a4e118e9016ff255fade0257832ef3633b7
SSDEEP 3072:YqujqujquYGuNqix+oq6up8Xk2D7Op6Qk/CYdGONKSpJ4MgX1uC:k6XoME1uC
TLSH
T18B2515156BF92624F0F38F3585B36BA5167FBDA44951A7CE0024A05C0C67E528EB0FBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppXDeploymentServer%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx
Size 5.0MB
SHA256 79fb1f8c63b99aedcfb6e141c7c2e64a7ba8119bb760b1f840917636e93ebc0e
MD5 fd2e4dd6bffc1d4c104fee25f636d0d6
SHA1 a6ff58b5d55104d326728bf1409874da92b9c898
SHA512 a49b8801c910a0cbfab6ff1a8645e705941e32803f3bf74437e5badb7574af40df86701be2cf868548ac45a1547a31645da43b9988034677277d8e1b8d105f63
SSDEEP 6144:v0sQg4eBg8zWI/4UeEeYZa1PirfiWl9+s+fwz3Vs3HRQmYIvSr8OF:csbgmqRPir/V
TLSH
T1B0367A296BF41329F1F38B3498F36BA6197FB8959D119BCD1154A24C0823E529E70F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppxPackaging%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx
Size 1.0MB
SHA256 1c85bf0f1bbe49e420ef269c744af63dc7610e0f57680fcbd55d7eae7f58f588
MD5 acc31f6c2034220d5aa745198fe5e441
SHA1 e1e35f9ce4e607acaf88dffcd3bcfa2b9c58ca3a
SHA512 59373f7412baf98d70f3d12ff1c56c3f09a558dfa9105146421d732b01904023f427fefa98bee5d508b3adeabbd367b343ae5d98582f3e07b3e2b5c57eb085fb
SSDEEP 3072:R41enTg01llaIpwTFOQGeRcm2LZMZGBtr8LheyWFDac/KjfIiXwuC/aW28Iyi5eu:RJshll
TLSH
T1E225F2013BF61138F2F34BBD48F36B195E7FF9644982460E0174E1985E679628E70BAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Audio%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4Operational.evtx
Size 68KB
SHA256 74e976b79d2a1545fa3ea96aa0a3e9c8f8c949041c0736ff63a1536c76bdd086
MD5 0ac1dc51f39aa29ae30f0003284e5f62
SHA1 a99eaa1185ae4df70d1cfa0564958d8e18d41bfe
SHA512 ba863e56f354ec1fc31aaab040d004d828a7e07afda03379caf6a86d980edf357fdae83a6c0a970ae793dcb5425b3c41f13c1a09e8a18c092aa78ac45f2355d3
SSDEEP 384:yyhcptGUpNp+Gp+dp++p+dpap1p+6p+qpkpXp+op+:pqGFnS/rrSp
TLSH
T1C8638A242AF50739E0F39F38C1F7072B1A36B945DC819B9F10A4E3A55C11A615FA1FAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-BackgroundTaskInfrastructure%4Operational.evtx
Size 68KB
SHA256 86c3c961a81563f16e08b24dd229e102764ee7784bf6e26818814e8d9cbd8d0e
MD5 151e45ba27c8b487918709e002310deb
SHA1 e4148ca4bf64cf0fe42e2c946d9a5cbe360b5692
SHA512 7b627fcec8251114e82ba834da20a9c0d987f172c06c483b8ce93f3e602e78302190ac2b32709fa10e7c82a37632063a3027300412470bda9b8280099276e554
SSDEEP 96:P94KNVaO8Pody66xvsHfneyg0gOy66j48Dy66j:P948V7djCP5Ojlmj
TLSH
T1CD6389029BF4452AF1B34BB845BA0F391A77B86A4E12C1AF2154319C0D35F90CFB0BA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Biometrics%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Biometrics%4Operational.evtx
Size 68KB
SHA256 7a431fdee583a28b8211a2b94aa1f405cec2165365e7073b7ca8d2214f4725c5
MD5 40391d722c1a38739227ca6654edb82a
SHA1 b1aa9d2a91afe2a8dbad447ed885c4ce9a1aa161
SHA512 9bd1ee05a34d48fd098b2436993f5e535661f1ab921b844f6d84b98436d59efe685729749fd000ac2d2c1b035c118464f244a5c2785883882ac96e363af094a7
SSDEEP 96:EEKNVaO8PoYj5rYwT8rEYLHjjKvsrVLAjjKnor0LMjcRr:EE8V7Yj5rYS8rbqvsrKqnorDa
TLSH
T168639E06ABF49619F0F7CFBAE976D325183ABA542D10C4BF3208225C0D71A55DBB076B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Bits-Client%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx
Size 68KB
SHA256 499d6452e9310fcaeb135772fa7fa1239ee32f77afd2f4c27e545848a772ecca
MD5 76372601aa82edd53575dab4fe15b315
SHA1 401fe2f429b4294194192dd0781b837e3e985024
SHA512 1d79e09716a84eef4aee342b9e1296d749c274449d900834f30941e1c658f833374b1026e5ed12afd7f527d350a1560e92294080e2626f97902a353ce4cf118c
SSDEEP 384:bXhsGsG6Gb1yDGGBSGhGP7GpDIdG4GT0EG6XkGPYGcZGOGgG6GtGgGKCWGOGHlU8:j/wDIvC
TLSH
T15463EB126BFC1939F1F38F3999B24B252A36FD145E82C91F1064625C4D62E518FB0FBA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-CloudStore%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-CloudStore%4Operational.evtx
Size 68KB
SHA256 e211cf51207d9b1c0e7585ee3db1ac47b471997ec9cd4bfcbcf17d453e397d50
MD5 9e728e66f05236cac1663c02c74974ad
SHA1 8330d81b877aa0fc3abd081557f27adc24b3664a
SHA512 22ee471ea133a13208a8c7d31d834c671ab030a3f6265c09cecf5c3bfa354e912e33200b5895ca1911b954fd58711d374c381749da37ae4ee2db10f4bd695517
SSDEEP 1536:y9m/EICyeuEz5mE6aNn8bLmhFGUkUDiKDyVE5izcgTjuGTM+sui/z:5/EICyeuV
TLSH
T1DD638C121FFA8238F1F38BB484330B146E37F6984FA6915F1215909C8D66A119FB5BDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Containers-Wcifs%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Containers-Wcifs%4Operational.evtx
Size 68KB
SHA256 287b8bbe15f7928e350eb8425ac9a87467922dda3e2ec4d89b06cb3b357e99ad
MD5 ce4b32edd3e76d54f66488f8d84b2ffb
SHA1 1191fa45867892b95168e375c19bc26d6179de71
SHA512 13ae445ba8f09236f22b6d15d808a44fb1b388174e69a86e22db8aca98a843bb26761e2790e53cd01981afcd87e8af66f0418759aabf48b3bd3434a5390dc5e3
SSDEEP 384:KthuBJJ+SSJJupJJ+ntJJ+0YJJ+6qJJ+/1JJ+PbJJ+R5JJ+JUJJ+prJJ+LkJJ+lV:GUUvE2C+WwsDytNtJvKgY3ozE3
TLSH
T1F56308025FF50820E0F38F7544B74B142A7AF9584E92695B6120A35CCEB6D65CFB0BB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-CoreSystem-SmsRouter-Events%4Operational.evtx
Size 68KB
SHA256 8471fd96d8f60b678427374df9357936c820f4df0905cf4b158508649aef57c5
MD5 cc353e92babb2006a417a6a21f64d7db
SHA1 3b4e7748faefa7695de1fdbbf061aa3118d821ef
SHA512 abaab3b2c51fe465592042d63363903848f105cfcf916f58d02128904c8e34c77c9b38845ec6c2678b0d0b14b08bc6156b46a1c93d5875b6caabaff921c3a0a7
SSDEEP 192:woV7B7bWh7bM7bhvg07bB7b47bH7bo7b:wohB7S7g79z7F707T7s7
TLSH
T15D638D066BF89524F1F28F7804B68B181637B4745E42D9AF626061AC4C36E51DFB0BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Crypto-DPAPI%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx
Size 68KB
SHA256 919cedd98e2d8abd634742aca810d1c382a12007d35264f22bc0115db0422346
MD5 d004fd2a2675a282fb2b3f26968a7dc1
SHA1 ba9b36d7d30e52b204a65b0dd96959d36a2d2279
SHA512 8f81364f1c0094867738fd2a586a0b32263a0989f086ae61723ce0f8cef5d7109dbaf8f9329bf7b91ea81f9bb232a9d08617a74bac5ee643cf838aebaeda07b0
SSDEEP 768:YuIYhM3inhq7BnZX7jLoD708u7Ir7vD73SKAOecuf7AJC7zeC7r/7b2o7Jc:wynaFxPLKCSXLSKAOecI4CmCHf6
TLSH
T1FD631B062EEC1428F1F79BB09A7A52252939BD39CF12D46F3159235C88B1E10CEB5B77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Crypto-NCrypt%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4Operational.evtx
Size 68KB
SHA256 2aa62549f05df86c7f1dbf9487a3f3e50a41dec80145b50743f5e497ca81aa45
MD5 1eff0bc3572babfe70f72442cb670ae1
SHA1 01ffb2a188442aeb0c0811bc8df659f52e8d7e57
SHA512 64c07aac8d500abb8b99d9bb89b202eb0ce7ccbb0aab26784bb1206d6893bc6ba1b9c4e5ba02c64c6cd2dda7032294abf9657ae088aadb8c0484f89537ae2a33
SSDEEP 384:0rhnYJdY39e1YmAhYkYtYntY8YYY8Yzk9YVHYBjYVfYVvYVMYEYPYIYjbYnYVqY4:eRaMoCCeO6
TLSH
T153635A062FF94539F1F3AB7684324B24297BB460AB62DD4F1224725C4C76A618FB0B5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx
Size 68KB
SHA256 a05fdaecca384608fefa08e8ffb785ebcac6ccc6bf80e84398acec5f49f07ab7
MD5 311f9f2f7889aec3ae24b0cf5565b91f
SHA1 09e5d862e55c0cc6e681a15fbe5a8defe7e8e783
SHA512 14d4d82f07ca17dfdfadccf1e262af107a78b16f95b4e58d3a13251ce6f1fc8cd021a2e9d2a317698f25e4137a15dbfb0c290a8db6c9a1fd4643d9afe754e16d
SSDEEP 384:X1h0CpCGxCcCnCFCFCpCUCBCT9qCTG5CT5rCFQPCvTRCv0uCbrpCFKgCX8UC7IHp:lFg
TLSH
T14F63332857FE0A69F0F38F7985720B4119BABD456E80AD8F10B162980923F55ED70F7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Operational.evtx
Size 68KB
SHA256 7def2b3d8bb8133b29aa29aa66a5e3d7f10dcbb7965810ec43344ef3af7c4010
MD5 86252ba20a8b49e1b2b093843666770c
SHA1 6fecfd8ade017840eaf4ec41b6cc09da20a43937
SHA512 64739a86d64dff7b0bcf27b34a54ae5d9ffd2dd3bab2ad6b95b3789f77b8e847eabd8acddd7efeed7e2007262cd2309457ece0a88ad67103474e7a4dc9e8f416
SSDEEP 384:MTheDxD5DPDUDhYDRDZZDbKDbzDiDb3DbLDYDNFpD0DYDh2DzDh0rDbkDZGDb9DO:GdwF+W/GFPA0Tu65Gk
TLSH
T1CA63310157EA5A28F1F38F7581330B241A77FC944E84D94F2274629C486BE64EEB1BB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-DeviceSetupManager%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx
Size 1.0MB
SHA256 84cdafb5425bff2b2e45ccaa68e778820473a694b4e4626a307e9e4a09941331
MD5 60902a7d1c0bad4b58768c85ac98533d
SHA1 b91e7c8d95f0172939d034d51ccacdeae942fc94
SHA512 98c3f4f0fbb56d807ef0c530f1f408da6b724a51b44ac8faedecddf5a4dd1a90721417c60e4125ffe21c9dce5bc71fa1ac2bc29a542bcbaa1b120932f82c387d
SSDEEP 768:Dfr4y8SEk4LzafkU4zj5MR4aDTaMPZWsH341z+aaBMzepIdtX820+VVgNcCyCg08:9WsHoaezdM25CyCEbDwEU
TLSH
T19B2516052AF41A38F1F3CBBA877357252A37F85455969A4F5030A0984C17DA68FB0BFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Dhcp-Client%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcp-Client%4Admin.evtx
Size 68KB
SHA256 eb8c0574fba322fb0cf493ebca230c716f139e381b26f95860a4e499b1fa5f18
MD5 3230a86ae5816198623ea9ee5d914889
SHA1 e235a0b00158664f978cca73fc9af7ad9cbb3bc6
SHA512 718e6bde4f748c534bd55d200c5261366200778bee8f1a1ab4fb898694396a39d1e20428f7d18a977ab17c5d5f33043fec1b22671b25dc62c1c17bbcaa713280
SSDEEP 48:MduA49pWx0rP+AQNRBEZWTENO4bnBIzoZsMkMYkCysgdHLP7jriNMkMpij7MkM:uusRNVaO8GoZsxIFLrjjuNx+ij7x
TLSH
T18563E0075FED8A28E4F58B7A01BB97252E36BD108A10C65F76A4632C4C26F11CFB1B91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Dhcpv6-Client%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx
Size 68KB
SHA256 7914b62f4b20a09f75fab54825f7218bb0b1e13ab35b2e6aa56546fa945f8776
MD5 ca432b8a7fee7737c4a05fbe62ecbfb3
SHA1 8d3145b04f13f3f3d943ab4c1e9f74815d53852f
SHA512 087821c58ca24dbce8025c1f56532dc7ddd495c09ba9021c765250beb09f483f34c058efde14407d2378751ae310eab22f7a28655cd0b1ce252101cd5f1cf250
SSDEEP 48:MSuSC6WyTurP+MZQNRBEZWTENO4bpBfoaSOtamLmncpQUSDRP0Ptl:58XKNVaO8PostamLmncpQUSDRctl
TLSH
T11F63EE02ABEC551DF0F28B7E5A7797242935FA509A00C19F7264B26C1C66F40DFE0B91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Diagnosis-DPS%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx
Size 68KB
SHA256 0798857265748d31180ec3f378e601fbeb8ce4b0d59a1416c2176af3a3b5ecdc
MD5 55bbeeda388be11475d0654200c89531
SHA1 1bc72f7abed4740738cae93ba914cf1cc0f1b11b
SHA512 a361019df1553e016068d4f802470869c2ebdfee148beaf249c60ba512f070e4e9374a6c29dd5f8b46053db34f9594dfccdc49bbba5877d2907214fcd5b1bf5e
SSDEEP 384:TDkhWEcpchcLcZjcncDcH4cHKcHNcWc8cHocHecHtc:8oCm7RKrF
TLSH
T1AE63AD0266FC8639F1F3CF3A957A471019BAFD304D92899F1214B2A89C56954DFB0FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-GroupPolicy%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx
Size 1.1MB
SHA256 b74925bdef45ef4b1c2ad39fb0f14e11c14f509ac29de8f2692b6a1d7088c3ee
MD5 ce6ceec425c0bd1d830a194adf3c3254
SHA1 4a4da8991b3f73c7fdb27d47f35ed7fa5e406ec9
SHA512 6ae5bba03fe3ad81ac899b9e6fe4d0bd51359a52d9eb2669fa4f64d85de752ae888404bf1378167607f6f568995c41eb37f331d45273b3d335975bad689f6f71
SSDEEP 1536:nZzfvOHoc8pvZt4UahJVPnBc3NjopOY3+O250nQt3N:ZzfvOIFvZ9KK3NjAOYOT0n
TLSH
T170357D023BF81A34F2F74B3984670F342F7FAE481B46599B2050A1594C669669FB07FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-HelloForBusiness%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-HelloForBusiness%4Operational.evtx
Size 68KB
SHA256 e6d9f083dd0afd80ced46b56fc9ebb2f30608f66a71d6a03bd0fce2fb36a2685
MD5 9d1bd06c39616af3035d118a83410d04
SHA1 fb92edd72dd0ad90ebf7e930eb6c726526eaf3c1
SHA512 95e985e722866bfa3da4eeedfd8a821c60e390a3b2d7ba1fa59e7521f12e250e22f760cc4f737b9c6d871294e6b064f19b912b882bb30ecd54c655308e135fd9
SSDEEP 384:86h9BKgyK1PKMYKvIKxnKuAK+uhK7kKVnKrCK7DK+fOKNh0KN/K7mKreK++xKA1f:TTzP9JdU9LCRAN+iPo/
TLSH
T1B0631B0617F60930F1F3CF386D730B285A77B8891ED1155F21786168ADA5899CEB0BEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-Boot%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx
Size 68KB
SHA256 ce0b7ba5415e7d8cd7b9ec52894bdea77beb8cd69a213d8a93fb72519402028a
MD5 08bb2bcede52937c11858e5b2d81080a
SHA1 94744f23aa35e8d184111ebc600e3674e4b8589e
SHA512 dbbbe42d396b2975e90c90dec1eb771df8d605b361600a7ec996b938a694c46e94db7ef3f7981c4bfa0f4b4c187d5c3e9131f615d7d42474031eabdc9b562780
SSDEEP 384:gjphzDh/DmYDMDnWD6D6DMDnDyD0DeDrDyDkD2DwDtDPDFDCD3D5DXDjDCDUDyDj:epzCrX0t09+K
TLSH
T14B6317026BF12938E0E28B3688F34B382B7EF9441D815D6F2155619C4D769729FB0BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-PnP%4Configuration.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-PnP%4Configuration.evtx
Size 1.0MB
SHA256 a2178c933635ffaf259f6a5db5ee116a43011e1013a4cf128cae7e590bb7a655
MD5 256253a98dac1793130da0ba4b14593d
SHA1 f8ef1e4d952d40eb7ab9ad8d871442b22f83c667
SHA512 6d7f2ba3edb7aff40484c5b582ff82742aa39a5157178e317f8f75b15e63bb38b5f5379ac8e0b970ed84a595a90feaf08f191f67c880e947ec7e59f5f5847515
SSDEEP 768:VQVeXRL8qMq//ukHaM6DSR+ZPDBs4dVlwVsQMJv5Bc3AsHeeS2He9S:uVeXh8qMq//u7nW
TLSH
T1C925A61126F44238F2E39FB685F30B1A653EFC514B425ACF2050A3454D66E629F72BBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-WHEA%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx
Size 1.1MB
SHA256 82e682dc59ee91a7c8f6c29adb1053dfdcbf1baf7121d01fb825524136ecd770
MD5 c0c947151f6ad19ed54cfa9c665348d4
SHA1 e158c313e31ebd617f7733f1be4d976451d1c807
SHA512 61365b874b0dd4c379bfc3b2cd626963677411e4d1415a5595b429c67a749c821ac4176aac173333234f5beed1da54af9e8448e3ccc1ff43685aaff94d041b67
SSDEEP 1536:GVeMknxPEPDaMknxPEPDUy5H0cIXMfDW3:GVeMknxPEPDaMknxPEPDr0cIXMy3
TLSH
T1E335B90177D04825E47247758863DBA0293EBE448E42920B3A9C735D7C3BD7CDF6BAA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-LiveId%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-LiveId%4Operational.evtx
Size 1.0MB
SHA256 a65a124d1ed5ed20cf9764971098a48cdb00180d3aa012a8e831df25cd015a01
MD5 60ac28d076e6484f0560764ca4fc40e7
SHA1 efe84dd1314df218e85a58596016f844fab871a0
SHA512 0f954e782dccbd1fb9156e61b3a3401cc658dd066135957c658dbdd59269dddbfb7b1e905869bd67773e2306af7feda055f4216b242f905f6d21c9f288a3a5b8
SSDEEP 1536:cXMZYxsUxvFPAePWAFwQM9hAgS1ma8BBw:RfoPWXQu
TLSH
T1A725A70ECCDC8841F367CF749AF3DF8825A2B75A84E9545E67A0501EFC80CE98165B7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-NCSI%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-NCSI%4Operational.evtx
Size 68KB
SHA256 7969874531286fbea23c1b184c9e2f0f9c676e8dd201e057a24ae28c7ce35448
MD5 cecd13beb997340f5f1741cd1470cf1b
SHA1 fa4b8242d3b1c42a32f4e27c60420271b6e77b27
SHA512 724fe9e9a04a906461ff905cd209f1288f3298ebd8fc99d864d3abc18a756a8d39d25a7bb5fc259f33bd7a259caa41d322f8268d82e5ee3f5fa191863e0b8176
SSDEEP 384:6ehZSMj1WREMVm3MVfJMV3sMVKxMVq0MVjeMV4MMVXmMVB7MVg8MVKcMVgAMV+/d:Zh1EQ
TLSH
T14E635F466BFD4535D0E34B3D80A30F38263FF7282A916A4F210071669C56A5E6F71FEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-NetworkProfile%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx
Size 68KB
SHA256 b870e86e352bf258707c696ca0bd8325f15e2825686c4fc57e454ab3a7909f01
MD5 ceadb487229889174e30181552eafcaf
SHA1 4cb7fe33d6fc797da417706262f6732a89f9fadb
SHA512 d906ae67f5d0ea88595f0d48cbf9eaa0b43f2d04b04cd06c6fa9ac64d34e547d545c83f3cf62438b5e23e3bb8ae82b21abc100af3e6397772b756b15dfcbebbb
SSDEEP 768:OOAsgSzHHjp8J7bFjmvG4hWlQa1Ry3aj/tcKoMr:lC2
TLSH
T17563140217F55A34F1E38B3988F75F28353BB62466815A9F0415709D8C629BA8FB0BDF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Ntfs%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4Operational.evtx
Size 68KB
SHA256 5033984cccdff8e828d266e7a9cf18cf36108160edb0ac6e3d89618dee992ad1
MD5 f3bd08bc4d6d56df688942e664a5b918
SHA1 43d7df4d0fe381a8403ea7ce51f9cdea3bccb32e
SHA512 48a9e83e86a880bac9bad750c34feff454c1f74b469fbf34aa51a4cfdb0726e9050549331d8e0f48f83d5e2c034a394e32d4dc19750eb1f4833c5a749d7878b8
SSDEEP 384:ABhjvI8SIfIFogI6vxIoI4XIFNIusIfIFiIvIXIF6IpIFxI6IFUIPIFq/Io2IFr6:AZpIdb
TLSH
T1A8639B015EFA2938D2F78F3A80F3072B2B7BB91409959D5F1054735D4CA96298F70BEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Partition%4Diagnostic.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Partition%4Diagnostic.evtx
Size 1.1MB
SHA256 d006c0247f4c7e331fe59753e82cc578628789db39cc29353b98afc9dee38723
MD5 7210cd0c0a3a745c04fde6a2991811a1
SHA1 ad392564ae1dca3d10501252eb3d11c4d8ae4889
SHA512 1f317556360d8cc828b422d505cf6b0fa62490b253a7c3d9ea219cd43d2b5f087d3a350bb7abd64b66813b3caa30d6607811925cefe03d9cb05627acc771b76b
SSDEEP 768:oNE1n8zfFFUyLzs12LR12L312LN12L712Lq12Ld12LI12LU12Ld12Lc12Lf12LLh:X2ScAi
TLSH
T17635853225A8362EE5A6CB31CAF79322563F2B98D611706F744C63482F91B4DCF60BD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-PowerShell%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-PowerShell%4Operational.evtx
Size 15.0MB
SHA256 c87dfa83f5d174578434c419b6e85e526e8bd38081a22d9e89a404da7c052b6b
MD5 dec4ce904d81a21ade567c956a4ae5a9
SHA1 aff23d77e3362fb9f0dff0fd015a4d7650be3328
SHA512 2ec9d1495bc500ed47bcbb4ca89430afbbe26a3ac6c45914ad83019410d1e9239db2242030d8f199eaa3934337af71c9b42b8283b09fb9c1b1c3e7c239cc539d
SSDEEP 6144:5t2DbCDbhDbXDb5DbUDbKDb2DbWDbuDbUDbgDbDDb/DbVDb7DbhDbCDb8DbXDb2d:WuvE7vXvjq
TLSH
T18BF69F5253EE5654FAF76BB9E97E24741A733CAD5A38C26C109CB04D0FF3A0488A1763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Privacy-Auditing%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Privacy-Auditing%4Operational.evtx
Size 1.1MB
SHA256 ce565cfa497fbab0c1522774e7f5e4c44d63b3d23e344dd9f2c20f94ba4f8582
MD5 71c6cbf7db8290c125981521ebcb03e5
SHA1 fa4982ec85a85e1c41b9124c73041ed66b3854d3
SHA512 32feba0d810bb60f9201b9946f93114a07fe5e1f67d481c3aac0fbd345c55300bc0c342e4fca4eb67b4e0fd9ea346f6cbb68aa1dbd5fbcf4ead8450ea953ee80
SSDEEP 3072:pjcE5fi0+iWQetJaSVoiyWFrrm33POtUplrQ:h
TLSH
T192353B162BF90634F2F3CF35C1631F1869B7AC542E419D9B01A531C89C65A668EE0FAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Provisioning-Diagnostics-Provider%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Provisioning-Diagnostics-Provider%4Admin.evtx
Size 68KB
SHA256 50e138513b93b3b1b6afb404ea72a8c7a83a391e1792c5d5699f0d8c950aa54a
MD5 7b3b5e2c0ce540bac72e5ae85186ec05
SHA1 b4d9cb6bd60e2109fb2951e6a50e7a5c7c138e61
SHA512 ffe5668f6ce19c1e56d6de440bffc8c68935aa18d8fc141588a504fdafc40b0508a1d1a22bf50832f494c692ae65c1513366ad84443108ad39e7aa2e6e5f866a
SSDEEP 384:C8hrsjPsRJsBysy7sKsUs8sPsUCnsPtshswszsi2sMspCsmaesuHjsas+sBcOsXm:z2aashYxKa
TLSH
T1B763F30617F94668F0F68F38C4760B5529B7FD45AE918D4F1260A19C4D22E21EEB0FBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-PushNotification-Platform%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Operational.evtx
Size 1.0MB
SHA256 958c4ad9a4a55c2e2d40980438167dcd7ec535fb7b50df39ab9f32420122101f
MD5 76d0a5518bc0721ab321dd75c75741ee
SHA1 f44c2ef68f9d8181ecb89b2e40954d9aa8cee4fc
SHA512 347327e9c7344404dfe0e56be9c464c6410240ef380deadcb65f2afedfdfb80ef54ab4f9fdabfb7b2c6c6a29ac17335010710de471ee44d63940794a589dd41b
SSDEEP 3072:hP7CJDWELeIrJJcA4EYkeUfzQGSGkWkzWM/u78g/C0BicNIJMaKnHFZShbteaYlu:OdUajrXajr
TLSH
T12C2598166BF90628F1F38F35C4B72B641D3B7D995E01A95B1311629C08A69128FB0FBF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-ReadyBoost%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx
Size 68KB
SHA256 a6c301c743ca1bc60892e554bb29995cc62fd0ac3bfd0bb5f04f833a5a25e670
MD5 1c027ff501ba10009f9fbc4018d8642d
SHA1 389df1487b3c8bea9dd1d4db28b58482237a0e7b
SHA512 bb8e437ea4700c563966d99fe84520b23a04e729316fc3ee9bb498002d1a6bc172a0cf575c724d0cf3cdbad697af002727c586e8f6517282810f1a8e2a210d20
SSDEEP 192:RWV7/c8cXK8J18KCvzX8ijR8WTfgA8s11Tl38cBG8qR68yT:RWhk838v81z8Y864A8Yl82G8qg8+
TLSH
T19863CB025EF85D24E0B38F7EC0F757351A3AB6144E21D9AF2254735D4D22A21EFB07AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-SMBServer%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Operational.evtx
Size 68KB
SHA256 99e83f72b5e5dc23bf7399a303dfe78c9a5fa4164db6c753ed102fffe1581e97
MD5 a34d179c0095e4b23ab5dbb7664962a1
SHA1 9559ffe00bfac5c4784a37584cac46c152fde37e
SHA512 1d5bd6f39ddfa7e5b0b5a2aa7bf29e43355cf3d6e28e4728b609a637fdd6cadd4210333729c9ee2c7d19077d53fa97421a89aa71ad8cb45b8ebdfd808b81eac2
SSDEEP 768:gfsSl3SENoSSTSZLSC+Se6SzHSJjSD5S7OSq2SBCSumFS2fSLiSQmhSLUStVSOiu:Qy
TLSH
T1AB637C025BF46435F1F39F35C1B34B293B7BB44096A2896F0024B1494EA79B19FB1BE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Security-Mitigations%4KernelMode.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Security-Mitigations%4KernelMode.evtx
Size 68KB
SHA256 14daec68acc31269eee80197b24a76e5915b1d420a3167bf5106ed06c112797e
MD5 f47536c1030ad526da904e39b82158a5
SHA1 76b8f8d7f1ef382b64d10b2d0d977f32a886ac12
SHA512 17a066434f03ba6f8f5a26b1a43840f7239372b9f072fc2372a499109bbb05c040a3d0606e8e8f6eaf7053a1c163017047dfe34fee98ab0e266aee0c174f9013
SSDEEP 384:eohywi+6D1zNvjibQFHZie3RiGLjiejBiGIyieuiD6D1zNvjibQDisY8i5pi3i4r:TsNtPJDTcih
TLSH
T12F637914ABFD013AF3F38F74E9B69A11693BBC4A1D29CD5D1191124C0C23A52DAB1F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-SettingSync%4Debug.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-SettingSync%4Debug.evtx
Size 1.0MB
SHA256 fd901aae42df02973d256613ec3d9af2919694204620c55fe0eb58b3fdb556e1
MD5 75552543bd6ed5cd995580297bcc4a92
SHA1 1e04f038ebb9cd43ea61ede726ad903874f5e8c5
SHA512 bc7fd5d08c3a2a6478aefe8bf526346fba917702b7132843e492ec27550b6e9f61dba11b1609358f609908def6794548479da8fff8f5f7086f9b6202b83f38aa
SSDEEP 768:AW7OmyG1lgXr5UsgcRobVcILv8MuK8ZcILv8MuK:7IXr5UTcILv8Mu1cILv8Mu
TLSH
T1242532106FF9063DF1F3DBB5A8F60A226D3ABD185D61D54F0024A24C4872E158E76BFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-SettingSync%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-SettingSync%4Operational.evtx
Size 68KB
SHA256 40afc4a534e46ecab3513cbed579451f90fdd69a5291cc9548f386b91f1756ba
MD5 80d46cde655b28f1643a8b27b707b3c8
SHA1 d4c0016ac8e475193b0e901a4b661ea918e7dc09
SHA512 4d47d41ff46a08b8f4f64d83e13c6f0f3f41794f66e7b55b2f296f49d78509ee790e21268a53692940b01278baa0e059b8d3ff09ca0fdbe99dec0575bfa84c11
SSDEEP 48:MSvSoWeurP+MZQNRBEZWTENO4bpBfoPegCjC+Qy:5CKNVaO8PoGgCjCfy
TLSH
T16563DB07DFE8442EF4E38B78057A4224697279598E21D15F6264616C0C72F50CFF0BA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Shell-Core%4AppDefaults.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4AppDefaults.evtx
Size 1.0MB
SHA256 48fc48939865ea9874daa7aa4c11999d5ef9fe64290bda6a02a668eb3530e46c
MD5 71a5cc231bceb72b2c684aee6c05536e
SHA1 e74edab3abbdb498ee96bd49ec81ec12abf70bcf
SHA512 6f5f9281776ba9f77877a491eaa2ceb99e08dda99bbffd6d64bb233aaa5112a0cf853cbfd884b9367db000cba7565630f831a65b171c3c560269b4c962aa59d6
SSDEEP 3072:4YPud9jylurYH4BY7YHvUfIX1l11CxKbTsmmX4jvQ+HoWyByu9Su1a5zKv6bGVmv:Kq
TLSH
T1022577156BF95031E0F38F36D9B22B066A3BF8645F225C4E216192084C7BE51DEB1F9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Shell-Core%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx
Size 1.0MB
SHA256 12f0f03b00542af5a0d217594c61f1932b9d203dcaf0ed53e17a00bf0b5552a0
MD5 14db7908a691c1b242c8dc5e9a5d02ba
SHA1 9b9021006220a5b47e4b2cf0c8f9694b240ab169
SHA512 4928e35a69533efa345a32cd1879fb1aa1ec759c8219b522ca53ee34af34de6c619c88ed3371b89f805368bcab44d173c21677c94725133233326e0f8d644ef4
SSDEEP 12288:js5QaSe6VJL7gcpnUHFqAKFLvnKAhOlr9r/AFO7R4j9dtR7ey0648qhGGEbYF:JYF
TLSH
T1D72513056BF25130F0F38F7898730B186A3BF9A89F43685F225461584D76E558FB0BAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-ShellCommon-StartLayoutPopulation%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-ShellCommon-StartLayoutPopulation%4Operational.evtx
Size 1.0MB
SHA256 93300b7f92baa529f37795362b37d7e36b8801230091e8c287cc0c3c23794a69
MD5 608f059f774ff9dffdbe49e88e4c7b96
SHA1 38ff3a7d7a9497392b045f1ba177d709b10877b9
SHA512 00d90a852111f7a71eba0715884b40b75582c1e722f2e032d37f19e590857fe46ab85017a1a857a830b550e8a3e5d1c15f3d3119952967d18fd40233803d9800
SSDEEP 384:GVhqn7N7zAh7o7EA777S7247Vj72D7Go7Pm7N7c777D7I87d7pw7v7QG7D7m7n76:OgAFBOazR0vEjpSzmtWlmw5C6GfgQ
TLSH
T1E52536262BF85174F2F34B79A8B70B54693BFC191A81C81F2124614C4CB5D56ABB0FBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-SmbClient%4Connectivity.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx
Size 68KB
SHA256 5a126775fed22045ad8c2cd0a039bd13df5a2ee603953d45c4a13da6b77aecba
MD5 eb1eb011c730175927a73675562af225
SHA1 e4627b94168e8e0fcd0836fe94e0ae12f70de363
SHA512 2bb183b627e9275a26647e49ce1664391de6ec6bf577fdd705e150f0de78c9bddb6f30b52f10e4a367ef732c279502bd44b5e8ed460e8edc23b3b5c6fb4b575c
SSDEEP 384:aqWhguvuJupWfukRuz7uruwuzT8uuuxusu4uzTEuyuIuHuzTHutucuzTkuyuEuz9:ZWL42qCLvR+sWua/vLulAA5jMLe8
TLSH
T1546331051FF84034E1E69B7D81738B2CAE3AFE785691C95B1024B09C1C65EA19F71FBA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-SmbClient%4Security.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Security.evtx
Size 68KB
SHA256 028e8e78a624146c3d72c7bce31be810f4c8ac552761dc8292395cadd768ad5a
MD5 cf2900892ec7f31b64d5106ae38b0582
SHA1 d117f8f63ebb5636d0fff3328c565f301992df6c
SHA512 2b34d1bbb3f329212bcd1cea8ced7b4349bfefafc0e66800ee80ffe18dc0b951fd287586b7731876e18ec3ad03dc86ee74616ce577f817f9f8b98a118f95a28e
SSDEEP 384:VAhfuZuuYuufuuQuuPuuxuuauuMuu9uupuuDguu4uufuuauuuuueuuUuuZuucuur:W6ghYRvGkrn8AhGaKMX0TdHp
TLSH
T14E637B42AFE55634F3E38F3455734B281D37F9259941DA9F10A4A09C4CA6FA08F31BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-StateRepository%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Operational.evtx
Size 1.1MB
SHA256 a04841f45a4213377342ddd58a7e815e0d5592206b04f88b9d626c7bb5aa0785
MD5 d7191eb272aca779cb3c4bc007483383
SHA1 ba17738f6ede42ec75b9d34dd07c7f7a0bdc11ea
SHA512 d2fc105d370f3b74be518bc901acf15ba17e8feffcbb0bd647aa3e354f95cdee9e7e169a54d2011daa8169453d6e2c8a0dbeebb53dab58afa66a4d4ce712e8c5
SSDEEP 3072:YE/+v9uCmD0Ca0GRepNvnPZ+6hodr5N6WaCMBk9Zzy1Zv2E7dpHNOwF/3jk3dtWy:N6
TLSH
T179354A022BF50934F5F38F3A80B30F24663BB9285996D64B1158A18C4FB7965DF70B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Storage-Storport%4Health.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Health.evtx
Size 1.1MB
SHA256 1849b87c1254c15beec07385b045f8ee419051cd511e18f3037cb8431b60b7d2
MD5 20b44fa202a08350281be00463e25dba
SHA1 835dbde8ded549f132aea56f7fb7ccc4548243d0
SHA512 d0bffd0fa6d2232710a6325e3a3bccaa8f31a575b1c4706d31b0074734f92b9c11defe91446d1daa982cfa5b94fbe2e6acf912753fdd3c781d8c9eac92417945
SSDEEP 384:/hIhIpIPpBjpBSpB5pBCpB9pBIpB3pBWpBqhpBwpB9pBkpBnpB4pB1VpBypBBpBy:a26tEVEl9pf9CLGQ
TLSH
T13435F6551BF70629F9FB8EB416770B34AA37BE342A95E91D508090EC5CB68108F707EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Storage-Storport%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Operational.evtx
Size 1.1MB
SHA256 eb9ad070cae2474fcaef82fe0d02cb6c98246cc167ff51951c191f31821be381
MD5 f3816e37b91b498f1f6cc7bb54e0a6bb
SHA1 604837ddb44ede76ac9ede059b81c6b767108781
SHA512 8bb288c50a48a468d7f4a33fc91ed6111dfb514d17c88a2f75ce178c6bfa2094808f65ed86b5a645e5d10985b996c1ab5be1b98d4c54fe90514b9e54b94f08a0
SSDEEP 768:sEPe7nBCyKwxRT7QDLD3Te74AIWa69b5w8Kdt+62dbkdfJY+ToXKuEXXcIuiz2Z0:8/rP2uy/3
TLSH
T1603577052BB64539F1F3CF3598B30B285A3EBA247B42D84A304452EC9CA6D559F70BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Store%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Store%4Operational.evtx
Size 1.1MB
SHA256 75b4c955eaa39683125a54648cf7334a0f6d1bc511ccec172fb52089e29bea58
MD5 937a25095ffd164cb395575eaf55a953
SHA1 b403eaf7905136d524cce67685c6d85a9491474a
SHA512 bb40994b54e596a5ba790198da40728a3522e6194421e1d04c123fbe1b949f8647c14511459c0ce26ea70bfdb82529d38a0a21e99477e77903a0c8a517bf9252
SSDEEP 3072:SdRgF72ymxcKMtUY0JuZefL+2xM++bzfnSr0k1PrZT7jD/ULF24GDnmXVr8cYWKp:6/ULFn+riPwfk0i5eYFlmzR
TLSH
T13035AC016BF50534F2F3AF3598B31B2A1A77B9181AE68D5F1015628C4837D929FB0F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Storsvc%4Diagnostic.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Storsvc%4Diagnostic.evtx
Size 68KB
SHA256 f50489a07d2b09c5419d45162617d6858970b0a392ca5c21ac64cf4f7f66a584
MD5 bca85113feeaa9baaacaa4aa2be4ae4a
SHA1 852c1e2ba9c2846fd3b2acc36abbb631a5cccd8e
SHA512 1bc739ba4d2abb5500e1e470525aaacab3cd617d8164640f4b01f60f1002d29e58036c4f07081818ac3685c25fb43209045c9a97cd468fa2e9c78a9e3e877b7d
SSDEEP 96:lBuLgRNVaO8GoZC5Cu6wDee8rfp9rjjuaC5C2p6C5C2pA5C5C2pNZC5C2pFC5C2p:lBuWV7YURbqfFvHUt6UtA5UtNZUtFUt
TLSH
T194631F061EF84538F4F3CB3582F757267A3A7A855E62E44F229023AC0D62D10AF717DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-TaskScheduler%4Maintenance.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Maintenance.evtx
Size 68KB
SHA256 e1869442bc8cf1a4c78bb770cec2fae5f8d1c4d3826189016e7a9ea47cf60592
MD5 aa2a864ac9682776a108e09601443b71
SHA1 bf82a00fb6faf064a624291373e1452ecc390640
SHA512 eebe11ba3f59680248f24ec5d7b8e5523d4c02fb514e9601aef7ead26c638b4560cefb64227427563fd25ca00da5ba95433cd056853dcb9ad64b64eb02966ec6
SSDEEP 768:TyKTPKTTKThHKT4KTKKT9KTeKT+KT5KT:OKbKnKJKcK2KpKKKSKdK
TLSH
T157637B0597F45A39F7F35B3619F29B1C1A73B9088A71CA8E012063994C25E61DFB0B7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx
Size 1.0MB
SHA256 8fb3d86820d1f3f298bb4954719b8ac56ee26a688cfa09dfd2f71ec7ddb9f15e
MD5 08856955bd609171f4bd330cd6e6ed26
SHA1 570a26350626b54a085fe15bd4d59c964c6a5739
SHA512 e20fb277cc4b2759547e19837dc21f72fa2f8ef7c78911bb963b5dc43909f82375ac1e97389e17a4e8b836e713b2412f7b6945c33b77ecdde84acfc715a33b6c
SSDEEP 384:cohxioQiTiGimikiQigi8iMiUiciYiYi0iAli9uiqSiXifi0i4ikiOiSisiBiri7:NPDEBdRikAyTT80lbzcxikAy
TLSH
T1D625F6019BF91828F5F3AF35D8376B0A1BBBFDA00E65495F1154A0584CA6A51CEF0BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Time-Service%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Time-Service%4Operational.evtx
Size 68KB
SHA256 072af8b3e21eaddeb6410722b8d1311715a23d5ff943ef3ba61081b4293208ac
MD5 7b2b57c975136880215ed15195ebae18
SHA1 88c274ed3c9d89fe1cc1933236877ebd1c742977
SHA512 cd2ad089a39f31030bc554c54a7969e14114b008d1a0811f1792b321ca5394106b28789fdab53cd86d8ef55fba2223e5c3152ca34f14ec335b34134f51bd611f
SSDEEP 96:aTKNVaO8PoSpblJ+pG+wPF7M+mdVcaUioDjd+61ouEpwVtpkVtpbVsp:aT8V7SpbepG+wP68JXOHpwHpkTpbSp
TLSH
T127639A01DBF81418F1F3DF76ACB722151FBAFA641D61C95E2094A25C0EA1F148E68BB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-UniversalTelemetryClient%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-UniversalTelemetryClient%4Operational.evtx
Size 68KB
SHA256 c6c4d5903e61f694b8796c3a9df27b808d82ee60648ef1b9d455a0bde33e66bb
MD5 3f74f290529d67c3010db61b25aa1abe
SHA1 7cdbf9f5a52f7fc87ea669d6337d53dda966f19c
SHA512 90bdfe96e42d744cc8f7289c9644111901ed7ab336e5ac1d49f3abd625864442fd031b4e12d32efc2c117a004cb38d2634d8318fcacf933fb4aa39c01b703c99
SSDEEP 384:iwhmh/7hDhPhjh5GhaRhehYhUh9h+hxhhh7h3hYhphHhCFhZuh/lhphjhEMh14h3:b2NV7FeKmS3BR
TLSH
T1FA6385076BFA0829F0F79B34ACB70B552D36BC401A41D84F106961AC5C61E619FF1BEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-User Device Registration%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-User Device Registration%4Admin.evtx
Size 68KB
SHA256 6a9633cdb026cdab946dd5bd7b55dbfe7184dbe644ad2c9986a52045ea2c9059
MD5 d23bebd6d92aded0dd5795319f21a005
SHA1 0b3ea8e1929ebca081d1eb2f77bd31d3f909373c
SHA512 5b432f81b3c382c90cc2a16f73e9c3aa6feea8eb5fc7824fdb0d7dbb2139bd6c6cc742a811aa6bc5de8993086ac60f083472e8ff637776beb5a1952062811a51
SSDEEP 768:XW/5exnJz5RBYxmu1uKwafYPFnGEcBLGXZ:8exnJz5RBYxr1uKwagPFGECGJ
TLSH
T18F63F3002BF55A28F1F26F7A85F707250E37B9984C31D54E1228914E9C61EA9DEB07FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-User Profile Service%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx
Size 1.1MB
SHA256 0d68b432f87b85d38d92157b5b0b314f7518e72d3a0163b30c441a307deb3b8d
MD5 5764cf672fd04cba12447778041db8c1
SHA1 13facb3162519635396ad0e350a475a717d514a0
SHA512 a335c294b408fd9daf37bdcd0660f371d3db1ece8549d628550417bb951f34d76b63e0d77135c0650e973e9c7f519a7e9784e5549d6b7f85de45b2a3994bf274
SSDEEP 384:UjhEmzmbmkmmmbmEmXm7mzmrmUAmcm3mBmdmPhm9mnmymxmPmTmvmbmKmEmbmkmv:mqCM/DPlhpM/DPl
TLSH
T1843523025BF44928F2F79F3894B31B183E3BB9985F664A4F016560484C6A975CFB0F9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-VDRVROOT%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-VDRVROOT%4Operational.evtx
Size 68KB
SHA256 8534891ff8f28d1628a922310641fcaf6d77bcfb976bdda9fe6774eaef5e91af
MD5 540b65dc57148f0d0faa8a3346bb68ce
SHA1 b5a6155e744701d266af0d26a128af58b146df8c
SHA512 26be5f9dd09182e16867b2d1ecec29bf0de821c4838b761cbb67d8a9929df4faccaed0c23cdb1795f9b3fe6d98932eec5c3ad63903c90bf07e6301c21add196e
SSDEEP 3:MgAWl1l0cQ7MfaltpRTtPl2tVRl/l:Mk8vMijRM
TLSH
T11A63020477099812D1080A3944878B91BF70FD501F7A9753A960362C8D753421D52F59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx
Size 1.0MB
SHA256 79151b1d9710404ca1ff6a09971be2fb0dde9dd60aa1d7d3f6eab9ea5759fc02
MD5 2e3ec31e6f01c7855e2e07870825cc9c
SHA1 2f473f9e53a653e09ad336dca79a1b43d83a9a2f
SHA512 4d368e3f3d6b67adf971614ef215ea86a46a99e09cebeb4738dea1b5038cbfa4f928191fdcd8d87bac86453c10a27887c8b8b0830f3eb09e0550fbd694e56540
SSDEEP 384:2Hhr2zH2F2f2bP242az2Y2k2+2G2E2s2a2C2c2AF2/m2Ev2PY2n2nt2p2z2S2r2S:kUMp1pJeyx/y4
TLSH
T131251627ABF81938F1F38F78847357281A7FBA9849C1968F101470594D61E65CFB0BAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-WMI-Activity%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx
Size 1.0MB
SHA256 ddd84302c3e72a4e60d6668212b75b3407540a0905f523b6b3767f8da1e1f512
MD5 30529bcd16f35fbe0428117f264f5882
SHA1 22a45574128d15d934e597769fa720c1fcd9e52e
SHA512 380b66cc7c055e79bea1fc091b611c48a6915ed6e21cc6adfc7eba836fa7bf3654b6250a471cfcfd709693146ff027108a2ab1f5720457c3957cf86b5476ec87
SSDEEP 1536:Up3em1RWwXUixqyVZcZbkHQkwJRQiC8k6R9C8k6R:U9ecRWwXUoqyVZ8bsQkwzQaRFR
TLSH
T1832544026AF80428F1F2AF3985FB1B0B55777C89496ACC9F1054279D0D619A09E72FFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-WebAuthN%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-WebAuthN%4Operational.evtx
Size 68KB
SHA256 aebb695d330bb7498f400d9278ba55310a6e39d08f69e1c48d347ebde834a92e
MD5 f655d4f8fb98655aad63a2561357a939
SHA1 1f653bf19573914d3a9612c033fec4b23dbc3282
SHA512 3b26a98f7bb3e8183e3fb038d50eb07ee9232682dcfc6f90353fd56c5f952c87da224d4686a78a69c2fc707ab7f01542e6eeba392cf4dd565838414a45049631
SSDEEP 384:mKhZZVqVypVqpV1VqVJVWVfVcVFVoVoVmGRVfVGV0VSV8VNVgVVVlV4VjVCV/Vr9:NnFNS
TLSH
T124636C111BF60539E1F29F3D91B34F2C3A3BF91898828E9E6510B26DCC96561CF31B96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-WinINet-Config%4ProxyConfigChanged.evtx
Size 68KB
SHA256 684e5c08d3f61a9f43f2a99b643ec6a0ecceeebbb9fcc14d8b255b1429035ca0
MD5 4bc75f7dc83ed770a0924d7fba0ce3fe
SHA1 aee35762ef7bc38ef18a4a51fb7809abc4ad8f8f
SHA512 8c4e8659d1c3ab47200520dbee44fc37c6a6fa83eabaa787a454e8bb562fd213ffe453a3ddab7f58e9b8e586efe0e4f50212db0c01be66de9d170765b9555030
SSDEEP 48:MdocqWPurP+MZQNRBEZWTENO4bpBfoahgR1sRlISa2Vrt/zVAR1sRl:u2KNVaO8Po+g/sTISPRU/sT
TLSH
T1F4630C12AEF8441DF4F28F79493E4B242936F9619F02C68F2154626C4D62F50CEB0BA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-WinRM%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-WinRM%4Operational.evtx
Size 68KB
SHA256 2a0480b9903366ccf8416bb41347de31f3a2d0f555499df14a4e3ce6e01cbbc1
MD5 bb78c2e40023d4dbf35d046f02e26ce5
SHA1 34511c369456dbc7648976bd7ab085ded37453fe
SHA512 4dd0c0d3b032ac438c779140931832f928bd79f5caa3c308702f6f7761782ea9a931ef65d5def6fb4a312405c3a568240f44e22601eee5fcff88c6879e162d62
SSDEEP 768:K3bk3d4dnxSiXq9e7xrfAc9JXcZR2HpLpp:YxH/
TLSH
T19163230217FC8A28F5F3BF39487A1B241D37FD84997AD64E1110A06D4E62E519EB0BB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx
Size 1.0MB
SHA256 9c8cff085197f63d3a6278d85dfd3420ebc9b4882255145bd16beed81de31c59
MD5 c093928254eca8a6c31527893d8eb175
SHA1 192853b74d09d8d695f00bddccb3dfd6da195b71
SHA512 4c7fe78d2a39b9315505c58e2355e574ef19c65ee51f098506c589c54e740040d3c10fd0010e539db130367d70d700c7974456337967ac0de69bd508839a9f4a
SSDEEP 3072:x1rXRiCZL6446HJ6Lz4R4TLoZNkbodVTup64u8nsFTSJsDPY/+10YHJ4sKSN/717:h4
TLSH
T12E2568546BF41118F2F3CF3EC9B35B195A37B9512E628ACE0151709A4C23EA1DE70B6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Winlogon%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Microsoft-Windows-Winlogon%4Operational.evtx
Size 1.0MB
SHA256 44d77bb9d8e5d7f7ea5bbdc20e895bc6acbcb470a23e7b19ffc45d05d7d3efa0
MD5 ebdc95abbe959119995e02cda7ca9d8b
SHA1 28e5c4cb55199900074d02e7cde849f2eb98c0f4
SHA512 d8765b7fb8f296f64c3f6bf21e18fe3b7f3e2a2141e51dce27ceb08197f625bfedf52ba33a364acf1d1e3e6367d9ab897dcab8ea1352f9905876f02fd9008298
SSDEEP 768:9fQne+QW4Gy0142Zea2TK6bHWnHrxzP9D+Pe/9D:6nRQW4GtQK66LxzPu4
TLSH
T1E42527862BB8043DF0E3CB3D94B71B583A3BED680A81994B1154627C5DA66524F70FFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Security.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Security.evtx
Size 20.0MB
SHA256 26a4fb8180bb5c55ba44ff7ca313f1c829865d84cda45ebae71fe8f8f034760d
MD5 d43772c949361cfb91852ebfcda5b609
SHA1 7848b777eda9408fe83c20032a6845e54a2733a5
SHA512 b7dd46cc70f61df90d2d3a2b0edfb4f10c2765991b3d2bc8b2cef2263eeccf905f3d8f9b9f0373e4a74143e29f0bb0f02e5c71577e715896c493b99f9a5468fb
SSDEEP 24576:utZPCJC40fffiIiiS4+Q8Hx5HgdGgI6nhollg:utZPCJC40fffiIiiS4+vHx5gdpIhllg
TLSH
T1DA27BB04B7F80539F3F36F7682F747856932B8A66942868F4186124E0D11E259F36AFF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Setup.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Setup.evtx
Size 68KB
SHA256 68ae828eb50a930ec6975560c8854760eb1e5a41fdd29fe20ac9be8eaa0b3d86
MD5 9910e73474af5a0fe66c612518c443f2
SHA1 5f8a24697ddc8a34616a863ae19f862a023f7c2c
SHA512 64c7573b9090af9e78a035f975059a64da740802e53d4e201021a85bbd7a4d2347b71e3c42b7583697aac8b326152254e848960618aa034e41d52f9982225bc6
SSDEEP 384:AMh8S26INCcJPWQLeASLerSSMP4MgskW4KJm6edS0HNiCPegh6EePSYe4S9Ms4nY:Nnq2W4sQoSnA
TLSH
T1A56316152BF5052CF0F3CB35C6B30B1B2A3BF9849661AA5F413062994C669A15FB0FE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\System.evtx
Size 1.1MB
SHA256 ebd5a898f761022e3bb34bc7b4f006e2e45677f7edf4646a2ba1b2ab8b4aec99
MD5 746243cc13afb545bdfe82b0375ffdd7
SHA1 f55ba09848915f607276101fc2e85362a3e9f111
SHA512 bb1239c7ffd5029ba233ee1668502e237d82aea19e50d6bd56cd1838d199efde6915785c27bc823405ce0e6b8ec142120df444d5b3d0fb3ef1510977a85f7a98
SSDEEP 6144:AGp2Adp718oGgDNCr5gt25IviC1RXYZfkkXV9R:hZ1ZGzr5gt25IqC1RXYZfkkXV9R
TLSH
T11B35CC007BF44538F1F38F7984B347252A37FA601A92A64F2294B2DC5C22AA5DF717D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows PowerShell.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Windows PowerShell.evtx
Size 1.1MB
SHA256 f0bed1ac05cce5f51421ae6a1cfa8f98df09d90cd71c86a1f1c8f0baf5412fbc
MD5 b22c47e55fab53e1879302d5c277597d
SHA1 5612b12ad787b4c6052eca7aab3f5df8a58c71b0
SHA512 2b4e343576c379587a36f8e40d2cd9c5247e756b40e6edef7fa82f9646d6e0a94971f911417ff961c333aed785a5d85d81df0984744289e4ab6ad7795a17869a
SSDEEP 3072:gcQyIBGbV2BtV5srQyIBGQyIexDOpViL4:4GbQpI
TLSH
T1D135C00326E85105E4B3EF78EB7355B49B367D115D39DE9E62C0004E18E1E81BE62FAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows PowerShell.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\System32\winevt\Logs\Windows PowerShell.evtx.FileSlack
Size 384KB
SHA256 c97fce784428a2e10cd6d4ef97ccc756f2e4c1b146a9b9dc5415d4e3e245b70a
MD5 1f0e8545e10920a75424337eefc45bda
SHA1 147033e3d2153ffa67208b95dc9e552e449cd485
SHA512 1eba6ccb34e8e0638ce30743141f052434cf04a6be59e2591b3d42ca0089090c20c5fd9db9b8633c07503efc9c6148994d1b890e716ca3416ea29894fd051074
SSDEEP 3:RRD:LD
MD5 SHA1 SHA512 SSDEEP

Submit Download

Amcache.hve

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\C\Windows\appcompat\Programs\Amcache.hve
Size 512KB
SHA256 c206e84b3c7a8409814e478f38e509f937f6d3588a8c4e10ed50e3dcda4808f6
MD5 e7c060fbb3f9baa6667fdde9da891dbb
SHA1 032b753f1d7d2bd3064c6d996812da25cfa92c83
SHA512 3ec5702c56dae2a59764b12cbe2f00469f1f3a560664d875d4a0e9e12c6ef69f62fcf6a6b9317d612caee34cac59f7298f7f281bf2b98eb3e329c68eb6f85079
SSDEEP 3072:W0u9evmo/BIDBIaJxVJVPtBE7dxet+hxX4HYDWh61H61A3SrEvyWKhbXuRj3yXFU:bwgbiXi8eBJyQu
TLSH
T158B4CE14BFE087F1F2B287355DF32F425939F8526D118A8C1291130DDDABB51AD22BAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$MFT

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\F\$MFT
Size 256KB
SHA256 cb31e13eacded392fcca1cef12acc38eb062b53748cab989d377ca66ab128aae
MD5 05d1585f6d7a0bb774574fa29bea9f24
SHA1 1e1b29cb8e758f045aec9bbde40bd32d84dfb9c2
SHA512 4aa5e49084321be5219c2206ff889a08e3a4c1763ff5d3676c415b5435e30596de7d1874c4fe0f283294ad52c4875f58769494337952166a4bafee525c90456e
SSDEEP 192:C4vz4ziVXFzVYP0FtEkI7a6tQdGFjRJjAIytlCkzvwedgVpHnsgYJ6x3q/qllU:mah6PAIWdgVpHns5zyll
TLSH
T12A440303FBE49931D46E56318AEF8F96B3B6E11E56B1070B6354D7283DA2B410D3BD81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Listdlls.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\tools\Listdlls.exe
Size 414KB
SHA256 b0f6800b2bb4c86e091120e9087c75f9b1b3e46b89cf65744d65cf5ab01fd385
MD5 60a2331a2b28968585c7c7229d2424a8
SHA1 fbac538166d61b4f10db934bd4bc1b86c81e56fb
SHA512 159542a30195f58a6957d70282bd2dff79708bd2228ebebf7db48e25d80e68ea17714b518a029d2e21acf564d37982b43850249c944e99ce1b38864ffa00b009
SSDEEP 6144:IejqfgaIqi0N5fZC9kqf7Uxv9VYO1s+rTiMCOoRb0pyeZ7:IinaIqi07C7krtxnkmB
TLSH
T153945A1173E480F1E4F35A7099B09626AA3A7D724B34D68F6394426D1E72BD0EE39733
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Listdlls64.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\tools\Listdlls64.exe
Size 215KB
SHA256 29d23bc492e48a5ae68444302d3430e07d08e04278d53aa70d9367d9cf8bceb7
MD5 8336396d50dcc9d5a5f66b078a8460dc
SHA1 42bf0bb282512e4c638b8f03617dd973ee09afd9
SHA512 08f34405f8d5ebf695391f9cb1deb6eb22b318b698ce9540d37eae45d36476a96d379e9f338c64d5f2f3e9674751bdb7f3661845530605b8fb1eb14ee91702e2
SSDEEP 3072:CcSIBqf7UxpYs68VYO1KpygluJrTiMLGcaad5UFyn853tOwDmh8DaNv3EL:Ckqf7Uxv9VYO1s+rTiMCOoRb0py
TLSH
T120245A5173E800E5E4F7AA3089718606EB767C564B34D78E13A442AD9F63BD0EE39732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PsService.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\tools\PsService.exe
Size 261KB
SHA256 d3a816fe5d545a80e4639b34b90d92d1039eb71ef59e6e81b3c0e043a45b751c
MD5 136f9205a5945681ec470b8461dfee5f
SHA1 1ca7e6ac6128bb1f4e0318a28310525baf7c67c6
SHA512 a3eaf3665bc8a227d139fb0fd6032c1510288c3fa41a50ee5a774301f88491fa69297c437b4ddec1a0df18ba5085c9c5e61254bfcbd38fd3b5f7c4d074ede142
SSDEEP 3072:e4iIB7s+H1oGlMqE7PbxxY0X8xR1O4yjXUnJfELaQdUFvJPKg+SjWAg0FubMr/vV:e4p7sG30xTX8tajKJGa5pIAOCvM6+e
TLSH
T1E0446B1172E18432E4F32A321DB497661E3EBD614E35D9AF5798096E8E71BC0DE30B36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

autorunsc.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\tools\autorunsc.exe
Size 701KB
SHA256 666aa8972b4b0a1e5df53c076af44479f2f94b16f9fb56e15e6d104ed86ca9f4
MD5 b76978d483ee6afcf5b919a51a7d111e
SHA1 6b0292325505fc3ba638d42330a75cbdf237561b
SHA512 2e7f076441f7cceb1e1eb38044d7a7df4226249d4526621bb23e28fefaca80820f5a5899709862191b03837aa659be076dfc960488e24a8dd5f87b28aefe804d
SSDEEP 12288:WN/2Ekjc139fb/AJEAs8K85G3wwgwI6Ox1y95:WN/LX/AJ9s8/5G9gwI6gy7
TLSH
T1FEE45A0076A59035F1F252B029399776383EBC719A358CDFA3C0695E1DB5AC1AB3872F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

handle.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\tools\handle.exe
Size 743KB
SHA256 84c22579ca09f4fd8a8d9f56a6348c4ad2a92d4722c9f1213dd73c2f68a381e3
MD5 9f637fba2d680e23da0266c1507f870f
SHA1 05d4842c6e9b5f9430dad76a20c2a4a6feae0bf0
SHA512 addf414497df3a057ba57afab06a61f0ffb7c50134b0c83b61fe6542ec25298b893a455b317262977786f30723a23948836b402d310d6ae4bee1e6cf17a0272c
SSDEEP 12288:Lsfe2MShO2bM1teJFN9rVY5C1lq7oFpuoIG6h:Lsfe2Y2bItIHY5C1lq0nus6h
TLSH
T126F47C01F7E440B5E5B36A304AB5D6569A3ABC650B30DADF2394466E1F33BC09E35B32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pipelist.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\tools\pipelist.exe
Size 331KB
SHA256 2156d7d3158ea589e8187c5cb82442ee6c37ee982bc0d728edc8a50a2a1c4281
MD5 0e7bd3e144e966321068c5e9f5ba301d
SHA1 00919feaafecb87369d0605d3ecb9fbe69b41507
SHA512 0ab6bb567e2b02460c724ab3cd83fc94f27ca0e268417bbd3a96f37f8b237c8dcfb62acedb2081e21ee216168933ac49c0fe502077fdb9fd6ed68c1088a05180
SSDEEP 6144:Yxhmgd8B4mPalFmZUYQXw/uc1Jiq0MPiU44tzElX:YSgM4mPafmiYQ6t1L18X
TLSH
T16B745A1179D08032D2B33D305B78E6724EBD78211D359A8F53982AB95F74981EA39B3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pslist.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\tools\pslist.exe
Size 212KB
SHA256 ed05f5d462767b3986583188000143f0eb24f7d89605523a28950e72e6b9039a
MD5 6c08bae0981841e0cd22ff0f0e8f7510
SHA1 cad5355c534cccf48ca8df5a1007cc34d37cb619
SHA512 1080d9e7d3151122518c8ecc09da061086f1d490656f26df99153ddd3f933da049a8364af28fa104da54089271625f229007989a2dff713782066bd8fa142c25
SSDEEP 6144:UJTVdqTvShLDFQUH9To/JPjDXDzM/P77U8lvfhC9GEPyg:KPkQWdPjrgDJlXELyg
TLSH
T1D5246B21B6D08432E4B32A305AF4D6725E3EBE715F34D58F6394067D0E21AD2DA35B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tcpvcon.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Tigmgolm_2026-08-14_05-26-01\tools\tcpvcon.exe
Size 197KB
SHA256 37621bdac3ced1103278e8c0ef7b73dfa1cbe9becfbaff421a46fbc78d636b5f
MD5 356ed0fc156993551a484964f99e65b8
SHA1 6b936b5a5b4451bc4f147dad6cd2a7072a799d03
SHA512 8060b018f256ddf4dbde002b6d6b526362c617cbe8f1930a88cb4f191542240530658e8a7b6ed5c496436bcafaac0a6898e67187c3c8854e73ce6f66809c5fd0
SSDEEP 3072:A/H4UqjYVxwTcy4jPPZAjjF/hd8i2pzjGf9j3nPR1IIqQdUF1cePZGkjqjR96xUj:AP4BjYVeTfjF/r8x3GlDnpCaO0Mxg
TLSH
T19B144A18B2E08072E5B73A3069F4D6729D3EBD705F34D99F6794466D1E71AC08A30B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_rpjqgmgy.xzm.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_rpjqgmgy.xzm.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

handle64.exe

Path C:\Users\Admin\AppData\Local\Temp\handle64.exe
Size 406KB
SHA256 24bafcc570cc9bbb6b6e6652a57a519e0464e3996891aaba6f55299cce20b04f
MD5 89f845fc4898f2d47a3a81f0b57c60f1
SHA1 b04a2347a0f94e87215424d816f9912c7bc248d5
SHA512 50bc14c4221ad984c3aa98327ee9127f7470a9a2b0a953544440a7b05f60f7f91209a96bd87d0d8f1e05551863dd43193f7f4231f382d6ad75d9f0a245939f04
SSDEEP 6144:MjRme/IYVCQ45De1/8GzfaD3f7oxakAuXeh3ohaYLCAyI5ub:MN9rVY5C1lq7oFpuoIGi
TLSH
T12A948E05F7E400E9E5B7A6348D758546DA727C594B30D6AF23A4866E1F33BC08E39B32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1368-1508-0x0000024B3FB20000-0x0000024B3FB42000-memory.dmp

Download