385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5

Analysis

max time kernel
149s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/08/2026, 04:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
Size 8.1MB
Sample260814-erenjsvbja
SHA256 385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5
MD5 0caf7d82c382f631f5858814d3f6dbe1
SHA1 7b4ffda0e40a6fc45a8194ac63a69b7cfe8d7095
SHA512 ff219e076db5c979bdac2b7831d99f9b16751a70566139bb7b0361a17b35963d2786664c078afefca105a800f194ac3ed760b92bde017ea1abbf84eeb5a072b9
SSDEEP 98304:vNZ0V6Lc6LpAN9B/AmwZSrOkqIfLnSpA4bgs1QeACMM5cU8s4c:x7OADk3fLnSpA4bg0QevMicUn4c
TLSH
T147867D01F79654ECD0AAC474C6564A22AB7178CB1B30BAEF02D482792F67BB05F3D719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution persistence

Malware Config

Signatures

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File created	C:\Windows\system32\Drivers\PROCEXP152.SYS	handle.exe

Sets service image path in registry 3 TTPs 1 IoCs

This determines the executable launched when a service starts. It can be used to establish persistence.

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Windows Service

T1543.003

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\PROCEXP152\ImagePath = "\\??\\C:\\Windows\\system32\\Drivers\\PROCEXP152.SYS"	handle.exe

Executes dropped EXE 7 IoCs

pid	Process
8888	autorunsc.exe
5900	handle.exe
6028	pslist.exe
2096	tcpvcon.exe
1376	Listdlls.exe
2056	PsService.exe
4120	pipelist.exe

Drops desktop.ini file(s) 4 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\desktop.ini	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
File created	C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
File created	C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\$Recycle.Bin\S-1-5-21-889581200-2041691093-2048517887-1000\desktop.ini	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
File created	C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\$Recycle.Bin\S-1-5-~1\desktop.ini	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe

Enumerates connected drives 3 TTPs 24 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\G:	handle.exe
File opened (read-only)	\??\I:	handle.exe
File opened (read-only)	\??\J:	handle.exe
File opened (read-only)	\??\K:	handle.exe
File opened (read-only)	\??\N:	handle.exe
File opened (read-only)	\??\Q:	handle.exe
File opened (read-only)	\??\R:	handle.exe
File opened (read-only)	\??\S:	handle.exe
File opened (read-only)	\??\X:	handle.exe
File opened (read-only)	\??\Y:	handle.exe
File opened (read-only)	\??\Z:	handle.exe
File opened (read-only)	\??\A:	handle.exe
File opened (read-only)	\??\B:	handle.exe
File opened (read-only)	\??\E:	handle.exe
File opened (read-only)	\??\H:	handle.exe
File opened (read-only)	\??\L:	handle.exe
File opened (read-only)	\??\M:	handle.exe
File opened (read-only)	\??\O:	handle.exe
File opened (read-only)	\??\T:	handle.exe
File opened (read-only)	\??\P:	handle.exe
File opened (read-only)	\??\U:	handle.exe
File opened (read-only)	\??\V:	handle.exe
File opened (read-only)	\??\W:	handle.exe
File opened (read-only)	\??\F:	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Discovers running processes 1 TTPs 1 IoCs

Running process information can be used to identify security tools or plan follow-on actions.

discovery

Process Discovery

T1057

pid	Process
8948	tasklist.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
9008	powershell.exe
6196	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Network Connections Discovery 1 TTPs 1 IoCs

Attempt to get a listing of network connections.

discovery

System Network Connections Discovery

T1049

pid	Process
8852	netstat.exe

Gathers network information 2 TTPs 3 IoCs

Uses commandline utility to view network configuration.

System Information Discovery

T1082

Command and Scripting Interpreter

T1059

pid	Process
8852	netstat.exe
5816	ipconfig.exe
9052	ipconfig.exe

Gathers system information 1 TTPs 1 IoCs

Runs systeminfo.exe.

System Information Discovery

T1082

pid	Process
9176	systeminfo.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
8888	autorunsc.exe
8888	autorunsc.exe
8948	tasklist.exe
8948	tasklist.exe
9008	powershell.exe
9008	powershell.exe
9008	powershell.exe
2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
5900	handle.exe
5900	handle.exe
5900	handle.exe
5900	handle.exe
5900	handle.exe
5900	handle.exe
5900	handle.exe
5900	handle.exe
5900	handle.exe
2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
6028	pslist.exe
2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
5900	handle.exe

Suspicious use of AdjustPrivilegeToken 36 IoCs

description	pid	Process
Token: SeDebugPrivilege	8852	netstat.exe
Token: SeDebugPrivilege	8888	autorunsc.exe
Token: SeImpersonatePrivilege	8888	autorunsc.exe
Token: SeSecurityPrivilege	8888	autorunsc.exe
Token: SeDebugPrivilege	8888	autorunsc.exe
Token: SeBackupPrivilege	8888	autorunsc.exe
Token: SeRestorePrivilege	8888	autorunsc.exe
Token: SeDebugPrivilege	8948	tasklist.exe
Token: SeDebugPrivilege	9008	powershell.exe
Token: SeIncreaseQuotaPrivilege	9008	powershell.exe
Token: SeSecurityPrivilege	9008	powershell.exe
Token: SeTakeOwnershipPrivilege	9008	powershell.exe
Token: SeLoadDriverPrivilege	9008	powershell.exe
Token: SeSystemProfilePrivilege	9008	powershell.exe
Token: SeSystemtimePrivilege	9008	powershell.exe
Token: SeProfSingleProcessPrivilege	9008	powershell.exe
Token: SeIncBasePriorityPrivilege	9008	powershell.exe
Token: SeCreatePagefilePrivilege	9008	powershell.exe
Token: SeBackupPrivilege	9008	powershell.exe
Token: SeRestorePrivilege	9008	powershell.exe
Token: SeShutdownPrivilege	9008	powershell.exe
Token: SeDebugPrivilege	9008	powershell.exe
Token: SeSystemEnvironmentPrivilege	9008	powershell.exe
Token: SeRemoteShutdownPrivilege	9008	powershell.exe
Token: SeUndockPrivilege	9008	powershell.exe
Token: SeManageVolumePrivilege	9008	powershell.exe
Token: 33	9008	powershell.exe
Token: 34	9008	powershell.exe
Token: 35	9008	powershell.exe
Token: 36	9008	powershell.exe
Token: SeDebugPrivilege	5900	handle.exe
Token: SeDebugPrivilege	5900	handle.exe
Token: SeLoadDriverPrivilege	5900	handle.exe
Token: SeDebugPrivilege	2096	tcpvcon.exe
Token: SeDebugPrivilege	1376	Listdlls.exe
Token: SeDebugPrivilege	6196	powershell.exe

Suspicious use of WriteProcessMemory 16 IoCs

description	pid	Process	procid_target
PID 2320 wrote to memory of 8852	2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	99
PID 2320 wrote to memory of 8888	2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	100
PID 2320 wrote to memory of 8948	2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	101
PID 2320 wrote to memory of 9008	2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	102
PID 2320 wrote to memory of 9052	2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	103
PID 2320 wrote to memory of 9176	2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	104
PID 2320 wrote to memory of 5732	2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	105
PID 5732 wrote to memory of 5788	5732	net.exe	106
PID 2320 wrote to memory of 5816	2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	107
PID 2320 wrote to memory of 5900	2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	108
PID 2320 wrote to memory of 6028	2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	109
PID 2320 wrote to memory of 2096	2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	110
PID 2320 wrote to memory of 1376	2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	111
PID 2320 wrote to memory of 2056	2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	112
PID 2320 wrote to memory of 4120	2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	113
PID 2320 wrote to memory of 6196	2320	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	114

C:\Users\Admin\AppData\Local\Temp\385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
"C:\Users\Admin\AppData\Local\Temp\385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe"
1⤵
- Drops desktop.ini file(s)
- Enumerates connected drives
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2320
- C:\Windows\system32\netstat.exe
  "netstat.exe" -anob
  2⤵
  - System Network Connections Discovery
  - Gathers network information
  - Suspicious use of AdjustPrivilegeToken
  PID:8852
- C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\autorunsc.exe
  "Aralez_Xwfpsfrw_2026-08-14_05-10-18\autorunsc.exe" -nobanner -c /accepteula
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:8888
- C:\Windows\system32\tasklist.exe
  "tasklist.exe" /v /fo csv
  2⤵
  - Discovers running processes
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:8948
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  "powershell" -command Get-ComputerInfo
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:9008
- C:\Windows\system32\ipconfig.exe
  "ipconfig.exe" /displaydns
  2⤵
  - Gathers network information
  PID:9052
- C:\Windows\system32\systeminfo.exe
  "systeminfo.exe"
  2⤵
  - Gathers system information
  PID:9176
- C:\Windows\system32\net.exe
  "net.exe" share
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5732
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 share
    3⤵
    PID:5788
- C:\Windows\system32\ipconfig.exe
  "ipconfig.exe" /all
  2⤵
  - Gathers network information
  PID:5816
- C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\handle.exe
  "Aralez_Xwfpsfrw_2026-08-14_05-10-18\handle.exe" /accepteula /a /nobanner
  2⤵
  - Drops file in Drivers directory
  - Sets service image path in registry
  - Executes dropped EXE
  - Enumerates connected drives
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: LoadsDriver
  - Suspicious use of AdjustPrivilegeToken
  PID:5900
- C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\pslist.exe
  "Aralez_Xwfpsfrw_2026-08-14_05-10-18\pslist.exe" /accepteula
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  PID:6028
- C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tcpvcon.exe
  "Aralez_Xwfpsfrw_2026-08-14_05-10-18\tcpvcon.exe" /accepteula -a
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:2096
- C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\Listdlls.exe
  "Aralez_Xwfpsfrw_2026-08-14_05-10-18\Listdlls.exe" /accepteula
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:1376
- C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\PsService.exe
  "Aralez_Xwfpsfrw_2026-08-14_05-10-18\PsService.exe" /accepteula query
  2⤵
  - Executes dropped EXE
  PID:2056
- C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\pipelist.exe
  "Aralez_Xwfpsfrw_2026-08-14_05-10-18\pipelist.exe" /accepteula
  2⤵
  - Executes dropped EXE
  PID:4120
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  "powershell" -command "Get-WinEvent -LogName System -FilterXPath '*[System[(EventID=7045)]]' | ForEach-Object { ([xml]$_.ToXml()).Event.EventData.Data | Where-Object Name -EQ 'ImagePath' | Select-Object -ExpandProperty '#text' }"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious use of AdjustPrivilegeToken
  PID:6196

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

System Network Connections Discovery

T1049

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

powershell.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log
Size 3KB
SHA256 a4a7424243c072041ac058e3039e0998502bf3544c4acc08fa6ec9fb59955d61
MD5 e6980e34a545c552412d349879b08cc5
SHA1 d426e815bb1a613821e8e10c59c40b6067c29217
SHA512 21eddf6b249b4fc4db356bc42dab3ad20d2a8c99f12d69ed6e074522a1de47bff1b47dfc0443de7baf2eb233da0d8001027d8858ea6612195e5a3e5776ff378f
TLSH
T12261FF323375B1D4C9567F071E6819C053BF8396EA94AF5CB29C225ED92600B9F122F7
MD5 SHA1 SHA512 TLSH

Submit Download

Aralez_Xwfpsfrw_2026-08-14_05-10-18.log

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18.log
Size 4KB
SHA256 bc64330d915aede18755255466303aa3655fa8f9ce50aee611b2cd7aab116ef4
MD5 a236862f236ae43c54dbd365d9a04c94
SHA1 0e5212ec45565aa83785b91c05b86ea5f7513b25
SHA512 4e61199fe5315a8b892499888a132149c11da733ce7768682b29c09ec863ccaa06297aa845e5271e4f376153ba890c60170059c93ea64329dc3baa99e50e3abb
SSDEEP 96:o9jlgBJK8fkFliRDpBjlp73pCJ9ZdpZBCJ9wpAJ91ptEHvFOvWsYOcsYesdUMsd/:NPlB9UJ3dTYJK2JvMtI1qg
TLSH
T15DA1E8066CEE49B3CCB7B049C5DFEB619AB0F1B703966E156B9518AA5C64F122C7F00C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$Boot

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\$Boot
Size 8KB
SHA256 9b7bda625857f9fa947a33abf7e6f1a7935e48e93e4729c923cc1efc7ddb857e
MD5 2f6a2b1914a8c0273b562cba74cb91e9
SHA1 33accdff5442dcc6af2ab995c16941226bd54a67
SHA512 c832f5def84682244d51d7c5f976cba3fdde5855c2ef72363756afeceb9dc241dbb35fde70dac25be069df97385b9317b9a9d620cba446582b43908200c38453
SSDEEP 96:v6aNcdCmGUyH52j0V6nPt4ihC/U8remKrQUqjfyJB7y4AIwVoouE:72d/5yHEj3Pt4ihCvresUDBm4lwV
TLSH
T18AF1B4F72802284DD0C16779DF4DDC666CB77CD4AA7187B4A190B83A250178066BFFB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$ObjId%3A$O.idx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\$Extend\$ObjId%3A$O.idx
Size 8KB
SHA256 84d09072d9d71b165a7b83ac78c94b4d0023cb5ae9e30f37b2d617bfe00cba22
MD5 0496c4db925d230f28a519d967c5e71b
SHA1 5c0353127f8a5b86a0aeb510ffbccbd4a9b390a4
SHA512 ea644d13efe9727aefb3844585ec6927e5ca7067a1ce7ab2f7edd991fbebd8a6ff7b12a4f8507cf96c964a844c72dac025a4c768970a1d1db7b2fe9ea40d06ae
SSDEEP 48:pMipaEQ8dflYBQPaa04PzHnXofxypUaaZien:ttua04kfxKaZien
TLSH
T1C3F152B3A5AE9B11C1BD2878FDB4B666B7B97B8F429040C4D458C28E812BF5BD131353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$Reparse%3A$R.idx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\$Extend\$Reparse%3A$R.idx
Size 4KB
SHA256 85d5bf2c68bde67f27761f5e9b4e53006a2e011feb1ae755fd847daa465d4036
MD5 3f5090b19b880b8bb98f9038d2739462
SHA1 c4633282cd54f900dffba102c045bca4297cf197
SHA512 f856a2290d4f2283dc7fd0af75b427938b8144d68318dc6b8bc7caa9f46e83163b1035c6346658cfa1b5c3a17ad0d72efccca147d5070f24a88aa97339165a6c
TLSH
T1BE81FEB7AAD00F2DC124C3798DE10620E7E4989B1236CB9F2149C6153CD7A79A1C139D
MD5 SHA1 SHA512 TLSH

Submit Download

$TXFLO~4

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\$Extend\$RmMetadata\$TxfLog\$TXFLO~4
Size 10.0MB
SHA256 b7a9e24957c2878ea02b1fd0eea288442ac163020a0a58b1d70d6b7992e1a2af
MD5 72d54c1b2d9b7977a141a774ff448115
SHA1 b5d535e5a2f9a1e516bc2b582f35e260af58157b
SHA512 787ea3756a249dde4072a84bef1aa08050f81fbe663ec530998fba6782684d56c4c63f7f4433dd2860d6ec277fcd82de909547097b4e9d870b5a7f4bb50aaff0
SSDEEP 49152:8wO5v3zMF0EfpvnMfEGZUUYvBUGhbA4/hP:8wO5v3zMFh
TLSH
T1BCB6871467E8071BF2B70F3598BA57167A32F8C7AD818B8E4147D2580D23B91EDB4B1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$Tops

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\$Extend\$RmMetadata\$TxfLog\$Tops
Size 100B
SHA256 3fa3ab9f7fcd7ca974419cc96ae0606bb8cec75bd9bd2f7c8e06515c1ea6db52
MD5 93aab6ba83c58324e6611049b17f9f94
SHA1 e995ed20d0c569372c7ccc78387745f61b860d47
SHA512 7d5640f6d218a80de69591c9fca1ef0030ae3b0330673dc8a1520b94f0d9451f844d0bb8a6c8cb92004d4e5754cf51c184ac6e8821cdbaa093a3061fb5b65b0b
TLSH
T197B00206B34DD687C00818748E24C6E4E0903D495C4454D37052F72D84705529464010
MD5 SHA1 SHA512 TLSH

Submit Download

$TxfLog.blf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\$Extend\$RmMetadata\$TxfLog\$TxfLog.blf
Size 64KB
SHA256 71069a75a89af8f422cf0d217d5e29eae1dc480e5db42be1dac9ff06d96d1a9c
MD5 057f7a2f36bafe0c585feb704b8b69ee
SHA1 28b293ac1e130ff852234ee776f8a33c6b78e286
SHA512 e02d888fee1f2ce45ba1648b7ec6408dcb64e4a9d246eaad1e3c340025ba4e5eca97152b5dee2b5a1a10fc3e58ee6821453e0154a7b6c4b42606c4cd499728c5
SSDEEP 96:3Xtqlto9bMF0b0NZaH3ov6N8kKKVSwXtqlto9bMF0b0NZaH3ov6N8kKKVS:32ToR2To
TLSH
T136537C84BEB1690EE59DD2F294FB61675735DF214AC94F09603CBB3A69B120F122CF21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$TxfLogContainer00000000000000000010

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\$Extend\$RmMetadata\$TxfLog\$TxfLogContainer00000000000000000010
Size 10.0MB
SHA256 3d0d368f43c75a2e8d3b068c40fed5b246d07598f85d4aabb979e2d1c8a7f37a
MD5 a4e90a8192d6d415eaf31310bd184cd3
SHA1 c36eae314e1a0ab870ee55a819abfa64f957111b
SHA512 9bde19dd04d4c33845d2620f4d5bbfd815f4b27de62f1315e97bdfc6ab471c95103497e623b34e46eb70b2ddccd8a6a1d6aa727a4c458d9a36ef0e4c436d584a
SSDEEP 24576:AVFPrrWwY+4F+Vjl1EwYsHlgScrC5KxeepRywRIh/0E7hs2mVW9zqLQGK4f0:AVFPrrWwY+t
TLSH
T1B4B688006BE4071BF1F60F39D8B65725BA36F88AAD41DF8E410792680DA3B51DDB4E1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\$Recycle.Bin\S-1-5-21-889581200-2041691093-2048517887-1000\desktop.ini
Size 129B
SHA256 e1b9ce9b57957b1a0607a72a057d6b7a9b34ea60f3f8aa8f38a3af979bd23066
MD5 a526b9e7c716b3489d8cc062fbce4005
SHA1 2df502a944ff721241be20a9e449d2acd07e0312
SHA512 d83d4c656c96c3d1809ad06ce78fa09a77781461c99109e4b81d1a186fc533a7e72d65a4cb7edf689eeccda8f687a13d3276f1111a1e72f7c3cd92a49bce0f88
TLSH
T169B09B0A41476664B05ED15DAC60E147117D547A4D14A2008EF0B345D1A33550778D69
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 8c24b66b55bef2d89d1ac69204ec3d5d7b191ba051c7c4c4cddcd66d92575d04
MD5 0f709d9a7125f5d69ba52e8846867f41
SHA1 e9e554385d503e88a18665f5fa36d4b8f9d49fb9
SHA512 9969ad8f86e8c40d9d609e65c091565e14ce550d9191c3ea0d1c62ce51d076a79b20078f556667e96f012dffd60578ef82a8cc245676db78d3b6b2b3d9d71711
SSDEEP 96:3XIU+bGz83uy3+u4tgp4DLjGQLBze9z39jBHMsDEuspU0wbtqrOQpPfR4J+MCXki:3Xf+G83uy3Ct7XBBKjH7DXspU3i
TLSH
T176140F0E5F243721CDBD917629E644B35D7CF03F8B5266DA686114B4CEE3A52A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EXITIN~1.VBS.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\AppData\Roaming\EXITIN~1.VBS.enc
Size 180KB
SHA256 8db0a64cda2c2bb90e666bd7fbb5cef7964bd7cfedebaf311cb965bf08720d5c
MD5 cc1c40c9202a2d5665bbe9dae832255d
SHA1 c612cc2d4921e914c5e0747fa67282b27771f100
SHA512 49a86e3c63d5a6286ff79ad9418dd9e7d20dcf3df46754f168d57e803572e9acb74ec00c25aeefce79f52b006a34935d54fb9f4410308188644b062071f993b7
SSDEEP 3072:5cEyQc7YE9fpwLoD0ag9TuzgPLEtxTOStTDe85BYsBztaUB2Lh3iIhCqLWaO0yRe:aEyf7b9BwLcg9TdPLEptPeUbBx1MLQIn
TLSH
T15204128E123F359960512C7729F846E37BC286CB1D2E85A1E14C9CBCB45FA3553AC2DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExitInstall.vbs.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\AppData\Roaming\ExitInstall.vbs.enc
Size 180KB
SHA256 41b924c9c8df913f643daf9ff35eddd306dd27fee73c224eeafaf8f90bed8ef9
MD5 e591e60580cc9d50f2a964890489da3d
SHA1 d0929ff3f3ccb6e62b0118efc51afba23e6e3bd9
SHA512 4dc08e04581e99c0068d565ea99975e6d54ea1ea9c9f8a81c6e9c93a623d58dfc29db580fbd9c4f34a5da8e80cb2b656c821119b80b9c124841b590c10b0e2f1
SSDEEP 3072:tmxtKv1+Sclix3Zk7S4eYNCWNOESMq+6v3sMl9pM2kAPZek0tjw0cEQufdnROK:tmC6lixe7PFjpBdMl9pBek8w0pVROK
TLSH
T13204136CB72B9003CAB2044F48FBFBB8153E16626D9ADFA979D142B24A750277D930D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BackupExport.docx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\BackupExport.docx.lnk
Size 671B
SHA256 f6bb2665497d68a9dea1a5c588d56c30d15c9ea2b3c80f634743f718c1556759
MD5 9cd1f73b0c5ab188ab8578523396e4f3
SHA1 7bb62933c7da6947bfca120c77387301b042e9bf
SHA512 c9df336b18431924d43e552fe2261be39f44508623601818fd202a4dbb0b5e68d6870f7556b68efa3682b3328c695b657225ef869d5aa9681fbf022947c78aca
TLSH
T17401A69062AB2F03D26308BC0E198330EBBB3C03FA60EB49520835C90C62E401C38FA7
MD5 SHA1 SHA512 TLSH

Submit Download

BlockPop.xlsx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\BlockPop.xlsx.lnk
Size 651B
SHA256 24bfb398f7fb5d882b5337fc4b3ea01ae3fc8a28b0559c26cae2a81654f7e5c1
MD5 463ed75000ee40d562c61612ffe733d2
SHA1 eae629c74cf9e590b8d3f9029ede5199693e77e0
SHA512 5bfaa054f7a3f25408d913daae25724f0b154c176f93527748e692274fedefb477cc443bce54d4a881baefdc96adf9ee24f166217d1db341f3a76e7d565e03c4
TLSH
T172F0466129AB2F0AC3600A7C2E5A17329AB57906FB609709985936E90DA5E408A75F23
MD5 SHA1 SHA512 TLSH

Submit Download

CompletePing.xlsx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CompletePing.xlsx.lnk
Size 661B
SHA256 6f873014ea24861841233dfc4534d0a505265504ac27a6fb613ff8eb5cf4d712
MD5 e25a60225b5fe733699affabbd394335
SHA1 d79643a4afe6bb4f9526d16b9a2675e9be47b959
SHA512 3d707eae216a80b8a1825caa3606d2860ec06c93709f93513c692993432692c74d15f9815d3dcb714ef27c5fe775fe7271680fec9ed8fda7bc4298d7b9f3bcb2
TLSH
T17A01AC6529EBBF27C2640A7A5B2C1328E2357C80CA60C30C614051CC0CD26005134F67
MD5 SHA1 SHA512 TLSH

Submit Download

OutClear.xlsx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\OutClear.xlsx.lnk
Size 641B
SHA256 a4a28df9d81de3c09211d676d226773c10b8185be296a6c1e3ae05ec68f053c3
MD5 a6d902d25bfbd1b6b6cd68ced9e82463
SHA1 aa2751be26fe096acee5e5bf4dec931b2e575e2a
SHA512 de3324d2282402af37aabd33df08cdac349420e607d6491b8f307f0420edeffc5e997db5872c6c5c03ac8fe01dadc942fe98673217c66c6770672ff11e645489
TLSH
T180F0E1122F87BF03C320097D67AC4776D3337825D970C30850A858CC5CE2A409175F66
MD5 SHA1 SHA512 TLSH

Submit Download

PopInitialize.docx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\PopInitialize.docx.lnk
Size 666B
SHA256 7a87425b3b8850d2952fdb4a611726984229707dfae490871449f2ffdfa50953
MD5 0b26c2ec2e63a8382a6a7243c553ae53
SHA1 0ce30f012c5a79fb152229ebd6c91f654662b744
SHA512 9707fbbb0b2791911b55f8e299cb19566c549f7e48d09298c58fe8f5da862ed440d761e7d9f4125fb14cd3dd57d7ad7e814415e4afa5415216b503f4853bf6f3
TLSH
T1D301E181B2DB7F17D6B202BDCB298375CB723C01EE6193082358C1891CA5E0055B8F17
MD5 SHA1 SHA512 TLSH

Submit Download

ProtectTrace.xlsx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\ProtectTrace.xlsx.lnk
Size 671B
SHA256 4f636f4003aa64e3b395563623c5cf725657edbeba69ddbce3ff50b2cc428629
MD5 f82fd96d7762a30ac9cb61bcdf42096b
SHA1 3fd340623ad7bddcdcc820791d124163d33e18ad
SHA512 9926abfbed81f3e054994d43e7f2f7ef832a2b6cfc3c7e28a3f5abd9d98cd33fe6bf4ef8927a19e611edfb95a95a30ae3ceed82ab097c888178e96ca18daf4a0
TLSH
T1C401AC4116DB2F06C271297C2A294735EBB27D52EA64D30E514036DA1EA1E009935F23
MD5 SHA1 SHA512 TLSH

Submit Download

RevokeSkip.xlsx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\RevokeSkip.xlsx.lnk
Size 651B
SHA256 bfb1580095c95987aad37cb12cc0fd9ad417feb5cbcf61aa997a29ecee05e555
MD5 12741faa7d6d8697112608b5f4e4bf47
SHA1 ccc07b26e951a25709983a39d3b18413c7303673
SHA512 9200a658adf974b2569c7daf3734517b84edc66a0f2e25c30d8d9ee2012adc70627d8c77a72461b4f1f7d32dd96f97fd0fbad52a5e2116e12233d1fc29f08df4
TLSH
T1CBF0EB812AC77F33D2708A3E5BA90335E3343A06CE248308517565C80CE2A82CDB1F6B
MD5 SHA1 SHA512 TLSH

Submit Download

The Internet.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\The Internet.lnk
Size 104B
SHA256 b68e121586ef846dc2be14897087566ac72f6e6339f193609a5fc6f766e5c4aa
MD5 2de82bdf2e1adaf6aa6cbf2f26a3cf2b
SHA1 5aea7998b55ef5f89414e631853e8ee4493c33f9
SHA512 585eb16da499c0e215d3752679ce3f44786126b813dbe3e137383b62cf8a3f48e79c63db2021ed71cc744d446b9d69bd4d0223fad9a081e54010c7b3f83f7439
TLSH
T104B004D053711C43CC150F31C0DCD7D1571C74515FD15541113435FF5CF50405453140
MD5 SHA1 SHA512 TLSH

Submit Download

TraceUse.docx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\TraceUse.docx.lnk
Size 651B
SHA256 fc4a0e22c62fd17adbf04a51fc70ca0c3b5be21405cd07ee688096a03c961af4
MD5 ef6aa189cb8df382f61dd159aafc8cf1
SHA1 ca4be560535b1ac87ad05a3aff73a216747ab102
SHA512 27b00ea1ae13acbd47ff5942df4246d29842d8d6fac718b2667151a0fb86f08eca6578b6892f9b9373c432f6920ac84287f05207b1d3bb77726489b5db87a5d1
TLSH
T1F0F0468017EB2F4AD2720D3D16386735DAB53C02ED74E788524836C91C66E009A65F6B
MD5 SHA1 SHA512 TLSH

Submit Download

UninstallProtect.xlsx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\UninstallProtect.xlsx.lnk
Size 681B
SHA256 16582b931d4432efba6cb5cd744fd792032c904a280c704e993f69757474c1d6
MD5 40449d2905f2944f2d0b7839071b059a
SHA1 53831708c9da9c0c2db57555fb4c20a838b995de
SHA512 68dc36b9bd5cffe3e0bfdc736d21f50737bad25a357de6c8675108ca3b265fbf2dbf8ec92f3d75ef73c7a7b2f2ea3330c3decc0c955ac2136d0d77e499173bc7
TLSH
T1B001AC6629972F26C1754FBD2A6D6374D6363C12DEE0E309905484CD4CD6A00E476FB7
MD5 SHA1 SHA512 TLSH

Submit Download

ms-gamingoverlay--kglcheck-.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\ms-gamingoverlay--kglcheck-.lnk
Size 172B
SHA256 b7d2024010549a7091fb4a422bc5783808f135ca097f123323091dd46c198b5c
MD5 b3552dfb34753d463eb712f1a58d7ee7
SHA1 b8b3c198f44cc488d42d7047fb542b512aeace69
SHA512 086e84f149113f10832c4ed70662d6e545010fb5541a48099c82f6c9d53d33049ba6d2158e0520792acd384c46c6e6b38c9905f67c0cc9d4047435a8217b6a5f
TLSH
T15EC0122043A61D4CF4320F7DDCFA87400F34F8101A90881B1130309A9876CC0EC6274D
MD5 SHA1 SHA512 TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
Size 174B
SHA256 cdb11958506a5ba5478e22ed472fa3ae422fe9916d674f290207e1fc29ae5a76
MD5 7f1698bab066b764a314a589d338daae
SHA1 524abe4db03afef220a2cc96bf0428fd1b704342
SHA512 4f94ad0fe3df00838b288a0ef4c12d37e175c37cbf306bdb1336ff44d0e4d126cd545c636642c0e88d8c6b8258dc138a495f4d025b662f40a9977d409d6b5719
TLSH
T119C08C38D2E9322141728D33BCB4A002DBB1F8212C1BCF9E06C0918B08A0A09EB32B43
MD5 SHA1 SHA512 TLSH

Submit Download

COMPLE~1.XLS.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\Desktop\COMPLE~1.XLS.enc
Size 15KB
SHA256 1bed4b7c67063736b764f6aeb3546b484990125800254015e04a3c6779dfb203
MD5 a3d1dbcb34eb452edbd586d443dd8101
SHA1 44bd8c7ed8b27e1bfc4db1b85c348592552d29b5
SHA512 0339a068f855744f050b842f18b372a6eb473dbd542fed3e8c44715551f322220ccbb0acf6fd82138795e0c8941703eac092483e9caafcd81f5fd1d2e0bb0d95
SSDEEP 384:twU/utQVLoTgliL7znT/NXN2KlT+lDhTlJOkWt:twU/u+RoMl4DxNvYtBHM
TLSH
T13C62C0B7EFE2CF30D0A5CAC1C49B815F50087FD248AE916805B764B55428DB6728E63D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CompletePing.xlsx.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\Desktop\CompletePing.xlsx.enc
Size 15KB
SHA256 915a86234db5ebc7e90c015f656d5155f19db8ae62d9fef8e0ac4cb22efc6415
MD5 bb7efa9475e2365e47a9b282e0df6f3c
SHA1 3fdeb2d44dbe74672c05495231b25e3c0f3eea07
SHA512 5f0f993f0803d8e7a8effa2b73484e0d96886b62b6bde39725d6cec7d5a3fd737cc8de0708b51f0d9b4e171ed31c7f7574f97437f8000aa81cf7b92559644a2b
SSDEEP 384:4wIuAK0/HnwnYgnWsdRv8yqRp/+Oy4LMkOG/3mqVkBk+z6nDDgi8m3he:bIvK0/HnIJWOZ8yqR55M/YkBlzmDv8mo
TLSH
T1A962D12E999FED35F28377DA4E22C52AE497428F0BF33DCC66ABD991193221117D408D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NEWRES~1.PS1.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\Desktop\NEWRES~1.PS1.enc
Size 540KB
SHA256 44e2d1a281aa9850569871a76659fb60a1ad7e1fa18d11fff86d9dbf8b3cb341
MD5 00b8ceda62c7a1c1abb63f3dfedb5a5a
SHA1 2ad433ee5a2a0653566f1c3e4ecbeb2eca5b5554
SHA512 1008defba3272663cafb5d3676929e0e229991ad575ac780b398d7f14b7b7d8b8f48265998b4a25f69f0de57fab8e2a8988ed3b3e4e57d703ecc651822379362
SSDEEP 12288:BU3jeTYXMQJIrDt5iqRtfL89yaWqDybVaEIOenQ5M7i40:BU3j8SZIfDXHfL4XWKEIq5M7i40
TLSH
T197C4238A9CC3277F0B0F6D801A985D95BB1573D85C1EFC409D0F37A9C6A389C912AB97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NewRestart.ps1.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\Desktop\NewRestart.ps1.enc
Size 540KB
SHA256 18ab08700164870dfd53e47b2689920375908a44377f571aeaa4093a81606c99
MD5 ed672575646d906c85c3dc130aec1448
SHA1 4d4031b5eeb87b3786f8e9c98735f3cbd97a5ce6
SHA512 253ac955dc62e92c77b0a77337962b3e66aa3a630c11fe70df760c2130b76a4545deab1b63c6423a49fb726d7250250bb1594a8048e60309ba0321a958a7683f
SSDEEP 12288:bsfUAp5AbcpsJ/rI8cp7sGrJSIHc/I0L3R32aSRT:bsMAz5SJ1cpIKJSIaIy3R32bRT
TLSH
T1FEC423DECA3B33A421156B1A3E1AD3C4070D1C40E239B021DB585ADE6D752BC66B9FF9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OUTCLE~1.XLS.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\Desktop\OUTCLE~1.XLS.enc
Size 10KB
SHA256 4d39ed7cfb4302cda099a369d4510829333c8dc17467ba9a6a83bcb98fb1fe5a
MD5 576f1b69aa4e33b1780fe74d1b9670aa
SHA1 07a136a49f4bdcc658404093071c8e7917ea6632
SHA512 2f1fcd0c7155e1bf83c5338fbfba0b680fd5e2d2ce9e55d986e68009eb8419cf33a533e3c94ea9b037ecb96ab7d064774c2d50645b080aacbc8e60d234920755
SSDEEP 192:ddifOK+sTxCZvTnjtNK/sZD/Cxp7oaFfQjedNFrDpG2xCMoNDV:ddiGKLCNZ7uEadvFPpGuCM6V
TLSH
T15022C09D88C1277A4541830C587C9E14DE3FDCB2B532A4CD772281C61D15F641AEAF7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OutClear.xlsx.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\Desktop\OutClear.xlsx.enc
Size 10KB
SHA256 4a7c29165d8897c4393c8c038877df06aa7162550ccec0dcd0947c8e87b539b2
MD5 6420be30736051f32c7915b9c5440682
SHA1 b998ebba7946c7f2b883b0d1677a6e3bdb149eba
SHA512 ae438328a4ed25ae5f408d73c2cfa98bbff35d33be6e53bba5627243d6a37cefac2dadea9e9344afb30724372333ccfecdb533de757125cbdad2d95b7289ebf7
SSDEEP 192:jjaZ2fEfYSHmErulsLXJaex1lGTId+yPZGzAg4gZuZgYop92IMTzpAshKox:jj62EftHAAa+1lGEoQIMgpZuZgYop7M1
TLSH
T12722C07A6471E99159E36E3C405873F62B3CC76F377210C990CDEA560648E136250BEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

POPINI~1.DOC.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\Desktop\POPINI~1.DOC.enc
Size 15KB
SHA256 63d54f2a1b3fb6db73fa07706699123e72b2f8c98d17be949392c4cd4403aa9b
MD5 52aa206fb399ea7838739dad759e3d71
SHA1 f5c3f21bc8ffed82b292ab380d33ef4d10455e41
SHA512 989b1714f741998a5ee920a52988fd7fea1e64612906977284c28c70ccc41b26db9481e3f09d118849b8c95830ba772ad513b7a7fd1a3e52424c9a106ff24e85
SSDEEP 384:HnHjfCn3PI6dY1jbVs3zRLW+vT05tNdGptGLfjP10E+yo79OrhkZDEn:HHMwHfVsD5W+Wbq9Wkl+
TLSH
T17C72C08FD86330C466F2F01BB1A7C5DC62CC06505AFBD9F659235404F2AB55D2D2263A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PopInitialize.docx.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\Desktop\PopInitialize.docx.enc
Size 15KB
SHA256 5671f0ee35a763190bcb441987256ffc5bc8d00fb1ccb47c8f167703e9faa8ef
MD5 f120a1878271037959496dada708aa6d
SHA1 b861b3e9534075c8d7c2061b0307cce97b2c640a
SHA512 6dadde3430c53144ac713a023b9077a469cb833852d1db58447a3aaaa58a1617d9910ac80505c61b66f089cdb624ba42bde0acfeb153411b190f48dcd447703b
SSDEEP 384:34BKb4eH7nBxuGFIPUesi8EnnXFW4M6yQxAd+Ax5+xdYAS:3v4ebnBxAPUeZ8wA4SQbAxU/k
TLSH
T16B72C0B82C2E64F48512A7AEC7E2437855AB97F82188D93593DC23FB3B14CA447195CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

REVOKE~1.XLS.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\Desktop\REVOKE~1.XLS.enc
Size 10KB
SHA256 153b965a01759afc3a0a54039949e663a65ca6d4754a2c3151ed652501323ade
MD5 4e34666390df2d3e3d1e84eff85ae610
SHA1 763ca161d56c76e302e1ac066a569e4da27e3271
SHA512 1b86bf3ed8034687f49b4c9b476ada9f93daa2c16177e2e1aca8a81cd427bbc938c09f92df71c295c129d5ff3f4c6f063f0f82644473de97ac6f16dc63e9acbf
SSDEEP 192:AN2fxCsWuCdWAxVv8nX3L6U9JW9Q9hFJHFnm08Lsf9tjo2LB4iIpp9diRb4WI6+D:AN2fQhuSP9Q76ULg27A08groCBDIpA4L
TLSH
T1F522B00BC438D1A6C279B5FC05339DCCA7A5AFF59C58702E0AC8728034EAB2BA756544
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevokeSkip.xlsx.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\Desktop\RevokeSkip.xlsx.enc
Size 10KB
SHA256 9f9d2d2854cf6f7b9c673aebefdd0b5ca42701ceff6c8277fb706b936b31ed50
MD5 8199d70b85218f801b10cee4e50892ab
SHA1 984d52d81f90c241c335baa1d0956d468862a32f
SHA512 8f1136bce302715a50ecfa82cb223e1e9639b3eb276ad73ef627fefdf47d0a6efcea08448b2bae5e89cdd63f4745ba09ad4c989ee0447942be753e267bb4601c
SSDEEP 192:aiyBPwBsRM6wblzVzrZgjWInnvbHNnc+BjumYfWnycwgBskBF9t:i4pTbpVz9SNjNc+B6IOgXr
TLSH
T10A22AFD9673A58535CFBADE8121F3E066FCA0141FCF113AC511017732B61E9426B6B26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UNINST~1.XLS.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\Desktop\UNINST~1.XLS.enc
Size 11KB
SHA256 ad13ac2ee71f2f6766f1ad589756d3122c79dc18f7dbc457672f1e2fce561c74
MD5 0a21b0541f737947c8f3b19be100b497
SHA1 a901f93b51a2682766eda457f06d1f88ebce11e6
SHA512 b4341a736b55781f2662279b2689c54cd384ca8c3eeb45489156ca50af6b71e7ac95d0345a8467bbee8dcc9665055f28711bbcc2e4079540b720995d2742a5ad
SSDEEP 192:dxqbXi0HTNUV6oAJ7nCC7lX15FbzE0rmJm863jiUBUsO8T4B/ULwXD5dIhxbp2zY:wiERNZX15ZE0rmJm863Q7ShLwXD5Sh3D
TLSH
T1E532CF3DF5276E59CA81981FAC976183D4ECCED039C6ADBD4526F507A2BC8160E06C74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UninstallProtect.xlsx.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\Desktop\UninstallProtect.xlsx.enc
Size 11KB
SHA256 5799970fb7f437ce684bcf55a0fe4bc19e81c044e90c0ea4f64d0600c4a58e0f
MD5 b1f7ff1beaf80459ce6cef8ba1557c40
SHA1 77e95f2400a9ded494e1031bc395ab08b762671c
SHA512 551ccd7e5150222eacb22e6093c1ea057bf4de1a1a74b0dc4c572a09c302f2190bdb5b628a4d870707881482116968d725379ee75bd9ed705ac0be280f6322e3
SSDEEP 192:Z0ndcbwZ857W1APEyZgtlDeVPTo+Hgtuzz3rRdUvhsuAm90Y79l1shO9F0Yxk2qy:2dckZ85mA0t5ecYgkAhnR0R0wrItuq
TLSH
T1E132D0C2B96D31CE58B5AD99D59F58CF0224C001CEDAAB2E5E87D348ACEEF435DE1046
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NEWDIS~1.XLS.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\Downloads\NEWDIS~1.XLS.enc
Size 320KB
SHA256 b1dca664f82da692664762b3dac1b0d802e3dcd67a4dc762b817a7480b95d200
MD5 8efb0e853814e51923f5da5f9a63cac6
SHA1 2ba5f73119387fa81a6f20dd229061b051722016
SHA512 03146b34ed401309bd9a132bc2ad5a95b4166dcac64c47613f7cd7538a29d1ac11cee1632b4bccfa143ca1ade97613f4e36c1e5786bbc3ff5eef9e7a3641f644
SSDEEP 6144:bfuYoRWeykinBj4pECcIWYt0HC7F/DxvIpPDdlN/6rmJWROZDtujM29nCyDEZ:bfuTiBIECcU0aZDx8orQaOvujMAnFW
TLSH
T16C642353E1680313FE39611234F88927FCD71859847236C724F5BE4ED2DAE21E6AE86D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NewDisable.xlsm.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\Downloads\NewDisable.xlsm.enc
Size 320KB
SHA256 0227f1786d6e00db7ab09a07ce9c84556ed1c370574ffeb04f2fd18be45bacab
MD5 8816e9fec1c23f25a49349b2167cd086
SHA1 9490f94d4e91cdd58af580f355f7fa4fab1b75c6
SHA512 3dd655a08e43dbdfa3de3459030c79af1ebe5a50718b64577b691de2a287c7e3380e1a02219d7bbc6a6d7ab6d8105ae7a34efea3faad279aecbe499a1f9784c7
SSDEEP 6144:qtXJ/g808LrTvJYpS7J1bGaxjZTp0g0m/tKOgiJW3Dn333OPr:qtXJIB8LrTvi07vIg008OjyDn3uz
TLSH
T1DB6422A1BFB8B359F7B937549CE62D7E854B4CC445246108B1E9AA201F3EF0DC6241AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SWITCH~1.XLS.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\Downloads\SWITCH~1.XLS.enc
Size 234KB
SHA256 7648914790ad8e42958688634a337efeb9be038dbce659456a6767b7755c351c
MD5 b8b537764cd469e7036073df415e78cb
SHA1 9ebebbcbd85bc1806c02c47a5b189b5dacc75802
SHA512 cac858fb18536d2d9163eadbcdf4990837b4c4b4cbaad24e33bcd6f4b92d98da248c61147dcdae34e4f2b7eb05ee0e5f0443c495b6445f67be799a7121b93eb7
SSDEEP 6144:H3GtTWTsO9jXtCZqzTknakWOxRgj0CvSo3Odk/3VSUU3xna:2t4h9DtqqfdfkFCqjdm3VKI
TLSH
T1E434238AAF424A3F2B29593013D6352B14CE80994A3B5E76B65E704E093FE34927F47D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SwitchRegister.xlsm.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\Downloads\SwitchRegister.xlsm.enc
Size 234KB
SHA256 811ca847781d3566b53b6d517ced305f48da165125f84db8886d1dc26a829f6b
MD5 1fc8304bd236af8b7d4695ebcab82395
SHA1 f9387e0a44091825ce0efd8b4ff6e070a83c1360
SHA512 5cd6aa512b1fb4917a81023599847971df04bd5ba109d657beee6dbdffb03e994bacd923e95fdea375ddde40a22a53267b1a783d7c64cf2f2f87f1f90bb8a5b4
SSDEEP 6144:2laSbJwyQG0SUI4lsu3RvK8oXDIwFYMMAN:2BFwyUI46EwyK
TLSH
T19F3423CE6D6A0566003C7BA8A0E05EEEC8B65F513CAC47E8B55C44BCDE00E3554DEB7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NTUSER.DAT

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Admin\NTUSER.DAT
Size 2.2MB
SHA256 17888d830bb7d7be26d863d20036dc4e4de1d8fa4cf854d0a30ea5a4be014188
MD5 8c162a6e381647532cac931d3d563fda
SHA1 bbdfa02dd7bcea12992f902a698f9dddba010060
SHA512 f32de3da36daf7a12f55e8f571ce7a99d86729e7b287bc64bff4b54f9aac8e7a4f4b8d252b1512c1060fce566b6ecaff3a7d6cef4c76d69b6ea549bb3b366153
SSDEEP 24576:Pb0Qe9T64M/hS6fN/86NnI6kVzh6Y1Dsf6GfNsaQ6A91a:j01HMpxFJnUVzd1DsNfNsa491a
TLSH
T1A3B57254F963D492D362C6724DA26B9B77F37F832D084D0321CD2BAE0C6F11A9889D6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NTUSER.DAT

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Users\Default\NTUSER.DAT
Size 256KB
SHA256 8f813f25d2c7561512dcb3be369aab0b39aa46ed276f32c850fbf062c641c8d8
MD5 a8449cc89cb78c6e4aab84ad17a4fdef
SHA1 4e02a60d0892aa17c99ae07bbad6697ef727b99c
SHA512 15efd647eb9673b2d792e9bb7541899c777657c9f743dc0795b724c53df328d877fe8a477ea68dcc38d2f0c0870f5b1b0480dd82db1f8a27d7a5a916548c9d91
SSDEEP 1536:0CJ8RO/kmURf5zkBijAXU6fMo0MaYKmDEN:d8RO/32zbANUoTXNgN
TLSH
T14E442201BB95C6C9D1B649329CE6CFD62335FD919E9287473380332F8EFA745AD12682
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

APPLICATIONFRAMEHOST.EXE-CCEEF759.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\APPLICATIONFRAMEHOST.EXE-CCEEF759.pf
Size 12KB
SHA256 dd30683f35c692083f3b6f571cd67b48c684e0ac9a94f9dd7ac1cb5c31960086
MD5 391620aea1ed2325d7ec9078b0dd6e2d
SHA1 a86aa2e1be32b57c0a9ba33d447acfefaedc1a12
SHA512 713a960cb74c6c81935c03518db92b51113251e0600593c2aadaea02535ac91e04631af5fc54b9cbff7c6c74dd62f61133fa57ed07a59ab6fa89ac72fc892441
SSDEEP 384:pQTcJC+DNPkJzfMGtLaVJuxyGL1sK1bmL:pa2pP9NVJuUI1q
TLSH
T1DE42AF00E9C378ED89CF6613E9ED5B6B6F25E9A4898FFB470B127C017B4885C12D8219
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AUDIODG.EXE-BDFD3029.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\AUDIODG.EXE-BDFD3029.pf
Size 4KB
SHA256 af70e79af4d292b3936e243ae089bbbb472ecc755e7bb79263ed80a6408f505b
MD5 693dee6ed9bad16348280d7d26fc5fab
SHA1 8e16a67f65e28c07423fe9232fb952532f38372a
SHA512 72c0d96717d0f04c6eca01cabd11a3a1bd14c58b611f99ed372bb69f35efad15c3a0f82ccc7c4e0d72dcb48de2ff0284686a26191e50874af9819bb0c2e6fba2
SSDEEP 96:XC6PZloAVGYs5Qec1giJHYjEHGyIIr5ZYPAcHcf8whuneul:zZlonYbeqYAmyIE5+PAchaunLl
TLSH
T1BCA16D2D8EAB7152D25737B42C16CDCE7AF58C4C2F153344A53E547826438D91BE918B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BACKGROUNDTASKHOST.EXE-145A3777.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\BACKGROUNDTASKHOST.EXE-145A3777.pf
Size 19KB
SHA256 dad8dd49933020fac4e59907012d2fb60832c081f8d885b602e6ac90ef4bea2f
MD5 bf9266debdb64b657c9724f6fcd7ebd1
SHA1 6274eec723c999b77d987f192a36525f44aa386a
SHA512 a1cd379fda5c75eb980d7ce55f77d734985973986e7b8985d9f392dfa7c325a59072f4b726b61fa73b7373ad092796e6241d98cfcab879034d8ebaf386836ff3
SSDEEP 384:s18o7nV8zE+RnQWbf5j6OGgGC9AQH8Po8TkBtkZ3BcDFN:EX7OhvbfjGgGCtHY2MBE
TLSH
T1CE92C05F24933B5DCF8C2EB67AED091C0596EF19518E975672C63CF22282EBA2710707
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BACKGROUNDTASKHOST.EXE-ACEF2FA2.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\BACKGROUNDTASKHOST.EXE-ACEF2FA2.pf
Size 8KB
SHA256 efb7665a04c90efa8490f9b47fb14f65150c65977855bf6471503d4202afd295
MD5 a56ea4f17afe3813d6694e9756b2f7cd
SHA1 0934de7dff1cf8857d69926b1630075868922b4f
SHA512 b14a4477bbad2caa614ac410d7ea5da19d94a62369f4b050b2e2766f4f1f1b48cc0ae7099885d2383680f508b901a8f7fa66428cbfebb96f2dba7bb22ea75736
SSDEEP 192:OWEXvutI5kdOjU1iI7uMr6NAzH99pNQzl3NRoQaOHU6jKvxIpTLIhG02SVsu:xEXmC5kn0I7t62Zvy3NnaiUjkIgI
TLSH
T1B802AF937810ADB160273CF3351B3AA52EF9103EF57A394148742CAF6AA26F999B4185
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BYTECODEGENERATOR.EXE-C1E9BCE6.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\BYTECODEGENERATOR.EXE-C1E9BCE6.pf
Size 5KB
SHA256 7cbc3a710af0b7b0111e2a41b3eca82a35d20c01431c970346bad5f77bf90621
MD5 24ed7ff670ad2397a18d4973eb097a29
SHA1 8c035d19a7c19f62fc7d388c433073b8a2def3a4
SHA512 f24bd833ef2a4516167482e1eb955bc2eb632f6902f81f6a27570caedfd703e16ddc9ab4a0fff627392b98c8f3df8fcbd3e0f8c132001571e3d26594df874643
SSDEEP 96:8KZIIjBi3kvMQeEzV2oy6IFEO6J0Tmdg+syY94KBH8bZ/RbNnd9woPlmj0+hBa8:neuiPBiV216IFT6J0T8g7jSF/RbNqo+F
TLSH
T143C19F0C21435F6883D4CE166A960EDA156749EC1DC91C88F355F2FA4CA77629F66440
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CONHOST.EXE-1F3E9D7E.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf
Size 5KB
SHA256 cfdd749351cbf88abb4d4e04338d4fad8075642f56ab090a0a167b9089367c4a
MD5 dd29fc217af3e4f105b0c358c51bbcfb
SHA1 058b6abad57cb8bc3d1af4d2592c5df4b1fa9df5
SHA512 5ccd69d93e84294982e49676c90e230cad098d138e791bb43efc0bf8104e47a403fb38b2cbf60aceba03306bae58bd6e101f0e99c102773b2cabcbb838f06ec1
SSDEEP 96:yh2v0vphMfN85yv42/FOk8LXJ6fCm3GSTsCExFzgD22fUcCvWcz3:e246Nmyv46IJXIfR3GSQCSFzga2fmOcz
TLSH
T1F2C18EB5430EC518E5371F3E8780AFEB551EDD374194B0085BF7A8828A21B8149B5B5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLLHOST.EXE-28A8211F.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\DLLHOST.EXE-28A8211F.pf
Size 4KB
SHA256 038106b6cf3500d33ee16ed0f80739398fb8457fb39d050b36a3001d38b9a3a1
MD5 6be82797207b39c9d768dbdcd2b22fd2
SHA1 c311489195d376cfaf1ce3239266548d28eb7970
SHA512 ce7cbf34905c590c5b8fddeaa99d273bbd0c3439328f96a21def7c66090313df2909514114c7f2eee71d9e6ae40cae033e2702097a73fc91f3abfaa575ff0828
SSDEEP 96:VPJfkZmr5rQMaRVBx5wdl386pk3d68uovBBI6Hv32i6mWLX6i1bR5QFL:JiZ0sMaXBx8lME8uoZBbLvWWubRaL
TLSH
T142A18E88B633D5B58F34ABF679A95607424FC8E74B4880339551F14D1DBBD19102525C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLLHOST.EXE-5E46FA0D.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf
Size 8KB
SHA256 2aabd4193ed5d5c1b7c939902eb83a4a4db7483b2aaaf003ccb6a42ace4228d5
MD5 2a46446732b686c832574c80fdd8b0a9
SHA1 223e0ed1af0154bed3aebec2e27367ae20ebc814
SHA512 0bd97cd374d5b7492bf58043317cee920782550de966f3d2ece846900c85a264c69b2e3035b0bfe29fb4733ce576c0968719231f5aa6b50fa5c9533ef295adfd
SSDEEP 192:23iPv0Xi9ZWU4uz+BdUPmkGMe1xqGuiFQQ5Bi5A4sXun+mF14:lPv0y9ZWU4fd6mkXc0GuiaQbl4sXu+mQ
TLSH
T11A029EB92F055A62F8D6D33CBC5DE4D576CE030144A153B36E5CCC58E98A43ABAA1E11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLLHOST.EXE-A73FB9CB.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\DLLHOST.EXE-A73FB9CB.pf
Size 3KB
SHA256 e0f796582c24d10456634a49ed4f42e918fa58329e03da3e9c18f6a6619bb8e5
MD5 12571f3ac59a99a3f10a71c596a2e5d8
SHA1 8e44880f8b57cc19c305c02ff5229f5bd632e49e
SHA512 c4730646fa458010d0a2230c24b78ce01d6f8c6bb3d01b86ee9dccd475a6175ba44ede95cc4c1a25f5fbc875aae1cc817b52cc2df928d355212b771c031740b2
TLSH
T1C6815D05D89C6C3AEA8C26FF082F64476389874D194D0B866049B59907A19386BEFE74
MD5 SHA1 SHA512 TLSH

Submit Download

DLLHOST.EXE-FC981FFE.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\DLLHOST.EXE-FC981FFE.pf
Size 4KB
SHA256 14fb0a4accca0dc40b274140869697812a3d0d9d3ce94d78646c4467363ac934
MD5 ae85b0e8e8a948843720466fedc974fd
SHA1 c612281c629a52d56eeb7619184963e7f1e32285
SHA512 adf1bc2c0fe57e193ae034e4c7721bc94ef7b51d021a8f3d3d71de4b60b5806c0790af8e32148de983743b50b7da8ff194e5032fc294aefcb14fc21c18fe388a
SSDEEP 96:eyCmZczxCgRUsgrtEVqRInodbiFVoOWseQcJ1VDKHm2K:zRZczjRUrRIcmFVoOWs9c9DK1K
TLSH
T12F917D0F64A70D62C709A8392F5F26CF0354E8B2D322B26312567BA8139003C3C1EB1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FILESYNCCONFIG.EXE-33763EB7.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\FILESYNCCONFIG.EXE-33763EB7.pf
Size 5KB
SHA256 768b5c881bf3ab1641c084be19447cd6095b45c605d67868162e6f3d53081d29
MD5 1e2f45d815f77bb647602ab6ef4b6765
SHA1 4fe22dedce3db78e37224a4ae660d313c45f6605
SHA512 97383ac3551032483e33b82206fd4b4be1226a73369fdf98d92eb53ea170df28787c5efeeacb9b0733db9b61efcf4ac3c5071fb97a570c8f5137e241e96b4a83
SSDEEP 96:9ofCkeXga3m9c+i2Siv4RKvy3bB6RzDq3GMhjbqjeG8+sY5uELAYDUV6V9fRMbRw:IYgawi2SinIbB6Rvq2WesY5RLAjs9fRR
TLSH
T1C4C18E3A445A4177D9CC0AFC9E559F8B0EB8C66847CD6C94E0416AF1EE5184BC50F7A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FILESYNCCONFIG.EXE-CB60E6FA.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\FILESYNCCONFIG.EXE-CB60E6FA.pf
Size 6KB
SHA256 547b381e5b59a34d568a4201edaff5a99ada57dc373f06ad9abe7bf72e2bd639
MD5 685a07c841a3771692d560ead6995ac9
SHA1 8935619f266cb83551fcb2953a24a6f164cdbfb7
SHA512 9bc6e764bc8df7ee1b7c81a9cb1ae42b40621585358a273d95c6af639a93d692c3b74e58160a2e93b51f8d788ba18a24acd1b5e611fdcf07ad7921452c3adc8b
SSDEEP 192:tTmMotvevRBFfDnOPw4il8vRsu/4RkRILEa8jVBf6K:tTmJveZrcil6FAW2LE3XiK
TLSH
T115D1AFA4903C3A50DBC5A6F43D5DBE9273402E1948F60D484B09E8B1CCD24EC0C4F7E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FSQUIRT.EXE-BBD9646E.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\FSQUIRT.EXE-BBD9646E.pf
Size 6KB
SHA256 8eacba15ac99612e6d077557ab4c56be58748669a81d173a7b5886aaf0adc545
MD5 227c767189a4b35287d8c91aaff276ff
SHA1 704a66af05f40b22347836b2b14cf295bf4ff8dc
SHA512 732848f8e3dac38fb3843e80074e29b137c5a87191d4f1cda50db1f8494a264e19c9ebff1aa41fa989f14c90acd8c5f3947d13ba219e0510df1bb3bd60f7ae21
SSDEEP 96:5PzatPJWOfRNZsMM8zqmmbbUvYr7bdu7BIHSUFixSYGp7S4Fpskpd3dcW2rqDjmt:Fq2LrEEbdKmHSU4ip7SkRpvfvc
TLSH
T1A1E18F5A1C922F3DCE66B47B58A6E516412F943DF044F682BFA93851D183634843F5EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HRPXBP.EXE-8CE71A2C.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\HRPXBP.EXE-8CE71A2C.pf
Size 3KB
SHA256 dd1cd1717516c68bbc566da50d821ddd379a8415b0abe8539ee76fab8ce5eb63
MD5 c481951b06d8ebc2fbe454801d78eeb2
SHA1 00f86b3f2c4f4df87f1738ded981272a8d88db09
SHA512 0f3ab7522c48f142d71eff5dedbcd288c0879a8ffea86d793dc7cea9d7d6a9901077362bb1161add54968260929c0d960736c8365eeaf8650ff2eaa22c378626
TLSH
T1BE613BA8E4DBE949E457C770D92D400EFFE6C2D06A5EE4A019172B22BDD33590344A6C
MD5 SHA1 SHA512 TLSH

Submit Download

LOCALBRIDGE.EXE-BF9EA5D6.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\LOCALBRIDGE.EXE-BF9EA5D6.pf
Size 19KB
SHA256 1a513b49ddc51c54eb73ae608023e3c25205af4cbe62e23e85878ae48c118136
MD5 d5319f8da098ed212f8874d5f0527fc7
SHA1 d32d17578bb60580f302d748b088198d79758b7c
SHA512 edd4d7cdbd8fd55a446fd4f16af25c097f55f53a0ba863ee849c24e1714e19d437fe405108d5ce8b6bfbee3447b2ae604e2b9aaa6aab93403530f36d880a08a0
SSDEEP 384:XINHcW2LzkaLYmyXLOIvWUvoHA7QO5TBRAxQO3GurLXES65Mfqo:YcLz5hhIdzNTBRWQOxfXES65ep
TLSH
T1B992D08E0846E510CA4C4931EF75CECD1FFF7E7A5228C6AA6B2288FC95678341412D6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MICROSOFTEDGEUPDATE.EXE-C4317749.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\MICROSOFTEDGEUPDATE.EXE-C4317749.pf
Size 8KB
SHA256 645a2fd168f7b1464564bb663ccf17c5ea16f1d81467a52562a8dc5f29d19be2
MD5 6b986ad3274256bf99cd3371ead74790
SHA1 33bfb32d1afdf218567e224a5820f0a54baef923
SHA512 c32c6d54e5dede9967f5e1a8bf5598af848961e09b54e9ccbde8d40c8855b1a10fb3cf07041821e782551665025cdfd87162c9b48690cf0732fa7b265115d357
SSDEEP 192:OpGkc2zNKHPYheO2+eJQIQ3mzfp7w5MCjlfnvk6DsBITMhExC0Fp72y+h9e1+7:OpS2zv2hLzftw5Fxvvk6YBI8ExC0Fpat
TLSH
T159029059D695A61D49FD0D596B6F4F820D34DE3B4FC7BB022A075480BCA0971309FACA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MOUSOCOREWORKER.EXE-681A8FEE.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\MOUSOCOREWORKER.EXE-681A8FEE.pf
Size 11KB
SHA256 a17d4477be22819e2155b185503754063961dbb662d2ca887fb7b50536b20de1
MD5 9529d2186b70855e0f20065c7ea4b22c
SHA1 92214d13962f31cd344f79b02abcbfc628fc2d44
SHA512 560fc37781a7e7fbbc48ab4a6f8c3a0022a5c2f0b293d33c3161c7aec41831a2b9224edbd93ba1327e7beb48836592de2660ee3026dc52712aa4aa7f1fbdf39b
SSDEEP 192:9Poi7rFeAOr3Hryz3jMYpzwYntf3Cc0kkAqzawqttGcJPeCvgdkkSxOB4k8:pRIA0rcwYpzn/CpkEzFqtHPeCvgDSxI8
TLSH
T13132AE831D4418C1688DAB453CCE4F869348FB57E1F4F9F16920AEC51DDFCB26B486A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NETSH.EXE-F1B6DA12.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\NETSH.EXE-F1B6DA12.pf
Size 8KB
SHA256 9a0845de8e2fdf7770a27804f8f971649c7eaba38e892e929ba5d53c0e709024
MD5 ff93c8fdc0bb0fa7e2c978de21117c23
SHA1 3f790f862907ef6dbc6a6278ce1292fba416b62e
SHA512 dcb5f5f1f48339969559f7dd5b20e30f4ef5b0190bffd6b29a9ff149167f33d1a9cff3355c00a66e2b8d619ae33125c3777a298e17e6ab43da8ce2cac8d4836f
SSDEEP 192:DxYcrjCL1rED9ogbTAK/3OYAjmQ37D5mauHgiX8lsWZjeRjWxlSnjSM:DqSTANYAjmM79juH3XyxjojW7SOM
TLSH
T110027EB9DB5C70DF47476A1AF45C0A37725C1B88E2B01D40C6F4548F68AB2ACB269F64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ONEDRIVE.EXE-96969DDA.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\ONEDRIVE.EXE-96969DDA.pf
Size 41KB
SHA256 68d280fc6dd4dc0c8a7028d631def543be499be2cef839d91c496f5deafdb42b
MD5 6f9586adc5f5974f1da9afa6236d1629
SHA1 c0436a1f3963c0288f9541e9a5c0db28c0b5a512
SHA512 c94c378503bdf860a78d0f2cd12b3893a937f7677c57b3f8302b8ff34c1d8fd34559c6730ad46b80e36fd9bb07b077b1e3631497dd0f8f4629ccd6830d6e808b
SSDEEP 768:+Ti8X5PKJAHX0HKaHWOzNoi5s2K/W6UIQeWa8t76opxl58LV1f:+TrX8JAHxaHjpoi5soIEa8NpxL8B1f
TLSH
T17413E00804A11AC89F897EF1FE2A4EAF3E7AD56F104D4D84729F64EF48C1DB91429B05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ONEDRIVESETUP.EXE-8CE5A462.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\ONEDRIVESETUP.EXE-8CE5A462.pf
Size 43KB
SHA256 c35279a28d242b69e63051311cdc95f901566f02f34bfd0ae66c4e5345a9c1ed
MD5 574d33ff3d55a3031b05ba1dae20e13f
SHA1 5b68d11f5f6225bff283c4850e0ec299eb060262
SHA512 0e5ddf1c9bb2a16df42f554775ec08245ff13898e0ef5fe2f1594de7cb4b1e8e8a9017c4450b9d1db333db3b6c63d9afb4c8ea990c8916b2bcb9f98cdf831421
SSDEEP 768:pLCZ7GIttY69tUvtrprntMtItv/C0jQGmlFQ9ukWURrVq2swQaHwkVt:pLKpYDcA8FQYkWURrjQit
TLSH
T1AA136D5DAF1805ADC2DFDE37A72F4263026490423D7203EE17E13CAF62928B9B2459D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ONEDRIVESETUP.EXE-ADFC0EFD.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\ONEDRIVESETUP.EXE-ADFC0EFD.pf
Size 64KB
SHA256 fe97244ea36fa5ed01d25daf37da3eb8d883e140828e667cf8227be371ee691a
MD5 80bded12f6c53dfdcfa041aefa7f6304
SHA1 fdb8e649c8d3cff0fe00738787c924ccf8963d40
SHA512 95c3282865bd5788836dc1ae3eadb9ae6e0018e1c397b493545263533952513f67a6bf2d03334b2e5dd4b92437082efaf0a8e994f48605cd3ca2ab7f493564e5
SSDEEP 1536:dsVeKxCo5ZdOjL/pNVdrYvHe8RFyU85mhBYrHpeW+x8WrDKlxbS:uVeKxCo5ZzJRIl5mhBYrHpeW+x8Wr+lI
TLSH
T1E3539ECB53BFE734D764069063A5824992EE083FA9294FF7B7D4B974D818DB104680E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

POWERSHELL.EXE-920BBA2A.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\POWERSHELL.EXE-920BBA2A.pf
Size 38KB
SHA256 c5121faea5903d884487c4786bbf87fc94c7106a9a3af65b17657641a9f9af6a
MD5 1d68f4f47f4f9128615f06bd15ad509e
SHA1 071c41dd1cec0cabf4e8d6b22e44b93c580e372a
SHA512 1c42f805378adf9c6c7f04fd8e5df529c4516a38bd7f6fa204f506d1ed434a787f2faeac5e2dba4ad1b2ee7a3af0424996f70596d596cf8bc6c3e30539ce970e
SSDEEP 768:nAsPBelRXlLx+BbEBiTmwmBJV/PaNyCi4rAz7UwqnS7+c:nAsPBelR9x+BbEIhmrV/iJi4rAz7Wk
TLSH
T18E03F1D8B14977D5EE656B720CE07CEE10FC853E0C1A922D8CB795F81E99BDE6C10229
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

REG.EXE-E7E8BD26.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\REG.EXE-E7E8BD26.pf
Size 1KB
SHA256 4fe163ec1b60c444c2ea8515b6beff7975ddea7399c82732aa6ad0c8d18c557e
MD5 94112ccff4c9a1ca13c3604dd107d52a
SHA1 391d1eb23130bed0e8e027ec6870366e5a31cf28
SHA512 bdfe464c703619bd6647308650fc7e683da9c269c2199bc4aeaef77b8b054638f0a56e08ef5e242b6854ee9470288f16aebc6df6f4448a64fe47e5878c87ca62
TLSH
T104311ABC642D7095D03F8B72940756A2CB114A71E0233A43ACD9ABF062B33A6882900E
MD5 SHA1 SHA512 TLSH

Submit Download

RUNDLL32.EXE-002D6F84.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-002D6F84.pf
Size 6KB
SHA256 26e2179c16905a330cfcaaebef739c6410754ad9cb12a0dcceaacbc523d64450
MD5 e7e5aefc1528103c45a0c485924f3910
SHA1 d1efca867a550fce2a5f93064494f92c3fdda46a
SHA512 a7f6cee3021ba4161c66ae69b6d9c47a639d60ed42ab9e4103b88e91e60f82d4e7e3ebf919767ad1fafed32c9b2e3ca7806dd4729231fddb72af84aa5abbf62d
SSDEEP 192:YXquiJpR+eBrsmhwSBxVH3Hdv9YT+WQIqOy552Vbo:YV8ZPxdfYi/IO55ybo
TLSH
T1E9D1AF8B6A47B1F3D7B93AB1588CEA8CFCFF14791EDD5170A60758E42A01C02A4A6364
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-01E21A55.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-01E21A55.pf
Size 6KB
SHA256 827047721116a190c65c4ffc10a17074931063839010658dfbb7d79d0ff3851b
MD5 7b56936d00806c5851564197853a135d
SHA1 c6aa9dfc16ae3ada5cd7416c5a05d83c4f7ebdb1
SHA512 1df3e32670ab5d9f87ad3873c4e05ef90b531dad7ec09f696374d4c2c730f92b57f86a47faf679dba1bed98639ee2e63234f886eb7718ed0cbbfc7b406cdcd95
SSDEEP 96:o0/klTxHxAtnjF5T3zMDekvVgQUPBhF7bamjIeaYBFxEXE3lDn12aqLWMOBwS80B:o0clTxOqDF1UxHFxVT12iErXq
TLSH
T111D1AE3018CC9D64D0FFAEF439B9AB8DFCB99272430907288FC65476481487B876BD24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-0521102C.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-0521102C.pf
Size 6KB
SHA256 0653cb7019624cdef0ba868eff71f541567d56de9179b474ac186a5305ab2e51
MD5 ffa2cdfc512f17c9d55b7851eff726f6
SHA1 09779cd0aeff38656640503379e09ed3f38c825b
SHA512 99aa994440c14a46226d35d69f4117a7f5690477f7bc7a3bd10b56568f5b92399d2d4d6125419e94933825dd6521366431b5e068fe1d307917133326f668ead0
SSDEEP 96:IJpVGLrL49yTLTVdhy48BkmUezcP2ONuLMw+7HSjZJH+wVUbjy8JdX5ZyljdfLp4:kpQLrLEKLJdNuoVuKfF3Xmj3mZVDOQ
TLSH
T10DD19F489CEB683CDE21D1115A76227EDFF7749E8A393138D259C589F224029F23015F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-08AF006C.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-08AF006C.pf
Size 6KB
SHA256 413f42c65ecdc5332d584159ff39ef7191a55f78808c1cbbde14a6af04805aae
MD5 7e66917726db26f3fdfbaa97407443d2
SHA1 4b4e3072cdd8ffe4025d448f8e57076b3592a868
SHA512 40438712ffdb42f91abe45a73219d588a2810a9cffd47af0b590660c3f98386d960f17f9359120502bccaaca269c42a5bb247c79e4d6eacd18402f4c4108831b
SSDEEP 96:xeJJszJFyEmzKMnwPKPAajNwJlDXmw3gq9anIBfhAX3bmAr0qjpr456kmLIlUAB8:QJGz3yEiKMw4xjol2YDMtL9p4qLkAp
TLSH
T133D1AF0843AD3465DA273F7259338078A1172EE4EC037E9983D3DFD92E4304E6EA0616
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-0A03C9B5.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-0A03C9B5.pf
Size 6KB
SHA256 ba479853c448e9cffe150e6f487b177c197d9340608a5ed6d016c7084d1bf10c
MD5 378f4aa081f18659abd425833fe8a67e
SHA1 f96b06ad22465508683fe1078b84e13595e6b298
SHA512 f35e042ba104919b9845caeaaa9a15987f5fd8471b22a7bb68d5826717267fd3baeba8b0aa785ea22d2df280f982e2789313653392cfabda436b7a03773e860f
SSDEEP 192:/3K+SjC8diJucWVGDG+Nk7WhqLOtk+daVQHN9:/GziJW8C+ya6OtkUaU9
TLSH
T11FD19F82F8C17BEBE4849B15E4F2F367428F0804539B154E97BD908B714147EAF7DA94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-0C84305E.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-0C84305E.pf
Size 6KB
SHA256 6256c9af3943c3b7ba862b887fd35d089f9c092412692e2f92ba40f2a132edb0
MD5 022ddeb096ffb848f8415001553406d2
SHA1 65522c54d6354a702d1fdca8dd1edd8d6d113067
SHA512 2f266c352a973af9ac8e609d2ecb16f0a91dbef14fc37007d4cf7d9af5ce3b958f924fa8193d9ed91dcbedecea013898791b0a3e1d3ddc9d07bdfb6dc23a56ca
SSDEEP 192:YxdjXHr4n4jmC3j7SAony6w23LB3oQ+YGGT:YD04y+HZo7w23LB3oQt
TLSH
T13ED17D633B42675EC73F3BB579A187CC7F9F9D2CAA29107D5BEA2899AC43095700A400
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-1463E66D.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-1463E66D.pf
Size 6KB
SHA256 90262970150c7381c259acc789159c1a0da268bc9627aeefe8dd5302b2cfea69
MD5 e3d7ccbd47b5b7acc95ab960dad2ca6e
SHA1 d8385f0b4af92e9ee5e8329536442b72360c01d0
SHA512 2baa1ce90cc7d5c5a450176144b6ca329e75401ead61d51b074acbdce96cf92aa9e2ac41e029241a69ab0e8e026dcba71e541d6080c08b67e861fc9bd26cfadf
SSDEEP 96:DfkxbxrvwzpbXB/exl6AW2VE8c3CDjINUsx0g6ZoFhPEVAakUI7bIGs5gutnRXZJ:Hbx/eLY5SDjIypPghJRZbIGEguNue
TLSH
T1C0D1BF451B436BF6FDFD0AFAF677C4ECA494009A9644084E9BB1686160C2191A3BE23D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-156D43F1.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-156D43F1.pf
Size 6KB
SHA256 a1afc2b2a63fb1ab2cdfb30657c68492435211963ce18f42956ae37aca26f64a
MD5 5b434e734f6e68108833e3dbdc42d6c1
SHA1 7c3a866ab8b48551ff8442f9d8e72313e9d22f7a
SHA512 1a657e6df58ed35b618722c70d711d7f0bc16f186c612114a45743e85cbfbd8eb30eff1d308ec9a18422bb998d2de0aacee210977de4b93f3c3155d028f73edb
SSDEEP 96:vNh2iGOoo5msnYWWDxdpADwa5+/cLQEKQNftFJTKnLw5Ms4FfVPQ/wa9azyF1tAU:VhhkDtOR5+0QE/QMyVP0wa9nfTNfb
TLSH
T123D18D466443089C0AFB2FB29AC946197F6C892407F7227D6FAE304EAA03F5D7D34155
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-1589E4C3.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-1589E4C3.pf
Size 6KB
SHA256 61c3d44b6663793a3c48ac163217e6d3df74cee6be076f576736a1f1e8079bff
MD5 bf607edae5af70ead45e52cb10014105
SHA1 3065733de4c7e0899617a5aee80bc72504ac3909
SHA512 b0fde29bfa98b72e9de7c5bef84d59498fe7328dd616a2078409c7ac132debc2f69399d846f88ae3b00e4d99fe0beacd247afdf9553c7ca9fb0b613b47caeb5a
SSDEEP 192:zP2YsfICaNtqwJmGNDQ6I05cUF5QtH9YNecm6juBuXCcxVjx:zP2sTNtHm0RbT2HSc6juGxD
TLSH
T17BD1AF2AC465A237ECD8DFBE5DD8678CA0D6FB0A43E10FC551FE08983CDB59A2071408
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-16AF9B6E.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-16AF9B6E.pf
Size 6KB
SHA256 bc324a6e24bcc7373efc1a1509178612c4901577ed87f1b719d54cd000ddbc30
MD5 49c5acf672e000f8e92677f2550bd9a5
SHA1 9f343e28ac920a782b1829c375313f0f366b1452
SHA512 07f07a9b900d95f86e4c97386059855dc49d18b4f2b3147d36f05b9a229f3d02befbbeca2da63e7fb57740cf8166e000250fbe3b838f4e71ae5075249940a3d6
SSDEEP 192:9wunShKVA5Ud9FKPmLkUbADOJKq9GoL8F4R:Wsa5g9FTrbAOD9GoAM
TLSH
T105D18DC8F529E58CDBED07F80A5F25D06708E23489E716E3E12CD61CBA99C5E4841CA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-18665B15.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-18665B15.pf
Size 6KB
SHA256 5a8add6ddcc94b3786278444bb5e95340c94ad6ce9df82fae0f263bc55332288
MD5 8f5388065bb17fd4ee9605c491bf528c
SHA1 9e67cae267c80588325427036b2d828dfa77c71a
SHA512 67bd1b07414a3836dc8e5e86fd468cc59c9dd4ca704665346b3324e4a36546bc7c619ba714ed23526036517fbfdff4175cb86904360e9c0a094418c351c639ac
SSDEEP 192:zw4K4RQJ+xbV9GTusCIOQbSqeCD2Jogndg8uQpl:84K4RbRwTEym6D8v1z
TLSH
T1A5D19DDE948F19F3F093E07718E4C3646880F05DBA7D0926B3E9E2E4D47702616B28D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-2C52326A.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-2C52326A.pf
Size 6KB
SHA256 b1752b3fd28fac35f51322a779c47967723f121d4f98a0a877b0f9105eba7f2b
MD5 4fe54de9db2db42bdc3c7876cdfbfa5b
SHA1 738f5e02a0b00da9a1db7c884d709e912dac8585
SHA512 409a19e3ac424b3c221e6bb4c8c100b40619e9f5b93c111337f89343a051e6476424d750f2928e454a12ff2628a921de4d5a19ec91300b62e7a79bfbdc268b3a
SSDEEP 192:UUyK0ATfs+oueO6LvMbO5FpKxwP1Ac8BJjJ8HDnO:UUyCoXLWRwyfj8K
TLSH
T14DD17DCC9486CB5FCDBF8CB845752A8B0F65265DC53940B9015A52F025E38CE67C2D1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-32DA767E.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-32DA767E.pf
Size 6KB
SHA256 62c8fb72c10f45bb5e6936f9cd32646721a0ea124467d2f9468f0c2a84d8b43a
MD5 c85ce799d9745ea2b6c0cfc850c59839
SHA1 caa93bd9025f93b836bdbd9cb332cfddb5e9f4ad
SHA512 1e0378bca4a350e7b66445d95938cd4154f6b8169830dea82ce2ecb0d8769b22f4fbb197fb66e870ee9b7d23183911b3ff7c3ba2eabcc08e48bde6f2f1ddf222
SSDEEP 192:AEgG6ZhXiIj64YysXJ+embokPDfbKSQwZWtYHF:fyhv+4YyEXA/qSQDtYHF
TLSH
T13AD19F7446FA9714ECDBF690605687CB2B9A38D540B7F00F4544670DF9DD800639A23F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-373C0EED.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-373C0EED.pf
Size 6KB
SHA256 c431ee641507539038433f48923dd3e5c3b26307fbfbcc2452cf6157c774b37c
MD5 2ddff1e6b30586473f43015a4f3f46aa
SHA1 e390681ed5b6c4d14e04605a042567e509e2f87e
SHA512 1a0daefb7f31eff04b924653614d5453904af3131bc96630252ecb2d1d1bcd574d350602d47a5cdb1f66f5dae36530a6804fc4b7e4e150c7da878d7772c5a56a
SSDEEP 192:QBTi7n9w92cF1UVhpx3ds/eU9qgQaLGVqRVqN9:GGu9kVhv3Yz9vBLOd3
TLSH
T171D1A009241F3470E7687235544EA55E13C9AD72403C348BDE902D59EA66D6FCCF7871
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-4DC9A20E.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-4DC9A20E.pf
Size 6KB
SHA256 b1f91eb1e30b63fa2bf22944425c76da53a8f343f8e39cd497a69418df356eeb
MD5 c86693b6f053217cfe24056f6169f7d5
SHA1 8cbe5259ff0353f4d8b99e7bc74438d70d1bb9ac
SHA512 95bf95c39b660f2df48823c9c4eb6e04861852d6b8854e85829bc93ec99c9edd9e78923368739a38aaa7225dcf6782440f0f9a384371da37ff0843294d11abd4
SSDEEP 96:FrLC/2FQEh/S3NzJJDYZANC7iBO+yaGfZoQlL1jaF6AkpPAqcjIbA4fRfo6R9csV:nFQEy1fC7iBxjGfZFlLA4lAqVpRKJMn
TLSH
T13CD1BF74235EA219DD5C3E728AA65F67D7B883F3F9D208285382BA0409BB1B60C1017F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-4EFE6110.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-4EFE6110.pf
Size 6KB
SHA256 1473904de10fa00b790ef6171a6f9f049da3a78f11f603f51c494a14edf52d30
MD5 89f8d546437f69da42b607c75bb7a1cb
SHA1 13a51627123b74a3fd74b7ca973e82336dac527a
SHA512 53c554b1c584bc541407c940a95554504a288d510e92da3aead2bd61af90f1a38a7589c7b89a4986a6a7c3d53ee03658e85a9ea8d3da540a7f9f2793e70cf5a2
SSDEEP 192:9nic6jTDwS8reKYaXZDb58tQvVudGu7h2xPI:9nicS0nKNaXnvV+h2m
TLSH
T1DBD1AF6C00AE351AC47ADF7444B184EC2E3B02666BCB053DBDF86A8D5D59855B32DB88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-56E309E9.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-56E309E9.pf
Size 6KB
SHA256 02b547b6e98a16d0ffb2d1390c69dc631d9b436905c17b6505a7915bb9164d40
MD5 5022763cf00ee12e5d9729a40cf8d1a2
SHA1 faa52304d468502872c217f50932cd67372512e7
SHA512 dbdce6e804a1f4759e978add4aa58d0305c355579a795da4b20c0846743e4dbddca4c0b354ed891931709fa692d2f0d332bab40bd6f501b9a980399953ee692c
SSDEEP 192:j8GZOt6AFu9zg4fppSKQJN0zG+d8tJZXjeJu:FZoP4RpUAp8tJZTP
TLSH
T1BED18D816E4A6A78AF29BFE56C8D0B9DB94242F1544E8B8DD363945BF27201FD042934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-5B70F332.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-5B70F332.pf
Size 6KB
SHA256 d42e06391283e852470b6d97e4558950b823185fda3659d54a97b6b993f6104a
MD5 30f51e66b2531bd747ddca272eecc541
SHA1 60512d82fcfc34420ad350c12867a0041e9c3e54
SHA512 5361a660905443f25456b82df9a4ec100c4f19d30514ed86fb44de8d3ad0a8deae9e4403dfaed857f94cdd70ff41592e95592fe52c22ab01acf36de08911e99d
SSDEEP 192:c74b+CWXKA/tda8j0CUVBGs4uOWcy4XX/ex4Zrbbb:h+CWXKArJj6Vr4xWV4H3p7
TLSH
T1EBD17E1D18DD3E3EE5B94678AD62021F23A4AD1A92D7A3C9458BF0CD250CB58C73935E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-61696F68.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-61696F68.pf
Size 6KB
SHA256 4c3c3bfab61b8d821f1c5785a8a21402d438de244642104b21c62596b7c64249
MD5 cc6a8aeee070bfe7bc3033ed858f8ad2
SHA1 f6c3353bce884a8907d652f240f18bd1ae0499dc
SHA512 0174e71e7421ab3e58d47741dc6f40d654440ab10d4bff2849f32ccb39660582ab5739fe6a85fa183c53022eed6760cb2cb85cc6a321021be51aae4e65243851
SSDEEP 96:pnxMzwkW6li0CoPxjTsh8Dkiqae/jnNY2PgReuFpZZw+60XFs9ymG0gycTU5:pnYlWno1Tu8chqeuc+dGfG5yMq
TLSH
T102D18F6FE0C2099CD999AF94DC8C79B0156077434E2E3A615B52A18CB65A82D72CF633
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-641DCE1C.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-641DCE1C.pf
Size 6KB
SHA256 60f2fde71fc09b186ed2724132c4102ad6b732a3f50afce5822b0d7fc4063b16
MD5 9c7407d17809f7b57855a9b4bf0c9433
SHA1 580eb456359498e1e712c75672b54cc8521b78d3
SHA512 da6ec74d8501e451396fec546501a714ebfd2ec28169d7a45daaf277bb538ce515c605ff171aabfed63e1259223fd5160472defc37cd5516549944f1f3d096a8
SSDEEP 192:iEIMaT549BrgKthD9GaDU6d+huLLRSd5FW5X:iEIMa6lNvfI6w0OWV
TLSH
T18BD19F08D2C82BB6D58D3739DCB6D1C7952E640D40ECEBEC425129AE1B6FAB9DC81066
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-6F2A95AF.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-6F2A95AF.pf
Size 6KB
SHA256 7690ff433a1282188052d4b779f1a0c48e21550c4ebea21902a7fd310247fb99
MD5 c1e6ccfd214fe0b002ab4a4767c07488
SHA1 d06611235514eb7917afaf56466469ba5dd5ae5e
SHA512 746aa21100b577b1b15c16628a9267e1e0a7b50b9b8819d001544d6521b99181d9bb99c8ebc387edcb2c7d50be717d2b1da848ff1ef746b1c21d39fc337d5e02
SSDEEP 192:qfW1sa0sK5gv4OvnTzCQZa8fZQLMEcTxMorM:CkX0zpOv57fwixM5
TLSH
T1B9D19FD2B4204757C016B7B87D13CA99362126FC06BE28DCD417D09B69CEC32E8ED3A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-7194EF5E.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-7194EF5E.pf
Size 6KB
SHA256 84c0cfc13f97aac5695e77d646b04fb4a9b7dc27b9bf25858be48dc3e6e93b10
MD5 e4caae9d2e30ee4d6c3482da55a5fc4c
SHA1 8b51399a76e0b8679086d569cedb4ebbd0de759d
SHA512 1fb54571a7a3f74c06f2c5ea5907c19ef0034d01bc86af77a6a4e2828dbc96ad6bc0db52af3904571b0f36c84c7b8f93c5b3e53543196d9840f6f3f5f05f4b1d
SSDEEP 192:BYR5XlAT8K9+fgq73AZQxxdLcL/5nYz+zqmt/jLEE:o5VApyFzxdEWz+zDt0E
TLSH
T107D1AF187D083CE6E2E23FF064F87621931BC724ADF517C8066E66520D09E157F76752
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-7B198C28.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-7B198C28.pf
Size 6KB
SHA256 0df238a64343693cca8ae7869d80b1aebb9d609272d9ae557244a157d19a04b9
MD5 06233051b9a0fda581384fe353616a81
SHA1 b43d9a3241188ea7860c66cc68dca8eee995b93c
SHA512 6babde970a3696941637c645ada119eae9982c646350aacf2d50ac36c311843808a7a43a79141551e99db3caa48cf838d8bb50d564fcdea6d73b905c183e1d17
SSDEEP 192:+wzF337RRWGF8klPgoqYwiGAVJXZ0Blb1o4GZqLHQ7FvyVJn:+oF33PLlAzMn0nbGgH4FiJ
TLSH
T1E2D17D5D3A272B67C5689770CDBB062B3F95C127ABC5AD7D4413823E8A848B3259EB00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-7BB97BF6.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-7BB97BF6.pf
Size 6KB
SHA256 c75e98729afd5e5478024acdb5567806177f824f82f104bbb90a3b24e64798eb
MD5 5f0b0de10b0217202a2cf4fb5545ade7
SHA1 99652c35af146debd0d626fddf6321c5d0f180d4
SHA512 9c0314f3a4b9ffaa0ce5f9a6d141e333713c62e63a0b96f6a1dfde7fff62a9f0f44080665fa7ff86d0c7ed06095dabf3afd4d10617886a37bc225d51c95b9a0c
SSDEEP 192:lfp8SjaoZOBrSi035s+Z4gjZNRoE4byHjwpwXjDle+bYeS:lfZOoZUrSV356Q934rwTDk+8eS
TLSH
T1F8D18E27FA871533C3FD9661792A5AEB354ED78801095568FB572D104ECD844E86CA33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-7BCB4814.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-7BCB4814.pf
Size 6KB
SHA256 cf6cce8b8cebb11c2831ab04f998631e32054b9855cc0a3070bcd9febd4223bc
MD5 0d97bd41c2953439a78df73054e2afcf
SHA1 91ec8d003d12b9a72ca56d3c942e8f05d0ca735c
SHA512 9625f65a7b0172a5f72dfc38135a5b59a9ba1707ea3ba1705d2c7d835eebbdee587aa6649b186d421bee4326c976a845e7d885140c055f990f98182b4cf449ce
SSDEEP 192:+8mxiOlKt3rohYVy9ea7YC/xz1m0ufRKVdFRZ3W:+3xzKFeYVkeWJzEDJcFRZG
TLSH
T143D1BF3C502004EA0C68EF34C9FA8795A7F79F0788196EF8BE5560894876DCF82B8514
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-7C77C512.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-7C77C512.pf
Size 6KB
SHA256 351f7f3ca88f7fc0238180826cfb2f34fffa0f69d496745ef4e61e4d2b1c022f
MD5 400270f8cd31c3dc47057b3b187f2dc3
SHA1 e17719aae77c562edab975940b61577fc99cab00
SHA512 a989c5d01b3b0d343ea61a6f29dcf8c8516b6c1dec180966534dc0383ca96ebeaa0d753791ee39dcedd4444d2c2c28aa146095f65d43f7b76376470232eb4c1f
SSDEEP 192:JLsEjKb7/9Tdg+5S2oJKA5vbSeEMqXwy7Tf:CE+b7FTsPJKARbAdwy7Tf
TLSH
T1B2D1A0D48519A3A9DA27D33050C4522393DBB0187009E39D5BB756316E743B1ECBAD8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-7CB48DE8.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-7CB48DE8.pf
Size 6KB
SHA256 25b8561c049c2b128a2ecf35572cdafc665357fabd94e365a3cd68cd8ddc5bba
MD5 a34b92edd2d1c423cc746f89c46b8e9d
SHA1 d8541b71cc3a639e825a07f7e940595c4a382697
SHA512 99ca4d5ea5dba6360c565a6ae2f276518f0ea09e75c052f8db57ca71f032a0c2fa56616d3df2b657ea7b0ecf163fc32eed6f7916356383f1cb5491644c0ef914
SSDEEP 192:YBpJVKiyYV3RLJj2cU6m9WVw4gEH55lu6yOy6LuKGvy6B21ILN:YDKfU35JjPFm0pTH5HPVLuKwZc1Ih
TLSH
T10BD19F5904B42C12C9D6CD3A26E47F59EB784D88C87D42CDEB3F6A213E0C4C9BA7A049
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-7E8D1C35.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-7E8D1C35.pf
Size 6KB
SHA256 3f98894faf45cb1a247b6237c112ce7d2c8d46ae2cb994efb153ead9df717a8a
MD5 9269068489477768da183af6f8b1d4f9
SHA1 ec9a53559beb82b498966d712f2c9f1fca5f209d
SHA512 9597cba0f56aa2b715e2caf0795bd044d8288303fe7040d4e9ff4c4eba16d0a9ac956cebcc910865a7b64b899b13f145129786782a7f1f93e60aca0d69dd5136
SSDEEP 96:OVL+OtxVPetbIGGZKKpIlsomOmWmD7GXRjgZGSR22B30+cUh0OaxYaErs3V1KH4F:OVSjRrDWsmwCGqbBEZdYaErszfF
TLSH
T127D19F8C69CE2B56CE693645F8CC4DB87352458A03BC350995A79EF48D1157378F0F61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-7EF4A0DD.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-7EF4A0DD.pf
Size 6KB
SHA256 4d9a87fd36ab857634f73c8d2435c3264ee904ce1e15bfbed18f83bf6f4a25d7
MD5 d185a892e823b15f0e1dd9bababc57eb
SHA1 11d7b09b283a5d3e9341cedff19747dd67177b7e
SHA512 d39fc869bf340c015405dbc5d7df6fd5797158e94dcac3ac5b710102290c31e516da23e93faf30b1ed672d61ed3ad58217b6f775a22b0e4a4723e7b219dc1219
SSDEEP 192:Y06LNtse2e+9cjR31eJ/ABLZfrXHQ7pGzrA1nEF:Y5me+udstAbg5c
TLSH
T128D19E08A2CB95CFC1BEFF3494148A9FDB4D20E744F698B910527FECC5711529A8DA2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-7F337F0A.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-7F337F0A.pf
Size 6KB
SHA256 1e3bca29ddd1f430394e9c23e80af340ab21ff8f88b147020866d0cbb3dd9b5d
MD5 5ff26dfca9c7aa563a91db658cf94bb4
SHA1 fe8658149766b0be48f2796961aac1f0d6fdab95
SHA512 595faf4012b2b9526e7bdc58ace4b712450031b43277b2c1a6f9e2c80d91a89deea8b976cb7451ec1a58601ba2da678f6077262ca03f3e647882c6f467893aba
SSDEEP 96:3xqnWbvpJMUhpraLf2FlpXSbzCSXcGDAIcodEbU/lcAq6G67ELY/sErwK7O/l:BqnOlELeFMzzXEHdlMhEcf7il
TLSH
T1D3D17C14859B3669DDAEE59D0C901FCD72026E2FC07450F9E2B2EC861140F6F5E18E37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-8AFD300C.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-8AFD300C.pf
Size 6KB
SHA256 8198ba8626a0327bb710ed7ec7168f09c3fcfb8206875024431632531539c513
MD5 b6fda1e44b481206863edc1cbf28ce25
SHA1 82bf1c8a08d7618810120b58d5e66ff6f0c50dfa
SHA512 6dd199c00a98ba1880b4e6c16e9edd56861e798f729d53869bb6143df5ab99a0b74ac379cf697170c4a85e9e0144cd696c81bd115b0e35cd9e19fe03632255cf
SSDEEP 96:4LIGlSZ3KYxhPsJJMvqDPer927O8loSliuiF+mJpEYXW6oMQhzRdK3FjF76bMals:YIGM0IKgKPH7OCFli7J5oveFjFmbHzA
TLSH
T1A2D19F44C58A370490D9BF27F6FF83055BADD81C5D1C2C9ED37E71939D624020A6979A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-976DB280.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-976DB280.pf
Size 6KB
SHA256 93ff77bd68ef166b0c0c9cc136af111563903988fb38020ae50a2426f15b7338
MD5 8d43271f4ddd9543d10ab111c94a3052
SHA1 ef57a41c3dd247fc60da4e07b441ddd4d88c861e
SHA512 03e4a9d60c9943a8358ee4c33898717aae17da5ccffe3074354740c9def344d6706279da3ab284bfa59fd8025fb2c8f1e4b4a8d99d8eb0e2759d5025da689ef9
SSDEEP 192:T38x2O2IxYdhNglrVj/O+AwSCQgJeboggUaCZzEmSVc:TaxZ/OxvhbogPas3Z
TLSH
T1A9D1AF0D0C8D1BFACE57742AE68F099DBAD4FB3B157D3E1CD840AE02A1310CA8199418
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-97BCF638.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-97BCF638.pf
Size 6KB
SHA256 81268b01eac4f83c139704cedb6f0a07e9a9721110e788d95963ce13be58d4a9
MD5 a3a0d7c867ddad4f0f75027b993d59ca
SHA1 3659d30dd05d91a357ea3c8cc964f15134a464c4
SHA512 474ec62d3dc284b9fb8e6675d3ec34b9090a3459ac0e6001912ee8e2fa3c0e56bf9fb71213429d6e74effa6e6620fab6bed24b7feba593aa8b4052c43e46662d
SSDEEP 96:YyD9/cryO2igyYuQbSAFHEbBxbnDbeNCTrlbbErFl53e6T9j4hYhgcd5OYjQ+:YyD6gyYufgAx3KkaE6ToGkYjn
TLSH
T1ADD19F1864E65612C6EAD6FD820D65B462E82C558AFD84DFB8332FA19CC0CDFC662054
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-99F89D15.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-99F89D15.pf
Size 6KB
SHA256 b5635b3a02145019a0ecbaf9448a61eb4e946b40e5d7b2e57ccc83b1a70658a7
MD5 38b35b7af17f77e065cb1b794b3c85c7
SHA1 925ec1c915ff880608a611e8fe4cd0e5f60e0c29
SHA512 16b59486f52077228a0cf5f79bf2c3a5d4315c5903934942a1729d96b29c281409bbd2efda7bba92c70143aa6b13ac677361d1d5fe13efbb51fc5012a067416d
SSDEEP 192:zFoayHQZhrVKU60e7SIRdbXuj/Y4oduOuhnqWyj:zFyyBI7SIXru/OuhqWyj
TLSH
T19CD18E31A8461ECEAA1FEB7770A2830E2DB0C5119D4B48B638DFD059AA66C5CE4204D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-AE5EC6E9.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-AE5EC6E9.pf
Size 6KB
SHA256 b820e7c2882345d558603cee06cca62378fef43dd94a194bf89a53de5b2d0102
MD5 5a5a96a3835cc4ed6040caa96e3d32e1
SHA1 055300612420dfb8a5cab299589c98b16d9ddf55
SHA512 0cdc64f378dd74b96cf3e66b60d573a93b50b4b077d5f8215a621b0f68397fafd40e89d18721b26d962a72480a192254e7a695f6fab36624e629498f0b1a41b6
SSDEEP 96:IcmM8biyyItZy1TIsabN/m5xMu6rosS3bzgcC2rKUS9ZX87MNawZMztO+Z793h+v:wlSobBboPzgkhsXi186dh+Q8
TLSH
T1E5D1AE0808C39854D7D0E3B558B1F46A47B2FF1297D122AF0F6AAC6E3C6005C504BE0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-AED2006F.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-AED2006F.pf
Size 6KB
SHA256 eeabb498069a6ff37d801d91487011802fb9af10fa831e2443cba325bc319eda
MD5 3805446bf8b6f46f3d547b37637f3c61
SHA1 4ab086c7ef6d41ae7743efe441135c8d14898b4d
SHA512 04f2e6043d38ab55f1bc25103bcec6817f48480181fd257fdcb5fbf562e3831f5179228a3b0c6e7c273702c326395ec083ab287b72dc3010a2d38465fcf66442
SSDEEP 192:5hTn7uR7A8Dv+PSQZHv3Hei0BU94B6w8y0bcA:j7uq8rC7Coty0br
TLSH
T1EED17D5CA0AB1A11A2F07B3244CE83B032AB8C7525E674C47981F98AEAE7D15546929F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-B2C296EF.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-B2C296EF.pf
Size 6KB
SHA256 d37f2e64fcbdbded4f57f563c6ec164d5193dcd4415cfda63f0a28b4ec0f3a1f
MD5 d934fc78b486cb6980922fddc4e33372
SHA1 ba3962f09a704367a793174df8d57ec30e2a883c
SHA512 f1dfd7bce95b39650d8fc028d2d1ea866b6fb78b4a4ce6d9bc20ce105eec24eebdc935f44ae8dad620445bfeec2d71f99b6ae46bd082a28fa9e3edaa9bfab508
SSDEEP 192:zzNGumrQPAI23LkOdGvNco7i/+KM2SwGCAL6UDB:zrmrTAOQNcOi/XM2Sws3B
TLSH
T1ABD1AF4DBC54F99DC058BBB016B83A9953644D929ACA1DCC31CE39FA3F032D436C12DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-C5BE1C43.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-C5BE1C43.pf
Size 6KB
SHA256 1dcc8fd1dcd313bb6e44795c145a1e27280b6d242287ac4b8773234eb742a2bf
MD5 a45d86b6960baa744299ab614a607ae4
SHA1 4f013074b72d6cfde0479ae348a08c33638903b7
SHA512 07a1842bdb228af078169c4e9de83b940126448b557f413695d17234c2d5f87eaae0a94b380a3d267ccb9a0390e86a0b0489e878c657eb6e2922baa50b5c925a
SSDEEP 192:mk5InphcnOM/ySBk7X94L/NhXXPhlwHn1mD3gPVZ:mnpeOM/ySBkR4L/L5yHTH
TLSH
T199D19EA0EF941A69D5F34B10A412734E97B424570A4F665C724BE3AC35810E8EE961A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-C8D69DC6.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-C8D69DC6.pf
Size 6KB
SHA256 650a993529b0386110add71784e069ca669480596a5d09aae0f53c94f351487c
MD5 b2c21fd272885ada8900c17e7e58de25
SHA1 064a9176834961ead44d1fd574c61bff98313ff4
SHA512 f14bbbb21a4152c6514d12fdc9c38501b9a29acec6f4580cc30ab0f84455fdd464b035c9fe74d4d43691852fec800238c8924063b69dd09a5e70390f80670206
SSDEEP 192:FlEaQHj/5N3MiG8UyDJouEc2OwHqDo/0N1/ONNSaH905Dy:/M5N8fT+JouEBOw7/0N1yZH98y
TLSH
T120D1AF08200B407E8B9DB66FF510D75EBB9E54045C482F36A3929E6169A3C14BB3FFB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-D2B15AE2.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-D2B15AE2.pf
Size 6KB
SHA256 8a021111705249c4ab94570e4c4f9348eb99adf6deab20156c60f50fc8bc3d29
MD5 f39ee840ebecd023cdda26e3192c1495
SHA1 ac36dd87cc84bf5355079410eaf60b1f3cd80b48
SHA512 9f9993e9113fb737f41ef77bf2bc442fc05f7da58d6ade257e8284252b424c27a80c577b5663de9d1423d381e719fb110738b6af7fc98ef7e091a6d5a05f92a1
SSDEEP 96:45kGnugAXciapaTMhlEnD7oaxamy8Msgn+YhGYI7sUh6Ey9tTSWYoVP7w:45kGn9AXc9hGnD7Jadf8yUh49tWoVPs
TLSH
T146D17D0760898262CB4E669F229FEB0C1BA6ED3834776379971F870D5DD121BD908E29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-D71F3FEA.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-D71F3FEA.pf
Size 6KB
SHA256 7a025e564d478013ff4e16a1e68beef544ad0a2fe462be3e9f18ed18707f4d48
MD5 836fd6874b55148dec345df017ebdbac
SHA1 44b8027b9b62d012297a28139b3bdaeec78ae10b
SHA512 cf9bf996f67c34d7beffc04b41333edbed7441f98786c3b58226fca25de849ff95f18561d78880c99f71b1f2e9c2d4aa8601ad570aafb0dd17dbf8350ff2e862
SSDEEP 96:TayczvbTiENjYMb7bn+/PCgEgxVIytnvyAmNxJQrjwcwvqLo7jSVuknQV138n:Tc3nNEs+XMgx+y5KpND0jnwWo7jrvsn
TLSH
T1E4D18E01D94A5AF3D66E223089A043F7FB52BA02112A54FE4DF4DEC37ECA4727655C2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-DB926CB0.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-DB926CB0.pf
Size 6KB
SHA256 7e077b92838451e8e01c646bcafccbfe3b7371d15b45c5686c01dd55846e3a12
MD5 86102957b4df22c88d1b94e79ae495c4
SHA1 07d8f7801ed2f025d744ef43bef6d5d1eeab0349
SHA512 5cb38cb4af9bb93d1bb68e6baa6ca72f7bdd4af90217a55fc5b316b6aee822824f0bb438bdf1787f2767896112472d4587cb2f6b819cd1a4239232b359881c0f
SSDEEP 192:YXQB9Mz06TNayS14kJvR5c9kQBZNc+M61IUd508S:Yyu06TNaB1pVczZFMe5E
TLSH
T182D17F28F1CBAF43A80A4E30717742995DCD669B37F6B9CB1F6D14832942D82DE88859
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-E66A223C.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-E66A223C.pf
Size 6KB
SHA256 0673870147912e00f35249c5ec0d460d6d978ad4df9a6e4d25db9d3bcb68cdee
MD5 d82dede144e23829817877355f238f07
SHA1 d195dac0566f8eaa5cfbeb2c5e38ce4c0a6e6e70
SHA512 82920f5dea1b5afe4ffad4f7500d6448efa2622d5febd8d07956668670498d2a6650d4b4b9c978355f38cce38291e30dac8d9056aa55028dc9c56f78762b2eea
SSDEEP 192:8sP3kOIGJLhYyss2DOc09KDcP44ZxWZGCmdqPpAN0XNHtX3:823kOIGJLhpszDETxKmEPG6dtH
TLSH
T161D1AF0DEC0D3474E67ED32635978B6D96E8E9A3802E3A1950B066FDE8B41D0E2C7459
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-E8196656.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-E8196656.pf
Size 6KB
SHA256 e0888f25acc793da88f758c31d02e319afda8c0409061f3cab507cb35ba3c559
MD5 0299f803282cf4df471f29df65dfc757
SHA1 5499f34fdf07d3700da8fd4b5b7f1866cc18cceb
SHA512 103c91dfef232d95fe8f1b58748ac449091592ed349f9c1b93abc5e20f6483b78ae26f859a443f7101ee6c28ab18ac91a31987cb140b416b6f4df1d5ef22e315
SSDEEP 192:pKNbbVy3TBjLyW5dqshWFlACY29bOOILojl:8NfQtjd5dqshelhYNOUo
TLSH
T102D17D889C96CF4ECC5B46BD87DCC31A774E002304A5639DE79153AADAB4854D402E77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-FCAF5656.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-FCAF5656.pf
Size 6KB
SHA256 4e02a626b403a0cb9f6c2a5fc3a94d812742263c55e5fa8389d796f02ad644e5
MD5 0cbf40cd147f2b25701f86f97867b6e8
SHA1 33b01247037a4d244c322cb12c85255c2119ae20
SHA512 74a06ded7e4fa3617b2a79051aff148cf80fc2b4c6cc322667765a097be80e4094621368cb3d1aa93193f38186d4296f428166d4c7d343b93000560bb434c3e8
SSDEEP 96:k0PamAZBJq/Lx2p7wx43UKO6+T4x3SMfMBoth99sdWbajlIx5Rd6DW5hxeFpYrIF:k0PBXLx253w63SZothfsdtItd6qZBiF
TLSH
T10AD19E8DAAB7AA558D44E13057F63B1F1200E75BC0BF6B35A355350B4A0B02BA8ED322
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-FDF50724.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-FDF50724.pf
Size 6KB
SHA256 ab18beb8e1c13d65ebd2d9df67d72eb288c8bc28210e6d8f1d180ba9efbb4702
MD5 71cd75aa27caebd1cc38259f4223477b
SHA1 6813792c3133bc868ec5f7fa1cf0ba2da4be9ac6
SHA512 25c0d349d68600d6f3922c25ae1952649fc903a6213d5c29adbcaeb931e02584ee372a344a472eb922aaed942f00cbf3be05ad5fd677438a0de6b4ff40c0c227
SSDEEP 192:CU75aEMgUTlNKiYzWJrkw5aVLVNUZH2gLcE6PrTEYEvYfu6BN:CQanpjhzJrkwaIQa6MXY3N
TLSH
T1BAD19E8900476E1806A1EBF68C5EE24077F577F7C46D0E1E61C77E960C5D1523A98674
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNDLL32.EXE-FFCC5BB3.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNDLL32.EXE-FFCC5BB3.pf
Size 6KB
SHA256 09c3c0f7536f79d50d072a1bb9cda77e5f76d0a1649587e699ecaf90dde1d2ad
MD5 368ba649dac9e136039edbf12339dfa8
SHA1 e2ffedcd7182c26e52affea446a730087f052982
SHA512 fc95f6599ee9c0ff3b3d3053241a974e89c7583f13713e30b458188be108e9f9c7a86fb0c2de9efa781bdd544448292ed43732e77df8302e9c2cd48f20b18a76
SSDEEP 192:gnLTe/3DBj2gbJQ5jI3/+ueIkarEaRj0Y:gLTKiIPZefaCY
TLSH
T116D1AF44D2033A1949917B2265F413C32309D19397B6F63E018BFE92DC4B25FDE28D6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNTIMEBROKER.EXE-005D3145.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNTIMEBROKER.EXE-005D3145.pf
Size 13KB
SHA256 3ef7b808e1f336803485d4b7f277d4da7af5669dfade729f9f9222c134d17407
MD5 f703c3d77154665edf405e4738be1bcf
SHA1 5c2313b041b1acc0e2c8a4df8899c7f0079c2067
SHA512 3562b8a72b150c90212c87db8de4907405e772fcff3ad5d2f8e5f363f0612d3c8d5d7643f80dc4b70e0a146b2f0c609e3b1e4a5ef9d63c6d7d61c747db745f91
SSDEEP 384:YHWhsa3PDgV4k94ZldlbSTkiOd/vqk6YEP6aK:w3eDgf943GToZq+MK
TLSH
T18752B056801ABF91F095EB0CBE6FF895EC900F014BD8A0974638EE387482DDC59693F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNTIMEBROKER.EXE-06226CEB.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNTIMEBROKER.EXE-06226CEB.pf
Size 4KB
SHA256 efd112750330857e35bd32aaea25872d3f121c0a2807c09c9b491a25dc27944c
MD5 8c7db1faa9c570afcaa4f93a529579ff
SHA1 9fb02749931364bea2e85bc9cb3fc9f71e49c636
SHA512 39244f5aa474c95567d820383614dfdf8e94ae90fbce4984b74b21f811ab6fe9ae596a6c1f7943d1946fec49f8fe5cb60510a5b590fcc4f919c98c537496eb73
SSDEEP 96:MsrYCsUbzhaQeM9bxL37NZoCmWP5jdIE/:FL/30QeYLNZGWhjdd
TLSH
T1E0915D4BFD665425930F7B7252E38A0293AD4481FF9540370607BA46CA9E02160D8DBE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNTIMEBROKER.EXE-3ED30A86.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNTIMEBROKER.EXE-3ED30A86.pf
Size 4KB
SHA256 91ecb457afb2a3ea2d2a4a52f8b2a308786a57de854259f75f901f9d8aed7054
MD5 66f1719e19a2cbf99a3b29885fe49e5c
SHA1 d5107b490c5867b2670ea1a9393907bc9555941e
SHA512 47b85bb4371c6c7a3b2aae2f664fb61e69538eb07bfd5641da461c2b6f9094352517e73c1aa7bf54d12b37dac09a7606eecc8e17dc5635028701acac9e80fa1c
SSDEEP 96:3MSQspoMR07j6ScHNvzUhVkM/sP1aBA5yhIT29J3viv:3M1QJ07mN9zK7/sNby+T2HE
TLSH
T1BE915D8FD92B7417FB9437386862418CA53BD92B420D81D8423EBC5F2C1D7BCED24869
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNTIMEBROKER.EXE-4DE02988.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNTIMEBROKER.EXE-4DE02988.pf
Size 7KB
SHA256 a86a39a5732eb85a7198e634b9ae1a84195c7215c780afbd03dcdb5213a07498
MD5 dcc657c85ecc0ce7387c323e44291fc7
SHA1 1b1504bda2dd0a016a4916edfa7b946daac0d5f5
SHA512 c9080acdf1410d043c09f1d1705e5ec4a97a1c5c4c69e340a2516c400abf7508e55548f9144e533b77fe0bfcf78edffd32cbd89d5045ead4ff464c257269f5d5
SSDEEP 96:aBQL6Rh3FJnKPDZCzTsUqtVHnkpX+oFChzDsEFzf4o8mVDC/tRLcPOYvUmM1MQs5:aBLFJnKWSVcwhzDsTayAHMt11Ihz
TLSH
T1FBE18EA53B066DDFF63670B4854CE8AE5E1E080705D7E16E4E7360B39260E03B798DB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNTIMEBROKER.EXE-72C0C855.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNTIMEBROKER.EXE-72C0C855.pf
Size 8KB
SHA256 0db3f5c613155b2e4ff8e0e3363bdab28bc34206258bce8c7bd539490536dced
MD5 74c92fc0c3b97c882e916d99669c47f6
SHA1 8f7a603ed590bf6dbfc9ab7c4ef685370a2b3edc
SHA512 bba630fb5f33e3fa4884d7a687ee28fd31f9a3d3e6560130c2fbf1a4e5fcd7210b0015f82c0adb746e59ce858eb86f78bb83c25f268e8d4b91bd79609a5c7654
SSDEEP 192:RPQs1Kgl3vz9mpr1sAnOgJAXua+PkEYrVWMFAnIvQ:dQnghvz96r/OgJguaCkHQMyf
TLSH
T14102ADA0FCCB8334C81DAD058F14195E3A1A76E860AF1337BA30E92A9F46291F4DA311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNTIMEBROKER.EXE-94A02D86.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNTIMEBROKER.EXE-94A02D86.pf
Size 9KB
SHA256 a8759b9de7d6e6a60ba6aee0cb5b167afce223782243a2b4643523370429e21b
MD5 dcfedbd6287b0030b8ed8d3d13cf4efc
SHA1 4c4b7d6a52f68935ddf25a5b27f152e9bd59a5dc
SHA512 4f60321a8be2b3221d0a06a1ae31a5367d2428f12d4e69a19ecdf6b20b9d7cf1816b9698a0c3d865897fef70dc0a320d6fdd701c05bbb7c9bb108d93fc34e8f6
SSDEEP 192:1Ea4F9VL2xIE0gIXojOxax7l60AOVKQAiWzKwpEVyOeZ0N/aIrpwxqoJwGjtsG:KaW9V2QXXxax1kzJ8yFZ0N/VrpwRJrqG
TLSH
T1FA229E82E3414F5DE8D3BC589496A10BE7F70E44B5713F64DC9AE984A127A7873223EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNTIMEBROKER.EXE-98C67737.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNTIMEBROKER.EXE-98C67737.pf
Size 7KB
SHA256 7999f4cf3de1cdd46d39c5e4ab9f1a5e623626c3e7cd0424ed8433e2fd4a24bb
MD5 368001c6a6a18f3a6c378dbbdadccda2
SHA1 ec82d93086ea2c3d9ab6fe9baf6e58ea1ba18140
SHA512 9a7c1bb3cbb4a367f1c83495bcc2cb7ae9b35b38e207dd095b6322c2a1aa781f5a3e82c6dfe3268e50246bfdc43cbb183f2e15ceda8db10fc162e3fd71281f67
SSDEEP 192:FOXPb/fX7Jpd+hc5yWz1p3eBuB7hW+SN6D62S0CbZMSaO+st:ojkhoTpuBS7E+SN6DhSLaOPt
TLSH
T1D4E1AE82375FEFEDD1303076FCCCA5B6EAE10ADF58B759651A122A412B88209730173C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNTIMEBROKER.EXE-98F22970.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNTIMEBROKER.EXE-98F22970.pf
Size 17KB
SHA256 7e58c2a4a61953605b7fdf29cfa2580e2e68893eb4c710b44268add63ee8d9c4
MD5 4d655c6f7184894abe2d92d6048ec691
SHA1 53e5bff004aa366164b611cf60aee5ded493a340
SHA512 cbe80b06b03d99be952b44f5f36faf6ac004feb5161600fc4c1d7cb4f5822ec08071c79a3aaeafcfb6f01d8630eeeaff31f70fb59639dd1ead99f83b2b7e1833
SSDEEP 384:56iMlf4l4/3+IKtTfI7aIZEgtiR9lpT0p8p3DsIH+nVAAtu:YiMlfU4lKtzIl3iRPBDWnW0u
TLSH
T15D82C009796A9149F91870704C01BFC8AB97484CA34F4C3FB02C77AEDF679B18978814
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNTIMEBROKER.EXE-B1A87C0F.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNTIMEBROKER.EXE-B1A87C0F.pf
Size 6KB
SHA256 9bdf021047352fff8adea966f5fd83df0b6983f909d2a5d42c22073b06a03077
MD5 5dfd846682877f616247a6d346d5294e
SHA1 99c9f35634b8f5d03ba4f299c7ccf4adfb0da45c
SHA512 9e06f61bf964e612e6bb59133e6d98f5cc980906676a1269c9881e8957e4fbce5c52dd809a09946f95df063517d8a9d9241cdf5f0bf262376a6e7f359796ed4b
SSDEEP 96:qFdn7d6kZT7ieFKmu33McW95SulB3KA9SsrZYbR4wm/q8FYauEYyLpEAapQwcQvR:ghT7/FCnk9173l9Ss1YbOA876wLP3G
TLSH
T124D18E3C1152983C3ED3CEBEF528029E6135C566E0D8AD05E39CF89AE54BC39FAA545C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNTIMEBROKER.EXE-C4B5739C.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNTIMEBROKER.EXE-C4B5739C.pf
Size 7KB
SHA256 8b9f89830ce74bf936db09fd30daee80a808737aa87d4d9279e04f5df6f93f19
MD5 6d47261ac7bb279103244132583aea48
SHA1 3afd3ff43ad9cff89e8ffeb439435938beb4dd04
SHA512 3c35d1a715c8161930fbb53565434e369e2fbc1966349a0fd29dabcff7365bb857dd473320c4be0e15bb1ab372c59c3dddb14d199ab2cc68d23b137e5d37d108
SSDEEP 192:6zcGCmMOvyxk+IfWPNRz6K/prmzQQv5K4o/5oqVzb0s:8C5CyefWPVprfB/r0s
TLSH
T112F1AF03192DDD9C53327EF045CA85479611187B71E02D274E82F49DCC986DE87637BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNTIMEBROKER.EXE-D9106866.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNTIMEBROKER.EXE-D9106866.pf
Size 7KB
SHA256 c299c5391a8ebb7d9d198eaf4530f1a97cce3d450545362ab9a175ccd853cec0
MD5 18f1e02b1070e8de22babe976282625a
SHA1 4dcdc4ca063b2f6468380b88b8f3a790e6c8db0c
SHA512 145b3ecf37100b0bf560c084bd3d28294b63a2df1f6e13387c93656b0c9b17f701fcc12a803bb6450f33ce9d9170d96438f9458e022d8bd36bcbd8d058c0ab3d
SSDEEP 192:y6BONM9DkCL9Qsw2hSvyVpgAFUcswykSXpkSmeBpYUu85fR1V:1/LhSKpgmUcDykSXpkOLYUu85jV
TLSH
T172F19EE0DE08CBC9D26A13F6AF9B48837114B01AE570F135107261AC6CAF4384BE57E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNTIMEBROKER.EXE-E09422A7.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\RUNTIMEBROKER.EXE-E09422A7.pf
Size 11KB
SHA256 d04cace00043670145b6295ff7643cacac2b3da8032e7debd43f1cdb7e450486
MD5 6b46cbd46f85c049500982f37e7df330
SHA1 c68668a019e647c061066ea5be9af3055c8df2d7
SHA512 d00128535dea41e065c6e87f86f83ca597af65e9843ea5b4c38297ddda56e889e81f998780bab1f40f138d08567a6c0c4c99fe0d0cf55b8a7988156ff0a20d3b
SSDEEP 192:ACaDm4sKhApaJz4Z4CJUxe2lsVLyhPDLiGyzWsIDX86XH59sLXK/dXF75yNXAHFA:Az/XMNJ4nyKxDX869sLXKlh5cx
TLSH
T17A32AFD0C0AB806BC5038BB985F4624EDB114A8093ED527BC071F5D88C5DAEEAFF112E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SEARCHAPP.EXE-0651CA85.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\SEARCHAPP.EXE-0651CA85.pf
Size 25KB
SHA256 a2987dbdcbd783285b2571ffc78181a6f9f2a2aa37a8b9e474bf6f270c942af8
MD5 a523b53b9fb13593a7ea0ce2ed3bf831
SHA1 6875a8b7fd250e0fc87826c0129ccf3cef4af294
SHA512 3b61c379949e0268ec08c3e429e3ce90fdc5f91a401b85fa8737e04874cb259aaaadcec3db66ff9cc49ba32dee8155954fade94f0deb494b4962ea497ee60786
SSDEEP 384:9tF2J8+d7U6eSCgC5lmF/HMbdP5kxIajuT8eqQfq7bN/wQF/R:9iNiQFvMV5kxIguTOQindlFZ
TLSH
T1D1B2C00514EAF52E9D181EA8FF3F841F0756E9B8415C6DC5FA95B8F2BD9A1F80228604
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SETTINGSYNCHOST.EXE-2521C7ED.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\SETTINGSYNCHOST.EXE-2521C7ED.pf
Size 5KB
SHA256 58c10743d3da4d5ddfae04072dd3fe93d4b1e266ee3bdb487589844ba6c0de48
MD5 3b4b5763d5ce4c227394ec2ff11248fb
SHA1 9e24966c050cf72ac0019ed944ae06e323db7825
SHA512 17f06139fe0ca3c00911740ff07519c954552327a7bb4827c0b122a302b710e1fc5a2efa4694074ee532c19a34bc61465c64c2af1112cc7e282d76d626d57314
SSDEEP 96:HQXZCPmYq7SMst4YvtoakLUXj7zYmWtXhZ/d8B2fGe2KNZt0x5XDW0Lyq45tn:2CADW4CoaVz7MbFTLp0x5XDW0Le5J
TLSH
T1CEC18EA84B6C0EB9C4EC3631877F3A5BE073219E205157469338BCB1B9A5F3C2E55571
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SHELLEXPERIENCEHOST.EXE-A3608B1E.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\SHELLEXPERIENCEHOST.EXE-A3608B1E.pf
Size 20KB
SHA256 29148603969ee69b48b79f860a81b77ad624dc1b3a4870871297d004f36e066f
MD5 41c64bfe205ea4cace69993c1aa643d5
SHA1 e9d3d2c5ee7f091cd239aecc02e92823b067140b
SHA512 8c613d2656a6d1859bd503c770e21daa7c595e8920ad4a07bb08d0f87756278be8321598177d0745b5e383a3006df594fdd9f1406ca79989488fbf2e42014876
SSDEEP 384:o4Dl3N60U7Lt+nO8e6G2cIa8KJ3wPoJkmAs1RDhozPq4RNI7CYm:N53W1Seb2c/ww+mbjD+GwKm
TLSH
T19C92AF4A457A6FE89DE3663B040BD8264C9E755A80371872454CFDAF80398EEC349EE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SHUTDOWN.EXE-E7D5C9CC.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\SHUTDOWN.EXE-E7D5C9CC.pf
Size 2KB
SHA256 07d75c41c7cc11fca7974e225d644e8b66eff26bc59ba60911dc48eaa10b5367
MD5 ba4e1882f9da0e1c416702f205b8ad18
SHA1 74779df7e84fb9e93f1f8beb17d51076dedc9dc8
SHA512 82aba943ff1f60ab5bc87c65f27d87d515099d6daee612dc4607a0c187fe2808385168f21b5c7c138875f062cd6d1035b2e87d5c2a71db9a1037fca9d55d4da5
TLSH
T155515AA8A28FB331C021B6F74DC9ED4EB7A88F01A907C7ADE0E6CB1451C54F7851C958
MD5 SHA1 SHA512 TLSH

Submit Download

STARTMENUEXPERIENCEHOST.EXE-D80E778C.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\STARTMENUEXPERIENCEHOST.EXE-D80E778C.pf
Size 36KB
SHA256 a01150619616331b3754afc5ce12de7471e14fd8b35140de1618b65b66648192
MD5 b08df738746270bfe4d9d717fe1052fb
SHA1 8af3e5caa7fec475ce88648479f9dd9f438bb3c6
SHA512 4b4ab7cfcf8582723f4a2d92380bd0c30c3b103bb4593780c953f80e57ef15df1b04426635ab4f51daabbec73791defde2cdb10bebefca02b2244ca3fad191a6
SSDEEP 768:k4U8vov5vE0jpILOquML1rJHGVYgOzk/2p8:kwovhltILOqnjHJH98
TLSH
T16DF2D08CCCAA7109C8DD6538DFDDD53B5A30E67E42CDB91C7313A461A98687E212AFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-033BBABB.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\SVCHOST.EXE-033BBABB.pf
Size 4KB
SHA256 e98912e2272b4fb5bea8547e7bba3378062cea8b042ddb8f0edb81d6003feee8
MD5 8edc47819d9470a39da0cddf37c9e6fb
SHA1 56b8fa4da3f274c7f25b958bb2f99fb0a5282758
SHA512 c51990e8de1a44dcbfdb537036fc49f9a59081628fc854ad8057e65e9ff9d717fbe801c39cfe7c27d6efb51b226c1a278ffdc8131cdd727d23c007cce70c11b1
SSDEEP 96:EGuZeY3gtK8UryC5pVUwtrbXrnyZPZCmrxi:EveYcUuC5pN5b7yZPZHxi
TLSH
T1A6817D0444EFFA85E6524EFE552F4015A16F5C6ECC882E10FFE87D47850369C3A41D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-6378753E.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\SVCHOST.EXE-6378753E.pf
Size 6KB
SHA256 3f4b0591abe975a6f3e3e7ea217deef6a2b655f2b9782476079954732f52fd1d
MD5 eadf35f5c82169b182d069aeb30314d4
SHA1 b09413e6ac8f9c73c5a7160c0d760e008514ad3f
SHA512 6de75c1a1652e159611ee7061115da8f081f4fa65558646179d62dca10d91cb5736f1e25b70b6864b81c451618a9aa02af21a8ab05ca945884410dc94ece7d2e
SSDEEP 96:YxRMUPYe5wbroV4Ag6BVnWDtB3HdNPzitglWMc5BIOCgF2Xn9k3mwPo6:SGUwpbrwznWDtJ0IOCgIohPo6
TLSH
T15AD18E190A6D534EFE05AB50E359DFE22ACE6B2D900AA700FFF182CD7B4F5612075B51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-B12DB959.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\SVCHOST.EXE-B12DB959.pf
Size 6KB
SHA256 f797451a8240863454c1edac8ac8d050101a51d3b9dd8e1b08154e6fda3deabf
MD5 f3a1fe00d87b1201c654521d1db891e9
SHA1 112222299c887654279aa6259d58e7b5045a5c53
SHA512 4a10ef827888c765a8a92e1f75fb020effcd7a964f2ef4287bfacca25d49ca1e890b7ac6ca27797b69e907fc7e92907698876992c5e4a22667343a44024cbfe6
SSDEEP 96:FKYu7DYGuHJ7roEOxtsW9NR8jM/4cfmFqn41reuCjz2yiOXFV1P3MY:FA78HJnoNxO2bX/bC1In2GXBx
TLSH
T19DC16DC52A811DF0FB4FBE793E5E37F0DAD0651309D4AA3C1BAF246DB69408055A1D4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-C49E779A.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\SVCHOST.EXE-C49E779A.pf
Size 9KB
SHA256 f54dab4ab8366e5ead6fdc7f4ed16430670d45f07ccd7b3697cddfe13c576d66
MD5 00880aa91623ea34c3210c37c2a5b58b
SHA1 7274bfd425a89015a6cf966f8adad72a46c74423
SHA512 8a1ede6f96c18b710fa4c1ec1c33c922ee94b41c46a2bcf0d83f56912de5c3acc7b797b19ebfe64f451374b6b3d1f321722d788457b0645bf67bbfdc909a6e4a
SSDEEP 192:F/gOiBs7zLCBbkK+P+BDfTqtoxRSLD359E2keF0HqZMb7JMT9:mOOs7zTKP1Yoxcg2XF0Kub1u9
TLSH
T10B129EE640B26C178A6DDFF64A0DC2827AC27B783E29D435453040BBB28DD4D1A2E5CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-DF3D779F.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\SVCHOST.EXE-DF3D779F.pf
Size 5KB
SHA256 21888008178fcf7b3de71bd8741add3658aa392cb309a4dfc8a6e25e0ccc3e28
MD5 06eef5b69416eb710fa654e2cc71a759
SHA1 8fd4378416d55a13f24ee4f78fd70af8f45cf0ed
SHA512 55a7796a1681de1c4b5c42f6d8c97ccdb6106757759c877a4f2b64b278e0a6698e8c15afe222c11f57a4dee73df58ff4c0afe0703c65aec60d3e2f376b6d9cee
SSDEEP 96:IKEQ5F+VHGvYr87GfazaYZJ7wUpDJCvkWrtOUpkTTAa4:pEBwtaqaUhwUpDMvxwGMY
TLSH
T1DDB16CC8A1A0DEAAD5C85375268E99534F577F2C430413C10F786E2EB63202277B466A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-F027B880.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\SVCHOST.EXE-F027B880.pf
Size 8KB
SHA256 fd1492f2bacf1e0444054108e87fb0013d5fd5584178846bf493444f25b4f665
MD5 36d3b71eabb5a4f2942d3a6426ca6cb4
SHA1 7d83c821646075705a4aa1cfd0cca6548e920fac
SHA512 dd62a774d5b0a075c08139545de5a1c76161f8b4e8aca03a73f4072c6c2585192a024e9105bd8891574bf3b5a4bc13a22174345a0f931281dbd7316f6dfbd4fb
SSDEEP 192:NLys9Dnq+10BMAERbSYOxeOeP8giWS1h5efZDGlpIFcb+:UUm+EE9zOetP/RZ6lpPa
TLSH
T195029E75178E698DBEEC1EA8ECBE1C05272BACAC4DD910E4A085CD5F720016D6E7871D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-FF8EBD82.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\SVCHOST.EXE-FF8EBD82.pf
Size 3KB
SHA256 9ace5fd1dfb8c5ebabad224cdfff7caeb4e415b7341e761017c7384a6e81c449
MD5 d5465e400df32bbfd6206d811601a878
SHA1 bc733ebf958e5ab3f767b5a84235c03b4246633b
SHA512 7562b92f5378cda7046598f0bdc8fe38bd36669994ad2da1ae20340f0bef4678c9b18eb6adb7db21dd0c02a6fa7dcb0d3ae348fc453058fffd61a929e6a6ade3
TLSH
T1CF517D9CEE89EC90DB9938B0EE633507D2F12211CB949159968101C09E27C237CD8DA5
MD5 SHA1 SHA512 TLSH

Submit Download

SVDD98~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\SVDD98~1.PF
Size 6KB
SHA256 7a879a0562a7f1c002a3b3e914f94bf49d8da3aaa2cd60a026c26ee30a26bda5
MD5 3dfcd0a40fbd189f964d5ca07eb762dd
SHA1 6ed35246d5d034e2105ce49315f907eacc403ce7
SHA512 cbd506cf6711811a014c72a63da330a14efe7ed3489ab40b2a4e76f9121cbd881c12445dd50151b6f534bd65db2391a9c0a2f7da1b69ac01c9b33c0101a3b9fe
SSDEEP 96:LsgsZjMnHdEGuzBfuovxoATUkCHhLvKO6o4NNc56A9z9q+Wxu2w32UyHeuD91IXq:7sZjuaH5ou876o4/gpoM2/+uQX2h9
TLSH
T1DFD18DE092D514F9C921EAF933D98D945B02B324325E9015134ABE95FE9706FBC94F0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TAKEOWN.EXE-A80759AD.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\TAKEOWN.EXE-A80759AD.pf
Size 2KB
SHA256 f49661d618e27a4bb137d05c53961d9c9d92578a893f4d8c9894fbe5b5c30819
MD5 7502e0a4c4e52cb83c5878a761616f1f
SHA1 7676750c2710781170d560b58dac428b0e783790
SHA512 ac64b1d4221084fee348bba7a932c0d134e8e4bdc38b99b6cffb2cc452bbd12faeedf365a22b5af5ad8ef311a3be9034c3cee12c1ed15f9e0e717fb8b29a7f0b
TLSH
T1C841197C948479A9F27320345FC2452486FD6733D8688A75CE0041D1DFA9B320D86CAD
MD5 SHA1 SHA512 TLSH

Submit Download

TASKHOSTW.EXE-3E0B74C8.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\TASKHOSTW.EXE-3E0B74C8.pf
Size 5KB
SHA256 e1bfe68f23660dbbfe5fa30a770d83b6e8420c2aa5f97aa077f036e82579cf09
MD5 c4066cab4af699dd2c2f5498a8fc5da1
SHA1 d12158603da4e93cffe44e39121a048f5d847475
SHA512 bd2352899de89e62afe210f353c23ef6f01b9663f4d6bcc66cb26c3d995d1f62bb5339f7420db786ea9e159a432af4595fc130c4abe63f01f4dd70b571071a51
SSDEEP 96:jG8RHWGsqq5G9eF9nZQ/Kny65cWvB5zDmgqZh8Arm0CxxP/rf:jGCjsx5meF7v+emgcLy0Cx1T
TLSH
T1A6B19E41659341A2C212CEBF2BC7F2ADC2AEFE5610A94B3CA940C3D77A92835008A853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TASKKILL.EXE-8F5B2253.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\TASKKILL.EXE-8F5B2253.pf
Size 4KB
SHA256 34a52840c0435f68c78a0493c50b6ef8b863f13727f4bb8d2f46addaf45a722a
MD5 e80f07ecc1fdd8b7b4b4459d8e601952
SHA1 4f38ec6a38ee9d73c6ab061b223c27ba1d7e68d4
SHA512 11147afcc89ff83f77a8a74089718574e6cdb4b6400a6b9ce22f82b7ac4437d28015c714ce80155e5b0f852d9f32e4869d8e7218e978efbcd3c85a6e52912813
SSDEEP 96:TojYVzuyAD7wCbJ2FkQE0V/8Y0NkkUz7nE93nYK8dIP/Q8mSLTxiCB:MoiJDvbYHf2NzUz7EpN7Vm2ECB
TLSH
T1F9A17D252823456CC82E2F3974AAF7A236C980160E256E1CCCB2A981BD340874237D38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VERCLSID.EXE-7C52E31C.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\VERCLSID.EXE-7C52E31C.pf
Size 3KB
SHA256 2a36384c0da21615d59a18016e8d623be7ff83e7a0bdbd7e22b4943951393e64
MD5 15a07896201b45460c0b3b4debe949fe
SHA1 cfd388404ec05e97670c99e812b19309fcd4dec9
SHA512 fd4898be31eea1c86734d0a29aed6f784d22a19b135b479b235ba8845c0caa8f51706e40651fa726ce894a30fef757168ec861aa9b262fc723992cc02f20f4d6
TLSH
T16B716B15EB131EBCF4D2E8B81525661C0F110D02212F73267393F817F8FB955268F609
MD5 SHA1 SHA512 TLSH

Submit Download

WLRMDR.EXE-C2B47318.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\WLRMDR.EXE-C2B47318.pf
Size 11KB
SHA256 8872619200b3407daec869c604ebcf9653a5c2f0bfe3e917b5f7d050c354ffb2
MD5 63cd8be5a28649f25f735782c46ebec8
SHA1 73fd50952efd254863d47ffffe2b6e15fda46142
SHA512 24d101fed89987216ecac379756ea95e4466290341620fe8de928b19af01522f0f561546ba4c303ffa8ad665be90bdd3e056c22bd571bb7ed91452a5c3180dc7
SSDEEP 192:Z5JTsmMrYfqyMA1QeCtO4LN4bQ8i05SLkTnnsO8YN9Cp5sZqdoozN0U3p+G+YnC2:BT50O4LwPpsGnnsO8YNAb7dooKUsuH
TLSH
T1A832AF817B4E6E642493197C8899C0840DD1D2E887DDCEE8E2277295307D5DB23D2FE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WMIC.EXE-A7D06383.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\Prefetch\WMIC.EXE-A7D06383.pf
Size 5KB
SHA256 2abb8d844dde9e051aad423c0e37d88ac303cd390becf86d9fc7d9b3339445a7
MD5 4b3e95e5af466dbd7ba907e45b4c24a1
SHA1 1283e4eb857b02272c347a2664643ea0579e8234
SHA512 3adaccce5d4951557f80d5d4dd07b62ed4777d53d9a1128f1f70ff75b426b2f6f31fd131b318800419cf9f0bad6e9d574cebb3597a5287183fa885a6cc84aeda
SSDEEP 96:cMCwt5h98vXb/u/EuULp+ibipCcRP9r1yDuidH5r2Xqvw0eWyYPhnrY:TtJo/OEuULp+iRcrBynLr2/0eWyYPVrY
TLSH
T1F0C18D250CEE3DA8D12F7CFC366D8CBD403196241DD9A7444BE5E88F9BE88DD9951A08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LwtNetLog.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\LogFiles\WMI\LwtNetLog.etl
Size 64KB
SHA256 90d54bb91e80c1286375138b637dbd98f871b5e162b748de5db2578caa3a5b92
MD5 030e2054ce67123bce251d6a2b6cc6e5
SHA1 89fde3e36e59ed85f9ce40600a9b376583727648
SHA512 944639496ef7036a6c2e7b77360709807461fe85f0895fd6208f6cdab238ac6a10919252487e8b6270babc93c45cb0085d85bdb4a1c85213c15abb1bcbbab292
SSDEEP 6:Xl+OsfMIosMcln8MclC36IlCjvhRah3n+SkyGkRkJ+lr8ClqRaav7:XEOs0IDncCqNlRa+Uc+pER5D
TLSH
T1D6538613BFE16A6AE235C775EC3662591732BC275622CE1D090471BD0CB07405A21B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Rdp-Graphics-RdpIdd-Trace.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\LogFiles\WMI\Microsoft-Windows-Rdp-Graphics-RdpIdd-Trace.etl
Size 64KB
SHA256 4df16020abd86ed6bd678af5e86123f75c4d3695a5a63c634f6bc1cb0cd0e32a
MD5 1e4e42b6a943e9dfb3e93c3b39ef9dc6
SHA1 bc79f708b4bcb7ed3c8071f83286487f4ae8a109
SHA512 b9c48cd39ff723017710d3be6981c41920b7a3b97048cda3eb4731f2caaa1027468f2290073982fc7c04b9f681e703195b310c796232edd73c1ff1539f18b15d
SSDEEP 6:GSufwIosMcln8MclC36IlCjvJSlj+SkIlirLAOn+SkSJkJ+l9uROhlj+SkIlirLa:GSu4IDncCqNtSU8i7+f+HfU8iDY7
TLSH
T1B153A7117BE20D91E1B38B3568750A541976AC560A0ACD4E060432AE0CB0F95EC71F17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NetCore.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\LogFiles\WMI\NetCore.etl
Size 22.0MB
SHA256 093c5129caf5e6e3cd5a14afe0babaebf045b66301bfc94c89134635920abb32
MD5 89841dfbdb40bdfb4cf183d28244cdcb
SHA1 44a5b2b25242bca3aa3177bfb156df3966f622d9
SHA512 c16b103b822b90f35424d2c09b191947b2ca34259cb75ba0b092c9b818526eb7af0687c70ff80cfeb268087248da373b89fe172a2faecfede6c501591767c777
SSDEEP 6144:w9MfFZVb+dG55dyIISIzBAryxt1INFcDQVTI+DdUBHaOvY2u+XTeFOB9N1Yy91Rn:ydO5gYILvY2XKonXPIu/qnj
TLSH
T1D337867EFA881358C80F10B48B49467E36396CBFB1624B15332C7A266F7B76847475AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NetCore.etl.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\LogFiles\WMI\NetCore.etl.FileSlack
Size 20.2MB
SHA256 97da1413aaf0af319d879d5980188cf47e27a4bf24d87257bc56ba98062892e3
MD5 95568796318a4a39c8832b48efde62b8
SHA1 81f26c13caf9b6db797fd6819a43966fe5618acc
SHA512 389c9b8642ae497ba5c63691c1197a52e347792e7426f58d3e2fa00c3cf69307ae45fdf3398fc57e8077455099bb44ee4377e9dab9b6726d039119fedd8df5bb
SSDEEP 49152:dDkfjv4DoASlhllSEbtoDGR5zYepdt4cdxJhWyiKmY5zfFKFOjDXUs+mx0dUlfJW:s+4rSEbxTFCEXmY5zF2K66fJgv/
TLSH
T14B275220BB9085E2C4A359332E765F56E52FB793FF104B4A7154332D8DFA287AE5182C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NtfsLog.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\LogFiles\WMI\NtfsLog.etl
Size 4KB
SHA256 3bde6c4f81c0d68f3aa57abeb5957b10a429486ae46ec084807e9e5c20b44af2
MD5 4a5e4bc44c199a4981498fff7f0028e2
SHA1 0d4033555f509e7d96c2d3b7806e593bb9144b12
SHA512 245db10981470584cc6dc151938d6595d105b24d52143fff8c1ce520fd3834f5fccf07a3298d10c4ad019fa5a057843fea8461d2954ddddac67c1220ea1cba93
TLSH
T1D781E522BFE02A57E333FF72E832530527329E62AE168E0C090532F81C31B818D32A45
MD5 SHA1 SHA512 TLSH

Submit Download

RadioMgr.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\LogFiles\WMI\RadioMgr.etl
Size 6.0MB
SHA256 7e61b16db4427ed8982708741f6ca86371dac40b34e9437494a5b11d166dae64
MD5 bce979bffbb628b895ed5f88e11cd5db
SHA1 1e16a7c7c8a120017dac058abba406f673bf4b06
SHA512 0c2d15854762eedaa59a3bc368d41d5f5d92a1b75686fd43d9c4a03a2e7136342df47be6e78d72bcfdb58b37a91ce50b3aa7c63c726f2ba527b9d69ba908186e
SSDEEP 6:BgbWIosMcln8MclC36IlCjvcyI9m3n+SkyGkRkJ+lr8KlvyITrv5X:BDIDncCqNYyI92+Uc+prlyIHh
TLSH
T19F56CD22ABF186A7F272C775FC76C30426327C17E6124E1E194572BE1CB1B844912F45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RadioMgr.etl.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\LogFiles\WMI\RadioMgr.etl.FileSlack
Size 5.9MB
SHA256 5451324e7c7cb2050d55c189ec4400c5c366478a07c12cdd6cae7fcc016523aa
MD5 2829324dd2ad272c91473cce4e9896c6
SHA1 4b0b33312ef0239a893d7af62a91d776b40304ef
SHA512 741976d4814b97c8000750b54d731874832347a197c4d234a6b10c23e09578cf1c00ccaf62694e81c2e2b9c8dccc284511d42e0e8a6ac3c356a8b74dd537e004
SSDEEP 24576:eZb5nEKeFtx2AuTOCbLqWlO90YFDXtcyC8cLyRBiKdzruuVQ9BMOYz3R837ulUec:+dEDPtwRbY/cyC9XIzrK+PlW
TLSH
T17756630C6AF9EE47E2B64FB9A47643122137B4566A05CB4F33BCA3714C12B51EE61B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Wifi.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\LogFiles\WMI\Wifi.etl
Size 80KB
SHA256 cc8812cc312bfe5bca92f196dbda9028c2b4c82cb808f27eae6c313209158e96
MD5 200fa3ca76994c47db9e2b356b3588a6
SHA1 8ff803bc797fc03225fb447c5fac8cf6a9677838
SHA512 a802962cc70c96b45fab71a0386c5e1fccbb064061f44a18dde1d29fc46b2b7c23fb911ed762e04cbd9c7962c7a1a335a8b997cf13ea5b9021e8d0ebda309672
SSDEEP 6:1hMDgy0IosMcln8MclC36IlCjv2vMw52n+SkyGkRkJ+lr8walEhJDD5lnqUW0PUb:1hMMIDncCqNK552+Uc+phLXjqUD+vh
TLSH
T1DC832B22B7E08567E2B18BB5A83567103631AC27AB13DD6D1D0571BD0CB17C0DC32A89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BootPerfDiagLogger.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\WDI\LogFiles\BootPerfDiagLogger.etl
Size 44.0MB
SHA256 cd9577d1e24fef7ee4e57349da2b22df33ae9106714fe61fd54bfb209a818c30
MD5 079a717738e1820207b29e788fb1a99f
SHA1 0bb301d7ab657bcbb06c644dbd8e866c70c9f05b
SHA512 748e8796b18a7ea8c4834d29447f617cf80c88ced76dc98bd5276e19e3bcde03778f8eb115a9f5fa9b5ba9d0399bd8c603d4e4069b763bc3b6156d680c6129ae
SSDEEP 196608:WJdHhwCsP+2xqPa0WCckFN6O1/nlVqIOyEC48:WJdHhwCx2xqQCN6O1f2rCP
TLSH
T117A7E71EB7EA9C64D3BD6531E8B7431156367CB81605C74B72BCB2720C71789AF2232A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DEFAULT

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\config\DEFAULT
Size 2.2MB
SHA256 d1249bf7357218ddc84367161477306a62daf21bbd6c139221cc19ca9d1770fb
MD5 7c2443c55c6e6656e14b92b1f9ca72ab
SHA1 c0af17da0eb3e34a16d8053246fee04cda29bf08
SHA512 18feaefb3c4fe9b2fbbf966578a72f7ef11a461dec045a4f5ca1435de676d7a58143e5cbafc6078ac865d2be72b30fbdcf866fb447ce5e00929541d7ad5b8a45
SSDEEP 6144:Fxa7GN5mT7y8J7M2XfqIZbQ7FJzcn2yp3EHPJdYobxCTsZJCXScSvcRaU9sQbpia:zpAnZE7F1VyUHPJdYobwWyZaRgia
TLSH
T135B5CF257B99E684F2B386305C31C3A1662EBC96EDF0874FB640F78D9C365018963E9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DEFAULT.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\config\DEFAULT.FileSlack
Size 164KB
SHA256 0f3ad2b20721f8586cac1e8528faee5cef863894b21f776d10817ec02ce0c84b
MD5 7c42614fa63a8289d374a23544edfc5f
SHA1 4327780403d65c01c7a7223d33cf852f28a734bb
SHA512 71d7ff1a3433227d8f491d515f41a5f80c8003539758cfaa1b4bb8bb1077ae9693bb527943085619bbd0ac0a3d2d8a4dab312a596450f714502f9d1e640103de
SSDEEP 3072:+jbf17xYZejDbIntz7r+MedfvgMZRKtQ8R0NYWhImHIf:0f17qZuDktzGMr0NVjE
TLSH
T176F32A0B1361416C90EBE198EA0BA543E6BC744E41B1AD5F07E249D22F8B772BFB9711
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SAM

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\config\SAM
Size 64KB
SHA256 81137106a6a96620361ed3ea7e81c1b930899ef49dbca2a0c19cff5b64d49a9d
MD5 51486df50902a1bc73dfcafa80a555fc
SHA1 1b2893b0912fcc66e641c551f904fd8ec6b4bbfe
SHA512 439f795eab10721ac4407bc6d36ff3b2cbcde4524d2d1eadda8479cb025d14a6c178839f7e7622e55a79f06271b892b50bf20b530d8c76417dc1b4cf342a7426
SSDEEP 384:OF5rY8TTIZYbJP9f4/Ot7rAEQjqEDC83eLf6BAidrCvk1Xo:ac8TTcYbJP9f4/c7rAEQ2D8OLf6ZI+o
TLSH
T1D4537C41FA84C586D4B61B31CC778BA07B76FC925F72930B3215233E6DB67819E9270A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SAM.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\config\SAM.FileSlack
Size 24KB
SHA256 05383e870322608da5665097fde316fa00848db7dd7988a94fe759470b158331
MD5 08302ae9fdf96888ff49c1e75ca31c48
SHA1 cc46387e9929e128c5c052b75ffb399c4fd9fa6c
SHA512 ff234ba37efd9b8fd9ac29ba232295f2e0bbc274a03321511c981721bde548089dbc142cf02d4d9c18242617830902facdec85c73b5587f331170fcfe58bd27c
SSDEEP 384:mOARzJ8zcfpJ9fcGu6q1D8gpAvbokg5ViM0cpBkuNosrgMuAgS3UaAaIKGMx1qn4:Xa1M8pXEj6kwWMcnHdlp2o3cRPSBF9e4
TLSH
T126B2FE027F80CAE2D1514A329CD58F411E3AFE516C62628737C1B37EEEFB590EE12656
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SECURITY

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\config\SECURITY
Size 32KB
SHA256 8ccd2718304ac0667d876f59f8739ba4dd52d8eaf667aa1e6c5e56e1db8cbe9c
MD5 0fa3b83e257ac4da68dc4aafa2447110
SHA1 93bf5390d9796ca80359cce8f456e0da082520e4
SHA512 56a976b6085ea22499236d060d1daa1b8d404399d7fa7187ec2273e3de37fb7e871a5e4653145f2d1500d1d8a9bf2f101a493565731c4dbe6ad6d4662a3d820c
SSDEEP 192:0rH4VyIXToEf5oVEoRs9Hd6xhkCCSXw+BkfM91tYGfM:YGVKWoRs9Hd6xhP3X0Eo
TLSH
T155E23201BA44C1CBC0694633AC67CBD57B76BC07DEA242077259336FADFA782AE57046
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SOFTWARE.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\config\SOFTWARE.FileSlack
Size 4KB
SHA256 eb515f53fc4dddec3fac943a3ce9a5e260b11ad8fd88cf0585b7c01b1cac5a2d
MD5 b1c3de5349a4cec3daca421ff9454477
SHA1 8902db6dd5621ebd05d6021446f230bd564e2770
SHA512 1475dfe65e3c6044b0816c157f2b939876502e10d900e838d0a6750ecf7806ed6c89ee66ae1c1768e1b4fe3613996b102d6ba473500fb18c31b15c5a6f132d14
TLSH
T123818C1397FE8208F2F77B54AA3916254A36BD96AC39D25C12A0D05D29F1FA48C707B3
MD5 SHA1 SHA512 TLSH

Submit Download

SYSTEM

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\config\SYSTEM
Size 10.0MB
SHA256 a226ab3e11c62fce7c0589d251d5be109db60a5470b3b5ba933b3f91f48fa64c
MD5 c04cd674e255a563c75e93301ab48009
SHA1 7f255961f4f4f6a0d729f6e70125294fbbaeeb4c
SHA512 a2b4f01eda94ab4a75197b6e4cf7ca66c8ce0ead9d00d40614c977f8b2d486727f9d1dd8da6d25457040de5bb75f597fba6db7c7648f200e39c0e1a9f9194407
SSDEEP 98304:LQsw3UW3Ddt+KSYgZmmiQupA4T/XB1GZ0TGMY00Gv:LQNkW3DdtueQrG
TLSH
T1C5B62F00BFD5D5D4E2764A329CBACF855A32FD51AD214A0F33D4330F8DFAA81A917626
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SYSTEM.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\config\SYSTEM.FileSlack
Size 64KB
SHA256 980fb3ad62ead969461eed8415a69116ba0c689f3d48ac675f60a2b948a0510a
MD5 b1f411cf27b7be9d11b77aa2df113e91
SHA1 10a877b103b7725ded17c0ce8f2a7a164ac05a5d
SHA512 052c74209cae0570bf3956a6b9c6d82521b3e548df2d0f6216c891a67f5526a275f9bf24957aae4458406ca96fcdc08d7ce137fc4c2961981c25681d667c194c
SSDEEP 768:d5+h7xyLwy0r/uNMPZLAo2P6mMxaM2wz/jlrZLA3DtQLrntND:d5+9oMy0r+MCo2P6mMxaMF1V0yvtl
TLSH
T1EB53CD76E59A13F9DB9E6238FF8C71D3FA5D24B0A58185309109C94E8CFC2859EF05B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Application.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Application.evtx
Size 1.1MB
SHA256 eca1f450ee1cb4006de5ef176056ad004b4e2a177c63d6aeac9bda231b792fcd
MD5 d4f80450b0ced35e5f65ce88811d5f08
SHA1 1a9043ec3f3fff260171b8f07d9b1c57c51fc3f8
SHA512 f766a8a2c221bd148adde11b31c14ebeb5acf21e9877bbd841b18d3ce9814cf3f751faaa38589d16aa1416f88228614ba75cf420efc84cef289792a7f1c4a3de
SSDEEP 3072:h4PPRHNCDcpjWNUUKY2Z7KW3gwxa3C+0Tc30BoHtxxDSc4c8cVcDcxcP:YZ7po
TLSH
T16D356618DAF52167E0B3CB34A4F341576B36B7012E79CE0BA28153491922D4D6F9EB8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Application.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Application.evtx.FileSlack
Size 384KB
SHA256 fd4809d4146c7632ee53141c35297c301a5efb9ebdafde19bd057fc43fa1709c
MD5 434e1594389d2ecdf4d4ba5777461dc2
SHA1 016d8a35fb82cffed615047257481e0431c8f837
SHA512 2e785aaad0a0a3664e91a927f5d794b15ffcc6e3d1b46f4c513fe0642a08930ba43483c7932ef5a29b0c613c5facad62bd7523759729c809e801c7bb5f7e0030
SSDEEP 3072:suSlizVlAOpvv+OwebCWsRuk3PQ3fsi0u:DhlAa+OgRuk3PQU2
TLSH
T1AC84BB5176A4D3C5E9F18A324E61C6D80526BCE3ED9393CE35A0B30E6DF7261D463E22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Client-Licensing-Platform%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx
Size 1.0MB
SHA256 f59b7a1081932395e3f75885dfb0e6b9000eaed19695cd64f5177ee70ab41da3
MD5 166822a775717f468835d14dc414f2a7
SHA1 0ea081067ed6c91449e89e39a443d5a33b8a6d58
SHA512 7feb7c4e780c585313a114362549ca4ba2f3216236e74be0bf2dac812f9a86b5a71d8e2bbf819c68d61a6af49effa306245d3a042c396404e99351c148abdb8a
SSDEEP 1536:KIinQrqBb6TRMKkBm7T8KTfyrlfh6/JXvKQ2QmWXji4haoLSsyrlfh6/JXvKQ2Qm:IQr0sTNyrmlmsyrm
TLSH
T18E25271A1BF9252CE1F64B75E8B347A86F32F8517A509E0F0155225C4C53FA38E60FBA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AAD%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-AAD%4Operational.evtx
Size 68KB
SHA256 8048f88c7597174a34b1c2204091277a403152e24b6e1bd530b5e901d2038ba9
MD5 20ff284ed2f58bedcc147c9bc03e861f
SHA1 45d5f1cd953b23261d737bb4f6446ed9b3009ba4
SHA512 8dcb5e12ce35dce59974973e734c8071e2fcd2134a75670196ff702c522b4e7184a7c1ce4c97e6b57a71c97d9d4858c3a124b666a0cea1bfa4f3c44076edc169
SSDEEP 384:lPhkKX7vKWG4LPmKhyZKQAKaTG7J/xUhrCmPLCviTQfnLkRWXUcl1bQcP445OQXY:977hG4LPkj7r/Eh4bQ295Ogqy1dUTzV
TLSH
T1B063F6421FEC590DF0FB9FB07ABA81A5E622BE259E10D53F7045225D5874B80CEF172A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppModel-Runtime%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx
Size 1.0MB
SHA256 e8ebe5daf6612120555404b8c0957d6ff06b8229bbed4ab7710af8b93846a39f
MD5 12e6bb9f4c2c7261269e3876921eeb5a
SHA1 d1179f6ef30f5ba29d72cae79e339c4c4483ce57
SHA512 30c84b7eaf685bfe8d5ec3d80f166dc3b8051741cbcd61b297990ba02174f0dc315f75b29af80b12007f0bef9c5e8b658e28dd6aec9ce240886f6c235ed172e5
SSDEEP 1536:sDTpc2n0f+zpSMbfudlfvkX0L21/HRxGYpHY41r8lKmtiQUKervC02sWtskENOql:SNjuzGhpkFiOXO
TLSH
T188258D053AFC0624F1F28B35C8F36B24997BF5A99AA1CB9F0110A1590C57E759E30FA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppModel-Runtime%4Admin.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.FileSlack
Size 704KB
SHA256 f3779dc54c5e7dee7a87fcecf3b50f7a2b4295ce69bebd24d67332e4dbde6165
MD5 7f99911194de7fe30d0eaa06621cc423
SHA1 4aad6e2bd377e98fc0fa01e81a78daf2a4086929
SHA512 ecd36c8bd04bfedc2331dac44c283d9e150e318cd6591587bd98f9dd34655cbf93ed80c8fb1fdf948a92da0a5efd3522ecf9ba23fd3b1c42a142a47ef41d3428
SSDEEP 6144:DRVi6EpImhjCJdTZ1PBEjuH9QlGzEbC3xCDGhDT/HlrFadw:SEldLBEjuQGzEu3IKhDT/HtFadw
TLSH
T18FE40121BA4587E6D0629A325ED98F87D27ABB13FD01538F7354231EED7A243DC8285C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppReadiness%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx
Size 1.1MB
SHA256 7e3f84f33762ed30c45f2541b0eb2dd0af66da12ab45bd0e0a804dc867b0b5f2
MD5 c95da3264f332342b6972db2aff8103f
SHA1 621b484dd1fbe01bd1a7ec5f0b3ac7ba47cd6449
SHA512 307f430af21a63097e723394f38077740c91ffb97e63346038230670587990aac45e741e3a2fd274d8f551f6395750a51d07a46ebf94297f754b468290a5c102
SSDEEP 768:vjT81RgGop7NJj6inZai58qR5h7mq7Sugzzj/uNPmKRNCxhsl5+kQMNOJopYj1lc:yap7RhrQMNzW72G7
TLSH
T1DA3518142EF02538E1F28F39C5F36B1A657ABC501A805D8F0095A2A91D57A63DE70FEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppReadiness%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Operational.evtx
Size 68KB
SHA256 51559b1a39fffc15cfcf6312f293c0411190d851108ba309b10ae51ffe164543
MD5 2a1ffd7d5bbc401b3c30ac6207fe1f18
SHA1 fb6272a567a6045766a53b66493073c452f66af7
SHA512 448cdedf50a99623404dc08866e2a70e8d316061c4e8904465da49eceb5d26d2705711a9656dc62b654b763c1862b24bfc2cda520a07f11382ec05d4151bf07b
SSDEEP 384:evhpIfIe+IQXI+uI6ItIDIyIdISI8IzIiIWIyIiIvI:YumN
TLSH
T1B3639C066FE46424E0F38F3D89F31725257FB8544E82894F2184B2781E57A62DE70FEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppXDeployment%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx
Size 1.0MB
SHA256 e61e4c24e116f8f2abf05a54bab5cfa4fad395cc70e2c80801a33c948be25d2e
MD5 764a74bf56ea95fda7158045b80a1238
SHA1 0c34bce29ed0885481f030790b6e05014413ad1b
SHA512 77bbf3187791551e09def8a27535769cc9dc2656c7013bbeba74c416959575a8aa631719276ac424353413a44984413c5b27f1862f9b7c82291c9c1eb902ac19
SSDEEP 1536:AoWqu3efqu1nquQ7MuYS3yaOl1v9gfZvSEtExmPwvfEKg+a:OquOqulquNuYde5S5APkm+
TLSH
T1772513112BF92629F0F38F3585B36B65153FFDA54951A6CE0064A11C0C67E628EB0FBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppXDeployment%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx.FileSlack
Size 706KB
SHA256 276959ee9a25c38017ee822a002ba06a3aeb20fd3a94ce29a3e1e98acf9ac1f6
MD5 151b8d6d9b58f09978ce5ae93db5c9ff
SHA1 a0d1771f835bd3f8ee1cab6a7b7081a6e746cec9
SHA512 0233bf80946d3c779306dca9321d9c5559b9ad8cf454df7f0d3683701795334cea3641b2be9802ec17269f856c640257ba62cf6103305ee22fd44c8ea7dc3806
SSDEEP 768:X6gnwD+5vrA3suH1hF0etPEGPWfM/nuUUYllJeE:rnS+les60eKG/9lPe
TLSH
T1B1F4C075E59603F5EA9D6238FB4C72C7FA6D58B0A681C520D14DC94F8CBC2419EF0AB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppXDeploymentServer%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx
Size 5.0MB
SHA256 a6e905df88a330a695f2986323f849f2dee11df18c68e2a90df40ec56e534aac
MD5 74b552d3a7a97f37cb523b673f3123e7
SHA1 5b5a7b266f1addd76d9b4dd2808da717b0832c17
SHA512 f9be2e8cec7e077950170ab57a2e8ec2b380ad8f461c64a3b2bca0744136bcd2af3f18c801de50ce32a415b0784803b9c8d1efc64545a9dc4b7bafb39a782c33
SSDEEP 6144:adJdo9lxIPGgQ7QH76JvbNUvD3k+IB/GFr/23:aKOKQbCbKu
TLSH
T12B3648296BF41729F1F38B34D8F36AA6193FB8969C519BCD1154620C0823E529E70F7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx
Size 68KB
SHA256 f5f9e97a6b1ec8d46a9bd5b9d4ccae96521b85517b0337b248814d2e974a968b
MD5 1f83dae35478669aef357fe90594264a
SHA1 c70bfff0a559af8cb76ad80a504dd55bd6cc484d
SHA512 94cee3ba110b815812fbb1339e54cf4b7b2942b0145315019d2a5acee75a90326a6bb0e74388ff5545afe23f85856c1404bf35698b5bdd6fdfe2be6645ce84d5
SSDEEP 3:MgAWl1l0c5MfaltpRTtPl2tVRl/l:Mk8IMijRM
TLSH
T16563020476099812D1080A3944878B81BF70FD501F7A9753A960363CCD753421952F59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx
Size 68KB
SHA256 d9458cbf1642795a8467b62a5544b4895c60e2046be0570e3dc883ee269a936b
MD5 aba6d4833f31e3965ff6e161bffce3ee
SHA1 81abc13006e33630b77f2c4d266f121958767393
SHA512 91ab3628203bbb892312319356481904dfbc4b723a6fa834dd06f1d605d1ccd129b9f1ab2570b1550da6546cdb293da30a4a337016e4a823016ffb44d9517c69
SSDEEP 48:MdoiwaW6rP+MZQNRBEZWTENO4bpBGqgJ0nL09ByeO91N1GtAatc95dJVHlTnot9T:utxKNVaO8Wq239BY938tA+c1FLR9BK
TLSH
T1BC63FE12AFFA952AF8F39B794AB79615697638600912D25F7028522C0C77F10CFB1F63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppxPackaging%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx
Size 1.0MB
SHA256 3e842e204aae6036c9dfcc2acbc7fb5c018b84aaaa558d2c922d597fef4a999c
MD5 30a6a806f1871f2b7b143207d5dccb04
SHA1 f7f66754e3e89407ddadc7e71abc425d297008df
SHA512 9c6a8f275eba87cc5f35f0680385403e4a65a209c37d70beafdd0d3c96121c44bf5a9d138a9d82b3f4fc4014729a18c7a1356be58766c10134e7aee027335b3d
SSDEEP 3072:od0p0L9IDoX5XkdN3StOQj1uInLitnNQRkau1ekag6g2MNnrOHI6GshiyIIkMnIz:Lx/C
TLSH
T1D92502053BFA1128F6F38B7D45F36B265D7FF8614982520E0170E2581E979A28E70FA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppxPackaging%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx.FileSlack
Size 832KB
SHA256 b025d1484fde38fe4e37f5e95a9190964c19e9a7a716a694aa4072cb06651aa1
MD5 50345d27bb20011654b041fedfcce637
SHA1 973f3db66f910b175654bca245e3ed73dd456ab4
SHA512 cd2269c155689da7a3ad29c29c8487afe8157ea5ffc77d0f86e53dad155e504363c4fae7d8ae58d42593d5d32f5c2a46adbc050666edb0e5917c965f583af6c1
SSDEEP 3:RRD:LD
MD5 SHA1 SHA512 SSDEEP

Submit Download

Microsoft-Windows-CloudStore%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-CloudStore%4Operational.evtx
Size 68KB
SHA256 126deb17911ba99ce017264c6dd6e2901edfc57c8ba07dcfbe244b1a8046a35e
MD5 e526c0455363b5a1582139f9127bfdca
SHA1 f1743202c03ddee513104e1c508447eea030fe27
SHA512 69996799a5c007f543802ddfaa4f35f241e5c2ee70ca3c86b3833b2d2cdd409f9fc67840101f5472c4a22f7323f96de4377df048019e443649f0100b5d4ad33a
SSDEEP 1536:yzLw/fJp5HnDwMgMxiYtsbWMqp/gkHGLTMTPskl2IOds7JKbZbMFR:iw/fJp5H
TLSH
T16B638B125BFE822CF2F38BB484730F142D3BF6994FA6925E5201819C4D666219FB1BD7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Crypto-DPAPI%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx
Size 68KB
SHA256 24c459bcba8db0015c7a0cf508f13a443db7b0fe3986fbce749e8b28c7eb2f3e
MD5 4582ec98d5689c52711cecb6054596b1
SHA1 6c2423da275f1da2db394c805925470064113e93
SHA512 0ee51c844cf1f94d1e16fdea48b8fe8861ca658e8c2efee7b777d68d367e9866a54bf05251ad893a3695e593aa2dab62a953d5422cb71a6391c3d173354e6622
SSDEEP 384:z4hihSWBh43hjhIELh9hGhphwhEhd6hqthChfhPh1hMWhUhsZRhDhrhPhrhZhphn:8EQYEC8ZGq
TLSH
T1AD6355062BFC5A34E8E3CB7582272F045D7FE464EB669A0B1214A11C4C75D70DE74BEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Crypto-NCrypt%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4Operational.evtx
Size 68KB
SHA256 185fdc21bdb68ab952ad4e4d3c0d314d1d7868f2ac12d71ea27ac992307bf28b
MD5 0bfd7e0649e95569e784e44f751ec7f7
SHA1 95f93018c80f14165827ba5a170d2358fd4559c5
SHA512 dfdf5aca617fb99365bae4a3cd3e7e36bce68138ef7e1ccff54950c3d2557ed2a4c21f7d1759f48af4b31feef035d97681ab16551702e9af05290525f901c002
SSDEEP 384:/3hcYJ1Y39eSYmAbYKYKYxWYXYfYoYzcYVTYBOYVsYVRYfYiYyYQPY5kYV2YdY6Y:/6hjG/hdZ
TLSH
T1226349052FF90939F1F3EB7584735B28293BB8509B62DD4F1250625C4C76B618EB0B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx
Size 68KB
SHA256 d150d05c62ac342b8de009d6f02a7aac977f741c73adb23c5a97bddc6e7114c7
MD5 fa72cca0f64a8ed6487b41e9164ae238
SHA1 2e9670cc461604c25455b52a580561816cf48ccd
SHA512 fbcef3401e8d3aaedbbe5bd56d61d2ae43d48f4a772633907a3840dff45d25a8b23ae7c91a2689d37da467ee048e43fdedcd95fe6142e5c9eab76e1ad609da7c
SSDEEP 384:XAh1C7CGDCeCdCRClCxCYCHCT9kCTGdCT5XCFQHCvThCv0iCbrhCFKMCX8gC7Inu:QWx
TLSH
T14F63442897EE1669F4F38F7985720B11597ABD466E80AC4F11B062980933F52EC70F7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Operational.evtx
Size 68KB
SHA256 9c25dc791613d0ae3d55f6e0fe119b917a6bdfa1e096c33bdb4a3e430280cead
MD5 e7d97806fc4753a483a57c2e0cf81a4f
SHA1 04ab0e25b84b57b9c1b84c9e9224cdf72472a28b
SHA512 c5fedb33ab1e74ff300725e7a009e084294c6555ef5e37ca5f2431154e10542fce50a17e2d292ab78244a01826fe0d8c8fe87f9cd1757a3c43dd1c802cf07b59
SSDEEP 384:MehiDYDUDeDtDhrDTrDZPDbwDbtDoDbGiDb5DyDI6DVDlDhXDkzDhlDbZDZfDb8j:bZ9HY6l7wMRH3ESJ/t
TLSH
T1636301015BEA5A28F1F38F7581374B641A77BCA54E80D80F227462DC486BE55EEB0B73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-DeviceSetupManager%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx
Size 1.0MB
SHA256 f09e1d00710b2a5046ed65d333c9a9000d6aaf69b6bbea221039772773860979
MD5 b9f7bdea6e6439d7425b42c508c63120
SHA1 d35a0e332e99ed02b5e6880688fb38ff9ba6d5bd
SHA512 a1c121983554c34d7d7bf2739a8f69eb2b00b55976ddd837fb961ec2e60e316ef5763cc0f5de1c377e729a7d6696182976a9723c1f7bca3aa4b569298dce72bd
SSDEEP 1536:KnGDhzPfXQabt9z4NiWHTfQ6z5NF1RcCUEDwpYKWu:zt9zHWHTldNF1RcCnwuKWu
TLSH
T1FB2536002BF41A2DF1F3CB7A87B75B262A37F85415969A4E1030A1585C17DA58FB0BFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-DeviceSetupManager%4Admin.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.FileSlack
Size 704KB
SHA256 eba37e59012d03d9e453fd38aebfaf0ef32e7833395320d487787a02842a90f9
MD5 0f8eb4bd1d9b81fd8420515fd5099d89
SHA1 2e76426fa371cb91315ae028ae5f01e3dc991647
SHA512 082cb7b8bbb3b2836822eca3816b1c08a54c8ec2ec25057a529116545f3e12aba4b2d3b0fef522c8aa85712975c21bd714a34f096dc1275309c15852fc5f70fe
SSDEEP 12288:P+fCGGlLzzWxSgnzolmyNpV+uVQoR6SQMh/iLgSwWT7ERv5vjmzq3:WfCGG1ixjzmmyNqoZiLg1Wuak
TLSH
T125E423059FE1587D356D931CC2B2BF1DC7841A3FEA47A63B43A219B123C25D2E4EA1D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-DeviceSetupManager%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Operational.evtx
Size 68KB
SHA256 47dcc70be2848dbd17b5b8cd9d1a16d13a230c58a379e0e108f3510765e419f9
MD5 4653b5c9f92fb9ee976d22e7ea8560f5
SHA1 e5bcf2852d54a712c9e409f18ddd30c28c9367a1
SHA512 6e20083d29ff4f7dfe0157324ec81eb5550b62c5db514c299759530515c49c870acdfab3cf0b026d7790b9abcdf4d4291c64c4a4bd579bd44fa614bba109d6f0
SSDEEP 96:w4EKNVaO8Woo1mgmGQvKLmgm07mgmQtVmgma4utmgmykqmgmSjGRmgm5vmgm:wv8V77LjXLLDLhVL3L/Ln6RLeL
TLSH
T1FB639B057BF81A2DF0F3CB7987BB5B26153BB8695556C94F107092184C13CA14EB1B7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Dhcp-Client%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcp-Client%4Admin.evtx
Size 68KB
SHA256 4bc4b7be8f1eec423ab0a787629867764b413b75963df5a6747803db137c2b6d
MD5 a045da99bd8de006664fab27a5ac80d6
SHA1 32d7f7cbfe623de3711fc913c85e9db95b69b9c5
SHA512 62da934236d164ae4907e65bfff8020becc455cb0f90b16ff9884a22d69096d41fd8fc63160f488c6205812a1cab35cf2dfa9ec298d3ce225d23a3a32ada8e35
SSDEEP 48:MduAOpWhR0rP+AQNRBEZWTENO4bnBpyzoZmtMkMYkCy0dHLP7jqiXMkMpijpTMkM:uuqRNVaO8eoZmtxIFSrjjzXx+ijJx
TLSH
T1EB630F035FED9918F4F18B7941BB97252A36BD148A50C64F76A0636C0C26F51CFB0BA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Dhcpv6-Client%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx
Size 68KB
SHA256 a7c7c0d2e316ce6c9f2a4e5abff30f0a68e8bf496f01f894cd69bf5949b4ee13
MD5 d47fe4aa4019b1766ca2586e4c4e2571
SHA1 9155edc322bf3d3bad39c21b0108352717ad80f6
SHA512 f00a8df852a95bff1eb91ddb6c798a00af165d8104534fa97eeddbac33a5ba533e3ddbc3f103f88a8ccb4a38afff4b751947c7dcc2d7c8a998b558baf05d1e2e
SSDEEP 48:MSuSCWyjRrP+MZQNRBEZWTENO4bpBGoaSCtamLmncpQUSD2i03etl:52KNVaO8WostamLmncpQUSD2utl
TLSH
T1D563FF02ABD9551DF4E28B7D4A77A7242935FA505F00C19F3220B36C1C66F90DFB0BA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Diagnosis-DPS%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-DPS%4Operational.evtx
Size 68KB
SHA256 3832ed2aa9c6afc40fcec15436c03bd625c51cc4470b3f0f6b3c6798f56407ab
MD5 400e52349b13d7f04f22ed75b75ed1b5
SHA1 329658d4aaea2ac4d38e8854031a60467f0e52d2
SHA512 e859b62f47d39987a64c606d4d497a0f3267df3445eecf6c9a58429662af647f95d886975fdcd55affc72811877b10a70afb33a1c54ed6c38ce8d92ec2f7acad
SSDEEP 384:ccmhzcgkcacOc27c2Bc2htcpcOc2zc2Fc24c:uRWn9qPZ
TLSH
T170638A066AFD4238F0F2CF7A9476471029B6FD204D92C95F6244A2A85C66D20DFB0FB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Diagnostics-Performance%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnostics-Performance%4Operational.evtx
Size 68KB
SHA256 62fc249771f0aa7b1b1750d49f14480053e6a3bc5fb2c9f942b75b63fab8c4c2
MD5 f42b47c497c51bec48e1c3619f28956b
SHA1 a55b5a5f28e6c1a25d9728a71263a0eb82044d8b
SHA512 e6ab3db30836a7cbfc592dd7da1e341b01c2ecad2c046714a4cf55bcbf9e277614d5833333479b1e8dcb585afad32001e8aa0378cf2514fd9c552d70f981cc8b
SSDEEP 384:aWh+kPhi/RyQtxkjHk7ZSPqvpkcCXkc7qDkY3:1jsRy
TLSH
T1786312019BFD0A2CF1B71B7B85BBA726683A7E055D21E1AF2204736C4431D54CFA07AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-GroupPolicy%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx
Size 1.1MB
SHA256 ffef24ebd4f9ea51a0d915385cadd3e0c175a866fcccede2e6b52b048c24fe07
MD5 ab3a6c6d0e5c5a7af66b90efc10131cf
SHA1 60b1deef0fe26879ea8cfb6f459b171ef1b6de00
SHA512 2c91abd917ba5d9ac036fad9708f628938d53fbf14059d25342bdcd1534224c42d2add8df19fa11f6eac728a6079553b4ae1cfed077e66dc2a1790938b18f71d
SSDEEP 3072:Ny1D7guNez9H893+UKvEw9S6zgUvEcOv1ZV0y:MsuZ+UKvEwHzgUvEcOv1ZV0
TLSH
T1B8359F023BF82A29F1F34B3984770F246F7FEE481B86599B2040A1585C659659F70BFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-GroupPolicy%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx.FileSlack
Size 640KB
SHA256 213ec3676098a23c32726cc874e5119754ab5d914708e4f0ca6147081a92f6ab
MD5 fc4fcfea6ff4d583e709168e36703257
SHA1 87d5c50938ae5786f0ee3201f5c121247fbdaaf8
SHA512 70794ecd6e8426e083e6b049b6160f9c19b84662387e55b02e5c356451dd535fd8bd1a7525000896af07ed81b700a7099a2f57c6c103a0170491de3e63209586
SSDEEP 6144:OUScZH4AVUnCZZs1lDBmA1O7hngMkcOwa4jWxXyZsLGj/Z9K+Okl8cLSo0SH0vkx:3CCZZsDDBJUNYcOw2iMG7uQ8e
TLSH
T11BD45C11B3EA8248F6FB97315DBA53911D37BC898EB9434F16C9560C1DB0BA04D6A33B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-HelloForBusiness%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-HelloForBusiness%4Operational.evtx
Size 68KB
SHA256 14e84a06b9d4e2ef4515abd76e4ed1b2eab7d4ccffb4c549bc2d4affed82f508
MD5 0fb3b6d88aa4f9f6e29a04e438046853
SHA1 f8907a797a184ba21dda65bbe1b1eff0448a9139
SHA512 5840ade0a7bc19b0c957f8214667315b47bd8df6b6296a1d28db6bcb2ff39e614ac774f3843932a74153b2f776fbe92e5cd3c0e2df8d4ebeaaf90532a15c7830
SSDEEP 384:8dhuoKs3KKnKmPKfdKHIKF4K+G0KC6Ke/KigKf1K+QyK39KyLKDbK+zK+KLK6lKG:ItU/f
TLSH
T10E63160617F61830F1F3CF38ADB70F285A3BB88A1DE5165F206452646DA58A5CE70BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-Boot%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx
Size 68KB
SHA256 988f0e5a52eed5af52000fa4de1ca68cc31623ffc952430fe1113e66c4ae3fea
MD5 1a7f541cd4d106138371e54b6a7644aa
SHA1 68d627533139d605e014d9bf6d8d1b6408cc1c06
SHA512 dd29e0de6053499e98bbdea869dcb99a97289b359a7005eff263539a65b3243422ecccdae3032bfa460c7467ccd78df7d3be517c4e2816e19c0e296e09dc183c
SSDEEP 384:gPhBDhgDmTDrDEFTDLDDDlD1DIDGDIDLDaDMDKDLD+DkD+DQDpDrDpDrD+DwDiD/:+ZlcF0McOuJZBx
TLSH
T1286318026BF12938F0E2CB3688F35B382A7EF91459815D6F2150629C4D759629FB0FE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-EventTracing%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-EventTracing%4Admin.evtx
Size 68KB
SHA256 7e58b92112cda60c5e150bc549783a0a4d549db6099a94ef37747d6d734b4b2a
MD5 e1ef9263acb7514507ebaed48723dc07
SHA1 e2fe02cd207f373f01d4971a130871c68500317e
SHA512 3c9c3ab19e1f1dc6cd3d652d5b348dfe4f2c7f5dff9f9f29bdfc6f5d1b6a97ac45728d5107abf8b0535d28d6c0e2eed2776bba79939ee9a12b4222aecb3e81cb
SSDEEP 384:TJhD5DzX5h35d5H5X525w5v95R5E5m5r50555:Vj
TLSH
T1A76311029EF41929F1F38B7E94F697281A3EB9404A90C95F6120635C4D36E718FB1BB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-PnP%4Configuration.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-PnP%4Configuration.evtx
Size 1.0MB
SHA256 e032924e5e22bde086677e774313b85887229a81ba4e18b0ab896c65e25cb3ef
MD5 9e6e45bbd86285668ec236b518431b24
SHA1 beb0440606929ce2cb0d4e7638cabbbfecfdef3d
SHA512 5c400f28ba5ca6f6775be044241060a9715087e41918d5860fde22dc5d8fc175b94a4a072b310b8ddb51477cc1efaa47ae378e6e62b113251f76bcc7f71c3c1b
SSDEEP 768:dUx54IJKQ6gGetBNHBEAcSuCa1hxmSKHeBSKHe9S:ex54o6gGetBXEVY
TLSH
T11225DB2127F44229F2E39B7685F30B16953EFC924F8149CF2440A3494D66B629F71BBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-WHEA%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx
Size 1.1MB
SHA256 04ac64bddd81a2e667329485222273920652897f712ced06ad67291832bb1e2c
MD5 f4c297d0587e4fcd9954a7150245043f
SHA1 f203eaaa07adbe85f3dce234f54219c7293e28ab
SHA512 703b95905ef60541e8369fd2a07fa792e05ecc913d36b80523d9e2c7d8793315376c6f4f2ce18060f012f66d335e427ad593cbb365c6a41e328ad97aa07b34bc
SSDEEP 384:MnhzIgI2Izucwl8tvIb8tqyIzIzIcdI/KIMINIXICIRIWIfIPIfI4IqIhhtIKIRO:CLl8ta8tqu85X+qNWxCdw7CqgGwKjw
TLSH
T11035DB0177D04C15E471877688A3DB90253EBE488E42920B3A9C731D7D3AD7CDF6BAA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-WHEA%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.FileSlack
Size 704KB
SHA256 6ef9870a9964a033da91f4abed80a3a5c6054ac51ee439fc1d0b62acdc2685cd
MD5 f6b1831b4afa57293201b81f730474ff
SHA1 916880722ea195f969c44e21aed16e85eb6d22f3
SHA512 813c8bd4e629be3e4c183f0a9128193b719f96ccefd113a3169e3afcc6ce7555784b7341f5285592fb5e3b9470e24a92c47bab927685fd809fbd9e626534b124
SSDEEP 3072:SIx0t6fO/N7zhAMRoidHv5WirJM/2PWYJwcaT0b4zsRonBIUySbJuRV5fWvqzvZx:Hx0cfIV2MRoEYNERue67O5AS+SNf
TLSH
T128E4FD11BFD4D6D5F1B28A725DF6CBC64635FC52AD224A0F3290330F8DFAA41A913626
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Known Folders API Service.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Known Folders API Service.evtx
Size 68KB
SHA256 d7bf59977bd4c16354963981a8f4391d720c8320d1f13467562c6345ab996bca
MD5 2fc73eb51cc49f526b254b9894abd6a8
SHA1 a436def3c9da3c7aa10d9358cfc24c5cccecb568
SHA512 9776da2317aa14ce419482a1eb8c0a1419d140f2eec5fb965daaac54b52105604ea97313b24b2c9fbfcfe2a7803024d99692c5c9516f245955566795e4eda7ff
SSDEEP 768:f8iSDWqtxKgmVgz+KTZf7rVhnOdUtcDXVVebDLvhV2L6K+IV/2yWmUVzW:9
TLSH
T11C63762113F65938F1F38F3A84B71B146D37B8641F62A64F5291628C1D26EB1DE327A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-LiveId%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-LiveId%4Operational.evtx
Size 1.0MB
SHA256 d2ac32d3e2e938b154cde9db35c48022599f2a8a5734a16875439eca61742f36
MD5 2531ff976286e89694e68c2e67db3f47
SHA1 68fbb2a9d5dcaa753fab49b07de856a3f8f64ae7
SHA512 a61f89cdc332fd033657c62adf439caaf92be8e2f6960d7dc2b062a680f2c9544877dc14e880703569df3f035cd2f097c2cf156a396be9f3d7ccac7248d75a95
SSDEEP 768:1O+DVIexKBk2qVEFazR3cPwNXs2UF3FNklPppdGQWr2r81ln1RQnIULnoIVBi2bc:kSK+PTdJrr81lvQnDLocZbJOOggoY1+
TLSH
T1A525870EDCDC8841F3A3CF34D6F3DB8825A2B75E84D9555E66A0511EFC80CE88166B7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-LiveId%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-LiveId%4Operational.evtx.FileSlack
Size 753KB
SHA256 d306efd7fc8006d3253f002a6382e3fc6117c8a1e583741a095a85a2cf26abc0
MD5 8d842227b63f0ebaf66b9f4aaa93d873
SHA1 c6fdd3f55eaecbde86fea6e7c92424c4938fb669
SHA512 659178290f2cbe384114f6b086c07a2bdcf7a621323d2957977592ba083ef660131d0446bd1fe54765a65929c92096f23ef534adcb885aa4ba3d2cff9dd1a68e
SSDEEP 6144:a25pQQYHMMsBvDSMYXMop4C094/7g99ta/EfSdKdpqxzTlueDLwV16i2P+AJOJyQ:kafFe8HOg
TLSH
T1CCF47425E0D86662C5B2293273FB8560F966BBC3F70D8FD760680174B81369E3E355AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-MUI%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-MUI%4Operational.evtx
Size 68KB
SHA256 214d0d7244a69e42f728dc6e89b2230da476a850cf0e30daaca196eca97942e0
MD5 975014c9e58ecc253bc9b5f0399d386a
SHA1 ef567607347b10017cdc7656fc1b775f3cadc186
SHA512 65bb684cf7c13b66b646715b2ed7283e2b05d207900b16e484be3cb7f3994bbad55a8e5ecf1c756ff8a8f54915db9c0f76c2b7aa62dbcc521fe3379b695a7564
SSDEEP 384:yYh/XkvXjX+76XSCXgXdXYXqXtXMcqXgJXTXGgX:nL1
TLSH
T1A463CD016FFD1518F2F3CF39947B97282E77BA194D429A8F1254A2981D11970AFB0BE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-NCSI%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-NCSI%4Operational.evtx
Size 68KB
SHA256 5273195a83b1af99acff65d6583be08725c340080945b4bf8786ef284578b312
MD5 a7e8fedcd73379ff030d07096f3564a1
SHA1 2a6d98133f15ca5b588d594c0fbfd4b5f7b914be
SHA512 caf5f77f118da6532f4ca5674262eab5dff2947cdc26c638b5d7656e009ad1c9ccab1851d86ce44fe9fc624cf3c5d5dd2e9c8f0f16ddbdbe70b06ae49ffe7870
SSDEEP 384:brhWEM/1caMpkM67M88MvxM16M1vMleMcFMEVM/bMLmMbnMwCMgEMsKMIxMmsMG6:nI1
TLSH
T1E3637E426BF94129E0F38B3AC0A30F38153FFB2C1A926A5B214072655C556696F71FFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-NetworkProfile%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx
Size 68KB
SHA256 fe9fd411dc6a2e5f58677f2d8001f37542fa85275239dee7b8baf73b3e5f4d81
MD5 34581b634b552547d5e45da07ede64e4
SHA1 0ee7e12d06d33b7f55175a27b752316b6bb4f76a
SHA512 af573d43d400594d9a95908b8b170a54d7027e38c092e4783451c4658c94e285501a654f2bf09179034dabeeae5e4a6625862781fd4679e6b467e0ea09f09792
SSDEEP 384:mFh01mI1/1f8181Ww1h1S1fc1y151w1X1fs1H181J1m1fS171e1j1Y1fx131r1mv:WhuGlA0o2tMvXerg2Gyf1SDzyfQ4yfa
TLSH
T15263580257F55A38F1E2CB3898FB5F28353BA6242AC15B9F0451719D8C618B58FB0BDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Ntfs%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4Operational.evtx
Size 68KB
SHA256 ae853e3f57bbd227c2d97e904b678da1e4b98b04e4fe02ffaaa6ff29aecdf888
MD5 0aaee2cbd61dd753d11840b64a899184
SHA1 553926a30829ab3ae02280f55f7157efc7a5ec65
SHA512 0a269ddf6fd795a078fe2cbe85be2a72845782f5a9399849390144dbd580ec48e1977d26778fcf99ec6a90450622eae394869d33cdf08df57e1acf331cb583cb
SSDEEP 384:AghAI8PIQI5RI6vYI0IQIdIu/I8I+KISIYIeI3IFIsI6RIOoIs9IAghIdIqI5IKO:5t7Mzg4L5G
TLSH
T1246369015EFA2528E2F78B3AC0F3072B2B7BF9140D959D5F11A0634E4C996658F70BE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Partition%4Diagnostic.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Partition%4Diagnostic.evtx
Size 1.1MB
SHA256 51d8a623810fc0aeb690a5a8ea001bb3ed932f111ddf7b9b56b210079b883181
MD5 845732c487cf9a878e6bd71a9cc3d7a0
SHA1 2514940c46d3b29932e4409a3779bccb44333862
SHA512 f17bd98b290f737ce12df728d931706b0c20a8a246182a81239373c75cfa8fc55c2a58c2e6247f15679fc5003a9c8332498c1cfce29ad6f95d8db80b8c71b8e1
SSDEEP 768:Kv1n8zfFFURO7M19OC19Oi19O719Oj19O1J19ON19Ok19Om19OR19Or19OC19O/M:cGScA
TLSH
T13035852225A8361EE572DB31CAFBA325563F2B599655B06F744C23082FE1B4DCF20BD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Partition%4Diagnostic.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Partition%4Diagnostic.evtx.FileSlack
Size 960KB
SHA256 8926430b5ef9a71cc84365f5d9786d30f4809272fadbdea181a1c6739f130b08
MD5 36e3c2a5349667b527527d15b64455f9
SHA1 14e6359ec3c88332426bfc29b7a789b7bd1ad28e
SHA512 4b5c24a87d8b62471e2fd05dc0d010c53b10e7b4d5020cbfef7d5521d8a056ec14c03baba3c36e5eebf41f9e9000ae8777de90ce5ae93875b6a6db22c08db381
SSDEEP 1536:uo0hFGRE7olL/nxtCJEjmB96vtUIsnMepsPnC5JRfuxZl1+SFM1FLZOKM1CL/w5P:upEjmyCx2sOKMc8ybL/pH4UjKKIO4N
TLSH
T13F25C7546AE41726F5F30BB994F1D66AF537B8C3F9054F8E102313630927A938E91E2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-PowerShell%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-PowerShell%4Operational.evtx
Size 14.1MB
SHA256 ca2b367fe4e90f0ad1609e9d6bcc501284986c56f4ec8cc7c9637d2442ed8e00
MD5 7e2cd27dd6334b205dc4a063f2481990
SHA1 f666d656f3c359beec79b59c9148e0fdf3780022
SHA512 5b80c56eda382b133418add790ea18063d8cad41e2c6592f7f84616e0db71720414903e8aaa1b8f13a0077aaf07caf24c1714d73335158d1854f4ae58f260211
SSDEEP 6144:TjWHDbCDSLDbXD+uDbUDb5Db2Db4Db7DbCDbODbXDbzDbjDbUDbqDbYDbKDb7Dbm:RaGvXo
TLSH
T110E68F5253FE5654FAF76BB9E97E24241A733CAD5A38C26C109CB05D0BF3E0488A1763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Privacy-Auditing%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Privacy-Auditing%4Operational.evtx
Size 1.1MB
SHA256 b4d2432a6d2c3b33c9bfb23b7eb291846334d8c3c95a87ce2914dba2307ade37
MD5 0292022c65beb39c97aca90be1f6caff
SHA1 39ad00832b564a119ade02b10b39f77680c49315
SHA512 d06058c00de59a038b33a95b3d4eb7157b9ed3749fb09ebf9b61ce83c1fd7e9cb94b7dccf2c6c3fccd28a4056c2014d3ee30359132903b8adf936468428fc963
SSDEEP 768:NZAIs1NyY3Om4gULvb9fSW/BzBrn7JbGcuihUP98mvkHvfviPIXDkIIqm7e5m0n5:nptB
TLSH
T120357F162BF90628F2F3CF39C1E32F1959776C150A518D8F016462985CA6B774EE0FAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Privacy-Auditing%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Privacy-Auditing%4Operational.evtx.FileSlack
Size 960KB
SHA256 ca02793076b8845454d3cc4d949bda5bc49fe16d063e310331f86318ed644ba7
MD5 63a6c5a8b8da92e30cd0ef23c56d4f06
SHA1 b029e4a16d1490fe4f6eebf6a0867e303948e7e5
SHA512 82e2f8b9ecf51cd318acbd32df95dd9c5a6db4f16b7b0179ef5ecfc9b47aa0648aaa2f328c780569c73e6cd4a8fe8e183df3a8eda99d3087a94c4170d5ec8d9d
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

Microsoft-Windows-Provisioning-Diagnostics-Provider%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Provisioning-Diagnostics-Provider%4Admin.evtx
Size 68KB
SHA256 05fa03123fbcbc00cdb59a1a9fd07f9c1aab77e03c0e1f9d22962f29ae4aa264
MD5 83f47a7f2742f25b2a63b9f8170f9691
SHA1 e8f6930d8858a35df105532ada972f56df29a313
SHA512 dc486e4047073aed34a8b8e8e04056be825b4eb976561d120d57483bc30f02d926019fd48f30fd467dd4410f124b352f608e8600a7ca3bf7f3a454d8c50f2042
SSDEEP 384:CihisjLs8msBuszgs6sgsAs7sUCXsPps5sUszsiesYsssmaqsuHHsqsCsBs1scsE:ZdCa0CCPKao
TLSH
T1426304061BFA4668F0F68F38C4760A6518B7BD45AE918D4F1264619C4C32F21EEB0F7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-PushNotification-Platform%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Operational.evtx
Size 1.0MB
SHA256 c1c3dd4329971b494a15e95d9f71232092dcbf8c293fbfc8b5fc4092e40f11de
MD5 b1dad222a6383566ec7e234085f54bf2
SHA1 859f2d7575602ce69e96f132d9003a396d0a3a5e
SHA512 92474426398700ab03010403f5b5d9fe9998fcf081bc7a6e1505ab7d2e150c09427b466caf02d1e8677226277d1597ac0b842374b783f0eae1455877d5cdd9c2
SSDEEP 768:JET2V+0OlX2aJVu+LOS1JizMZ6Y2LmXNXepR83tb9v9unho4Dmxcvk2vIOE8L0OR:26ka+DYLmdeoZIO0EAOdZI
TLSH
T1672578066BFD0A29F1F38F35D4BB7B941C3B79995E40EA5B1311625C08629128F70FAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-PushNotification-Platform%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Operational.evtx.FileSlack
Size 768KB
SHA256 14717512d05c6465a21c472c3379cccdbbd1712337f12d4fdabff187d237694d
MD5 e4ed1b02989d4de2d745b218554fb5e2
SHA1 7a5bd362cfd4d0e1b3d4f1a101e6c3c3880055ff
SHA512 fc82fef632eefe9abd13b9dd83c17fd4e333b1cadcb2c9d2b16084c38ae8d459d15f37c04b39ade557a9a406727f69097eec8318038de22a7b4400fce90b2d86
SSDEEP 6144:PMkMIlk34j46+LKX8kiTFYL0ZR5WVYghSPKcsYJA4BYbJBRl:XlkdLJzeIZRgYghSPKD6AB
TLSH
T19BF40359A2D86551C5E318BAE2A7D819E325AFC3B20C8F8F60F400A8FED065D7E3557C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx
Size 68KB
SHA256 cf1130e316379e6985fcb47a8d2bc4d6527033d0c853d9faba30e3f6d9aec131
MD5 bb8594a2c5eec37554b33d9a557499db
SHA1 cf608e202f52e34bef715bea2aa1e58ab600d394
SHA512 289075d8f930b9492ad4589decc3ed3ea3b6f878e29a852a4541dddddbee4a60273e52aa14aec32af2c9ff3875eda8667f66c38f1acc5dc548b6b0accdba4f4b
SSDEEP 384:EYhEvoyvnuvYvRb8LwKzkQid57ZAf1Y29qHyKVX05JQwLNPLxb204nrFlvUnk2:FlUbWLYsKVrwLJy2
TLSH
T15D63F1036BEC9909F0BB9B75BA7E81692225BD399F10D42F7056235C9CB1F408FE1726
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-SMBServer%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Operational.evtx
Size 68KB
SHA256 83c55f0c3d927340d5cf51f7507bf72780d7f7ca6e79443660086fb651353bce
MD5 b154b0b1d124ee2845ed03f7d8750456
SHA1 5f8349ee1c27b4e064bdd4ec64b2857a127ee17c
SHA512 6d387d5ddfa2a9deb73c8f970db2c7ce38ea0cedd8adfdea5468e0122e74c2ef1b5d47bede77709ed7a7c2fbf6a09e63e9030bc7ff0f29867e1087798f6e78fe
SSDEEP 768:l8bsbJA3B13Bu3UX3xN3D23j83gE3iT3en3ai3mg3mTb3d23883LD3qK31gvK3wS:O8g
TLSH
T1CE63580647F85435F1F3CB39D2F70B283A7BB84466A2891F106471594EA78B18FB1BE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Security-Mitigations%4KernelMode.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Security-Mitigations%4KernelMode.evtx
Size 68KB
SHA256 a3d429d591a84946158d3b9ba605ef2550613a357c9fb86c58402b666097f330
MD5 ba3ec6f7db5772ee791292875a14d444
SHA1 7a74efa3bff2661cd25c4d561676849373fa37d4
SHA512 85562d2ce31a608d3ef13c0215ed0ea81ea8d5e4477f7619b86c1c40bb1ce85432887e931fec144c8b1de706c2f31963eb31155d81789931c29cc345c49122d8
SSDEEP 384:ymh91i+6D1zNvjibQFVnieaKiG1VieMQiGiMiewiD6D1zNvjibQSieifxqiUViHM:NwFpH57U9
TLSH
T14C634815ABFD0139F3F38F34E9B69A12693BB84A1D29CD5D1191124C0C23A52DEB1F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Security-SPP-UX-Notifications%4ActionCenter.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Security-SPP-UX-Notifications%4ActionCenter.evtx
Size 68KB
SHA256 95cc21bd9af9c5eb83e53b3c8fab20a7b55c0fa58ca1ac8b0e77618d00e18def
MD5 a14a560425b188935e167a7bd63ead68
SHA1 1baf66ce1b7e17270611630bb45a4ce30c62b7ea
SHA512 46dc154ee382695bc5624454f3f3e99df207649d298d0fe0d71e7777f33cac348545095d84328f0e9c41dea4878da6544fcf329893cb977af56a4df3cdff57a7
SSDEEP 96:P9lKNVaO8WodCaapCaFu9CaapCacwCaapCac:P9l8V70gpfggpdgp
TLSH
T12363BE029FED492AF5F24B3885BF57281937BD694A11D99F2210615C1C62F50DFB0FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-SettingSync%4Debug.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-SettingSync%4Debug.evtx
Size 1.0MB
SHA256 c56f45500c3c8f797754d21055c2a3870b51c81f36184dfbe309d57282594b40
MD5 cc83b0c1034663c338f957a1644798a9
SHA1 fff90989c7347e8e1f6701a1f242d30d323b7e0e
SHA512 dbd991b85ca4ffc7230a0857373236c903f303aef143795a15b418d848cc3394a14dc124ec251fd8c26e9b6cf0700d3a526e61b89c5d378f54d9f12d96b78a18
SSDEEP 384:mUwhsCECC2P6J2c2mt2Y2Y2CfCPCHZ2rP2eG2SDN20CMC39CwjChCsCSCHYCH3Cs:mtsY3CDCGmqU83+PRwCsBzXsB
TLSH
T1FF2532006BF9162DF1F2DBB5E9FA0B136D3ABD195C61D64E0024630C0872E558E76BFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-SettingSync%4Debug.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-SettingSync%4Debug.evtx.FileSlack
Size 832KB
SHA256 c410f727c1fcaef4c71c143190169dacd3e839b3f625681c9b9cafb8dfaeb4de
MD5 3e0a6f68ee0763e5e3ccc0c91bd84b0e
SHA1 97955d5d53f32c4ce96db886dacbf63440d962d2
SHA512 6fe77053046e1ed489134a99684783307022b368a04cd09c323f0d59836219c747cad89730823aa444fdcc2926791721f3c236913cb895b1854baaeb0b4ba9da
SSDEEP 24576:9/XtS+6keIga0hT1vFpIsAM8IK3kbCkHL4GFo:9vtSTkxgT5vF/AM8IK0bNr43
TLSH
T1140533D3A52F902FE8707A990198F266D50887371D38084EBF8479B3BE388E79735582
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-SettingSync%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-SettingSync%4Operational.evtx
Size 68KB
SHA256 5a13181063a31be7acab3c79ead00c39f680eef835758094fa7cbf8a3b2e74ce
MD5 8ee921e294fc0dbd6107cdce9ce39a99
SHA1 c53ef9b94469eb0a825d9cfc3e8907a9ea331bc0
SHA512 a6bc9575b24ba5524302fe50f318bd824621b62c4355a706f91b0ec34860cd5a98439de52203367187ddddd379610b3d2481686f32d10ba1920029ce10b065e7
SSDEEP 48:MSvS/WwRrP+MZQNRBEZWTENO4bpBGojzh0CjC+Qy:54KNVaO8WoP6CjCfy
TLSH
T18463FE03EFE8441AF4F28F7805BB86209936785A4E11D29F7194626C1D72F50CFF1BA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Shell-Core%4AppDefaults.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4AppDefaults.evtx
Size 1.0MB
SHA256 61d969b78b43146ce3e90a2866fcc60f0c49426a8930eb041e943d8a588890f4
MD5 9398e1f3aa27f62692df29e81b3897b2
SHA1 70d6beb9f958eb8a9e61ab43d0c2239ffbb7a745
SHA512 ad677589d8a10a71a090ff31a8398d3822bf0731b6405d47aae03c528ff177d5c65d1f29e53cef9981d77855191e9e9af40011638567b8534e91d19edd3875d3
SSDEEP 3072:FyN1oRq/Q3+NSAchGt2elN99UuwADQPea1roqpuqh4aC9nwg579bzI9YqzbPjrVi:
TLSH
T1392565057BF9A034E0F28F36D8F727066A3AF9665A225D4E215083180C77B62DD71F9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Shell-Core%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx
Size 1.0MB
SHA256 83d94582bddaf528e19104b26f3c368d689f57e20d6da6e424981c9a025a79bf
MD5 974ffb05becca1e034d438bb8401075c
SHA1 36736fa0094b94c5bc8478efe1550e55aede5533
SHA512 3716e839eaa7568225dfb93bfa961c55745db12db58e321d58ef33710f17dac1df2d0d81b17fb2170d16566817af1acea993b872c1f0275ec4510781442d23b9
SSDEEP 6144:RvelvYYvSnlYn9k9jjagtRB9x4rNk/EhAZ8iuvplPP:FE
TLSH
T19B2524066BF66534F0E38F78D8B70B086A3BF9A85F43695F214451584C37A61CEB0BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-ShellCommon-StartLayoutPopulation%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-ShellCommon-StartLayoutPopulation%4Operational.evtx
Size 1.0MB
SHA256 f30369072657ac9996208b950c01ed55e038754b75a79ac125dbce07cfdea581
MD5 bc5ff64b970a4a6551a992993036dd0e
SHA1 057db3badef71b6e5ba538fab4feda2c1df3d5bd
SHA512 2b912b1b4bc1e0ffda67e6599625d3daf218dab9791d4c6f5a305b5a66723cb79c6515683cb238ed73d007efabf5e554548736a8e24b45803743916c83df95ae
SSDEEP 768:W8KAio1ebKp1qJSE5SXDOzaU6ELu/lYm5hT3Th7ckz8AwmG9605ac2Ackz8Aw:Ak5NU6ELaB6h
TLSH
T1172547162BFC1124F2F34F79A8BB0F54693BBC1A2981C91E6110524C4DB6D66AE70FB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-ShellCommon-StartLayoutPopulation%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-ShellCommon-StartLayoutPopulation%4Operational.evtx.FileSlack
Size 896KB
SHA256 a847a06985bc78053e2cc39fd02bfcb35944230888702546130d92c5b04fb959
MD5 54cb558d8d5a0ce6cdec446a485ce230
SHA1 ac62c012ca1e51e8c2479fe789db235ebfa5d687
SHA512 2317b9417cf6153c30b2bab8cf22dd64418e416306063fef8ff27673774b85c36bbd3b84620aec19855a47075fa4585ca00c9c2290e50d30ce16855d10a37ce8
SSDEEP 3072:V8P8NCL4uZBWQxnwHQwR9COzbk0lepsK3rMj0CfB+QBXYGm6Xd7QwNg9rA2Hp60I:C6Xd7QwNg9rA2Hp60xvk4UJxKmg/uk9c
TLSH
T16A1572D96495B6638EB2C3AE974F157F71E7AEA7C0405703C816AB98087473E0F8BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-SmbClient%4Security.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Security.evtx
Size 68KB
SHA256 ceea50da766c3ed1ed3e69d4435037e32820a4b7e7e31c43936f0d2202baa756
MD5 3c2fef173c099eb8aed00a583d9368fe
SHA1 05a97583b715a6ffef7ff9ef105d54a524775d12
SHA512 9b567a8cb48bf48bbe0065963bced8289fcb495d5a5208c1f2ab38ebba7fb5923c4860ccbaf67b9b62e166e5d1c79bf5a29b9a00bff394819b8a267d14e40dc2
SSDEEP 384:VahUuuuuVuu7uuHuuPuuNuu4uuDuueuuX0uuduunuu9uuzuuRuuruuyuuGuuVyuP:MKj9JR7AlKcLprVPteSsT9KB
TLSH
T1B7638A42AFF56624F3E38F3899734B191D37F9259981DA9F10A0A05C0C65FA48F31BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-StateRepository%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Operational.evtx
Size 1.1MB
SHA256 b80eaddc569f084fd68e86cdf55f1545531408f699256b820969aef0e8c6fbc2
MD5 babbb92c2788e7a5ac7267453c8a9808
SHA1 2cf19988b869eea3899b7b6c5ce2651f9d19842e
SHA512 792a2f06cce69df50330ccc41da6f2528d342978fff412e1ea06d77d089b1b938f3d944e7aa6c36208ae06d0982819381ac8d5f9f06fca9bb7431d5c3c746681
SSDEEP 3072:UT/hr21+vxCUDhDmTSw9tElJO7rmVSrg8Gyvzoba92LkrkB7:c
TLSH
T17D356A022BF51928F5F38F3A80B30F34663BB9245996D54F2148A18C5FB7A64DE70B97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Storage-Storport%4Health.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Health.evtx
Size 1.1MB
SHA256 73f82ca3801bfe447e992f4426b6b59ed939dbc0bee1ee15304a384b7e706b8c
MD5 eb111f7c7d190d95969a865db97ec350
SHA1 76130ac1d7b8358356aa093284aeb6022c661531
SHA512 ab83902f65e6d5cf09f2930a4e70ac510861ecbb47cadd3beab502d0a9b0391438b751ee094593be7e4343faaad72ef620f9892358c3d393457f5879578a6530
SSDEEP 384:BzhQpIRpBRpBUpBnpBipBVpBgpBPpBWpBe6pBMpBxpBUpBfpBepBdpBkpBHpBypv:pOkZV6SBn971qDF
TLSH
T12A3515551FF70629F9FBCEB546770B24AA37BD342AD5E91D508090AC6CB28508F207EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Storage-Storport%4Health.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Health.evtx.FileSlack
Size 768KB
SHA256 18a33b6df27aab2d0a85d514dcbf7da110d86c6d0ae7ae15e145985c041b3905
MD5 2667d52360dd6174cfa48314091b4f5c
SHA1 8db6f1c7d6f0268125781d91d6afea6bbae29a47
SHA512 5c234a0d9f9d5996e39276d720d3ca5095dbb75ffcdeef20d7f867deb4a32ee7f5c913392af8d52f2193064b5683b1311489abaa47c6699238431e4957e70c71
SSDEEP 12288:hSWtesKAdz1aPBhqauS2L/MEz4tNejqCSn0rEfV4jKDantK9gMYcqmzjdba26k:hTtp7PaJPu9T7eNejqCSnLfV4jKbKFcn
TLSH
T132F4F1337E44D065FC2A00D0664E1A36D67EA6701363C5C39766EA1AB6E48E39D37EC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Storage-Storport%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Operational.evtx
Size 1.1MB
SHA256 024626595b858a6a8e541e3a68da6bde68dd7896c3539d4ffd49ab2d9f4e4c98
MD5 9482826492951c415ab4b7634dd5c5b6
SHA1 79fce8ff2e63f648c80a469a4890e39641bf1f4d
SHA512 a86ed94c799e848b57722d74e0ab869ed6e82c9731949bb6e6868d397025661e8a73b9320938e96ac507d0b1e97350b9f1c56d60619bd1d2fe79db86fc1bedae
SSDEEP 768:MMZqiyA3C48Zpi1NWnCfS66XbP658Optr8SdI3TZamnWJT29nUQEspfhvt35HtPc:azKH
TLSH
T1053554066BB60539F1F3CF3588B34B28693EB5247A42D84E704452EC9CA6D859F70BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Store%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Store%4Operational.evtx
Size 1.1MB
SHA256 4e1c35a9112a1863ab0f305a753e25d0520fe7080c4121438766f68d5b23c057
MD5 eae2d86e8fa7b571c06324632c4cea3c
SHA1 acfb4030d3402e5454e13aaff3a137c90999c74d
SHA512 d0b3ff87f1b70670e2ea63cd5e6820145e0be2af9609fb54bbfc3d2189da86ebf85caf93776064e7d313bc3f1e58b17ad9b06e6abd21f53ac561fb3a81d0fafc
SSDEEP 3072:989NCQWKDHL3SUIY0+2BisLX6GrRUMhic5VBOAcoQ1pMNBN:csj6GrRUMhic5VBrcoLNBN
TLSH
T14535CB016BF91939F1F39F3498F31B2A197BB9151AE68D5F1050929C0C27D918FA0FAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Storsvc%4Diagnostic.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Storsvc%4Diagnostic.evtx
Size 68KB
SHA256 fbcfb52d0d8e676f9204528abd439903d81ec56aeb51c7d4648b2fe87366ba6e
MD5 391a7cb9e0e5596717a513b8c4ac8d03
SHA1 899b8f96331541222d43aad39a25d67d90648576
SHA512 c048a755c59db89dab28f29b695a00cf11adec17c1a76b8dfd33a60677c6fad23010cc913e7fb6849e5c89d7d2af5e8c2d858185c0c3a443db2522b3560f3d23
SSDEEP 384:RLhWUsfvbUtwUUt2UttUt0UtPUt/UtoUt8Ut:BEfvO8bktK6ZV
TLSH
T1FB63EE051FF40538F5F3CB3182E34B267A3A7B855AA2E48B519013AD0DA2D15AF717EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-TWinUI%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-TWinUI%4Operational.evtx
Size 68KB
SHA256 46d0a241027e9aec1e5240d54f87f61ae48049f2600eeae59bc4afcba5ab09f4
MD5 d1bbfcafa709fbf522feed37c5c57920
SHA1 b98675ca94e8228632f4375d5b790bd9964b248e
SHA512 a976e139d090818a7b51a1f9edb371abb953cf76d8f3dd4b45886295a4d670d47519698144ec72fda9056ceee3810591809be71d3fe5ad50cad179618a7c4f9c
SSDEEP 384:KKhRGjGxIGOGGG6G2GBXGCGqGsGDGNG1GrGpGnGmGTG6GlGzG:1p3
TLSH
T10F637A0A2BFD0524F0E39F39987B5B186E37BC584C955A4F6004A0AC5C66922DFB0FF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-TaskScheduler%4Maintenance.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Maintenance.evtx
Size 68KB
SHA256 2a6485d87697ceb1c5dc6e98484c14208af99ee5e773b29520754eae08491db3
MD5 87bce473b6c735807bfd4eb8e17d5c13
SHA1 82b7d8e791827a199fdcebcfc335b3f0ea66f618
SHA512 cbef61345387dc6449b8cd1c661eb3e5b5e4af6b0f705b9d7a8ae00815a4bdf3f54aefa55613ce1b821e259af3a9f50d3dbebe986be14a1adb6107ddde12bcf8
SSDEEP 768:hqKTwKT9KTG7KTLKT+KTIKTkKTwKT3KT:sKkKhKMK3KaK0KgK8KbK
TLSH
T11A638C059BF41A29F7B35B3A49F39B2C1973BD085A718A8F111063990C25E61DFB0B7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx
Size 1.0MB
SHA256 149db3631cf1e27482cd97364cda2c561fa56490ef3f980e8796e29eac170e4f
MD5 7dc45746b991b262851184477ecc3ad3
SHA1 2ba04f6cf870abf9c8c50a36aad84a8c9096f5ca
SHA512 da8ac22ae50aac3d656a493afb3bf38cf4f1fda1a97a74310b2f9c7427be10ecbf6cc5c3335bfd7b868308d39363731ee00e05334431403833dcc18d6ac89905
SSDEEP 384:cvFihaieniGiHiziZiOaiRiditiliBiti1iRiGVi4Wipi0Qijiqiuimidi24iLin:Q8AsK9Dmqn421CryGZByKRffn421Cr
TLSH
T1CF25D40097FD1828F1F3DF35987B6B1A2ABBFEA10E65495F115491584CA2A50CEF0BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.FileSlack
Size 896KB
SHA256 79fe08470435fee87b4243948b0b2a33d7be9aa5556ae1dfa5b4af3ac2f070ed
MD5 dc5c6005f1001297e88298d5ed412066
SHA1 dfc52b543f92a4b124ce8376964712059f422c79
SHA512 de77e29a57e6c9259e84f47568e7edb195382c0e1fc851145412869bab5bdf8d32ff7f1e06a015e9dd81a9ed33254457a70e7537210d710e76b807b3fad27593
SSDEEP 12288:+wxxUPHNhjMxJaiu5mrI1psIudTOlMdcMBT82ztMx:dxxonYaSddClMG2ztw
TLSH
T15815BF21A0010AC3C04B653845A6BA7EC5FB5FBEA0A2523F787B73384967194B75F937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Time-Service%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Time-Service%4Operational.evtx
Size 68KB
SHA256 1eef4d613d7b0818850264b5ac1b4a5a59a79b5955d0af033e22b52142e25004
MD5 e2d79a8f23bfffdbf84fddc42b0b0982
SHA1 9850eefdd950b0b14aa8df19c136c98f91d60ae6
SHA512 eef5de999fd2d5747c75b6a5167985f284413094a8bf3e5808b3eb174785326a6c9b9cee65934afb6075caff85f5aecddbd8594c673719d51995bcc056251265
SSDEEP 192:7P8V7HpbOpG+wI68JXOPp3LpqdpFFpl7p:7EhHp6pfWp7pwpfpJp
TLSH
T16163AB019FF81418F1F3DF76ACB762151FBBBA650D61895E2190A35C0EA1F108E68BB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-UniversalTelemetryClient%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-UniversalTelemetryClient%4Operational.evtx
Size 68KB
SHA256 830930b7baf55688ff24a17d8f6a358c6e99488ab0adb1b136ef9fd7be801e26
MD5 c448efd3910b07fc75d50986203b933a
SHA1 80d034ed4d260d3c5b11d8800ce60751ca2af8ce
SHA512 e8bd612d7dfe79f47ca0058c184534e0c1e16866f5a05ed16d3cb95c28271d6657c8f3bcf58291f17f7f80582045e1dd17d612a7f7e60520042ca5f0dcabc141
SSDEEP 384:FXhhh/NhBh1hwh5EhibhyhohkhZhC7hqh4hkhshEhzhhhnhzh8hWhVnh4hvhDh9k:15QT/+
TLSH
T13863681A6BFD082AF0F79B34E8770B952C36BC441A41D80F1159616C5C62F619EF1FEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-User Device Registration%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-User Device Registration%4Admin.evtx
Size 68KB
SHA256 8b1ad54be3ff0ced513f8a34dc8b8bfef736e6aaf2b5d790713a03285ac24b58
MD5 60a6f5eb46f5a84f4e37535669372282
SHA1 e42cec10c112286cc86dfed5beed8f23a4ec2e4b
SHA512 6edf557fcb764e6c15f69a81787aa21f33fd889a5bf4d35fae868491ce4c031672f4d064c52027922c22e0c3d73c23ff8c459a10f92b6a7de5972f711ef9aac1
SSDEEP 384:yvh2XlaAXRXZ1XRkXmX5XIXRsXNXhXEXRByX5XcXhXRJX1XHXSXR2XtX3XuXReXD:MFUTg99erDlD2pX2DSXZBvDd
TLSH
T1256312001BF55A18F1F26F7A85F70B250D37B8984C71D54E1268824E8C61EA9DEB1BFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-User Profile Service%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx
Size 1.1MB
SHA256 9b183ceec8e34a539d95ca2dc1a78ed856b2f1e6da0b17db0f080ace0aa5f15d
MD5 fbc459ff7cb4b42a5670c0266a3cbdb1
SHA1 10327c6e4879451b5b19e5180618ecbb256e57e9
SHA512 9e06e1970589ab58d7b189f3fc26ffa2b4650257d929e85972071de9081c4d5d42261b5cfabf9653c865b5a9439447f56300160d5713abc63cd331314c503837
SSDEEP 384:UAh8TmQmJMmHmjrmWmVmLmsmmmwmHm8mHmAmTmBmnmnmbmQmvmsmamsmWmEmPmLS:ZmadC8CvqdC8C
TLSH
T1F53514029BF44928F2F78F38D4F72F193D3BB8A80E654A4E019461545C66976CFB0B9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-User Profile Service%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx.FileSlack
Size 960KB
SHA256 def0a83f293bdd239b4abc50fe653e1b3d40ea4d99e7e4f4634bd8ffd1369c84
MD5 a662a1b45c765c6be259e42f56f71277
SHA1 5ae1d70301aeed61f5ad9a3b6db76b12c816b32a
SHA512 c795c052fed55ccd1635b754a179d8c084094321e33ffaf238715db359b6e7435e6aed48da92ce2177dc12d57d963f6d290eda43b730ada06ac956c5bc1076f3
SSDEEP 3072:dBObfBFpJGbAWmBic0FcX9eyExRvb8WOPl/KUl/bBKiSsEgYvnR/UiLNVD3WC/5R:Nji7E/gO17oiP1
TLSH
T1EA258741A7FD4208F6F77F746DB956200E7ABC9AAC79D61C1280A05E1DB1E948CB0B73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-UserPnp%4DeviceInstall.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-UserPnp%4DeviceInstall.evtx
Size 68KB
SHA256 c2ea97272c75ea04deffe2175fc08f5a608808c5fb794c30172b4bda2cb73910
MD5 0a26cc3a82208265e66763278336bd5c
SHA1 1a296da1652cb4325a4ee54a229aff2433fd4a4d
SHA512 41ba79c07a6fde16d7f5c4e0469f887a4de6b656638ff5bf6bb9064ea16b3cb9480d0a54c785e0d2936906da8cee9bc78e39ef402b49e7087e559eb45cef982c
SSDEEP 96:R1RNVaO8eoh7yZp7A7KrjjzP7S9747j7t7C7:R9V707yZp7A7yvD7S9747j7t7C7
TLSH
T19063FD025FF0592CF0F28F7944770B292E3AB9104952964FB264926C0C76A71DFB1BB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-VHDMP-Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-VHDMP-Operational.evtx
Size 1.0MB
SHA256 7449a4df9ed4ee3d87e1b871286807a0a3458f33c7e9b6478d8a80140b8a0f20
MD5 37408b5902cf9d24492a1b146a8259d1
SHA1 09457b6c59fefe980f2f2908f589f1bcecf938f8
SHA512 b5e6561fe53cec136d531f6b3747ec029941cf3843e6ef3ab87ed8bcee8830c7644c0bfbfcc96b102c6b61946a82d017fbc5ede67a53325ba9dfb137b485b2b8
SSDEEP 1536:LUU+i5vgN8cpRiSZH64ychkeORKDb7F7We+yIiM5UauHP:gU
TLSH
T1CE2537426BFC9128F1F38F39C4B70B04393BE5991EC5AA5A4284E2584D259B1DFB0FD6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-VHDMP-Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-VHDMP-Operational.evtx.FileSlack
Size 896KB
SHA256 002128ca2d59903816159fd581a8868e82793c671b0520d3583db93c4342b595
MD5 e73ffc2a8c00ab264d29a56f65dc9fd8
SHA1 8494c92df3e1d4ff3932c6df1e421745ad7bb963
SHA512 47726b91e9a277ce8afd5a55bc76eacba3a4b1af468978279dd8c1e430d07298204150cbc55562b79e94e0a1e5bcb2dc01cfd8cfba7da3416ddaa798ffbf0215
SSDEEP 6144:Sau36EwSB1VTPYeVtgmqAhvAbgIsH6pa92HPkFr:s6dSpzYsPugAvo
TLSH
T19415D9427619918BD12D2937146686E5B52C8D8B2CAC4E3F3760FB6CFD3A78B485FB40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx
Size 1.0MB
SHA256 831091234619e5860b0c5c1118e91452b63cd918b38bce11f0905e157a4e830c
MD5 dba7446ff5ced1d11927df006691d82e
SHA1 175a52f6db9365496a6dffa0f14adf60a57642a4
SHA512 307cfd0277523fa12a35887a8a80a731ee0ab092163153e0782c116426d24b8f51be181617d10824a0e0c40ec8efd4dd2d2486813494b82a903070dba8d9dd22
SSDEEP 384:2hhq2z82K202cq2P2x2z252D232t2b2B2t2L2F2b2P292A2i2e2k2F2G2K2z2E2N:yhUleOS5
TLSH
T11B253A17ABFC1928F5F38F7884732724167FBA9909C19A8F102071590DA1EA5CF71BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.FileSlack
Size 896KB
SHA256 82e397b603207f5a89ca2b3d857273ee4ab134533f78f485680df93648faa972
MD5 4bddc412dc28636b7f408f2780b5bd45
SHA1 559e4eeff52d605558a04bd802d82c9e217d857c
SHA512 e753f7585f1158a363c6583e3016ec723105fb6cf910a69c588017852f3d7fdb1e36cad25a6b11e463334610b1f3196a539ff5e25901d278f56afc4fceb9c420
SSDEEP 24576:TFfx7F07ZaJ7FN7aS7aW7ai7aa7aC7ah7aY7an7ah7iaj7aw7ax7a27aP7a97ZFv:xx7F07ZaJ7FN7aS7aW7ai7aa7aC7ah7q
TLSH
T1D4158548AAE80A12F1B25B3089F15493FA37B98359364F5D708E131B1F67B859D13B3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-WMI-Activity%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx
Size 1.0MB
SHA256 11570e6b876c4195e1b1523dc9fe6f45d7e5e01c6d4b40da0e9ae32d1062ad22
MD5 b311051a6464c5c8d4677b6955b571be
SHA1 eb3068d0711b6a46125eaf47e58f6aae0ab3df6a
SHA512 20063109842d76d905279832cad221ba365449ee5959dd8e8c9a647dbac8ca605cee2ce173c3ae501997faeeb25b0f0728759e94f254d619d6490e6572549ad3
SSDEEP 3072:7ABu6YtQKH49BeTvKz4HW2580IS+EdpB2sbVPQ0:7At
TLSH
T1FC2535026AF80528F1F2EF3984FB570B59377C9949AAC88F1054579D0D619A0CE72BFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-WMI-Activity%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx.FileSlack
Size 576KB
SHA256 7eccbe0c88c1730289bfb0a99badc529d3928bda2828b2afb726fb36195704da
MD5 2116648b8ca7e0d2089034e2c085b0f2
SHA1 b99029305a42c262a6f8cfc21773f38a9a4b0a7d
SHA512 8605d0060f6a112708b7f996c8fd2f56a95f11c3c0f54f60ae55d76c29ca1851ddc1660aa02540a62b80afc8042ce42ba5459b6b4cef6f3708cd859722d9b587
SSDEEP 3072:U4HQvc4joVSJNc+cTD4ZAMHcVwRGztpP6ydnEFIo:NQvcsxNc+cTDkALVwitpSyd
TLSH
T146C40E01BF94E2C5E1B54A335DF6CF955235FD12AD628A0B3390330F9EFAA41EA23615
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-WebAuthN%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-WebAuthN%4Operational.evtx
Size 68KB
SHA256 7da330002401b0b5c0d136ec042e92c34b41cbdbb00f422855dc42d7f01ab371
MD5 417b9354874c143d43a1b62f323449ea
SHA1 0f00443757e6df355ab055bc4d1bd2f47e39a3f2
SHA512 e77b8ffff29a149b43ab456c5635cf8837525c04105ace3948cb93855e1f0e1ab9b79daf12a7854a3d72ccfaa7e4890f5f7cc3586fde56d65651a9d0b18c2987
SSDEEP 384:mJhKVqV/MVxVpVbVsV7VFVoVLVwVzIVFV8VLVVVLVJV3Vz4V2VQAV0VTVdVxVoVS:KJb1
TLSH
T1856358112BF61539E1F29F3DD1B34F2C393BF81468C28A5E6110A36D8C96961CF71BA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-WinRM%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-WinRM%4Operational.evtx
Size 68KB
SHA256 0800da4fb42b63d88574409e2d5dd0ad285066e0eeefc538aa806af6abcac942
MD5 32708ceab904bacbf6a1cbdb68e50da9
SHA1 3c3aa5cc9578c8accaf8e99861ec874223f5ef50
SHA512 1d77792603fcdb518312351ccbb2f801ab7500923261ec60ee037b97d9f669318ecd0b123380fb3ae9b8734e0d83c16845ca6d5284a466718207125d60a6cace
SSDEEP 384:Iihgvp3Tvpm+pvpJzvpXRvpKvp1vpqBvpDvpYvppvpqDvpsvpPvpFvpqiJvp:nWhLBl/ddQ3S127gmNrhF
TLSH
T18963690217FC4928F4F3BF3988BB1B215D37BC85887AD65E1250605D0E66E619EB0BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx
Size 1.0MB
SHA256 6257ce091843019e0ee519ce121f68b11e481a6a60a867efcbdee512bda49682
MD5 cc05bafbb81ee92336a8bc151fe0c24e
SHA1 f3f149e2569b2617090740ec98df5b266cfd7fe8
SHA512 d1be57cb8a05e3804f4d912db2bc2efca49c1ae424e7a21829e7fcf6bff6a6f255c54aa990f5447ceb07666cb78205b7dbf54d5ebf9b93047cee9b1ac8f76da3
SSDEEP 3072:y7R6CqLr4e6sJuLw4Q4wL/RvvB8WMSjjQPJdajwPTPahaHtPzggcZTqXA7DUqeqH:0+wA
TLSH
T1B52579546BF41518F2F3CF3ECAB26B195D37B9512E628ACE0151719D0C22FA1CE70B6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Winlogon%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Winlogon%4Operational.evtx
Size 1.0MB
SHA256 a3395e79d2aad1a89bbce542eecfeaf4afaab40a1f82970a963b2686d6970c7d
MD5 7cac26914e4b77826909b5ffde75b4e5
SHA1 8abfa76de6d0f410bee09a6c784004707e5de7a3
SHA512 7742923bf19a4632242e6d76963810fefca287cfaeeab80ad0062e1f6d5f2fab63cdc2a7a1cb24496374761b01491da37c0854a2ac447071b444744f4d562cf5
SSDEEP 768:LRzxQP2PNy9Rvvo3JvCdoKFJggQAsLaeotUiy6:1vPUgEqiJg4uaeotUiy
TLSH
T1002519863BBC142DF0E2CB3D94BB1B583A3BED640A819A4B514063785D566624F70FFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Winlogon%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Microsoft-Windows-Winlogon%4Operational.evtx.FileSlack
Size 704KB
SHA256 d72081edabdde43d51c14659b177c5cad51a195b1f210f0c008814188ef95dac
MD5 689a78adec2352e0e5ada7081fa7a4a4
SHA1 621a4587a822832ffe846f87ffa012fa8657ebff
SHA512 63f2ecfa6e1a855e09b27d33e5b9ab8e6e19f6202d53a9c2af6065bb51770c550e3526eb314650b2bd1a33597a684b4ddd91766b6388593c06fa710a77eec3e8
SSDEEP 6144:SQOF9nvSjx0Rd7tMve26HO6+thUDNxQK3:5Ornq26hKxQK3
TLSH
T1BFE4DC11BFD5E280F2B14E329DB78F511675FD626D628A4F2390330E8DFAA44E963712
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Security.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Security.evtx
Size 20.0MB
SHA256 53cb096f198db7b9d22bcb2b63036bb81adf6b5d23477ee96332c8f5d23726e9
MD5 3ea68c36b96cb9b845c3592bce2d89ce
SHA1 607f1039972e8a0a912584de74d8fa1df6068594
SHA512 cd440af33bee4cc4c0e29758afff32adcad6129c5ce87f4a6d2a69ffc2219bd458bf3139a9ea37bd60ad84fdee92d25e32ee609fb39a3559da54a0dcea86af68
SSDEEP 12288:weyLjGZl1AGVco01O/Bzye7ESMf7GPVJ/9ACl3+n+SukKJOa0LwCu:HV1AI67GPRl3+nNaOri
TLSH
T13E27DC04A7F80639F3F39F7682FB07456932F9A26942868F4186124B0D11E159F76AFF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Setup.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Setup.evtx
Size 68KB
SHA256 2723f81e7d47a4172ce607063e9a00d65258cb50698b6c3afd49f5560c4cb310
MD5 91c91d353c3ed17c7b6b84ecbc616029
SHA1 f6b6c8b71374660272eeb5034a66243e7457dc0c
SHA512 8e5d4f9f070fb149875a6f335b41fdce2bdcabb5f7de534f9c836487d2d6e594465c075b97017e4c32607600f5b4ca1c1daf2af2c85ce159e07768b2829b9149
SSDEEP 384:AEhNLKBkXSCn2gWXAerS4e8S9MU4Tg7kWTK6mdneiSc/kbCGLhPtemSBeZSUJMhk:lX9e2/1YVr/v4
TLSH
T1E9634A156BF5052CF4F3CB35C6B30B162B3BFD549A619A4E4030A2984C66DA18FB1BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\System.evtx
Size 1.1MB
SHA256 05fba1141bca94b68d52acfa2cc36f79e9c2a0ff6777f9c485d1f0aa787fd41d
MD5 111c47e5ba17dca45bf0303b479ba1d9
SHA1 506e7269896927f9ddb017131627add44edb9c1b
SHA512 2f5b3a85f4882509e7ee9228c9e623f6713d6ce0656b79b581ab671fa88c4de38dfcc87f7e672fd0b78162a8ef4bc27dd8145ab22cea5deb0a1486e2f1f16dac
SSDEEP 6144:gYzEthPLvLU6okwSuKOaFd9MOe5o1qfAhtt8hf:8LvLU6okwFKOaFc5o1qfAhtt8hf
TLSH
T1F635CA002BF45428F1F38F39C4F74B252A3BFA605A92964F2294B39C5C226A5DF717D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows PowerShell.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Windows PowerShell.evtx
Size 1.1MB
SHA256 53c3332f90eb526c84608946265b8544e3e6ffb5796ddecf996d3524399dd323
MD5 045521dc28f800b841a577129201fb58
SHA1 e8132878d7750fe02afffbb96fe6524e281ce21c
SHA512 4fa1b7c413aeb26a46769441d08dd1307ba23583385c558887cd6f4b32e8b2d2dd197aa902cde211c7ad25e51dd8d9e9fc1b7c2de3d100caef1af7be95a967e8
SSDEEP 3072:B3QyIYmQh2RR15LPAlcjCWWnqt/ZCESJfrD9QyIo/tQyIldg:bmQERR1nqGdg
TLSH
T11935C00326E85115E4B3AF78EB7355B49B367D215D39DD9E62C0004E18E1E80BE62FEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows PowerShell.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\System32\winevt\Logs\Windows PowerShell.evtx.FileSlack
Size 384KB
SHA256 27c92803d440879918325c9955897e2567796865426e04587171344b19e1985d
MD5 3367fa3d02953de384b4e877171e33ff
SHA1 067eeb4427a9f6180eaa78eddca4b0e09bdb6248
SHA512 97f8b75ba2ee936e432ef8992081e3e0e374b06d6540e6e91919d944c6682188d7655924ea25e56f81591e0dcb43a805524c258937630e4cb290af1932314eaf
SSDEEP 3072:QJjp4u8gH1AeRuDxTX5hStjgjA+Rah6M49:GRuRo2A6J
TLSH
T19484634565ABC575F86326F4C432C0233726A4C4DC44DB3BA58E4AAD2ED5BF0C7AA732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Amcache.hve

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\appcompat\Programs\Amcache.hve
Size 512KB
SHA256 a1a392f4a75c94d91ecf81e02950ba7f458b61ec9b305a72f2cae3b985828ed1
MD5 144f3d65f791cceebc2d4452e6f04711
SHA1 1e0e79abc168bef520ac03af97cfeb6a5f6e4203
SHA512 06f1a8090a3d3fb9e1be3bf64363f12c63954bc917bf7d46949de21b951b85fd709e0730ef9b0160a7183b2c01d9a8acb19d212670bcef354d22a8ea9c66da5c
SSDEEP 3072:0+MtBo53wWfqCo0927x+sb32cu/CZeyjsit0YKW0VZSBvdRbrF+eWKhbAuRu3yXb:LMDuC3ISr7lrw
TLSH
T13DB4DE14BFE087F1F2B287355DF32F425939F8527D118A8C1291130DDDABB52AD12BAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Amcache.hve.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\C\Windows\appcompat\Programs\Amcache.hve.FileSlack
Size 16KB
SHA256 92ab79bf5005d174049f8cea800590d8018ea5acef374fb58ee67885aaa762f8
MD5 cf87cc70fdc3f2cbaa5efff7f0863709
SHA1 f213aeb776151a23aa6f6b4c6d605baf206448d2
SHA512 992ac8ee125a89cd0466d6961aee7b64a375248ce6a685d8b38fae050ea67d8cfc9977d9a9cc77f81a61d546335a3bf2b9b7ced39c22c733834c78d4346be0de
SSDEEP 192:iPQu7Kqn5KGzpawz2eWkzJ5Fwgmzo5tzZvz2Ubn9ThmaQId+P4G:iPQuWqn5KYmaQId+z
TLSH
T16E7219B439F86622F17186306FF2E599783678A069408B6F1362424B0A73D53D879F3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$MFT

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\F\$MFT
Size 256KB
SHA256 a3236d062aba57dc76dbfb7f01f30920b414318c3a6e1b6bd8d64d87d193f19a
MD5 d78246ca8d5a9eb40e32d9050915d280
SHA1 8cffe3c8cfde0c146dc4520d1bc3d300ad437aab
SHA512 1054729950532dc6656196d1b830165e9bf4a0cf5ce52e7ae5f4f67fd2d76daebf08cac1969ec3a621040f7ccf842594834a5dd799f435527430db774b443091
SSDEEP 96:PMbLEAeyLarUJpy6PQMzyrprxVYikSyPV5pugnzQ153+EgGk38QkhEVSsdlq:rzoarj6PQYyrpr9wV5lns1ZbsShEYAk
TLSH
T190440322F7819F62F4AD62B1D9EF430A673AF23847719B031114AB2D6DB3F405D60E58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Listdlls.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\Listdlls.exe
Size 215KB
SHA256 29d23bc492e48a5ae68444302d3430e07d08e04278d53aa70d9367d9cf8bceb7
MD5 8336396d50dcc9d5a5f66b078a8460dc
SHA1 42bf0bb282512e4c638b8f03617dd973ee09afd9
SHA512 08f34405f8d5ebf695391f9cb1deb6eb22b318b698ce9540d37eae45d36476a96d379e9f338c64d5f2f3e9674751bdb7f3661845530605b8fb1eb14ee91702e2
SSDEEP 3072:CcSIBqf7UxpYs68VYO1KpygluJrTiMLGcaad5UFyn853tOwDmh8DaNv3EL:Ckqf7Uxv9VYO1s+rTiMCOoRb0py
TLSH
T120245A5173E800E5E4F7AA3089718606EB767C564B34D78E13A442AD9F63BD0EE39732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PsService.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\PsService.exe
Size 314KB
SHA256 554f523914cdbaed8b17527170502199c185bd69a41c81102c50dbb0e5e5a78d
MD5 657c2da84107644a1397d49e0b526f24
SHA1 5c9ea381169e745d68e717cb7ad4adbf6afd6391
SHA512 f71064bbad6aae5ca94da9f49d672d04b9e1435f9e13b724f00afd2213cab402f407e71fa18817fceabdcb7c114c32febec35f39cde70c3e3c3f096e8f94bc4e
SSDEEP 6144:DG1HIY/dt4hEotTabamlJCqTH7BXohll9vGfq:DioWP4eoA3lJT5ovlt/
TLSH
T111646B15B3E500F9F5F76A388DB19506EE367C564B34D6AF13A081692F33A80DD39B22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

autorunsc.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\autorunsc.exe
Size 785KB
SHA256 60638c8b1164293e009bd0326dfc7dce7d0b1d64ebdf044beb75f3152387ad04
MD5 6be477f8a7168fe079bfb549114cd890
SHA1 349c935f210f29e83383b3866aa737eba486ccb9
SHA512 2a5629180107d196ef13854e1886b1c93dab5145101b72016109a804dd1f3c3a046c2cbc58c78a489f4b6a8ec9af3c2f80b1357a2c7462981be3175be7d46467
SSDEEP 12288:VYhzNwa8WD84VMqWwydeTgqP4CMIt/KzIJ/sD1QGAYr9nStcmLmSnNXuiJhq3T4h:Vz6841hsqP4CMcyq/AKge
TLSH
T1EF057C21A7F802A4F1BB95718E764915FA327C571B34AE8F0360497E1F37E58EA38721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

config.yml

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\config.yml
Size 8KB
SHA256 6fe76b3e56eba816690f8254c49cf18ea9141e7df51e75cfa0fd1cbae1eb6072
MD5 c13e2e2cc082e69f9df5d49c23ca9b6b
SHA1 1949ff3d0bf9844dcf98088e14b9427ef12c6af5
SHA512 588111be30f719310a4e31fc2e952abe73057adf61f7cb5c6f10ea9afc9019ba44f103b614a69f23f7f4166a1bdd6325522dadd4d296fd2ae829a81b4c4619ed
SSDEEP 96:9CYvnEpsxsZ1KABR6rPRNJ4MYNVbdkoYPdasGeLb5TYES8lwoCzpc:9dCN1SyrSoc
TLSH
T11E02CF128421D8F378FEE34855926E439635A0C393E4E935B7CCCA944F0E9D984DA7EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

handle.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\handle.exe
Size 406KB
SHA256 24bafcc570cc9bbb6b6e6652a57a519e0464e3996891aaba6f55299cce20b04f
MD5 89f845fc4898f2d47a3a81f0b57c60f1
SHA1 b04a2347a0f94e87215424d816f9912c7bc248d5
SHA512 50bc14c4221ad984c3aa98327ee9127f7470a9a2b0a953544440a7b05f60f7f91209a96bd87d0d8f1e05551863dd43193f7f4231f382d6ad75d9f0a245939f04
SSDEEP 6144:MjRme/IYVCQ45De1/8GzfaD3f7oxakAuXeh3ohaYLCAyI5ub:MN9rVY5C1lq7oFpuoIGi
TLSH
T12A948E05F7E400E9E5B7A6348D758546DA727C594B30D6AF23A4866E1F33BC08E39B32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pipelist.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\pipelist.exe
Size 431KB
SHA256 c7c3e2e7b729891141f5a7cb172390e57072783187edc92db95d4b7b7fe8cc4c
MD5 e794ca9cc2af5f555ca573ace7fbde00
SHA1 9f7cd59b08e2a4f810c68745a26b633c685bd7de
SHA512 7de6e6b81df65ded8c2779051e5a677de0e6db390ae1ea3abb5c9deffc3f7a3a54012c88e2573c83f4d3c83e54210126b4bc95127dd2ce4bd970ee818b77b1f1
SSDEEP 6144:EXaCBWflr+fDPiOOQ14h0WRKIqLZRto+hLhLlw7X8A0YfvaJXW7gUNBhtBxLVug:EKcCEfDkRKIqLZRto+hFl0XZH7HLl
TLSH
T114946D5677A405F5E177E23CCAA24B15E9767C164B31E74E03AC826A0F237605E3EF21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pslist.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\pslist.exe
Size 260KB
SHA256 d3247f03dcd7b9335344ebba76a0b92370f32f1cb0e480c734da52db2bd8df60
MD5 77bf50713a9eb7b270a73a9797f8ddfe
SHA1 630ccb6bea18f6224f830216273297ae0bb43718
SHA512 80d0fbcb25d81c6146aaa1adfffeac67681c6c6c5afddd5f84bc5112a510c0803936a3efa6753baab58cb73cf674ba6f6d077da7ddf864ea9fbe17e7626e6fdb
SSDEEP 3072:90UJu9scKE2FrJojBdfQ9heIlNDvZLByZhRg9bH9UFgwNVVwUElCSHzuD856bFz9:9RJu41FlWBdI9kIlN7RdMgBPlCuyFz9
TLSH
T1AC447C5973E508F8FDB7963989A49506DB727C524B30D64F03A0465A1F33BA0CE3EB22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

maintenanceservice.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\suspicious\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
Size 272KB
SHA256 4bd1dcf4ca2347b5181957297a22926bbe64fc2eee3dec93bca6f0c654167b5f
MD5 e255f1082448fcc9185d973c71bdcb50
SHA1 c0800fb7d2e66dcdd60414cf137db7b3eaf6eab8
SHA512 6cd5eeb4a31bab908354c0d1e5d37d87c8109ed253b793bb3b0e539217e4957e332535f8130b517d49adc3b6514f99c6f98593d49a84b25c2e6a455fa5ff855e
SSDEEP 6144:Xr1XLss/oct92xA1YXs2lRBN2/iJPsfUrcAe:b1XLsswWkxy2lRq2czAe
TLSH
T1BF448E28B7E408F9ED67827CCCA28512EA73785547A0E7DB03E489651F233D85E3EB51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OfficeClickToRun.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\suspicious\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
Size 10.6MB
SHA256 1dc68c7eb3fc39e118521c7425c47da841283a076cc422a480bf9ef637c43000
MD5 67e6e37998718f746ba52eaf94c4c0a7
SHA1 83e7abe8c919c75660b4f7e327dae54a92064bb1
SHA512 21521aac07b47a3386dd789a5ccdbe0175799dfbfe5758670a35a6b642b89578ecfaa4e0086dfe3b734bce1af317671339aa2f5650705ac317b182c01c193f3c
SSDEEP 98304:GhDYh+CeHpUwnAJV84AB9Jn8Ed00k9Tfd1WKh:2lJHpUwkO4QD8Ed0XBdoKh
TLSH
T184B66C62E7E480E0E6B3D2758D3AC672F672BC4129B1A71B5295C60FAF336805D3C725
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OSE.EXE

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\suspicious\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE
Size 257KB
SHA256 8c47f981e1a46a42a268f53ef1b1476555a54bed7077f7b13b1e562c4c9c049e
MD5 17dc54ade85613728a43f2d733527c5e
SHA1 6420a7744edb234f8cf989b7f261265baa381e94
SHA512 632541e69c61398c3eb07ea7b8e7a21a6a765b592939f091bf8319cacbf7f294860e5f80c82e8e7ab29e2a20e67dd4d1e34171b2c5858d30ce9b9bcbe167ee43
SSDEEP 6144:bmw5HEiIsCCINUGBZjgXwYz4WDZSFxgHiGfE:bmw5HEjsChNVBFgl0WDm+Cp
TLSH
T1E8446C4677A40CF9E96795388697C536FBF2B8022A21DB1F0760C65B5F33351AE2DB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

elevation_service.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\suspicious\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
Size 2.3MB
SHA256 d31094b8bbdd28d04cf290eca7920804b0052ab83faeffa84e799c4a3d45d1a4
MD5 f9a5b444d4032ef6d0247e8327cca3ac
SHA1 e6ac15d499bfff2af238e9dc8009cfdd15a08de3
SHA512 3989c59eff0ba479ad97470a283cfa99977a588fce26b7cbc16c2195496fab7fb225dd53d5d64764702998187ff88a1ecc7eefa515739c5bb6d01849ac937c96
SSDEEP 49152:FB+taZ3usBWOBr4tEGW0bqx0z+n217aau1gl3:ru6Jm0xd2d3
TLSH
T129B57C13F1DA01E8D06ED478974A9233EA62BC490B35B6DF0A9073562E77EE46B3D710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

svchost.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\suspicious\Windows\System32\svchost.exe
Size 56KB
SHA256 643ec58e82e0272c97c2a59f6020970d881af19c0ad5029db9c958c13b6558c7
MD5 f586835082f632dc8d9404d83bc16316
SHA1 010db07461e45b41c886192df6fd425ba8d42d82
SHA512 4a76272011aa2ef210de6e54ccf2b3d8068dfce8a741256562f2423048d94381d6f30ab47d88c37175fb3c7f6efb08bbd8bd8501789cf4e5bb1dff2455be2425
SSDEEP 768:DPLnVeJ+4jnLejsSOQ3DOIKBL4DbNHeDA/YCN8HVvWc9w3Y1P6j3w:DDVeHnLejsT9k1HeGYbVWc9w3gP6jw
TLSH
T1C5436C1FA2E870D0E47AC27499B28249B97175312B11AAFF15E0D1384F72BD0EB39F95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tcpvcon.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tcpvcon.exe
Size 244KB
SHA256 f9fdc027050d59608062a95c41e3965e3800fd5a91f35de080a432d62bd129c1
MD5 93d2aea4b5923f7b63a4ec2ef3dd9c68
SHA1 402b0d55f36e67153939b5ec9a91493e2671b9db
SHA512 193e4451dc5bfd0aadd9f9d8450f4f31b8189d8bc36fa1b16dc935c5848a975a72a7f46e60d2f4b9f9f8e65a27c8bb7ccfc01359598025a0d46b138bc5903e44
SSDEEP 6144:yVBXgfxDRDz0I1Pu0DXiCLkSJ2Ma8RuVW:yV6fVRD/1PusXt4v8Rx
TLSH
T136346B5573E908E9F5F76B3489758916EA72BC524B30D64F03A0425A4F33BA09D3EB32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Autorunsc.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tools\Autorunsc.txt
Size 15KB
SHA256 a8e08a225427170aa3e036973ec5a1503768cd64d56b39ec4601e97c6cfd3710
MD5 bc8129bb9ae827c7e8825e14239c5358
SHA1 82e6e27ecf222184d80c6da3f72ead13c2382a42
SHA512 1cb6d54820d8d9fb6c640024e9739ec3219daeca5fcdfe016107b30d3563b86fd520fdfbee9681e23975b2b28726aa00e8461c7793608d47cb653ff31385c87f
SSDEEP 96:nP3kuc8vMLuc8vMPlw+IC8hqeV+VW9S+TUCSNb23kOccdOchKs06tk8U4MSUzsUY:P3NTJkW3Zt/lyy/X9Pg29Pnehr2ErM
TLSH
T12462F504EBF91218F7F69F5669B998668A37BC255C2EC9CC02600F4D0835E65EC71B3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ComputerInfo.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tools\ComputerInfo.txt
Size 12KB
SHA256 a7234d11503cd1a863fe2def0d047477aa66296a4d976d808b8afa3bc222e99b
MD5 b01af207cfc46ee0bd730f97fd2c6fca
SHA1 cfb5ac8ee558ca48af56142aedb65969065075ec
SHA512 4886897a45f87b38f5799cc46757c68643516fdbd72212f0fb6da33391e5cae167463e3adc59fb58df69ca6db1f706d75b588dbf15b9a812a585723dba39c00a
SSDEEP 192:pPqA4Er9WwsO/8zNCiPEIoKM9ccf/U8mo:pPzYpoKMZ
TLSH
T1E642406769C8817BF89A05382251D633FEE1AE867CC7731C708FA90497673487356B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DNSCache.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tools\DNSCache.txt
Size 17KB
SHA256 ce9cd759e011cf94d8803f9baf444713f45f84b7d370e843791b87b3b7d784f9
MD5 9ba1dccfd4191c6bb6a9c6879644c27c
SHA1 4c0933bf5c3421f599b4d6671c9a3167b488a8c0
SHA512 923b78b612e2ab592aa87c34262342ea727a4458a691ab754b62f1a62be731a91cb485fe004c6c303eca6201b9a243bb9ef05f4d4155edb83e981c17bc5f5594
SSDEEP 192:kO/0NSWSyrv99Tem51RDYD15lx1tGgGxI2x8WXpSZkhOhZ6/hcBjhFNPPZpz/73R:q1U
TLSH
T106820F1B8E0A32031731CA32AE5530B7E719BD2B859FE5897D9F41C84F75586328D2AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Handle.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tools\Handle.txt
Size 1023KB
SHA256 230c72cbfe885c3e3794005ca1dcab7f4e4908c094ed937ef034bd712be9c97a
MD5 9bddff08bc6ada15fa8446a3ebded0ce
SHA1 75ee600c01825812e8471ac66eb0c940feaf7dc7
SHA512 fcafb71d5620c73476ef498a1dd7b0e5da454e1e39c1b98dff9a0876f874dab16ca3bc4f07831a4aa50c708204626528be90c6f8d888a52ea7ef7e8a93b400c1
SSDEEP 6144:8B5Kq3329roo5NMyTMT//VoixC8tzPkzx7IXDYGtqPYAa4/IaxhuKl3YPx2Hblnq:1vDzoLN66Zom
TLSH
T1492569050502CAB14376E33433044A07D7E5D7E76A737C39319F6AA89B7338A6E9E267
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IPConfig.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tools\IPConfig.txt
Size 1021B
SHA256 ebc5a466cb7afe254e16901ebb3840a9bf844465dc32c30d4180786e9863d1cc
MD5 eb5b600bc060b65f9479afa50ffe88c9
SHA1 b1946d4d1f7f0928abe403fc173854c30b5f2c6c
SHA512 631dc7b90a0cec14ce499795252c7eff3ff0e29440e1121672167d36b2c3847bdf531f86b08edce9c7b6c49c9780640d1e8d5cb6e8260bac98f0263a7959b0f8
TLSH
T1FF1189581A94F40373BA46015DAA9B35E1A44D92C003E572BD7DF1886D336B09B46993
MD5 SHA1 SHA512 TLSH

Submit Download

ListDLLs.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tools\ListDLLs.txt
Size 274KB
SHA256 3df15de32f14d11ac176e7339e237e40e7059a4834dc5bdc0f9f6e0665fd78ac
MD5 f81eb592dc9a5b65f5d321e434bfbd5d
SHA1 1b6b8b5f8c948171c798cb5ac6dfb4e2d49e91d2
SHA512 831d308c2ff4afa41419540c97294eb604b158eff5bb66ea88ba08c9d922f787129b2e120214ddcdddcdc729da266c5d4d1bab72f21023b7a77c4acad6878f88
SSDEEP 1536:Ok/Ry+S7IzsNq8EbDaBpgZTgHxzVF6wFe+IQwdrWApqH1cHXqt9E/TYVQaukqk9G:we5bdF
TLSH
T1C754FB548EA44CA1D174CC28751BFE6CC2BDB5A676C752E2139462C1E86701BAF3F8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NetShare.csv

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tools\NetShare.csv
Size 501B
SHA256 4acd111ea9e3a63fdf21a06d7f10e6914b58cbe88ca36370797681f4a605ca5b
MD5 e512078070991c5f3877f20be00d949a
SHA1 04727b0caa89d9d3108ae87de14f45f2e7923843
SHA512 b5820d584cb44f804c2fbc140b2e9e5d1a1327da74f47ae6fa1fe1c55e5aafb8649c9c750cbf8a45eca95e67a9c4cd551f235a33a550e8691182b4149f9d1417
TLSH
T1C2F022057C0DC1260231C343C299A921C8828B4570231000BA3EB2C85B78283AECC8C4
MD5 SHA1 SHA512 TLSH

Submit Download

NetStat.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tools\NetStat.txt
Size 116KB
SHA256 600f8ae156c1ac481dffaf3aea1a923543dde653e1dc6446eab4794db1c82db1
MD5 520649d81ac74fb3e1e98c1b11f4b36e
SHA1 ece52af9a2df40771f308aaa0d2e24733f84f4ed
SHA512 eb4bd1725fd1f2b7d195a6fd889f384168a53aa5a73de3e6f4639a8c02d6401b88b6b124fa1a62109120d99f8e6dcc19c8c5e686954d902c6b3e8d2b044ae124
SSDEEP 384:zMUlbRPu5MWDCzym6u48od5SBBzEoDZoDji/Vwr:jbRvxzw
TLSH
T149C391E3A028785D75BFD35902DBD069997CD650621A401ABA1C8DD0E70828EBFFF8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PSList.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tools\PSList.txt
Size 7KB
SHA256 8f26c8ef2e889825a69a48c1c1b618d2555725a8b0005674c4e9599bb1df3549
MD5 43f500b310d23d401147c4aaa4010b55
SHA1 5c11f038e7ca900da7a6f5126f8be4e509a64fd0
SHA512 5646d51de5685638d5ec18bddca0878ddfa7c1b6cc12bf2643c3a487fbb367a4fccd0363e22eaae76de1a737f8ccfc0ef6859b90416c78f54ecb8cfcbf72b005
SSDEEP 192:/ZAUbIax1+Z8iQdQUlUdkvQtKouPVvDdghNJu/o:/WUcaWZOo8ouPVv5gbEg
TLSH
T16CF1EC08EF2FD588E13CF2825232A2A36805F16686DA4C5F715F8DD19B6B445FBEE017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PSService.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tools\PSService.txt
Size 121KB
SHA256 86981f17efffc63733b2a948deb1ab76a6470f2dfc0870983dee7c3cf6e2e00a
MD5 1a31e95c72721b3fd4c796c0ad95f44d
SHA1 368ceb6d0c26170d997df3d1dca0ba3897eed6a3
SHA512 db79dc03ef2cc2e2f8fbfedb1b7fb31a2480070ffd883be25e7e24e3fd17c89f19fbb9fdf8de740efd05678e832bd68f19a1b6c80461c0fb6e0934900244bc29
SSDEEP 1536:txbo74e9S7G0pD7RfKntRt0Iwm/vVRs/hNMX/0UTz5:taua0pD7hsvtcm/vI5+X/x35
TLSH
T10FC322038ACD634D0F1782623E3A5067ABDE558E69B05F1139ED39E873AD55CC3A18EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PipeList.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tools\PipeList.txt
Size 2KB
SHA256 130bc1c8e28ed7df349a2cd7578fdd25ba01cd6a0e1c1b3a488bb44f1e323482
MD5 42f0b0a69e61f102769c230f8c3736fa
SHA1 e745a9e470997f556aa91b4291699545446edd3e
SHA512 89035b27ea775bbd906dfe0117551c3737db7e07a6b32944274bd3dd6d3361a02c62557be2e52fe31626a8ff94c10e21385f68701c208759097ca13c9a5f61d6
TLSH
T12B5136262E5C313866AFC31A62537071C858E4D48097F476BACCFED4A7B5D801FCE589
MD5 SHA1 SHA512 TLSH

Submit Download

PortsInfo.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tools\PortsInfo.txt
Size 130B
SHA256 b3df50444861630240f4ab67d33416c8f57bdf8633dabd1b5a6eb5c562eae929
MD5 a71e5ba84c784766d47d761327386b8f
SHA1 639bd53c2cf68b2f8d6645711f7d326d56db4bcf
SHA512 8f07bef220ced52b2a4ae121ce1f51426891bdb7e400873ee136d50e28d514393b6d38711a999a6a80e2431892d7d88845fdcd56ded86e5987dceea55003e4dc
TLSH
T100C01212020071CD64190601415DCC80E859006F1E0D1019704C9A4003F032D1D55804
MD5 SHA1 SHA512 TLSH

Submit Download

ProcDetailsInfo.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tools\ProcDetailsInfo.txt
Size 232KB
SHA256 634869d7db07558f3e8f95c5302562ec0d2bb3b54bffa4d992c137fb53776091
MD5 b8a08ac5be472320d317eaaa06701390
SHA1 44f16e7c15f8a60a30ca96bb4c08b46da3134775
SHA512 583b87568ef73b4a7a667cb2d5beca3a32d55a5b742ab00e52541687259b1c58616206e914ee3209e2af9b3d6e9eaad4676410ce4c499e7ae8dd0036667587de
SSDEEP 768:JHr/RLTUXSsMv+ddYZ6B+vdzrZVdqZD/+xCTM0wgZNWxZ5I:JF7vO
TLSH
T1DA34C638C8B5CCD7C5D92975592E4F8B6222A0AB2D543C00779C588DDF8D42FE933B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProcInfo.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tools\ProcInfo.txt
Size 4KB
SHA256 99f017ade7e3cb2545a3bc7337d8016f27e7135809cf608c9206fea91f3e60be
MD5 a8ddd7ac8d84f05a8ba7322bc65925b6
SHA1 4c868dd754d08ab76dd18600bb25f63a63fd2407
SHA512 e2ea58574aa94efb4e7562ebaa16059a8695bede1988a938a44aa006553dc29323ab5514500b120199032dbcf3d092e6790d6f559d868813960a5b9f67003c80
SSDEEP 48:cmNx7IQ3yjzjRA9AlA2QewHFHA6A/oZGB:gzjaGu7xHFgf/kGB
TLSH
T11DA18B1832496279C1019FBB07B032595ABF8212A1A764F5B4E97CD87C1842CD4EDBBF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SystemInfo.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tools\SystemInfo.txt
Size 2KB
SHA256 5d3e68af7b8b99d1099671e9f75268653b447c4ab2a98a4c7ca85be5b561a4d3
MD5 d419f6618e450662ed10c419c49c9dd0
SHA1 dc70555c8b3af2ffedd805f0c1e30b3199e04e49
SHA512 7db095f9e4ec2cbbe19fafaafb89d368f1bfaa3b6b1ddf13bed6ebd68707db658557fb01ec23f09f687354201ca204536ac90bc2b9c97a92355de97b67c7ce73
TLSH
T1D45177F86348B0203A6BD7652353CB01F26081C752E58535309D42801FB6298D3E1A2D
MD5 SHA1 SHA512 TLSH

Submit Download

TCPvCon.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tools\TCPvCon.txt
Size 20KB
SHA256 afcba17571b9daee42c73fe40a5afff03a4eaa1c6cfe7798ea3871e574c3d411
MD5 5c5736debc23fd3fa9af0d332df54ee6
SHA1 1fc2eccd441561c84f5accf87b24a299e5d22b50
SHA512 bba24a1e8a86126f2f4232023b8945a999a3dc4fb495bbb100fdcc6c3b54041c1ba4b7b4ce164861934454897fec27ae4bd96eeba2acfa7a7fe74b9f0c012287
SSDEEP 48:tytyiZyOzEv9iGzEv9iw0yUQy9yHyKyWyhyJiBi3iRii+i6i6i6idiiiiiii/iiw:ZMapccpIRG5MNkkE333TXBQDDQ
TLSH
T167A25F977A01B88BBCFF105B303E88B5FCB68C4A6186A244E64C449DDD357999334FB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TaskList.csv

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Xwfpsfrw_2026-08-14_05-10-18\tools\TaskList.csv
Size 9KB
SHA256 cae0f16be4d914741bf2c2bdccbf867e97bb50482b66f3cc63074e22c15f3f8e
MD5 c0968eaa4ff5b3002bcf891dd951ce92
SHA1 c65548fe07fc1082ed59add0b41182a71f29bb1a
SHA512 5b8911072c897999a2740f08ee02c47a4e3f25fc13ec96c6127a9f8399bdb4b6c9649e4cd8acedcdeeedf15c48e429c41d78a88ee4da2318b324abd21fd36acb
SSDEEP 192:zARlQ0uOXzxx83O82VJ6ItPY+5wE0KEIuhczMQMFS0:EFzSU5aIwqLubQMr
TLSH
T1D112491E41D2CBF20BE6F862EF41E31F5159E52062C66E5FB6C5532EB0E092C9037A83
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_m2xcodg5.ihe.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_m2xcodg5.ihe.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

memory/9008-3397-0x000002715B5A0000-0x000002715B5C2000-memory.dmp

Download