385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5

Analysis

max time kernel
150s
max time network
117s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 04:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
Size 8.1MB
Sample260814-erenjsvbja
SHA256 385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5
MD5 0caf7d82c382f631f5858814d3f6dbe1
SHA1 7b4ffda0e40a6fc45a8194ac63a69b7cfe8d7095
SHA512 ff219e076db5c979bdac2b7831d99f9b16751a70566139bb7b0361a17b35963d2786664c078afefca105a800f194ac3ed760b92bde017ea1abbf84eeb5a072b9
SSDEEP 98304:vNZ0V6Lc6LpAN9B/AmwZSrOkqIfLnSpA4bgs1QeACMM5cU8s4c:x7OADk3fLnSpA4bg0QevMicUn4c
TLSH
T147867D01F79654ECD0AAC474C6564A22AB7178CB1B30BAEF02D482792F67BB05F3D719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution persistence

Malware Config

Signatures

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File created	C:\Windows\system32\Drivers\PROCEXP152.SYS	handle.exe

Sets service image path in registry 3 TTPs 1 IoCs

This determines the executable launched when a service starts. It can be used to establish persistence.

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Windows Service

T1543.003

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\PROCEXP152\ImagePath = "\\??\\C:\\Windows\\system32\\Drivers\\PROCEXP152.SYS"	handle.exe

Executes dropped EXE 7 IoCs

pid	Process
6588	autorunsc.exe
6628	pslist.exe
6728	handle.exe
6764	PsService.exe
7016	Listdlls.exe
7044	tcpvcon.exe
7124	pipelist.exe

Drops desktop.ini file(s) 4 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
File created	C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
File created	C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\$Recycle.Bin\S-1-5-21-2301830172-776172150-2531349243-1000\desktop.ini	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
File created	C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\$Recycle.Bin\S-1-5-~1\desktop.ini	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe

Enumerates connected drives 3 TTPs 24 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\A:	handle.exe
File opened (read-only)	\??\D:	handle.exe
File opened (read-only)	\??\I:	handle.exe
File opened (read-only)	\??\J:	handle.exe
File opened (read-only)	\??\L:	handle.exe
File opened (read-only)	\??\P:	handle.exe
File opened (read-only)	\??\R:	handle.exe
File opened (read-only)	\??\Z:	handle.exe
File opened (read-only)	\??\B:	handle.exe
File opened (read-only)	\??\H:	handle.exe
File opened (read-only)	\??\O:	handle.exe
File opened (read-only)	\??\V:	handle.exe
File opened (read-only)	\??\G:	handle.exe
File opened (read-only)	\??\K:	handle.exe
File opened (read-only)	\??\M:	handle.exe
File opened (read-only)	\??\N:	handle.exe
File opened (read-only)	\??\Q:	handle.exe
File opened (read-only)	\??\T:	handle.exe
File opened (read-only)	\??\Y:	handle.exe
File opened (read-only)	\??\F:	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
File opened (read-only)	\??\S:	handle.exe
File opened (read-only)	\??\U:	handle.exe
File opened (read-only)	\??\W:	handle.exe
File opened (read-only)	\??\X:	handle.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Discovers running processes 1 TTPs 1 IoCs

Running process information can be used to identify security tools or plan follow-on actions.

discovery

Process Discovery

T1057

pid	Process
6656	tasklist.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
5064	powershell.exe
1492	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Network Connections Discovery 1 TTPs 1 IoCs

Attempt to get a listing of network connections.

discovery

System Network Connections Discovery

T1049

pid	Process
6280	netstat.exe

Gathers network information 2 TTPs 3 IoCs

Uses commandline utility to view network configuration.

System Information Discovery

T1082

Command and Scripting Interpreter

T1059

pid	Process
4156	ipconfig.exe
6280	netstat.exe
2552	ipconfig.exe

Gathers system information 1 TTPs 1 IoCs

Runs systeminfo.exe.

System Information Discovery

T1082

pid	Process
4084	systeminfo.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
6588	autorunsc.exe
6588	autorunsc.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6628	pslist.exe
6728	handle.exe
6728	handle.exe
6728	handle.exe
6728	handle.exe
6728	handle.exe
6728	handle.exe
6728	handle.exe
6728	handle.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
6728	handle.exe

Suspicious use of AdjustPrivilegeToken 36 IoCs

description	pid	Process
Token: SeDebugPrivilege	6588	autorunsc.exe
Token: SeImpersonatePrivilege	6588	autorunsc.exe
Token: SeSecurityPrivilege	6588	autorunsc.exe
Token: SeDebugPrivilege	6588	autorunsc.exe
Token: SeBackupPrivilege	6588	autorunsc.exe
Token: SeRestorePrivilege	6588	autorunsc.exe
Token: SeDebugPrivilege	6656	tasklist.exe
Token: SeDebugPrivilege	6728	handle.exe
Token: SeDebugPrivilege	6728	handle.exe
Token: SeLoadDriverPrivilege	6728	handle.exe
Token: SeDebugPrivilege	7044	tcpvcon.exe
Token: SeDebugPrivilege	7016	Listdlls.exe
Token: SeDebugPrivilege	1492	powershell.exe
Token: SeDebugPrivilege	5064	powershell.exe
Token: SeDebugPrivilege	6280	netstat.exe
Token: SeIncreaseQuotaPrivilege	1492	powershell.exe
Token: SeSecurityPrivilege	1492	powershell.exe
Token: SeTakeOwnershipPrivilege	1492	powershell.exe
Token: SeLoadDriverPrivilege	1492	powershell.exe
Token: SeSystemProfilePrivilege	1492	powershell.exe
Token: SeSystemtimePrivilege	1492	powershell.exe
Token: SeProfSingleProcessPrivilege	1492	powershell.exe
Token: SeIncBasePriorityPrivilege	1492	powershell.exe
Token: SeCreatePagefilePrivilege	1492	powershell.exe
Token: SeBackupPrivilege	1492	powershell.exe
Token: SeRestorePrivilege	1492	powershell.exe
Token: SeShutdownPrivilege	1492	powershell.exe
Token: SeDebugPrivilege	1492	powershell.exe
Token: SeSystemEnvironmentPrivilege	1492	powershell.exe
Token: SeRemoteShutdownPrivilege	1492	powershell.exe
Token: SeUndockPrivilege	1492	powershell.exe
Token: SeManageVolumePrivilege	1492	powershell.exe
Token: 33	1492	powershell.exe
Token: 34	1492	powershell.exe
Token: 35	1492	powershell.exe
Token: 36	1492	powershell.exe

Suspicious use of WriteProcessMemory 16 IoCs

description	pid	Process	procid_target
PID 3248 wrote to memory of 6280	3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	91
PID 3248 wrote to memory of 6588	3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	92
PID 3248 wrote to memory of 6628	3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	93
PID 3248 wrote to memory of 6656	3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	94
PID 3248 wrote to memory of 6728	3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	95
PID 3248 wrote to memory of 6764	3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	96
PID 3248 wrote to memory of 7016	3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	98
PID 3248 wrote to memory of 7044	3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	99
PID 3248 wrote to memory of 7124	3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	100
PID 3248 wrote to memory of 2552	3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	101
PID 3248 wrote to memory of 4084	3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	102
PID 3248 wrote to memory of 1492	3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	103
PID 3248 wrote to memory of 4156	3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	104
PID 3248 wrote to memory of 6012	3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	105
PID 6012 wrote to memory of 1556	6012	net.exe	106
PID 3248 wrote to memory of 5064	3248	385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe	107

C:\Users\Admin\AppData\Local\Temp\385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe
"C:\Users\Admin\AppData\Local\Temp\385c2cbd5fc3cfeec25256cffe02a72d6d4b3c0986756fef65dd9c9522251db5.exe"
1⤵
- Drops desktop.ini file(s)
- Enumerates connected drives
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3248
- C:\Windows\system32\netstat.exe
  "netstat.exe" -anob
  2⤵
  - System Network Connections Discovery
  - Gathers network information
  - Suspicious use of AdjustPrivilegeToken
  PID:6280
- C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\autorunsc.exe
  "Aralez_Grhzdfjn_2026-08-14_05-10-20\autorunsc.exe" -nobanner -c /accepteula
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:6588
- C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\pslist.exe
  "Aralez_Grhzdfjn_2026-08-14_05-10-20\pslist.exe" /accepteula
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  PID:6628
- C:\Windows\system32\tasklist.exe
  "tasklist.exe" /v /fo csv
  2⤵
  - Discovers running processes
  - Suspicious use of AdjustPrivilegeToken
  PID:6656
- C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\handle.exe
  "Aralez_Grhzdfjn_2026-08-14_05-10-20\handle.exe" /accepteula /a /nobanner
  2⤵
  - Drops file in Drivers directory
  - Sets service image path in registry
  - Executes dropped EXE
  - Enumerates connected drives
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: LoadsDriver
  - Suspicious use of AdjustPrivilegeToken
  PID:6728
- C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\PsService.exe
  "Aralez_Grhzdfjn_2026-08-14_05-10-20\PsService.exe" /accepteula query
  2⤵
  - Executes dropped EXE
  PID:6764
- C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\Listdlls.exe
  "Aralez_Grhzdfjn_2026-08-14_05-10-20\Listdlls.exe" /accepteula
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:7016
- C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tcpvcon.exe
  "Aralez_Grhzdfjn_2026-08-14_05-10-20\tcpvcon.exe" /accepteula -a
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:7044
- C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\pipelist.exe
  "Aralez_Grhzdfjn_2026-08-14_05-10-20\pipelist.exe" /accepteula
  2⤵
  - Executes dropped EXE
  PID:7124
- C:\Windows\system32\ipconfig.exe
  "ipconfig.exe" /displaydns
  2⤵
  - Gathers network information
  PID:2552
- C:\Windows\system32\systeminfo.exe
  "systeminfo.exe"
  2⤵
  - Gathers system information
  PID:4084
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  "powershell" -command Get-ComputerInfo
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious use of AdjustPrivilegeToken
  PID:1492
- C:\Windows\system32\ipconfig.exe
  "ipconfig.exe" /all
  2⤵
  - Gathers network information
  PID:4156
- C:\Windows\system32\net.exe
  "net.exe" share
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:6012
- - C:\Windows\system32\net1.exe
    C:\Windows\system32\net1 share
    3⤵
    PID:1556
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  "powershell" -command "Get-WinEvent -LogName System -FilterXPath '*[System[(EventID=7045)]]' | ForEach-Object { ([xml]$_.ToXml()).Event.EventData.Data | Where-Object Name -EQ 'ImagePath' | Select-Object -ExpandProperty '#text' }"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious use of AdjustPrivilegeToken
  PID:5064

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

System Network Connections Discovery

T1049

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 1KB
SHA256 406c069f06906c45fce3fbbc1bfdf027e5b0256b0e7a432ff1ff2153c8ceaf82
MD5 ba03e5c057937687f2999d19091460b1
SHA1 a920175f78e8f3902d600d73ad81938f33dbb653
SHA512 8c1b624ecb6922239864924ba9ef4d15517653483add4cf2e4bb14fbfd53a1bab64a5146b2f0306ed1fa6d54eb1dc5caa5029480debc15802085185e7f9be5b4
TLSH
T19C216633F3CD8624C89A413A10CEAC1036B687CB40CECF5B7B84E155A43FAA9DE61260
MD5 SHA1 SHA512 TLSH

Submit Download

Aralez_Grhzdfjn_2026-08-14_05-10-20.log

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20.log
Size 2KB
SHA256 9465f987a0cb671549011ba6e60faf9bf3fa8afa9069f3745da73f2607191d83
MD5 c2a5540e95a0c7cc90d4915b9fade909
SHA1 7e7da7f9a10a2f29c48265778f361a9d3d6106f9
SHA512 eeb659f02480d0894044d5de48c9d65f566b1d11493b0fe634d7ccb6da93737cfc01cea9ca30232cea0a9593c95d249b324566e7282f78f51305c3dde04895b2
TLSH
T1585137972CFD58B38C1BF448D28F6F909A74F22B02A36E04378518B9ADB4D652D7E00D
MD5 SHA1 SHA512 TLSH

Submit Download

Aralez_Grhzdfjn_2026-08-14_05-10-20.log

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20.log
Size 4KB
SHA256 db7807ca19e9290b24bc7fac547e9b36d199788b02a91266dd90c0f453cf08fa
MD5 6b3b01292d8ddb72d1c82e16d0850cea
SHA1 a92e95add6dfa34e85829310bec321cb614391d9
SHA512 41fc35e058f67d63aeec28c0dfd63a799bd7cd4aa845e010762636d83aa260ca8dc55d8674ab52b2bac805a47210a43425cde827ed9f41f605030a3d40431ba2
SSDEEP 96:ozjzlI4+eEfKvQtq9iDrEZmlEHXEHJorEGJokEwJoOEZJoxEaHDonNoDs49vsh:MHi9fPq+JWxJRnJnWJk5DoN+M
TLSH
T116A109876CFD48B38C1BB458D24FBB945A74F26703E36E04278918B9ADB4D592D3E00D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$Boot

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\$Boot
Size 8KB
SHA256 857f409020dc3c893cbef1c7e4d64669185aaef5c6286bf24832f3885c24a88e
MD5 798b6af6059e0099ea12f3a48c203e78
SHA1 d684244827a4226503b16758cb723e7ad2753913
SHA512 9a0f80a2d2f94bce3c994b18ea7c7d54f21816e724c7b2e7839ae9095daac6d32f35fb1a97e719fa72aca1e57680372b90f6b07832774965f962ca6712bba173
SSDEEP 96:v2aNcdCmGUyH52j0V6nPt4ihC/U8remKrQUqjfyJB7y4AIwVoouEJQS:P2d/5yHEj3Pt4ihCvresUDBm4lwV
TLSH
T182F1C4F72802280DD0826779DF4DDC266CB7ACD4AA7087B4A190793A210178026BFFB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000D0000000118FE5E77313C

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\$Extend\$Deleted\000D0000000118FE5E77313C
Size 83KB
SHA256 518b39589702fddfa16647ebe0a75975bc3d3ee9e6add898409dc4a921d128fe
MD5 0b44f2b588e1278a46a7284d3826cbad
SHA1 d128f630ddc51ff34ead3e7742caa91611582cec
SHA512 6fc0f085ac36b31df4b45028580f19557741c18b2a9a5d8a1a268afd2a98285b97b627eb822f5ff90ad10084e91bd30156a5ff2aded182987019f4b570e0ffea
SSDEEP 768:RkdGUNjAiRjEbY1FLl2uii23UbsJm3yl8LsFMPJH+NwXtUCNVbOmgsfl:Rk96iBE814MPJH+NwXtU4V/
TLSH
T1598398243AF58225F2F39A715EF1D6999A72FC529D128B0F2181734D0931E11E8A7F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$ObjId%3A$O.idx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\$Extend\$ObjId%3A$O.idx
Size 4KB
SHA256 12acc6fbc15907509a4192939a9ed81c959e6205ee8ed544592c95e42baa9b12
MD5 ffbf0b73875df1756850db78f6496332
SHA1 a74d7e82427e9c19b7ebbfdbd3ec72e3bf694f39
SHA512 f21e891d5cd86df62ef1f4dee1a8fa7fc7e71d9c57130294998fa12eb5c55f4dcc6075db8e61d8335aae634d4bcd939be8a122990f0d2dc65d3ae9de84edd59c
TLSH
T1B1810AE332BCA63DC7561272B1B0A03483A68BCF46F69B4D65363950CC8FA575439BC6
MD5 SHA1 SHA512 TLSH

Submit Download

$Reparse%3A$R.idx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\$Extend\$Reparse%3A$R.idx
Size 1024KB
SHA256 c6f4cbcb21933ea0e9e088dcb11dbf4c94c4e42a6c0fc80acac6c9dfdd48a220
MD5 6ded4ebf21abe222a96e8877b73bb541
SHA1 d9cac9fd85efa312e7493bf2c7ac1e4611d1af32
SHA512 37a601040e9ffb22eb28a342be0d0a620e916aeb6914554ec7efacfd26834aed71b23daff7fc0b27b3567deee9deb6496b091561468d961cba7c1e46a3f1a16c
SSDEEP 1536:gYYYYYe16k5+wjWg0fcU0LLLLLLLLLCdPnex8Uyios7fbhNWmRooGZseiQ153nQC:gYYYYYeF5+jPex8US3nZsex5Kwx
TLSH
T1862538097B82863EC970D774AAE31F69B7A6D8B686E64B5E034090127C837713375BDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$TXFLO~3

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\$Extend\$RmMetadata\$TxfLog\$TXFLO~3
Size 10.0MB
SHA256 6ebe2f0e331a454193cc3dcc70ac98ef9991de2d91fff0f3efd50e0ff1c09821
MD5 bb93460f4af8c6220b4fe4b8a17a78be
SHA1 774d81ba84cc127c343df7ff0ecc518dae4b2ec0
SHA512 33d8042200a6bc8250e58a2f7935d0c435c8dd9a8e15835ea969b7f782534e6b977495ad08c6ce82121fd72fed4b901fb0a9639ac60e51786438fde8c4277860
SSDEEP 24576:GMr3M0pTihFmhlCLvWEXUFhVNFkbk00f+YiF6/XV:JM0pTi/XQn00f+E/XV
TLSH
T1C6B6A71467E80717F2F34F3598F257277636F88AAE418B8E004663584EA3B61D9B4F1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$TXFLO~4

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\$Extend\$RmMetadata\$TxfLog\$TXFLO~4
Size 10.0MB
SHA256 963d4ee30fe1a112170d47252adf5f2e00180247b329a43ef172c93ea2600f6a
MD5 a2225c1e9d5a2e2e0c56f9c2abd89282
SHA1 06976f50aa72fad4ac56525585256374210ad022
SHA512 a7e9081f472499246cc07e2149d9edca9c22656851f3e026cb74d0a7c4549e4f14e2c9f9d1baa6364de4469977b649d33ba440cb0544f9ee7701c6f36dd56a63
SSDEEP 24576:sOqqqfqX5qXAY4bfZ7sFGls71rJZTVKi105aSeCTTTTTWzD2DTaLZn:dZ7sFd2Di
TLSH
T10DB6861067E80717F2F70B35A8F256167A36F88AEE51CB8E014693584E63B50DDB4F2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$Tops

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\$Extend\$RmMetadata\$TxfLog\$Tops
Size 100B
SHA256 0b0744f3e1064522e4c86ea4d8b95ff883211bad89d1ce3f4a8c28255a620975
MD5 b9ad1170ef8cc642ba8b27fbb03dd205
SHA1 91f08f2ed92a32e2f948da542640e3e7ca307a63
SHA512 4dbd3d694f0e7d7008a91c08c0c574c63fa5c2bd25f6586a65436420caeb18ed35122cceac55dc09bb918c7d19299701530c4cf98be3e26ce029db5d5372d0e4
TLSH
T167B002517044C116C51101310FE0C2F910103E45AD199417304DFB0D5C35A151969141
MD5 SHA1 SHA512 TLSH

Submit Download

$TxfLog.blf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\$Extend\$RmMetadata\$TxfLog\$TxfLog.blf
Size 64KB
SHA256 59b18e7274c9cba59f56cd69a9e1bb1781e22faa574316c82d3568a8db7322e3
MD5 981dc039d9be7e9cbabd7c0d5daebf67
SHA1 2d71a1641a67b120ff1fbde84b5894eecd3357f9
SHA512 6f0408de71ef2ebfc54ced68f323c2259a1d70465d9a6a6416523508997bc7409c0a650ba79cbc33bbfb1393992522ffd02ff48b110cecd912e54dc8af68cf12
SSDEEP 96:F5tTtudC/F5w0NCaYO+PffCmlunE5t2tbdp/F50NCaYP+PfICGn:FzVFb2lbWGb
TLSH
T18753D394BAB1282DE55DD2B394FF61A37335DF2149CA460E6031DB3A6971A8F123CF11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\$Recycle.Bin\S-1-5-21-2301830172-776172150-2531349243-1000\desktop.ini
Size 129B
SHA256 e1b9ce9b57957b1a0607a72a057d6b7a9b34ea60f3f8aa8f38a3af979bd23066
MD5 a526b9e7c716b3489d8cc062fbce4005
SHA1 2df502a944ff721241be20a9e449d2acd07e0312
SHA512 d83d4c656c96c3d1809ad06ce78fa09a77781461c99109e4b81d1a186fc533a7e72d65a4cb7edf689eeccda8f687a13d3276f1111a1e72f7c3cd92a49bce0f88
TLSH
T169B09B0A41476664B05ED15DAC60E147117D547A4D14A2008EF0B345D1A33550778D69
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 62ed592dc9453a002642b39a1b3dcf23c8fe2d6c9a00beb3af999635d1a8ef41
MD5 a059919c89bbe6d3f15a8950e3db7328
SHA1 20cbb473d6ab4ce9fc75e95e36dc428f83877aa2
SHA512 df2b6269627835f7a1616ac141a34d087e48f2605de427e7122270aa747de021e1f6a695bba2caa358aa4cb5ac9fa9558b87623122b74fca8b30f7e3b7a400a5
SSDEEP 96:bVfFtejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/9bbEOVpZf24JkMfXSFR+CFqrn:bQH+bF+UI3iWGVoWN3qL/9VVV63
TLSH
T17424EE4E5F343722CDBD913668E644A35C7CF03FCB5366DA686114B5CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History.FileSlack
Size 20KB
SHA256 1f55ffcddc1fce4d4ab43d09da1f8e58730a19bf3aadd78331c3eaaa8b9b4410
MD5 442acb167f97214178da962aa76cddb6
SHA1 575f212b555035a6a30fea7f49836f4ad72868d2
SHA512 833c20b9f4fc0c18334f880a942f02a14777df1fa13f663df5726118730c6fc3f9d59406a93ed1113b46a3616b9d54e23cd4de31560b59769bb0fc9f6e507aae
SSDEEP 3:RRD:LD
MD5 SHA1 SHA512 SSDEEP

Submit Download

COMPAR~1.PS1.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\AppData\Roaming\COMPAR~1.PS1.enc
Size 730KB
SHA256 8f0d984a37652fff8c634a6d2903516dc6716e50c3abcb388fb61a504c494db6
MD5 9c4a0ec07a32edce2692659b2a594dca
SHA1 aee39e1ffec947d315fa4e42bee2f472da9de0ad
SHA512 36bddba2249d0c09606475971ee820b9c4d89c5d28304f44291858314e5883638c48f02897894f955c91cd5cb74b2937e9728fbe08209110b04624d14afe7b0e
SSDEEP 12288:UEsY7EjXeVd+M1cB+gNUad3Y4KlFKj0txk2EwBlpU6TynXW2OHUUn6XiWzmXHs0n:UEJ7ErKIM1cBfNUkY4cFnAvt6TmWlUKr
TLSH
T18AF43394BFB5A106575AABD6FFE9F56F00420089F3FBA32D6E591C160E2A4C0F1B540A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ComparePublish.ps1.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\AppData\Roaming\ComparePublish.ps1.enc
Size 730KB
SHA256 0d21609bd874b3bc690ee6935a1256b808b1274cb6dcb817810420774fed0aca
MD5 b73c75f4e7f2f7be077325fe33134ea6
SHA1 60e28f8111328cbfe6e4cab0c860dd77467b7037
SHA512 382f9389ffcde6ae2487164063e724e5cb222e074bad84b289f4d94bf2f9f303fdfcb88d922a8e9a24fdb310e14de9c7eb91a17d5653a988062d640f39aa5afe
SSDEEP 12288:a+cYFw57XMBzk5cJZp/ENiPDgC7Llcu7gf0p1GmoFzuNNc7ov2TZFSGUM22h:a+FwxMBzkGnpEC1ckg7meyNckO1FSG
TLSH
T188F4330D5AEC6E6D7378B3854A415746A5B6EE62A0BD87393376382DC2073C3A5CCB30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EXPORT~1.PS1.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\AppData\Roaming\EXPORT~1.PS1.enc
Size 756KB
SHA256 d7b440d81057743f1281919c1cbb2ef5b515bbc8d6cd999087b3e3a398d32d46
MD5 c784ac58c8951f578215b9b1c653cccb
SHA1 93415cf689aed257df7f541fd5fd6f6fcf767b83
SHA512 10e8d15d49c186d0ea50ffaf505208ba3218f117980ccee9657d9fbda901e1e48d75e1943e245af9c346d34f0ae114b33a5ab0c3561dc6c69cc12fed71b2311f
SSDEEP 12288:J04uT3jui3ZeE5C6ZSesIXDy4rlIrSK3GICDZz7B/OL6SoHxWUt/7UQPYlEl82T3:J0ldJC6ZS1ITn5IGOERB/LrW+5Q604cW
TLSH
T1F3F423DB3A68D04C4C678C1ECBBE09DECEFBF3E14585C18E7B2AA029C919B884551577
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ExportInvoke.ps1.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\AppData\Roaming\ExportInvoke.ps1.enc
Size 756KB
SHA256 99b933cd4a2b890edc2b17c3cea34b9649590af005fbe312a433fc52c2b46298
MD5 846e9be72a8ce23a17ad5a5f06ca8b2d
SHA1 969fe59221d0d5b82ea98369e6a95533ae0a4af2
SHA512 df687fc1d681d3fd1ab087916b5042c084cda86fbaf4201ba2807f889b14e4b7dd3b5c2f71c13b1f7dd586d0cbafaded03ffe1dba3ff1148000bbf50fffbce3c
SSDEEP 12288:SRcwzimG/9u+XVr3XLM63kcpvSmQl6vrddGBZ3QuvGdTkCMTyjXvzdR7q4jLsfdt:SRKo+XVjw63tpnDxdOxta1XJJq4jLs1t
TLSH
T102F4336BF80B855AC30BA61EC35B13C774754081ED6F99212079650B90BD2F3C7BAA7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EnterShow.docx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\EnterShow.docx.lnk
Size 636B
SHA256 95e0d2e3a9f83293b7acc6e5472716d62378d0c33f22e94efefe334b46fb2517
MD5 d1df89ad71a47efea77b820ce8f5cf0e
SHA1 5909555d581c22eefb536372fbbd434e5d1d41d5
SHA512 9191c80d930b19a93a6cddb97d0cb8e8f3d55f67696d9d14ca2aee3038bba4a57de072b050915ee6173eda30122b11c5983eab08cb817ed435b3c01819591094
TLSH
T1ECF08B8012F62B1EC36146B703368388C6767E52E8A1D78C5922519C5C5DE20CA59F7A
MD5 SHA1 SHA512 TLSH

Submit Download

GrantStart.xlsx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\GrantStart.xlsx.lnk
Size 641B
SHA256 7d535c868101bc8840680a2068e67f6c460bb6904547ead9c361f9e662a1aff6
MD5 0bf27555ac9b91ebfcce426e06e532b2
SHA1 985807bc25e2129b3dd343ea123c0f9a6a8114cc
SHA512 5ce696bdf81fa52a400c60627ab05b19c76bced894286a03cba04fcfb7ad42ee138a99a2a355411778d8ca4a2227aeb3f41423d685879e0ebf7b0781172daf8f
TLSH
T173F0C6801AA50F4FC375063616158355C1727D5BE978DB0C5831519C0D6FE10CEE4F3E
MD5 SHA1 SHA512 TLSH

Submit Download

SkipResume.docx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\SkipResume.docx.lnk
Size 631B
SHA256 cb068b9c252bc72ea82fcefd5c9f18d18ad8196f6c561dcaf6270d52c5f6910d
MD5 9b9450d2a00f03ed0ce258e4907afe41
SHA1 d28b6d0c33fab977217d226be9440b42aae70c01
SHA512 7dd52ec5a579a68f8461f6e0a9ac9b22cc155eece92658c97bc04858e6d4cbe9881388201dea05cbe77c3ccd1923d645a1a2dd21173d1dcd72b83435d40d34e7
TLSH
T137F08B0325EB3F0BC7E24677037D8368C2363E02E8A0434C6575428B4CAD790C8B0E6E
MD5 SHA1 SHA512 TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
Size 174B
SHA256 cdb11958506a5ba5478e22ed472fa3ae422fe9916d674f290207e1fc29ae5a76
MD5 7f1698bab066b764a314a589d338daae
SHA1 524abe4db03afef220a2cc96bf0428fd1b704342
SHA512 4f94ad0fe3df00838b288a0ef4c12d37e175c37cbf306bdb1336ff44d0e4d126cd545c636642c0e88d8c6b8258dc138a495f4d025b662f40a9977d409d6b5719
TLSH
T119C08C38D2E9322141728D33BCB4A002DBB1F8212C1BCF9E06C0918B08A0A09EB32B43
MD5 SHA1 SHA512 TLSH

Submit Download

SKIPEN~1.DLL.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\AppData\Roaming\SKIPEN~1.DLL.enc
Size 602KB
SHA256 40f2b3164a67c635766ba5555c48988ed00a6336a4ab4e347db14d3f943bdf7c
MD5 676b5312b8cce2db63eaf67c63d5ba54
SHA1 c86480c22d815542566584a1b9d65e490cf3a8d2
SHA512 9b0df7c988fbac3174a8966d74804fd753b3a197d8887c07a76e64e4d0c31fe5a306e92d8cd6cf38dfc2923fcd653cf1c7476d23414984d46cb5ca55af2996f9
SSDEEP 12288:VUa68ozxrWpAAOebFh4zJNkK3ErQ8WIp3hSScCTb8ke:+gKCOqFh4zbkK09/1sS0
TLSH
T150D42315333CDAA90164294E65305F65C8643C261FCE4AE957E6F2BCE5BF0F2A8DA01F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

STARTP~1.EXE.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\AppData\Roaming\STARTP~1.EXE.enc
Size 653KB
SHA256 f0efbd1c41a69537f816707f934466e51562049663f3dc6d612d9ce7a4b70796
MD5 c4e1bd73feaa5316511f3b58b93658f1
SHA1 3b64068f5eeb09aa2a4b4b5574c9941ebf436d6a
SHA512 4a3eda0b37d71216c7438f6cc6e2134359c0537673f4ede4ee7d40af63e1b334af50ae78893ed7c8d2648dd1d19b3367979d2e87b139b0466dfb2749edb129b4
SSDEEP 12288:3gu3TIrqldOONq8Zn3gIai4Ue6XT/2ZCJ6o7XTwOoAxPU84xyg:3FFbOOU8Zn3grUeE/2ZVsXEOoo14xP
TLSH
T112E433F98C9094EB94653C6B21F79C196F827E64416A8E3DB530D3DD006E23AC94C6BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkipEnter.dll.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\AppData\Roaming\SkipEnter.dll.enc
Size 602KB
SHA256 88c45afcad7e6a6e624f964953952622ec45284a63736837fe1ca1f707357194
MD5 487b5330592e5e0df1830b83410e12fe
SHA1 bfe55f8e6d0d16f04652070bf8be4b40203e0a11
SHA512 7b349e750088aa7a0b9cec82d8c7030c221b9460eb2891d1b0c26acd9ee76a483455e93d50b7a8c15718203cb16cbcdd4cb0e955905398621029a75209e79a37
SSDEEP 12288:Fl+w+Qa4vbRPbRZqzacXl0b1tgEf0vZNvKWY3FCe2/N6:r+wzxvbRPbReaXPZfhWMCen
TLSH
T152D4237EAC093F760BE82DC5DE83B75666CB8265911DC8343234BD6D21B853CDA63788
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartProtect.exe.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\AppData\Roaming\StartProtect.exe.enc
Size 653KB
SHA256 f9ce895bb61674c376668bef976f197964a7afc600a9f8e42fc575dde6b3876f
MD5 ea360ba0f8e38d5a6eadc019647f0d24
SHA1 fc2097af0fd7d6770f0298c892e92368dbf6e456
SHA512 bc8b7790cb8c89b081f7384dd56c2b07918b79523dce5087c53209e9151ecddd7eb2c8912a7f6a63e556d18dc544bb89ece24d61c51c406e7536ade1d5df995d
SSDEEP 12288:/bBWaTRmA3uOobx45yvtyGkTblKHXeHQryaOszqu9fMROA66xF6iZe:/bBLMAeOoq5y1ydVKH4oyV/u9fORNhZe
TLSH
T1E4E423BDA45D23E22239D12E0D37008369E7A1FB7D86B95959FA081FD6764E3F40807B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UNREGI~1.CMD.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\AppData\Roaming\UNREGI~1.CMD.enc
Size 551KB
SHA256 3e38abeabb1f75ccd540be40a52172ad383ec9a9e6f3b0b871b24ef7fadebfcf
MD5 550bf3e6828c1ea64e1e27c5f4c81830
SHA1 49127d505d05db6f43a01bcb00bd9ffdc7a0e672
SHA512 b87cffde0d3d2b06dd5e61549f1fa1a1f4f0e485ce873601d1e916983bbd94c45411c6535e97b3924a6c4c563f25d43ffd9e509d547d9b27e6500364ed4ef13a
SSDEEP 12288:KVK8AdkHYUugxNVEp3DUu3siUL49C2WaIro:CAKHYUz/VeDnsiUsQ2Cs
TLSH
T17EC423A866FED139EFD348F2F4C145D1AA50C134825B84DAA56BD360FD42B8FC25F045
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnregisterCompare.cmd.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\AppData\Roaming\UnregisterCompare.cmd.enc
Size 551KB
SHA256 f0ee82333c3ad8404068258ef0d3b6eaf4f82f0f7f65e77e8dfa11f802d9e896
MD5 50f7f3d12bb1dc261a0e0593d8e263f6
SHA1 ecbae47db10331a150ae3108ae75a876b3effe50
SHA512 d19de3dfb36a11543403827271e9892aa470f0fc8c5c51f949aada0b3815ef6b9cd8a8f63bb1836ea8e790a8440f8bc6d7654076a83a78e8c62263bf8a329417
SSDEEP 12288:hMgScypdXoeBoRdSlgead3DvdXeUIilkf0qa7BpfsSS/yxnNfo2p9zj1I:tS/ph5SGSX3RIiMa7XxSYfo2p/I
TLSH
T12DC4232EF6B58A4B0195ABEDF29BDE3F84330DDCE83DC50646B471EE8A157100E5168B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EXITEN~1.PS1.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\Desktop\EXITEN~1.PS1.enc
Size 579KB
SHA256 7264236a61cc1d044317f327ca9bbb77cebc3cb6c193ef3cbcac130afccb94e7
MD5 db631189162f288491fa826fd124e71c
SHA1 47fec30949115be06501a5da6887353eb94372ae
SHA512 14af55905a7a6c80b6b78c7b0911c9bbed0179185b1dc5341ccea7908738693d1248c37df2723319e984355ec6ee7f0281d3833783b7adf0de2d8e76013627cc
SSDEEP 12288:8dXknQeo35TQQBGp+XJTVNMg7ccsv60XhjEZBQlzG6Pvb:8Vn35UpkJRe9rXhxG6L
TLSH
T1B7C42374DE5819538D13D92E8A321F9FAA12E9AF87563C95316EBC53C44C0A89130FFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

INVOKE~1.XLS.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\Desktop\INVOKE~1.XLS.enc
Size 664KB
SHA256 934d719c4e9e4b44d63dd0b13fc07ab012fc75792a0b1559edd00c098f72140e
MD5 880e2b0eb8621f400dfed449c74386c1
SHA1 6a0429d8d2ab4e64f5ccec7e580037f9c8f891e8
SHA512 20ebef9ebeebe87538241ea3872011eae440358b868c9c6e949e619ce096dfd7687ff55e2fabad66a0e71ac6ec9d79adaceb7b310edd12e1f33af4383265bad7
SSDEEP 12288:LwOw/YfMmteI4hpytsySYhlJMUrPLaao9PolQHaBV7oaU2xNdg2DiKEzxz600InI:P01IcYsYhlJMUrTa5BoiHaB9u2xNZYzY
TLSH
T13DE433FED24D2A1CE469D6D75E180CF1F6C9660A787C1A01AB9019CCBC5ABCC3F6D584
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InvokeProtect.xls.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\Desktop\InvokeProtect.xls.enc
Size 664KB
SHA256 2a76c96e928d14f009717a790ee1f0db843db80842e702a1618f5a63d962d4e1
MD5 481638ba792e29be0d936fad0e90e3f0
SHA1 697ef26e48a0c26762197077bea1ca64f5dd8081
SHA512 ee41f7300d8d626ba2385f0fe4caa449ff1763d8dee4ed4ba36b219fe761999b9749642adc3576e86a0d54af1dfe15e48906a92dbf5e48192b6e17fa5f68a791
SSDEEP 12288:O2OONZx7un7aDwePEAgEESKQ/plQ21SJz1K5usiI8b8m3Z72oE2EsufGwEMTmZdB:OtONWn7aDwePtESL9cJ0k9d7u2EsGGww
TLSH
T19FE4336EC517371B78ECE7CDEC91A2E12933181A0D87BD8CD2277AA003F16099DC759A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

REMOVE~1.DLL.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\Desktop\REMOVE~1.DLL.enc
Size 681KB
SHA256 1a3cd6d09de54441b5f9ebef1458c7b09598301b356b1965ff8528b125dfb372
MD5 5af49847bf9ec5ec3afa083b2d5af861
SHA1 a6a95777673439f22bd69530cfb411e5a26f7d1a
SHA512 99a52b19f931ba735157b8a66dc26afde48d29b3f94de958c20351d0eb68d0db253f8ed8a26c04f7281f9c9d952672edc181ec35f7b4ecf969fc314da8302517
SSDEEP 12288:N3meEw1THRfB6BD2k9uo8R2VVam6RExDuQ+hOgJBNj/1NEGQn7y:NmeI4h9RE5uZXNC7y
TLSH
T117E433D7D8C0597D49FA176A8A90E4513B2F4191B3EF05136030AAF99BF9BBCC5C8B48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RemoveConvertFrom.dll.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\Desktop\RemoveConvertFrom.dll.enc
Size 681KB
SHA256 9075fdade6ad9a96d6346ab09a12c27c5d8e062559c90def923c019d67b2089e
MD5 94207c7f3ce762e291fa9ff2795358f7
SHA1 01ef0bc5b09b2290e10631ab35040828fc776343
SHA512 7ac4599bc5b6e471c085616b210eba77d68ec0ebf5ff980220ddfb218f0f1322dbb8abdbcd492710b27e0a5f0e3f7cd1dbc274ff83c2de58c3c3c1c1f300029b
SSDEEP 12288:pOY7iXYRMSySf8yoaal2ImTaQm1quRaCCyxFIUmF4HCBJE0EBRMR5UwLynFeenzv:Z7iIiSyKjok3bMmGFKF4sBEw5UCceje
TLSH
T199E42307C89D685C8B82F111E87FD3387511162658E9C11B744FDFEA43EC68BB9B86B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SKIPRE~1.DOC.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\Desktop\SKIPRE~1.DOC.enc
Size 18KB
SHA256 553f468779376fbe8b79c93a1d166ebde7805e18a087ea2cf2e5040ca042fcbf
MD5 f51aae5c4668336d0f4cb1f607a8582d
SHA1 c13c27989464108c7ffe574de8c56327f463b5db
SHA512 35bca0e7a5808c399dbb231b53778a09db2efb1e3c74f9cab1738f37bcc5854103f032f1abf2a2474d80bafaafee789d575dd7771bb51384d7475ace189f4eff
SSDEEP 384:ylXWPfb05sSh7MJai4xaS/k7xqDoAU2xI0+aRebFAUojLssnca:vfQ5s07MJN4xXRDoZR0ibTojSa
TLSH
T14D82E0A18361F177B4611A4A6423E6D6D8705C835904716ED8EECEFCB4978CA31B732B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SkipResume.docx.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\Desktop\SkipResume.docx.enc
Size 18KB
SHA256 0d561febe9b10b2b779f79046fc53594bb09d6e05057a60e87d070816fd8d86a
MD5 54a5b16844c6a045c5a583557bc4ec5f
SHA1 4c2116c80af4446aa02e0d989c85f211b2cc24f2
SHA512 e315b678a80ab25d143e3b87f44e0d59e21ddbfaf6f5c711acf296c0b7d48067dcb51b40de9d2fa21a4539e79637d9f6dde185d691003b115ae99901e07bbba6
SSDEEP 384:vurQyqynQtslLCnyufEga1RBCj928AvwyR/atBjTNag3Ne7oLu1v:vEQQnQ4LCXfEgS98AvVR/K5poM2v
TLSH
T19482D01BD5E0E68503CC6010EE91A217FD991DABA72037A7918E7F82D54FB3939C2156
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

READGE~1.PS1.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\Downloads\READGE~1.PS1.enc
Size 781KB
SHA256 bfe1efd68ce78a27b2ef491338859d2302ed155101e91684d0707a196a814d82
MD5 6a560601683d1155031d4366dfc4bab8
SHA1 bc36b03e96d83260697a481db29fb56289b7223e
SHA512 f19180c03fb5f91825cc0971033b791dc1166c056f090a991a1c1d2f55d4dc085d116624cb3d5468a6f75e2ce9258f372b3fe8ce43a3c8a16ea638af1df025e1
SSDEEP 24576:SI4XSebcGWI3h+cTk/SaaYcOTJTgMeM4WLRy7:SIeb7WI3Ts3aYhTuMeid6
TLSH
T1B505336F065574A09E03A6CD48518CEE2CB63A792587A0B7B1CE3D884670EBD6D1F274
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SendWait.ps1.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\Downloads\SendWait.ps1.enc
Size 962KB
SHA256 b965e9afba9a3d505372234463a466dc608e7d0351f4c1f61786d20a5c2b50a3
MD5 49341580add664578dc560559216e9e8
SHA1 a712901b026368bc1b6402b2a243f9eaf92d4ffb
SHA512 f432daed017e9ecec2b595b679c43a4a98cd03edfea30a5044aa23b8f637345954104b67b2a7523ca715cb7f0b0cf8fa459799c34128a66b2863bc8f0b5f9df4
SSDEEP 24576:46lxnwwxLZddu6jZ0DLiPehLJruESC7DL:hx53du6NkGPeh96unL
TLSH
T15C2533AEE6769FFF1A433872118E03001A763A660355FF07E286ED18C642473156B3BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NTUSER.DAT

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\NTUSER.DAT
Size 2.2MB
SHA256 480ba367abcfc82d5c5ca017bec399b7dd53fc151b93309974a40ddb36b153bf
MD5 0449b176aff147bcd15e1a46dbb33b14
SHA1 d8cabb3b28d4ada87e3fd6f26d057359d868f40e
SHA512 d649998949b408677dc79a536db764ee4c46c76f2a1a2a13601e9efc6a25e35b3969a2cbad62803d4eb36c25fe28b5ef265cc5630d261559d70dbabb088ae172
SSDEEP 24576:5dIS6hKaJ6twJg62At6LBEsM68sbsaz6VMVa:5dMKaswJuAqBEswsbsayMVa
TLSH
T178B55058F8A3D452E361D6754EA1579777F33F833D088D0321CE2BAE086F11A9889DAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NTUSER.DAT.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Admin\NTUSER.DAT.FileSlack
Size 232KB
SHA256 153f57cc344c2c9b32102041065d9280976ab2491ba25d9483f49d4a41d92668
MD5 e4e947fcd430c4aa4d5589c3696f43db
SHA1 b15a03d100e5a3219bb33a361d1eb261f505f7e8
SHA512 ff0aa1612d2570785ce78660d26dc12b2df3fcd77614e8bb1ec50a384c3e9d64e79860f2b31d0b564452bf0308f13f66888e1a38676df75fab91a6ddbc10ef68
SSDEEP 1536:ABxLN49zYL/XLd018mi5NWM/LP08KJcONycArl7ftVQ7ySaIR98xYjMYtVNvln6z:ABxLNwYLjisg7qBtV2aIRtIkfU39
TLSH
T1DD34F112B581CAE2CCB78137E9666F86F51A7613BF144E0B329A231D8DF765B7A1103C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NTUSER.DAT

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Users\Default\NTUSER.DAT
Size 256KB
SHA256 f6921a89bdf7ca680d595351ee7bf8ab522ea191d0bceb7683770a8162c41a96
MD5 b63fd4a9647b978495c3b79b3afa13b5
SHA1 6b903dca4c06398ab92058cddf9e35f8e74cee70
SHA512 85c0ae47deae2410db546559211b692a6194df3bd656343de32613f241df1bf17f5a2475c48a93bc267fa1044dea6f53b72209299202082da8c4d1dbb817c83a
SSDEEP 1536:3XzlGc6PeLtHPnf/DzLLgKy9CZJ9/3Ks8ue1KHG:BGc6P2tPfLbLJ9/u
TLSH
T1B4440E41BB90D6D1D1B749329CE6DF966B37FC41AE1283473380372F8DFAA469E12681
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

APPLICATIONFRAMEHOST.EXE-CCEEF759.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\APPLICATIONFRAMEHOST.EXE-CCEEF759.pf
Size 17KB
SHA256 accf8b8504c71db731909f1c8ed6926273b5a242660880ceef5649adcd70809f
MD5 fe136b0c3d2aca3ab76baba6922831f7
SHA1 2bc889e2693a7a71739c88be9cc9e07d1a1bd384
SHA512 58f8ff1b65165a54e60890cd516b0088d523ddc4fd5864d7c1610b1bec8eb7911f534dca0cc9fd30831f06a132e604272a96375d1c0844058365ae7be77da386
SSDEEP 384:bkUXsyZcTWv2/Dib4yHVyMqlU7zWcnv37hq8LcsCVIEI7SiV8mpNUY:tHcUb7Jnhtq8LuWEIzN9
TLSH
T14C828D9D4425CB4FA1080873F694493C10E807DFB5B4D082BEF788ECDE92DD5BAA65E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BACKGROUNDTASKHOST.EXE-104C7847.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\BACKGROUNDTASKHOST.EXE-104C7847.pf
Size 11KB
SHA256 5f4efe1590094e7e5afbeda8faba12d0666b9ff8efde24ff14a0378f58de7c94
MD5 f0d697170e38b9d263a3934db4185c81
SHA1 d3d0ca38989e43a6a300184965fd8ac548dcfc5a
SHA512 9e9d8e01fbb12dad2606cf5a501b00a247fe0952d183be23cc9ed789f33b54923c0dea45e25ff9de8da2c6cb69f589c3009dbecac00f4eaff1cbe4892026ce1c
SSDEEP 192:ifH6I6c9yF/jph05dtKK0T+olQoChGRixzYoOLQ/3BYKCnJgI4+b2:iyd4yF/jw5dtKK0agT64k/RY5++a
TLSH
T1CA326D60A4BB2C4D1CC1C05BD05619A6F126D66770BBF7E3360566CB6BC80B522E8B7F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CONHOST.EXE-1F3E9D7E.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf
Size 6KB
SHA256 28e9350e46a0658b3b0e7e64bb50219211835ccbeb6953890abbfffd86cd4660
MD5 862630ae9835db947d72d12c871a29e4
SHA1 022f392618989251a1f1c6f498e8360c2d1190db
SHA512 7f3400b4de20a7086daaa8757febb08f75be43e4c7ccf8853f989fae45c4e3a895374a65d8da55ae2aeb246de6ca5246d9f14bcbb892bd42bedc39ca7a378c9d
SSDEEP 96:u3Br/VF2MyjcFHHAft/cRc3cJaYaXoGibj++D7aYFmGNPbw5kufw4MVwl8IbzGh6:EVAfEc3qaKGibjL7LZEiVwRss4inw1bG
TLSH
T100E18DA924F4A108C6C57F79E7690D55063C86154AB0A6A2DBC36CAFB32F5F8923436C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CONTROL.EXE-817F8F1D.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\CONTROL.EXE-817F8F1D.pf
Size 10KB
SHA256 2819aef0b6b32a93eddbff46e287bef05e5ef43ccfe4c105e7811796985fe07d
MD5 d920a854469d9a8d90494ed0e5f8ac7e
SHA1 d585924170ec2fe429ce1c914d2af328c7b690fa
SHA512 7a972c3f1f18a463359e610cfcf15db7a9fe9adf8a1e653add564ebe04826e54e4acb38855b70834402a4857f9126c0cba98dab45648484425150c7ccc5bcff0
SSDEEP 192:ZtSC8NuVoHOAcl5EWvu/bLdJ+O/e5vWnN2/IO6ZhR7m823GkYGxTGywtJ:ZtAkpAc/tgE55enN8Iy823GRG1stJ
TLSH
T144228E70FAB86E8D8745E46CE04A52B14200C521D928B663A70A3BC777CD1F7BB7855F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CSCRIPT.EXE-D1EF4768.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\CSCRIPT.EXE-D1EF4768.pf
Size 9KB
SHA256 0d58e2c2412da30c5e4913597a80ed361a5fb0bf222ca05f5e7a1077c39c7da7
MD5 1247846056710bc6bd2df10e6e19c6c9
SHA1 95eb1b442dea3689ea79a3a861c4ddf62f4a9110
SHA512 6a5313e3e0123cf541109a841d840febeb9fdf566fecee9c31cf798469e4758633313a071c6300e02ba131f591e62d907b9fbb12cef2113025ba654a031337d4
SSDEEP 192:8IKb3BxxhsnhauSMBLzDO3AV3vkZNNKbq0rY+dvvpGC8os2ZUxAIKaMJApK8CCr:8ImR9snhauS6zi3AV38ZNNMqwY+hpj8R
TLSH
T1C2129EA4B5A02D899B41902ED053CE77603ECB5F8199F117823A0A5313DD3EB90F49E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLLHOST.EXE-28A8211F.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\DLLHOST.EXE-28A8211F.pf
Size 7KB
SHA256 92f6b0d604b70aa0f9615d64af71545ef4fe329f83c8b97480f20fb9d7dab459
MD5 38456a4ff0b642e41b89ae14917e3fa0
SHA1 8e9e320d45d9fc5d1fdfe46edec38c0fcbd6d47c
SHA512 12269d4f52e4e990efd8fa396c98ee6c70e8f2b90028df26e020e364f4cd7070466db36878f180aa62d5c58f2be66f6db79eb6b9274c3523e6e9b7cbd25bb9bb
SSDEEP 192:tErH08lTqzJdwp2HjDIh0nQI61NZgt2UlElZvryr:St+dwpjhVI61NZgrloZzy
TLSH
T17FF17E11847F0D8E4683C06ED49803B6A026C56FF9ABF2B23F05716A73C84D179B5B9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLLHOST.EXE-5E46FA0D.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\DLLHOST.EXE-5E46FA0D.pf
Size 5KB
SHA256 45083097f75727d767a76528ca6bf5e1641c37b7de221c486ba846c9b6f60019
MD5 96fb9a3c170065abe812644cf72e5753
SHA1 d687ffc28fe812300acc4eb6e5db898acfd90692
SHA512 c7f9fae5bb8984e30726b455abbce6b2f4c5317fd8d376269c9c25bed065eb5a5d2d613a1511a2144d9d8014fb75a574828ba6efdb57bdc8d5331664ccd4efe6
SSDEEP 96:09/HccdcBRmxZO2lDwDix17Fzd43EoNpqyU5KZ3azGxMzo1Ja5FAax3x6xI0TLdk:0lHccdciO2lDwOxBFS3Pnqy+KZHWoAdZ
TLSH
T1FAC14CF6F87C2D465ED7E8DDE0889CF14422D072A021B2E34343A7D2B75457251B46BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLLHOST.EXE-ECB71776.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\DLLHOST.EXE-ECB71776.pf
Size 5KB
SHA256 0b31c7f4a0fc57fb626174f9c1927c02c35c38e5fb8b6258298820f94656029a
MD5 acd400f26e45f119f09ef650a9090506
SHA1 3591ddae606f23be5986b6aebaed9b7e66957d88
SHA512 9997a670008e2a9f2ce1fa27c4ef611658ea4a7669f173f55cf5c75959edf3ee06a638fa1450a1598bed78ebcc90dd2555b3053d81f122513304cb972d13552e
SSDEEP 96:VKzNRvQBDVMTxT1gUVDfN6MToLETS8hOYsogp48dbTruNlAcPeoqk/mTkCgA:Ez9xLN6KnzYa8FTruNlApoqk/ikLA
TLSH
T1F4B17D20A0D02573CB32B8BB96CB0FD9970BC15BE55323024671E00C96ECEECCE459AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EXPLORER.EXE-A80E4F97.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf
Size 32KB
SHA256 a79a9fefd215eac674f5438107745323886f623c7ba8356895c8e57fdbd193ff
MD5 a4e51dcbca9009b7da358d5b6d0833c3
SHA1 8a3828957ba255db66b9d7b1479e732ac0695651
SHA512 b831bffb3aea6b3985fc1c1ec68b8c8f4138e068324efa9c1d6be940bb36691c82028452ec324f2855490e895f7fd3c9e6380411c928a32762dec3ebf287ce38
SSDEEP 768:hijINc/dazPwon+CArwxbLleJzp4ybiPBwgqLJJBuwar:hijhUzPwonU+Wd4aiPSlMRr
TLSH
T160E2BF9FA838113295C3D5E7794113B02606CA2571F8EB63372AE1975F580E05DF3EEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FSQUIRT.EXE-BBD9646E.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\FSQUIRT.EXE-BBD9646E.pf
Size 7KB
SHA256 cf74694c4c0f7404734d5038bda169f78c30c7dd69e4c387be1bdf6ad0d85c7d
MD5 45bc83e41fa60ca8eb1d9bf13c624362
SHA1 8eedaf71cd90eb22a742ee69444d2643e41f2f98
SHA512 9322c3ae8c12f50709c4e8004109899054e9b39c7b28f112ceb1ec5e221cff447ec3d2e6b0c1931086564ccd8fc211ed6551ab01b609145b4b8f3dceedee7125
SSDEEP 192:yLh/7oOMYAtl3hLE27oEtRireOjxvpIfwL6fZ0y/ytvAuJitN:ytjoMAv3hI27oc9GWfytvXSN
TLSH
T1E6E19E14E81A2E17E85DE1BCECAE4C4A940FC485917140A2B60CB7269FE37F7677490F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MICROSOFTEDGEUPDATE.EXE-C4317749.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\MICROSOFTEDGEUPDATE.EXE-C4317749.pf
Size 9KB
SHA256 02164220debabd82731d16793a42bc5a06204f5179c0180d5d82b699bd201391
MD5 d809e07eaba7be3ae22d0d8857249916
SHA1 92cf86195935f4337d5ae99a4ef4c0ab3e12550c
SHA512 de5bab57ac0ce6018390217053dacc37f747f2b9e48b6a0444796fa10c8064e907487fc5c2b578893cf4068e140129fdde70ab36f31e44efddb6e75748e9b121
SSDEEP 96:2zSqbAsu0iuZ+FXnugk2MgZI2+dB01SPpME9nChTzy3SiXhX6sPvvVZ1fWxYr0vJ:2z4DNnRJIVO1IEVz3iXwOfPrySD12t2m
TLSH
T14D129D4A1572AE69CCBC5F16BC2ECB8B066956EE83DA4F461BCBB8F4545185E3420D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MOBSYNC.EXE-C5E2284F.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\MOBSYNC.EXE-C5E2284F.pf
Size 7KB
SHA256 9d6fa32bb69005926ec427acbf6a4d38cc12bf15878cf785f1aa176f8ebd03c9
MD5 5a44fffd11560193696fad29853810d3
SHA1 22d192ce5f06c7c1a9599380461f8807076d2a94
SHA512 b5227b20620d4337b9527f5c0178597459a0c0a4952441c908669cad8df332ca9796cac2da3310b73d1493967c43b88ac4b4ebd87fe725a3582dc3f92b319805
SSDEEP 192:QAP7tH4GwP94jIptoM2Rmc0OTa2x15JbeCIcX4:3Ph4BPejIpL2Rmc0O31pIN
TLSH
T1BCE13B75E92D0E8D02C3CC5E9186AAB87424C83766A675312B0AB5CB224E3F517F85DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NETSH.EXE-F1B6DA12.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\NETSH.EXE-F1B6DA12.pf
Size 8KB
SHA256 4ab8b6bcb3a4560d0306dd64bdc2b195ccfa2740a5cb25b7c88ce871f7aaa363
MD5 fa66383adcccbae28a8319d99f69f989
SHA1 5d162cfb31ecb941b6c3226cee2e880a666c1c96
SHA512 6ba214df10a248b695dfd688657e33e63d028d9c22f4b821a239a2e4f0e893e6d8e92124b43ccbfeedfbc9fc961a50b3afec2219427dedb2ca6f72bff86e958a
SSDEEP 192:6o+gIDHQ/e4HE8KMHPe0egIYwPLklpvneQIHuWOmEIw1bByk:l3UqekEbMHPe0vIYyAlp9OmrLf
TLSH
T1D702A021256D71519F43DBB9EC50958AE50C1737C5DBBF5C8CF11C32A3059A920A92FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OPENWITH.EXE-5C93E816.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\OPENWITH.EXE-5C93E816.pf
Size 28KB
SHA256 b83436829cfbe9a2fd912a1b635833c165cc9188fa584039c176acb18752088f
MD5 62b9123f80b39d2be7f3fb3139903a9d
SHA1 b3caaed4e480f79b65aa794b298aff2dfb51a6c4
SHA512 260dd3d11ae531e6e9b29bba3001b2ce1a8e08cfab9eb3507107179a43018fc7a2cf59660f0506a7f272e819361e50860d83b2a2b48f06acc48f4676a4d6cca4
SSDEEP 768:4uvDac8MzeQL0s9puxx5JxX1u2oUowxzh/e2JGV:4u240saX0dwxzh/VI
TLSH
T1A8D2BF1D4F7A6A4AFA81457F70F0A1782555916F8294ED323702F233A106A32D7B8DFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PICKERHOST.EXE-B8A68B3C.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\PICKERHOST.EXE-B8A68B3C.pf
Size 19KB
SHA256 85ffc2ef51cdfcfe9f08325f399d2430f194dcf2939ed0a468ad0f979ddd4a59
MD5 44834f21c9c59c24067aecf11bdb0c24
SHA1 0003902776fa32564c82770038b59185b75b52db
SHA512 44b70891d84f55f52d434a94b82b38185077c9367351c2161f01efae1ff229ad71eb7ef0f35bc98b7d9eb42bb129f2b445f1cd3f84162a28ee1a7b427ccfc3c9
SSDEEP 384:0hABpNRLTO+LrDdtmg0UXcGdpz/raHbYFO4x7+J9xZ0NwktMLl8AE:0afxOivj5s4x749x7keLl8AE
TLSH
T1F0926D9B59710EB7CE262C76A8D279E717A1D03919CCCD0B32BA6438E70707479D1EB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

POWERSHELL.EXE-920BBA2A.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\POWERSHELL.EXE-920BBA2A.pf
Size 45KB
SHA256 4c1674f146c200581c026d147ee3ea0a04dfd9aa1f14b2dbcbc6de606698c034
MD5 0644c5c7c2f199995434855df3060459
SHA1 6eb0baaac09ca021bd06357ad6f91dfcab487e51
SHA512 a57a8e888040fa86b0ebb5193f52b7b731ecf5c80f5ee645bfe3f70469d6d192a2c177d7e107ca87e405c88c2ea3480d64463679450d725a542d25f99fb06eec
SSDEEP 768:C/OncTZIcfst7otOwBXYQr8dAlRbWYoz0ebGKuDa3UPSBonyzkIo3Eg1eDM/c2a8:C2nkIMWctOwBXnHlRiY+0dxO+SGnygIS
TLSH
T10523F1168BF055EAC19AC3FC45A0BF278D96262B408F2248C1DFACF56254E3E70557EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PSEXEC.EXE-80F89DAE.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\PSEXEC.EXE-80F89DAE.pf
Size 6KB
SHA256 b284caf72e54c891dc4db2946a19747c9d5cc59730449bf5636cae7bf3e9f671
MD5 36adb37945d970eefb461121cb894410
SHA1 95b90bede464d936ebbe2d0f50aea6cf7083971c
SHA512 378de1431f7e67d7cbef1c48ad9808ae3972f564045823a939da8c8e48939615c711273216ee5983b3fefa13acd51e3fb3f5b0695725cbaab11408137fd60fd0
SSDEEP 96:/zpzkgtofQV2gU5WnmNGvdCQowz/2x2iW+sTlBLeBeqOCijD35NQUcT3xBKLfJVf:/1M4V2R5Wn718wqxElH/QUy3OfJFq63/
TLSH
T1C5E1AF54F5A10E464DC90AFC5B6800F7876FCCCB928835723357ACF6E8D6874ED1A081
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PSEXESVC.EXE-7F956DAF.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\PSEXESVC.EXE-7F956DAF.pf
Size 4KB
SHA256 35dcc8d35395fff1feb33d624020f8accf8fe15fff9ffe53f89ec75873d6a74d
MD5 4168f9b8fbfd56149a72c23fa49762ac
SHA1 dea8e13c439b85c5fc0d56b0c28792619bbf322f
SHA512 bf48b827a63149e41a40b243735d94ebcff32beb405352b09c0cb6ff95c77d5d54c6466873613b210292fb890f50288ee64814aea75c9b9eafe5e263a50cb3c4
SSDEEP 96:LHs7sfeiZh4OiQfInMkNCvFyLlVOXgogKocZvx2TsBs7UsPZzYHY:LH4iZxqrEyLlAXMyOhzL
TLSH
T1EB917C95A8624ED5CAB0847379E112A165F70CE43D0CE1D06841CFE9293D72375B4457
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

REG.EXE-E7E8BD26.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\REG.EXE-E7E8BD26.pf
Size 1KB
SHA256 3b6464d45ae687aefa527097eac2cd608cb448835fd4fb3798249c0cf747555b
MD5 fc13cc3b02515448f7f12b824b424efe
SHA1 3a7270c407033f674b55ba73cd551717147c2acd
SHA512 379e05cb90d06a821ed77923dbdcaeb7cfd731c8522972e50da786e87ed4e26eca1b74a7cb730e571cc22e1657cffb1c1c5451f4765c0b221706f7cda90e8bd1
TLSH
T129310968E08213A1FEFC65FA239792D686B5335AC05006034AD9953018E557E29EB433
MD5 SHA1 SHA512 TLSH

Submit Download

RUNTIMEBROKER.EXE-4C0446C5.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\RUNTIMEBROKER.EXE-4C0446C5.pf
Size 6KB
SHA256 f6be49709b5132b3271f8cf6dd1278c065aab5ba1f9e731ee25dd1a3b6001cad
MD5 bed86f28265cbf797e52757ed9171c7e
SHA1 812069fb1b6e3d39b0789402a8bbff48ff9f322f
SHA512 6415f778d6a06e7c5023abb74302e4c49af4bc35b19808788834505f84d62df1830851c36a24db5cc4dd2408eb86d2ca84cd3559edd31a81559a36ad85b9eb92
SSDEEP 192:vmKsG674ycHKBWr/97ehRJmR9R8zN1m18fLwT:vmKN67UTTpeLJmRv8JUSfUT
TLSH
T1D0D12930C1ED0D1E19C3C897E14952A2A216DC27E92676F20E0636E77BCD2B116F65DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNTIMEBROKER.EXE-FC4F7215.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\RUNTIMEBROKER.EXE-FC4F7215.pf
Size 3KB
SHA256 96f24705d4b495c1160559f0808f324adb036a9b0698f458dd71a2a62aa0d2c8
MD5 7ee6527d4e8261da4239348b98bbb3f8
SHA1 f85f132376f36c6a71ef416f79a18e0b7abc0108
SHA512 b0ea0f0d8d7b42ebf1f0430a385f763952a00f9d9454a2f78687101c618e5c09e6090d673667d22517d20f9bd3538e91d20844dfe93c3011eba2520ca345c6d7
TLSH
T164816E0378DC7F14D8FF95749FF15A2564486E350D0071B392C1786A394AA7785F90AD
MD5 SHA1 SHA512 TLSH

Submit Download

SECURITYHEALTHSYSTRAY.EXE-41AD6DE1.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\SECURITYHEALTHSYSTRAY.EXE-41AD6DE1.pf
Size 5KB
SHA256 c76f6349698d774bc1c29240e288f47efaa365aa9ac74fa21bfba1d57bdaae34
MD5 988547c5602ab6b5d4c8eb33b15ab8ad
SHA1 2e616aa8289fdb2a0f8e16cfd1ef6f6aa086f2fb
SHA512 5baea22361330ceb6ce2a201e1afed2c08da5b3669b80a4199f49db5027a0d1584b9a57e864d245275e35a683dd5d0f9ea5aacab8ee707cbc7393f33e63eb569
SSDEEP 96:O+BCrFdF4k6cqYIcOFkbup+ma6xVZVSNq71Ct32ZYHOWqgsrVN7ohEdfPvj48q:OiCrFo5Tf9p66Hqq7QMgsZmhEdHvxq
TLSH
T1FEC16D84AC297C4E1875E0BF7AC30EF1893908D7473305412FA9325BABDE5F11835A89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SHUTDOWN.EXE-E7D5C9CC.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\SHUTDOWN.EXE-E7D5C9CC.pf
Size 2KB
SHA256 479c8576dfb3b121e341307e6c2f076ef1bb0e0663694dfdd94fa6238a853759
MD5 d02965103a3fa22fcc83e5a4e473cf1b
SHA1 2eea6b657e4d5797d1250f692feb546356f9dd9a
SHA512 3b0620c4904811178722abfa168760e4be63394179c059259391676184f21bb6460e8b44d04b84ea063424391c967a802e8b93e240fbcbef29e2504dbb757f31
TLSH
T1B1516D05740918DDC280BCF93B611A437DBAE0E3AF1A11B5B0DA5ACC5DC66E8B42302C
MD5 SHA1 SHA512 TLSH

Submit Download

SVCHOST.EXE-07A3B3AB.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\SVCHOST.EXE-07A3B3AB.pf
Size 4KB
SHA256 57d1582aae067f330dde3569bfdf4b868c701a940db0ff30c15cab33b2b188b6
MD5 2862386c529f4c990333d6d548376678
SHA1 acb8c89cae77a103613fac4cc13cbb0a4e921994
SHA512 3edc81d117a1c83c20349ef70799be24631f4dda0cc1270e0274c662370ef576a3c19f70c1d8f9fad6952337aa8b1c7124bf3215f616e8759d8f2b5a0cddfdfb
SSDEEP 96:fnJxxatBYw19eOLdDaao/XVRPJWasarNF53XBuKMipqvXcWiGtqoBGRVKumjFJr1:fJxc5eiavTPcarJ3XBu2oiNT3E1wU
TLSH
T1BEA15C01B8DF7B00B6CA573593E48F2661E2D022862D9E4724F3750391CACE6E1C8ADF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-2F0E0AF4.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\SVCHOST.EXE-2F0E0AF4.pf
Size 11KB
SHA256 26c87e5a2c14d1ac0f4ac97b6ec66647858bfd170c8177bb0b74d8b05c09c44f
MD5 d40551c5ddb8e9f8470c60ae8b09cb89
SHA1 7cd815f9608374252dca223e45848a62fd77055a
SHA512 36a19b7bbc7cbe0693cc3bb35d619fdf0f17ecef3e40f8892af2faa1e117621fc14631133f4e00b497ad538d87ec78e58fe688721a278f9af16978f0a6bd200f
SSDEEP 192:Px0kOTqSuAPGL4e+YRRUnYmVD85VAWxzNOe8rBSPnYpsYyCD6JmmamgZZ70Pr:Px0pqSs+YRRUbD8XxzNN8rcP2z6J4mY8
TLSH
T104328E7AC4725D056383D939E89767B1C028E032581AFA522B09591377C92F33BF9A9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-893DEE50.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\SVCHOST.EXE-893DEE50.pf
Size 6KB
SHA256 c992ec20dc137e51fa70a5afaf308ae836b3dde26f08009bfbebb1efaaf8764c
MD5 6fa72ef1ec4c262904a3a49360d51a12
SHA1 ee5ccbd2b7c18dc921ac95f6c780b1327026d215
SHA512 2657e277ad3131ac4d55b7df70eb3e9c52e88a4385ff656a9ad37b2e7ead63092295118b307a296a702efa6dfe8e1c123661c27eded0d8a4e78a8847924cc635
SSDEEP 96:IU8uv2k1TXaRY2OLp+vfp+xNvoyybfCsFBIa2HyywNDDxTva+PyxIwm9C:+wpORj0xNRybfCsF25Syw5DE+ajUC
TLSH
T1A9D13AE1717C1248D583C025E0E888778031D93AE1B2B7663B267247778D2E32AB4B1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-96A7E1CF.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\SVCHOST.EXE-96A7E1CF.pf
Size 4KB
SHA256 bfb5097baa4abffd08329752571c236f925042976b2e19b5283d138e357a98fd
MD5 ff479ae4f12eadc9a7d7817aca91210b
SHA1 bdc32b3279679515bf7e4fa03f53ea5720321e57
SHA512 0cbf4a7f3215c584faff7e5eb522140d59d9979ca0bd2582619bdcc7e4d2939b447000577c2597fd93b636fc545ca36d149d582cf782b33c80d1c351d1276cbd
SSDEEP 96:acIJ8z7fcO1IiKVRWQwWR8qpNsCIrxuUtO0K2KuwbbZsAwWj+d4L:iOz7flIi2W7WR8+CrLRwbtqWid4L
TLSH
T135917EC4A42C7707FCD2C4FF5B098FB1D5214E736B71E43C66025109786F599848E2E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-C49E779A.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\SVCHOST.EXE-C49E779A.pf
Size 10KB
SHA256 b1b02b6e1c821d992d485b905fd632308b53161ca456a9bccbd9f7bb7dfaad89
MD5 2226becb71fe1183d40f3b54a526fc79
SHA1 25a5952f681d37e9689b6030b2b6f8105158336e
SHA512 34bc1072a4dd6926eb7ceb360f9f75bd45987329e08682154adee7517e0365e5849e7b2af3d17122b2f25fa86bf4c5d4d1b013dcfd918ad5c7f7f5b84e73a0f7
SSDEEP 192:gojnwJYOH5We3jxusEguomVRfP3690VygVILOCpJ6JAv7zM5aSp73JdFf:gokJYOZWQVuuKa90VygVYOMJu595Hf
TLSH
T1A8224C37713E1C0C26C3D43BE82499D5741AC927C976FA52370262DA77CC1E256B4BAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SYSTEMSETTINGS.EXE-F13C32B6.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\SYSTEMSETTINGS.EXE-F13C32B6.pf
Size 54KB
SHA256 24bac5505bc0f1193f24236987f3b26c2f716b2d41848ceb8d60020b85075cf3
MD5 92568fb8963aadd32ab67e7c743adbdb
SHA1 89cfeaf86fe547e9f8b0c5bc4c0d71b21b52b40d
SHA512 1c5d75bc2db11850274b578b8be406d31665685f65ac755f6abda9bd34c8a6e0359af2136b6a3d1fac69ea0d4e5b93697d90e545a9ab7b6c4996e93e1bbd52f8
SSDEEP 768:r8iUqrRWfZVxHpqyE2k2ZELUyZjswSo3947oChaSasF8M8TvQrtOPMi7Mm69bL2U:wiUqrMfxHWjxSo3OULE8z8xmPrvQR
TLSH
T13343D036E97A070098CB98F3D1BB50B357BE95394906B743737A7990F2811369B3234B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TAKEOWN.EXE-A80759AD.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\TAKEOWN.EXE-A80759AD.pf
Size 2KB
SHA256 f0584472c1e0fd422ce3cff6424cbfdc3dbed2411ceb3501709818869f5888e6
MD5 00232571b6b2540ff337c7d4ab980d53
SHA1 15555b4d8a40d7be96882d4ff5c66af0c3e081a9
SHA512 4cc6c2b3061603e98ac9be6c9d2f0cfa6964d82c7c70340d73a01151f56d8cfa1267ce9568249ea46465aa861bfc5810b92f6dbdf09faecf9fb4d4b0458859a6
TLSH
T188411B1C10F1BC03EDFD19F8068646259BFB04A0FB4A2682A5B8B2569DA1976A5C786C
MD5 SHA1 SHA512 TLSH

Submit Download

TASKHOSTW.EXE-3E0B74C8.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\TASKHOSTW.EXE-3E0B74C8.pf
Size 5KB
SHA256 9fff8b366dde6bf8456bbbba0f32eb50585949a5d0de3eea4ed498225f6b3c62
MD5 92dab088f507745ed355bde0c1216463
SHA1 35f9eada4072ae39802bd51edc9bcf6249e74a3b
SHA512 bbb118d02c7b277c3a432764e4416df342306f1a56ad64461327fc49322978dad145083444a8dc22956f146edc7535c6ca1986253938428beeaf2019c0058a4e
SSDEEP 96:VCnwf9IMqqWVx0I2WXxcjkewYHf62tjaF4YrNxig1z4fQTCYR3n/muCM7U734p4Q:eOz5WVGI2Ie36H/rNxflXrL7g34p4nQ
TLSH
T1F2C1AF3485AFB7024DDEF13CDD6A042136E1CDE77A08A184D6C6AA047E382E490F69D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TASKKILL.EXE-8F5B2253.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\TASKKILL.EXE-8F5B2253.pf
Size 4KB
SHA256 2bd1531b991644ee7f88311a3c8544b224894052540f9542610cea49e110a85b
MD5 eb885952b6aff539f49c2e28142539e4
SHA1 d56d3632a1cc3446d0c08a0b845db6901a2f81dd
SHA512 e503a5e5797640dd145248fe7da4955a16bb21c34144a567870888bae2cc80750dfdae2242c2a8d23288590ab8d35d1743166418fb7c6cfe6f86a42cf828057c
SSDEEP 96:VLQLql5ZdSy3rMm3jhiefmvot1L8h+I2GJEpKdVM3wJ8AyLvfw0w2Ol:N3brSy3rt3jhhfL8gI2DKd+3wJY+
TLSH
T156A18DC4096B2F12E0C9D3F9DB9E1821DA6454616F2301144F08689E825BAE3C0DE625
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

USEROOBEBROKER.EXE-D2992F42.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\USEROOBEBROKER.EXE-D2992F42.pf
Size 4KB
SHA256 afce78ef5d78a68a37cdbc67aba5405fda989ba96594e81bb98e39bbeb6ba918
MD5 6e44247c449fc59a453bcd24176ca729
SHA1 11da5e04372f3f57cfe87293f87b15158d31e0ed
SHA512 dd0803fb8c59f1ebca8ba1af0949fc64661b9ef1cfb61cb36b609c69fd6d8819e83d22d3668b4dbfc6a5fd9e8bc8b35625348653017179610d754b57977920e3
SSDEEP 96:akJeT/JdMZkS8kaZlmo42Pv9le8vXuKv6NS6XK+ox:bJUdMNwDmo9xvl
TLSH
T1BFA19E814BDC211EF5B3A1FC229D4D701041C3FFD5DAA7258620B9246FCF6593C660E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WLRMDR.EXE-C2B47318.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\Prefetch\WLRMDR.EXE-C2B47318.pf
Size 6KB
SHA256 b4c98491afa3610f04bead0a5275cbfb4116e7574a13992cb4b9b702b2d0a14c
MD5 937e37fceb733c53965996a2915b4ae1
SHA1 52dedc7c81a8456ba7c391d5575f110753eb91d5
SHA512 1ad2040e6c7b9c9425e0a329fd531efb2b9f4c41fc4f50e69474fc9b9415721e489f9ffdf036f99be083885496339e7e59c45e69891f84407c39be797592f737
SSDEEP 192:C0/R6eUIFBw7sPltKyIozabPx4yCVcCokdoSY6:C0/EMFBZzKyk4ylod7Y6
TLSH
T182E15C62F0154E0EE85BDDB25894CAF26414D5BC4125E075AB0863D3B38E2D036F0FCB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CimFSUnionFS-Filter.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\LogFiles\WMI\CimFSUnionFS-Filter.etl
Size 12KB
SHA256 f7464c08a2b6db6c2a6b4b2bf892f33b1705b587450b0edefea0cdd4c8c70c39
MD5 c4cfeaaf1660f2baaea3ca550923633e
SHA1 3200289bd55293d1d143f9fb3284455df04025de
SHA512 06332c635bdeba4b4faad62d986275637c2480bc55a10b8bfcb84be2d0c3a7fce850dd7d23e9133c56d0f1591741196238d0cf4b28cde2378b26d40c9aa3d185
SSDEEP 96:WFYqX0m2XUWmwXUWmFXUWmnXUWmNXUWmgm0m1f0mVx0mpx0mJZqw0mmm0mZf0m1c:Waa1zw2YF3VRVr76q9vou6
TLSH
T10142AD79E7552888C5FD8072BD8FF6242972CDAF1D559F01054C31CD293328A9AE1BEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FaceTelManually.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\LogFiles\WMI\FaceTelManually.etl
Size 16KB
SHA256 4eb124232609d21e3145ce7ae4af2a48381aef9d23f46ca81ee1bd89e0b14a2d
MD5 c07835af624e0df138cb2d616748ac4d
SHA1 232c733821554697553ef33b7825bc0b936d9fd3
SHA512 6f23f613be839d2bd4e145e433ec5f3eda400385b71eccebcd521a393f24dc179529d89152ebff1e873ab54e39162bd32caa30fcd324a167fe2bf07a8773e903
SSDEEP 384:euSAuVuAukouYPIuYd1Nj5DRBJkzs7uY9uY+uYs+nut:cEj2sMUPC3
TLSH
T1D972CD93E648025EC92566356C5E17A058979D47094BAA3802CF7B34FC7FCE9DB233B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FaceUnlockManually.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\LogFiles\WMI\FaceUnlockManually.etl
Size 296KB
SHA256 dc934585aecb89bef0dc1317283933d216d433bc65a17b36bfbbdb2e244d9b49
MD5 601150ad0351b609f3c0e3ecf65b0596
SHA1 fc415593b80eb61e54b6ebef2460ee1d038102b6
SHA512 abaf33173aa2d8e88a2b095c11995d09e00fc4c666dfd3c28fccdf2db2a8e2255e0fb9e41e6cd969130c407cf85cd530ba19830efdf386734dbac8e40e2c6a28
SSDEEP 1536:0cFX7g12oGUqf8Nc0u5pG8dXA9q5cOQwD7:0cFg8ld7
TLSH
T1ED5423F540AC185DDC6D28B4FC2B1FA169832D8709815E354BC2BB3AECFFCDA9A50594
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LwtNetLog.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\LogFiles\WMI\LwtNetLog.etl
Size 192KB
SHA256 e9afad5cfc16e28c85ce492b8ffa93f5db2e4448f502cda2fedd9879e9e136cf
MD5 5bb78c7ce088886262f0b7b832551621
SHA1 481e665205e8b99aff319519f462029ddcb82382
SHA512 a4d92db200ee15e4ca0d9d3ab66842043a1985407062cfe988cbda6f5cad1e0ff84cbfa432d0869e7b362af8e4efb7e894b6b360dc7a696b28cbe8a8f8aab393
SSDEEP 1536:q+P+D+KldwLndyGy+t+hUOczNt1yYbWNNi:q+P+D+KdwLnE+t+SOczb1yYbWNNi
TLSH
T1BF143EA1AA19C271CD3BF176C0168F9D21717E4112C4966BE390B73EEEB63F18CA3558
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NetCore.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\LogFiles\WMI\NetCore.etl
Size 22.0MB
SHA256 c58535b2b45583a9d9c095ce093c3e82766ab9d7ce4030a783cf9dce3f5068af
MD5 dce4afedc5b2a9d53ec949215ae45e65
SHA1 9dd19591e40a99f2f4c66f3d3ef0ccfeba89fc96
SHA512 d8a04ae93d48739b7537407b902c0f79ce468c62d7bd892c05ebc1dee252823aeb406defb25c29bf420f371f053bf05fa6b12494dc0895fb8761ff24a86d2fd9
SSDEEP 12288:ZIUmB3llWChjvuCCxh2Z545qA2rAvdyJqkt1bzNfyy4OMztxHzrT5oXh9DDkyzaa:Z2lWChjvuCZK5qXr8irRdkl
TLSH
T12737962D6628603EF7AD013319B737320A382D2F4522AEDF075FF6299C73BC59945686
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NetCore.etl.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\LogFiles\WMI\NetCore.etl.FileSlack
Size 19.8MB
SHA256 9d47e4548a0314645b22b0808e633d264c7e659efba657fa1f65319aa6e0aea6
MD5 933d7b3300c342ac4e4a740eb1eef2ba
SHA1 6601a97efe38273bad0a113c2a8f27a3b786b09e
SHA512 36e841a1018a47ad017a481102ff3496c7f2f1f16961b0d02ad8254af6542923133ce56401c2b718290e3c740617152349a30ea2264e4b3add1601e930de6dbe
SSDEEP 49152:gDZ6XO2IpCVBBllz9ETQIigfLoQeiGpW6MY6zY1RBxKJh9UZ/rE/VtT5PF176dHj:gDZvCVsicei0OX2PHZ/lKJDu
TLSH
T14927A53067E94209F2F36B302E79F5846E37FD676A78D45D214C816E1A76E608A31B33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RadioMgr.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\LogFiles\WMI\RadioMgr.etl
Size 6.0MB
SHA256 3b0e7df9425a12a9b4d450ffe68d8b0d5e2948a75362c6282dd2616e417d3a50
MD5 97f793107fb9e3f763d45d1625132049
SHA1 0531d8447e7fb223c14c34516f55864a5a665adb
SHA512 9894c49cf17d2e94452f54e829f0e0382012dfa2deb017a8ed117069bcf0b5ec2c3c3c17658b954d734993aa3bcf2248bfab55a03d246947e9e2116916d3def0
SSDEEP 6:cf4B/QIosMcln8MclCKmJgllkU1cyI9m3n+SkyGkRkJ+lr8KlvyITu5X:cfGQIDncCKliUWyI92+Uc+prlyIS
TLSH
T10F56CD129FE546A7F175C735FD77810463327C14A6168B1E1A4433B90D71B444512B11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReFSLog.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\LogFiles\WMI\ReFSLog.etl
Size 4KB
SHA256 afac099033e01b3e191116042fee9a86baf1ddb9185b40b2c1ac5fd2b9edff09
MD5 311148c0a1dd3b0119e05765da7880eb
SHA1 460c2382dfe5b113fdde283c8d6e7e14911e19e7
SHA512 fe71ab4b54df7a94109adea5c1b045b22bdda6958851948f2b5bed4ec49aadef7a06a660601619be4609f1d2bbfeb427371e644d0b69c4b9ca126e7e3e8e878e
TLSH
T1B681CD12EFF68697F1798735F8765204A372BC28BA1A8B0D4E1835D80D74B14D575721
MD5 SHA1 SHA512 TLSH

Submit Download

Wifi.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\LogFiles\WMI\Wifi.etl
Size 400KB
SHA256 5919ace2699dccf46cdb8f66738f5c779b9b4b2fc68990abd4737fc66a798f39
MD5 077b92e92c72703585a1b3202595b098
SHA1 2c612dba534be38ee640734f33d0eff88ac58436
SHA512 ea46ec6eb703b243074b6a9ef074f823de5bb4352c9c9de3977eef35625a78f3c1acd28b1cc819ce31d2d4a96e0d1a5e6343210cc40288f801a75bfbce31e00b
SSDEEP 3072:3GChrdWN+r19HCQu0gtbZIN8N2SmHcpCN+A9CJgTzgZaltaUj+TRAMxgtYzKFdhC:rFZ1e9I66968wh
TLSH
T1FE946AEEDF285564C43900336C6E7B0254623E8B0B297EE735457E7CE9B7FE1880499A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BootPerfDiagLogger.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\WDI\LogFiles\BootPerfDiagLogger.etl
Size 14.6MB
SHA256 fb798a94dca7999bf06d9cc8b87c2b380fc9c9881fbd5d2ae025f4075648c124
MD5 c070a591ee7661d28acd704c621af4cb
SHA1 70480c88d7936208112edb4dd683d58cabd647e6
SHA512 92a47db10357b0b460bca8904637607b7a55536df7d3713ee0ff2e3514c15f424aba50a00c4850319baa2b25f2ae0a7f3370e03a6b1e58fe1564dafe3f6e5ba0
SSDEEP 196608:aRGk32/scwqBt5PjH7UuqDOrGkJMlZ9FHAILb+XP:aRZ32Btxj5OKJsFHAILSf
TLSH
T18AF61228E9029FB7D5E98FB000E35234BAF25DA7AEE33045E5BA71350EB1721AC53D45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DEFAULT

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\config\DEFAULT
Size 2.2MB
SHA256 6274ed0748bd593b20af74f1ff728b0536c735f1eab2c1730699e4fd8df99b02
MD5 423a5de347ee9fc2aa2c157b907149b5
SHA1 718d2ee580a8375837d88b2a7c461c2c5d833f67
SHA512 6b538ff31f4c0a97cbb698f926cc5564c0b59912ff34a17b4b97b82fb50a70053cc22a2d30927cf42ff3cc3cb30f6e0d01ae64396b45b29ea11a8746e1230f97
SSDEEP 6144:98Pr7XtEjG1nEWgFvWEkIkyAIpQa4aecJwNxJjFxzaJVAmQJdYlKn76mRsnyKAqh:K7XqjGMlMawNFdkVyJdYu6H
TLSH
T148B5AD257AD9E644F2B786305C74C3A0A62EFC92EDF0834F7640F78DAC3651285A2E5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DEFAULT.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\config\DEFAULT.FileSlack
Size 144KB
SHA256 582a9228131b62afe830d22e93b439c1c5e2c8252abaa4e06ab300398c27d8de
MD5 ec3e32c4f0aa40efeae9855cec654c56
SHA1 e416577694efc49aecd7996d3f98171aea990bd6
SHA512 cb52c3f798de45d9909b7497fc64cfacb4a3ab9a0783dac693ddca9a8230fe909a07887c63992948549af6b022895db0fd9b32a33d7221507c13234afdaaeb74
SSDEEP 3072:r6eaZGArhiiQpMLzmkht9k6VJ/Ek8wGzqzZteETaTjNr/b+hmW1x:koIdznm+k6YPJ29teE4jF/b+E8x
TLSH
T12FE312AF386232A4E12798ADFD08B1D7959B401DEC564F555C0216FC0BF933AFE9862C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SAM

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\config\SAM
Size 64KB
SHA256 1e8a36eaf0e8547d8586784ed325ed5a258d9086ac5e046cabcb3cd4aa6abc86
MD5 90e27a8e8640557c585edb6fb9bd83f7
SHA1 581df6c39e9d90b50ac42a69c59a978776b7214a
SHA512 20b7f2f7664d310b489a93e8e7d7aadaf41e6a2df9f626ec0e4d0234c49f42122f69527bc55dd0740a222534a13079229285a8930152b600d90eb728585a6705
SSDEEP 768:BqMtL/cSRAr42rqFEelIfdfElZeI93E8afw/CnI:BH+q6w6
TLSH
T1AE538D41B684C686D4BA0B31CC778BA47776FD929F76830B3315232E1DB6B819E92317
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SECURITY

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\config\SECURITY
Size 32KB
SHA256 598f71b385d55bcbdb3bd5acba89eeb4f968f35a99ea0a1c0bdd078208a552f8
MD5 386ff8fab75550a4dae5207cdf401bc5
SHA1 22fe30200d8d8094408a22ed061619afa5aab6db
SHA512 f122c488735215468370e5f293c21f3e8943e55ced57d83847afb9e9da921f0cc40b66fdef9da772d7e6409ac96c99d55c165bbf5285cd97a4e48a8db5e1d6c4
SSDEEP 192:cB8RPDErRQ0GfGMyVDRBbuR9isHn26N6a+WON7LV3ilguwIpKpd:/RPRmhRBbuR9isH26N6a67Lwl7
TLSH
T134E22002BA40C6CAC06956738C57CBE93767BE529E6642073B85331F6DFF782AE53019
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SECURITY.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\config\SECURITY.FileSlack
Size 4KB
SHA256 31aed817aa251599f71d9079cf90831dcc949bfd5cd44831a53797b2a9498874
MD5 09f3bbb1f62828c6c6d081fa0d715e34
SHA1 d481b8db835cc4014a3f234f24b85753c0486831
SHA512 9a2d532a21f6241d67b4ae1109ccf2068bd99df1226e044627848aa50980d2610af04fc5c74e0edababb99523dba9819780f97525decb727fd9b5685af57e0e6
TLSH
T12381FB8320BCAF7BE9180BB15FC9A0D0A37A845A87F1CE1F50C042252857B77A56CF5E
MD5 SHA1 SHA512 TLSH

Submit Download

SOFTWARE.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\config\SOFTWARE.FileSlack
Size 112KB
SHA256 2a36edb9a74140d86b5d643f0e15dddc8131cabdd82cd700fda4e913c1f3c7a1
MD5 37eb1748bcb630eca867e763ba52ca67
SHA1 fcebcb61c0f57594cf9ec159ac62c9dd4e214cad
SHA512 a86776929201303e688f888f7e6f5ab1d1baf52949fac74b8956d77d153315e645ac13a808b135ed0c73e0cf64232d0309f0fb393a3c6cdb92a798ae4f080acd
SSDEEP 768:Za44pOiGKFnCuLGt+v9RdLt5HZFxmt6SQSY5e9z7jOiXs3FRlF1:8fFnCuLNv9RdLt5HZFxmt6SQSYF1
TLSH
T1DDB3C24997E40B23F5F24B31A0F2985BB83A7487BC459F9D506307894EB6B619CB0F1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SYSTEM

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\config\SYSTEM
Size 10.2MB
SHA256 088e331faf9caff44224ffe69253efebf7b5ffe233586804d11a437fb861accb
MD5 77fe3185a42b45cfcd8c691f21b8c3e3
SHA1 01c9589fc232f847c8a34e9944c87497c4c7d207
SHA512 cc40c74a41cc8ba2684e63e3c887f7138234fae7bbc66c43409da57a19cb3bd8b18d015aef137ff8316eb391a17664e82c6e7d0362c11395be90534bbf1de8db
SSDEEP 98304:ctWWNb+vRPsUlQ6Kqhf8eoMP+QFpI8eaAMfhUPn:ctzn
TLSH
T1C8B60D01BFD4D9C1F1A64A329CB6CF855A36BD51AD215A0F3394330F4DFABC1A923626
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SYSTEM.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\config\SYSTEM.FileSlack
Size 208KB
SHA256 2308947b33b2d6fa6a9df6112aee7e40a2f80c07ab0adcb61ce1adcc1d251538
MD5 db2a020175b34b1d377aa7cc8852342c
SHA1 a2e66d53f0831e7b2b1de7d66e957823fd7223ff
SHA512 f988cc6a7519e1958b43066227b53637e3848cdd13cbc04c79687dd7d5e66df447184f339b3cf34a521f96a94d89cd3d9e61c2971e7eee1b2c239f1859b6a1a2
SSDEEP 6144:sPwbI4cuu7ivKOL0wvJUn12iDPOdOvRqhqzgyvaG:sPGAwhU1hJuut
TLSH
T128244C62589060B4C5FA33B67D1DEA2C9D3083C69F274AD78AB4ACC03FB45E3297525D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Application.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Application.evtx
Size 1.1MB
SHA256 c66e411fdbf21280368890b984ecc7d5713ed5bb4813c2dadf0583d7a0296d40
MD5 6c0de17abad31bf8f8b02aa0cae32f6e
SHA1 2c3f72f0b4ba8320db574d7e9993cbd1b7cf4172
SHA512 488819e022f5fd49831ea4d5ca24d2c7b1af9d94f49cd03c561e2d92e93395d85bdfd1cee858bc2c35faf5a1f2b43e457fb429027fc87e24990fd364484de6ec
SSDEEP 3072:pGcucpCPfVtKnj/czR2ctGrcLBYOAQjrNoC+MWcD4pcWcncxcGtcnc:3CPfV48tGb
TLSH
T14835FD19AAF41166E0B3CB38E4F342176B36BB111E35CE0F629053895812E4D6F99FDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Application.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Application.evtx.FileSlack
Size 640KB
SHA256 396254b77302db098e5b285a55c1ecf4bf333149c96cbafc3d56dda99b8240d6
MD5 54e3a677c993bc1fb7bf44f83e43281c
SHA1 d0ccf422183f37229442bf1ae46bead07756a768
SHA512 58d13972746b7fc13f557e8d2d7440fa7971f5eb25643e544dcd3e71331c8b4a5b9fcafa7e0af1b08a6a8baaef6a34460265e556825120c0a3261bc8904000ba
SSDEEP 3072:S4PJJF5dNjWxSMNrdvwcmtEKBCPcfkmsjUfpoqWaib0VzF0mI4dDImUcTpvOqLyH:29F4ydxL4Q52/6yn5oFoGMU
TLSH
T1FCD4523DA618633AE7FD013218FB677609393D1F4521485F171CF22ABC33AB0A955B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Client-Licensing-Platform%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx
Size 68KB
SHA256 a438305e1460fb3d666e90dd23de049d3827bd4ea9bd5b4d6a9c6c059c989343
MD5 8d1a2bfa4061f435847db5402e670999
SHA1 2393f73d137fea4b2c5ba6a06cfb7c69d280adcb
SHA512 b070ee52dbb9830875e3e53589310e7f8ec5183887b3aa152e7dd30a8e3539cb4e147b8c219b39de6a08ce0ca12850025c24523d66154784027ff11880450f86
SSDEEP 192:3dWV7EQGjcv6qIEvCsZKbYtIve3iKer7Li97LzdAm9RgKpQ22+OKT6fEUWney7ub:3dWhRiq/69GUrkHpQGTwW1zAaD
TLSH
T19F63140607F9596CE1F64B39A8B787282F32FC106A51EF0F5164629C5C52E628E70FF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppLocker%4MSI and Script.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4MSI and Script.evtx
Size 68KB
SHA256 c9f9ce581bc0025ab0dc84daba96c5cdde598efea322979be94493e81c5be49b
MD5 cdfd22a4f0dc4c96eb4a2612624c1d0e
SHA1 3eb43e46a93e47ac77388705cd05c30e946e1396
SHA512 8135d2aec32a0f8f226a8e15a2b7bd7ad3f968dc70b1f8bf8f83b9684fbd150cffd05e359a8dfa74419ed9ae42d593e58748b653a560053cb2d1802a3124ee5c
SSDEEP 384:JNhpYutGSYYO6YUNIYPYOTmY9YNPYcYxntsYzYoqYCYcWuYQYWyYwY5+/YZYdjpD:3TGOTtJ3p/togtbcpzFp+0fn6i+
TLSH
T16863CE00ABF84628F5F24B7DC5F30B25AE7AFD659B626A4E0004F2551C12E51CF61FAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppModel-Runtime%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx
Size 1.0MB
SHA256 3284a62268cfc0aa6178b88c8a811030bcdeb191d1b9bbb0a80b15d881c303ee
MD5 207c2a3c6f693c9e9c52b829bc94b5f5
SHA1 63ce06a3b7811d6f5802175f41015858842c3856
SHA512 881a397df7f5c9ef58c9f7bc246066cf1bc698e9ab26513688130cee6aa63acb6c59460858c37fb0c9e01d80a4bb2a26755c76975acd62a7136b7b4e39bdd9f6
SSDEEP 768:6MZXRDXfzp/vdmWI+qCa6VIat3YSIHKls5:bXRzZv1m6lt3YP
TLSH
T1CF259F013AF80624E2F28B3989F35B25597FF8644E559A9F0120A19D4C1BF799E30FB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppModel-Runtime%4Admin.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.FileSlack
Size 896KB
SHA256 05bc36e464718171d4b123a7fb5f878f505622b74c5f96a0073b1f5c1c8f7a7e
MD5 9ef6a83f900bdbbd242ed7f4d74f0f47
SHA1 abeca659b1a1321227686a2d8d1448cebadca860
SHA512 5e7f3de0e038a35d2aa17a7c0f8bc2c570ab8ad57da49ae3aa5e976442dd4ee79061c1a0d00e96e6e3b05381bb246c632a233b465a6ffb764b390e06b5282e04
SSDEEP 6144:5XYM8oWeEh+U0rovXzUQdfWgKaxVKm0mePL7Qs:SMbEEgKaxVWm07t
TLSH
T12515B70495F0AF58D1B245336F92AB0AEA3842F36356DBD4B4EE5017AFE73928633171
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppReadiness%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx
Size 1.1MB
SHA256 bfa8cb44f15cb603545491a8e522877d075e714ebd46989b164503b7a4230622
MD5 2e78f25caf00cb02b1330c8acb80b841
SHA1 1b5a4373a7b24982e2a51228a6c2520c1ce25b78
SHA512 7339750744229bd32cbe78dedf87e39ccab2c853ef80c38c7b1023cd8a675a93f021229aaf56f758361d233bd31ed2702a125390dae49c5c5e299f82d9b9f686
SSDEEP 768:QTmvDAEifs3Wt3hSfO3oHzB51dQiG8yvDRqckMlag2a/Yk5jH4yvDRqc:TNWt3hK88yvDRqcvUyvDRqc
TLSH
T19C355B142AF42430E1F38F3DC1F31B29997AB8251E415E8F10D566A49E46663EE70FFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppReadiness%4Admin.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx.FileSlack
Size 896KB
SHA256 5827f08cf40e2b89349a9075284e5e8284853be1eba8b2eafd6afdc5b2acb8f9
MD5 f8bf67f97fd81631064947b7b0324f27
SHA1 41c24532dac7ba6c59de7b8bd2419a1b0c0ed00f
SHA512 ad1732ee48095d9140a4f51d66c186778f49e85d2f7e8339ac37364993952793946c50c02942f7ce262de89a62c32b16d614424f17cc49339416240e06f54fe7
SSDEEP 6144:HxjhKU5qbOrmG1dgqmIZyKUKKZDPlzifcL0o9zC5pcKnXUCuoCQH0i6xxdjATpqu:HxjhKU5qbgmGngqgG
TLSH
T1A015DA1143E94B19F7F32B346AB41251AA32BC9BB939E94D718C622D0F75B10C972B37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppXDeployment%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx
Size 68KB
SHA256 1da6efebc29997935c036beff1e13538cb04e5370ad3543493cb808c76790a02
MD5 c48d96256c62e80e5a6d820d457b6b9e
SHA1 3c38a6354f53814777d0267dad05d2b7e76d2c43
SHA512 f6270c8cf3509256fcae5f295372a0a767fc9747f7481ec3e0be036cab89534aa3e52d1cb009a4430fe6aa1692267117f199da6613c262ec84d566e4d9d9e5d8
SSDEEP 384:Xxh00VAVjv8BD1cpfVIlVocVBAD1cpOVoMVFVoEVJVoLVPUVo1V5VoNV7PVo+Vql:BK0BzYJ4hdrUunFKhx
TLSH
T12E6347296BF40715F1F2CB3485F22A676A7B78D68D41EBCD109A930D0822E569C64F3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppXDeploymentServer%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx
Size 2.1MB
SHA256 3a5a8c48fe07e470139c9a0c82e308c75142e50592ee898cd32508dcb299684b
MD5 0e7b3be347a2434c2868e9cd4922961b
SHA1 4131899c8f7106ba6bc500456fcb099e720b7e79
SHA512 6d86466d5606659ff43768b848a3110c834a1013fa8bb8c4d9dab5b0041428489c8ad80400dc0c5e3122ee319669b8c0acc52fbcaeeae881fa6c5a3a9b034835
SSDEEP 6144:fis7VikT/55ssceCEW2MnqMTuiNJG/Vt:
TLSH
T102A5AA0667F81628F1F28F3488F35B271A7F789509559ACE1065B24C0C67E629EB0F7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.FileSlack
Size 896KB
SHA256 1a4c18895b88a1ebb2a8f656bb5e716ce18e43141f798f7d85c622cd3eee2a9d
MD5 3cffc3dcfd36c7402b03bf2b9e5aabdd
SHA1 54a4346ce85763bbb022a896814936f7cc920119
SHA512 c43d6022dd89eed84004054631b452b3a8cf69aafe107b831e8f087462af447aaa7790cbae1c43a137ea8edc5ceaa445f4bdfe2be39aadf4e1efcd10647ee5c6
SSDEEP 12288:I+bJUm620k3rJ/glZEOD3DGmn2VUY24T8Cb8zNJ86Af1f5NDvJech35e84dD0E:I+A20kbJolDzJn2g4PbONJtODv7d5e3l
TLSH
T18A1533805AE2EBEB057FDCE42FDD5A7EC9286305A4D7C75A26F108078EE94701B4D4A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx
Size 68KB
SHA256 ccde08c7bc3a13b808375f3e143544ff0c0156bf2561488328ed5e5d9b4884b7
MD5 9645e56e771f5c8939a5d8d475bb2a20
SHA1 a4e6fd4bdb7e0eb135e32b6388632c37d4d3697b
SHA512 c16ff95d4efc29fce18e2f632b743804c3bb5a0f2e988a41a773998e1e19405650db8af07adc5203b86b3be035cfcb101d8e61eaf3e92ac75c3e69da80f89567
SSDEEP 384:wlhOm8b58lmT8HJmT8HmT8ZmT8CmT8emT8pmT8:AG9hpDZyOl
TLSH
T1EF63A926BAF82718F2724F3999F357274D2EB9565D14C98E0129634A0C23F10DE72F7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx
Size 68KB
SHA256 f5f9e97a6b1ec8d46a9bd5b9d4ccae96521b85517b0337b248814d2e974a968b
MD5 1f83dae35478669aef357fe90594264a
SHA1 c70bfff0a559af8cb76ad80a504dd55bd6cc484d
SHA512 94cee3ba110b815812fbb1339e54cf4b7b2942b0145315019d2a5acee75a90326a6bb0e74388ff5545afe23f85856c1404bf35698b5bdd6fdfe2be6645ce84d5
SSDEEP 3:MgAWl1l0c5MfaltpRTtPl2tVRl/l:Mk8IMijRM
TLSH
T16563020476099812D1080A3944878B81BF70FD501F7A9753A960363CCD753421952F59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx
Size 68KB
SHA256 4a7ecc04be4e4d08d516b93d51b8711844f6b15cb796621f513cc3558c1682d3
MD5 0f3272a51a98078411225a64c53df2e5
SHA1 b87d7a7cf7bee185bc494d1aeab92f43ccd046c5
SHA512 c098b43d274d7ccc302fe205d80f4edb19c020c4c1c08415842a6b9fec472cfdbbff94e6f0cc68b6eceaeac1046d9cadb825e8e6842d42c86ddab704615cab20
SSDEEP 96:aT14KNVaO8eqz9B38tA++xHx9Bbx2gF9BZxv9ByFpD9BXa9B:aTa8V7I9B3KA+s9B1F9BZd9BC9Bq9B
TLSH
T199638A06ABFD5139F5E34B3849BB5B156DBBB8640A01E64F2028616C0C73E54CEB0FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppxPackaging%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx
Size 68KB
SHA256 3f1413056e03535f9c0923a0e740b1a76c9781416bc411eda4918ffd3f624398
MD5 dcb6e39b6914cb7399363d55e7a73f1f
SHA1 e56b90af4f06b3b1f4011f5f5761d88959164c65
SHA512 50d3d07b916199226dd93f19cdb32ee29e5c9ea7aa5085c709357163c1352296f9b5602ad602e71995b67f1bc20d401fb421b91ea99e76f04ab97036057a1089
SSDEEP 768:nqiF+qMVz+xErjR/Hootbm3aMDHeGi/91EHPL:qiF+qME2rjaoSWGi7EHPL
TLSH
T18963980236FE5950E3BB1A740FB14711623DB5A25F51E39FA220A3BD3D31A936E90772
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Audio%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4Operational.evtx
Size 1.0MB
SHA256 79bb9ccfce8014d63b8d9ce12d9534f672926c0d6d6c461558bc1c420e33fc15
MD5 8010607e2769a4561c37e6e23cc1e3aa
SHA1 f5afd1707ca6705b3945330be406f4bc5bfc94ca
SHA512 55c12569711fad3b941d5999233ba78e099a55a0c2a8431734022809ce1315a558cff00116010b8cd9f61c33abf123b37b363a1bac17067ed521a2f59cae1468
SSDEEP 768:NjHaktWFs6vFG5rxLtq8Dw7RXDYORO/h6krKdzqcbBrF7eFLixuYsYHhHwEMT9BE:GEnWi
TLSH
T1D2259D241AF55B38E1F2CF3DC0E7073B1D7BB9458D864A6B1094D3D49C12A629FA0FA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Audio%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4Operational.evtx.FileSlack
Size 896KB
SHA256 52a1c35e705c77d8a7f4719dc2a28d5294cb404b726eddce824a7f6ee9ef965f
MD5 cece5650d250970ce217d4b530424c33
SHA1 8ccb6df3b9ac9eaa5384bf194bc0ca5c2232601c
SHA512 9a13f34a3bbc2fd820fe4484686169730a56da2b5a0083bdea3279e4d2362a3d5989fcdad0f37ab1fa143cd6be13216b4f11c8f35d4e235d40b46d5cf0760309
SSDEEP 6144:hgDO7KRcqBWGNIdKdNWWhKmRg2ijLBybqNv/ez:t20Fu
TLSH
T15315DD6167FD6548F5F37BA87FB8A2944F7BBDA2B939D80D1210214D0936B448D20B3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Bits-Client%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx
Size 68KB
SHA256 72b2afd1d0e771864a34fffefd6809da0e39166a79d189c7417f7ec8a1caadc9
MD5 a573776a049d893b0fd5a2334cee66c4
SHA1 6ccac1b87b99df068453ebd5daa55414b5b5cc62
SHA512 5d5a55a5be0075996cbacebd00f2b7988c5f3bc6a1ce8998b6bf20e8ab7c9960f3bd75503200ae6f40a7b716920798d802922ce9f9e3ae5c2ef0106a9cd321d3
SSDEEP 384:cyh4LGGG1P780GvyGPus7nm8GdGEGDG0G/cG5G8vFGN:/R
TLSH
T1B863EB019FFD8838F1F34BBB94729B252936FD241E52C56F3198625C0D62914CFB1BAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-CloudRestoreLauncher%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-CloudRestoreLauncher%4Operational.evtx
Size 68KB
SHA256 0b505dcb2e47ea924abb7e7e00c15111ecd3c3eef34a77ef5ea590ad7749918d
MD5 0d7ddbfb5b92d7af85b45382b04fd33b
SHA1 60fb3ecf4a4a8fbf092ba6860a7648c21cbd25a1
SHA512 20479810c9bc4943278b49eaac8745c5760204dd69c83c437d3cb9523cc7e62a95feee3a473d91db41a11258b706ca6bf806951e0c35f92670e02024d180761f
SSDEEP 384:8mhSDnDDDODaDTDYD1DPDuDMD5DnDmDeDfDXDV8DSDTD/DaDqDXD3DODQDBDRDED:H/B
TLSH
T1C363891117F9F53CF6F28F3990B70B28AA7BF6090BA6A14F061092494C65B159FB0F97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-CloudStore%4Initialization.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-CloudStore%4Initialization.evtx
Size 68KB
SHA256 c8a2d5e5d3f9e2f6e6a720406cc6924427b97c2e24a23437c0f25e9433aebf7c
MD5 783901abced1da95012e1795ed92ffd0
SHA1 be7db9079a30382e9b2f015aaf17bf92d6afab1b
SHA512 b3b4548b7d3d36e244a8cda9d90a1723b4aad8eaaae0f8fc9795cc4e24af47ccec1fc1c8151173cca243ed7b35404965714f3b9310e96ae3a6d41c42a0e01b69
SSDEEP 192:E48V73ecY8AdjdjY8nRsYKY8Vwm9hY89:EDhucY8A7jY8nRJKY8VFhY89
TLSH
T17363BC02AAFC852DF1F34BBA89BB4B34A97679655F12D04F2004626C0C62F108FF1B57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-CloudStore%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-CloudStore%4Operational.evtx
Size 68KB
SHA256 b3a9a40af13d712c4e51a471da517955d540bf74dfafdb620d130a41fcb8a832
MD5 158b31a51f770996ea2df5c7a4a94059
SHA1 29780efb3378b971e32a69b1c01c13fceae69a77
SHA512 7961d7bd9c78f8c832d5c01d6bc99c241148bdfee302ef2421e1b572efa5950cc19d54f33eae08369a49a4103ec70083168685ca4710024694f7de535c5a7885
SSDEEP 768:4MB5z3I1xiSGkTFxi0EE7xNUZZizCVRWPxBCAqw:L5z3CxiSGkTF80l7xqpVIBCA
TLSH
T162637943D9DD841DD1FECA31A66E0BBC3B73646FCAB5931B936C812C6D12B816E10786
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-CodeIntegrity%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx
Size 1.0MB
SHA256 aa6e6b83a79a90e0f5eeaecb9e2f133e64a6263c5af4b5b8094a5853d2f3c371
MD5 644adca36e3ec4091907fb10d5406fd9
SHA1 284df16e742ea2f8d6f12b3b7a0829a9b241f149
SHA512 1509822edef2ac8cea7653c8ae900d93528a04b01816710433acb0e9ef61ed14fe6dbcd7a59a21e624a50175d5edd8cb712f0d6ec4801198bfe85f327d9efd17
SSDEEP 3072:pJXNdHYHv/AeE3CLvnbpPE/Pp3CLvnbpPE/:9t
TLSH
T19E25BD012BFC0938F1E34F3884B30B295A7BB9684F59D58E1221615C5D5AEA0DFB4BB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-CodeIntegrity%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx.FileSlack
Size 832KB
SHA256 2bf1133a2a62b4fcc6ac86a1efa923d41e01951172b01dfdebb7d6d45522f94a
MD5 829f352643b56fed9867a00543e4e3df
SHA1 eae78aa7de5d3f5c33b1750f03fcf50c7cbb4da8
SHA512 6f97cba54114bd087716b199f6a72f4b451dfc33828ca1bf34bea33daeda9d715828399c63adfd4f0943d3ea32cc9bb3feb4a667574f3df8ae40b89891caac8d
SSDEEP 24576:1f00q8ivsut/V+89PghkVRwYd4cN3k17u6jKYuWX:etvpX9P2kVRw6UvBX
TLSH
T17405330821F0ED1CA422CDE09B99BA2CC955965DF1CBC418C5CDBA73364A6FFCD892B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Crypto-DPAPI%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx
Size 68KB
SHA256 9c108a0c5dad63146d35440f60f5ff34a9d4468014a7169cb8d613fe8457f59a
MD5 69c3f55aedc0f481ab56ef4c59af21bd
SHA1 2f7e796690d39d81da43e21a5a898f9828435f13
SHA512 e48fa76bcf38afdedda907d925d38f53cdf62efc86f15d48394e4bd6bc00bcf491fbf9a38c94d4cca2d2391f8151a9e4659cc54d482b9dcabba93125d48d5067
SSDEEP 384:AChjh5GShPyzhEhwhshmh4thLhTh+yh3hzhrhlhth7hbhN/hkohURhVChmhmhFhb:LYFQi7tWm
TLSH
T1416389036BFD4934E4E2CB7582771B2819BFE9348B13895B1144A15C1C69C72AEB4FFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Crypto-NCrypt%4KeyMgmt.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4KeyMgmt.evtx
Size 68KB
SHA256 68a7bfe7bca1452f5ea9369cb2935923efdc2626d1b194eb6ee00116c142a223
MD5 27f68278ce5c34c250010871f0e6b5e1
SHA1 e8084dd5207c1127664415f7b00712be77225913
SHA512 06078fd1a36e5a95110725344d0eeba5135728152a1bd9dae7945a3eb47ec4941763b95ba51e863d9eca66f511d25b2ff13750c5518987ce5016add6c0de592b
SSDEEP 192:l38V7arYFT/lGKyYG9YRYE9Y4Yp8UYpL:lMharYJlGKyYG2RYE24Yp8UYp
TLSH
T1B863FE296FF88939F2F3CBBA847207259976B4615A11DD4F2151238C0C67F118EB1BAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx
Size 68KB
SHA256 ee89fcd51f11ee2b04f2e802a96666eb998fc0bb1a08d160d5488d31655284e0
MD5 851be94500650c9b310f40f9b7eb3e08
SHA1 fc94e2c0f9c8ef9b3ad6e391b04ab03f3b34a116
SHA512 38342d914d283b8ccb2e9aa94768552eec136ad856956f8597ebad0226ae0d12c2607f9f5181a784320f0ca8b3cf0d2fbf8b7b017309cec7cda505a495a7a372
SSDEEP 384:xnh3CpCGICXCgCACs/CD4CFCtCFb2CFmYCDVUCDeKCtX7CFuwCD2YCDtGCtwVCX5:pKR9
TLSH
T17A63342857FE1A68F4F78F7985B20B411DBABD552E44AC4F01B062980923E56EC70F7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Operational.evtx
Size 68KB
SHA256 e2c80022bf540f88bf54837c2e5947af3b911a341c9e0ec68b39e430a44bdc0a
MD5 850b09ce53c148ccd230e080de96019a
SHA1 9f5b7a817b0f0da11e38524bbe63cb804f74669f
SHA512 1d5cbb17fcdabc5316709ea3dfb7245b5b43ba97c74c5dc3f568341e6776e784ef3a18349dae328f81995bddeef5871eae997f02fa88bb3f638063d384f1d24e
SSDEEP 384:/OjhMC7CJC3CoC+DC+CHC+oC+/C6OC+yC+VCi6CinC4NC4UCgQiCiGCirCg:oKr
TLSH
T1AC63511957FE1A68F1F38B3989B60A1019BBBD552F40D98F11B062A80833E55ED71F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-DeviceSetupManager%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx
Size 1.0MB
SHA256 df03faf4087c317696b0f9ca39db0dbd834f13968d9cd839a4430b9f213e4345
MD5 66bd67f7da502c28d5cd67ee68c8306e
SHA1 dca664ff5f121b5e70f98807c589ba693005c35e
SHA512 8e78c66d1afa7a9a0628a629b20cb3465cb8f22da39267e372b1c99eb27b355578a57c445c513c38c0025acef699b28cd443bec3f06eed250986b7509fa795de
SSDEEP 3072:2Xg1zyh3GoEq0uomQqJpsZhA/KgLIEhfl:2V3GpgLIEh9
TLSH
T1A425270066F85A3CF6F3DBBA87B317392A3BF8540956964F1030A1589C179654EB0BFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-DeviceSetupManager%4Admin.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.FileSlack
Size 704KB
SHA256 d09f172dcd24744dc7e136bcb6908c861948747c7314e04a53633c1b0cec6170
MD5 bd293598f9b82a4fc95a53e98a2ef7b3
SHA1 778c08f97e072e559a3e9220f1b088acc3162a86
SHA512 c13010a8e576be3e05d77a051efe4702d7548238b46c59b262adf1d2fa77eb5f9c5af49f94554bd970865999f62e73dbb2ac68b3a03782b5121b3374ab2b9e24
SSDEEP 3072:jTke1WwhzQoWyLV8IYiZpq0xuD2X4Zw79qiZGVkMtcpliHkfb:hLlv
TLSH
T13CE49C295DF91233B1B2CBA5DBF88467F955B8E7B9045E6C50C307490793B02A8D3A3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Dhcpv6-Client%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx
Size 68KB
SHA256 81f39233db3a86ed4246e97b196fafd2b8bfe4bd9201e3cc8ddffc0f37ca1cd2
MD5 e7bb6436335c0306868fbc0195e792d4
SHA1 2ab9830928b49a3344e5ed9239a099bdce09e4e8
SHA512 932cec990120e09c37f363027062b08cbaeeb9e453dde9c9ebac3515756ff942e786008a1a85d3cfe917d090752fe2b10a33094130fb0e1f9d2816fd36b2e9a6
SSDEEP 48:MdoVWyhrP+MZQNRBEZWTENO4bpBOoaSMmtamLmncpQUSD7J0K4tG:u8KNVaO8eoOmtamLmncpQUSDv4t
TLSH
T1CA63CE02AADD5919F4A28B7A0777A7386935F9604A10C19F7224B36C1C66F50DFE0BA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Diagnosis-PCW%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-PCW%4Operational.evtx
Size 68KB
SHA256 81f9e6174e7e4478d8e4fe767827fc5cf11149d0dcdf038dbccbc06729a1a735
MD5 497aba2704fde224018069201b425dc2
SHA1 d4f265e3111e6f81d3c73b1c2a41c3345a63b55f
SHA512 df29630093e6213218a8f8c3947f0370405a58462d02e6dc206419c5a4725d98929a11b31de9ab4560ad689110e909715ba600a9ea358e2a63a0a701d1c55cfa
SSDEEP 384:6Phz5x59W50535P5h57585Yj5Z5m5I5W5J555b545Z5x5H585p5X5V5W5v5J5353:wZ
TLSH
T1E963770216FD463CF4F39F3845A71B25097FFA640EDA5A1B12206164886A968DFB0FF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-GroupPolicy%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx
Size 1.1MB
SHA256 8ca6862f4b0e885f8f6d7873d5ccd00f6752ae93474bf94b7bf604856f46ee14
MD5 d07d43abe993df697fd56a3710e578b5
SHA1 2bc30fc80dca9b10b816ea04a6c7431fc1e53920
SHA512 e4df28b61c6e60922278ef077c5538a08ffbe3581379de69a96345e37ff3205d2f18aee947a27d31d2c181c7f095dff813331635ac470da59716d776fecd7840
SSDEEP 3072:S2p+zfYP61dgjJLm15veFeXlpDabZ3mA:T1LA
TLSH
T120357D427BF81A28F2F34B3D54A70F782F7FAE481B4659972040A1985C658299FB07F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-Boot%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx
Size 68KB
SHA256 bf0b25da0851e8d1e89eafc1cf9dbf3cf03a38d9434b5f2b53058d2219c22492
MD5 fe1a2fda3e88769ab422abe232bd51e1
SHA1 8fb49e4d21767fd7f8bad67b152a9f57cc3bcc75
SHA512 d6b5c595e987fc00edd2f7ba3b95e6f8ecaefa74879c4cfed3cbb6d4cf50e88e11ecaae1195314a8238b89da8244d73bff387b673b840c0c4fe4a9e862ca373c
SSDEEP 384:MKhEDhmdDmBDnDpaCDnRD4oDXnDWDQD4DMDfDJDBPDx/D8DWDCDGDcuD1tDU0Dnl:japP7lGYiYVCEmTXq
TLSH
T19D63270667F52938F1E28B3A88F3177C2A7EF9041D815E6F2150629C8D759225FB0BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-Cache%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Cache%4Operational.evtx
Size 68KB
SHA256 e420931cb8152b545ec28cc8329ae41e40df83b6cd2029a293861be6caaddec4
MD5 9e9830924f5bd5d04c805a2063ac275c
SHA1 b78e1f7857b8bf7b4d1517bc7cce566cf5c7dda6
SHA512 8da4ebf6f72edb08d40dd009d1ad773b015a6071974729b1f5b37f868b920381906e43146b161a2740b1d80c93814e67dade5f110eda48e9e6b62990dee0d778
SSDEEP 384:10hLOpOYUO/YOA3OYhT2O4/OYbkO/Lq+OYvOxjOYlRO/lwOY6OxaOYtO/8OYaOxE:WnM2E4/04A4n4zhti/AcNd
TLSH
T12863B40127F80438F1F38B7E64B74F681ABFF9648A814F5F212051999CA99658F70FE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-PnP%4Device Management.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-PnP%4Device Management.evtx
Size 68KB
SHA256 9182ac0fe46cf87f2d6cdf2867c4f8162a6d705e01ec2fb79470060222dfda76
MD5 008fcd089143d44274d050f68782e1f4
SHA1 f6bd9ae0bcbd10435009acc0277506f0e285c511
SHA512 2b58c4e75f4b5253a58763da015e4d2760b13910603eb9fee0ef068fb14f299633e6e03683969808cb368bb55734c655ca9205852a8233ac969888e14818db41
SSDEEP 96:P9nJARNVaO8soY63gOhOpKxJjDrjjbY69aOhOpOl6JEOhOpO:P9nJyV716QwjxVvM69awD6JEw
TLSH
T18063DA029BE8891DF6B39BBA41FA03165A3A7C504A11CA4F7560536C0D67F51DFB0BB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-WHEA%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx
Size 1.1MB
SHA256 9a2576da1e9cc2514c8733c2da7097caad4e28e24db63c2be09f8677a2df365e
MD5 6053c6f049430247e53e899e480597c4
SHA1 dd60ec37566b7ff6116cb0f08eb75b064770aa03
SHA512 ecf9c7ec95be36d3f68450f772ad4770561cecde42a616d5341c37ff3cd68f840bcf69dca6a6f7abc57f33eedd37688a31898a482af9086193966ca985113470
SSDEEP 384:IehmIlI+IVIRucwdI0TRIQoI+IzIuIsIrIbIaIgImIbIbuITXIbgIQIwIZIYI8hw:zatN9YBAU+h/od67K9/ISG
TLSH
T1DB35EC0277D04C21E061477588A3DBA4257DBE488E02920B3A9C736D7D7BD7CDF6B6A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-WHEA%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.FileSlack
Size 754KB
SHA256 370489805f3321228570ac7c50362b7d60092bef7db1a7ed53b86f773c43d360
MD5 f29671d8d2ba6000ba9066f5b820cefa
SHA1 2d0fbc8281453d998d83c919048eb41e389a217f
SHA512 b51587b71e06bf4e42e6a76446e315a23359c5a40a0b2ab6814e19d0c0252e5f919b5703eaae162f7ca123d2dbf7cac81be1cce6dde839094bae3bd870c4118d
SSDEEP 3072:e362OqpC3sRUQo3USEG2Jb77F9stVJb77V9v6DghXaEENa6tnBW/E2XR7sr0Gvsf:h2pFc9tyIGCyvA0ZYr
TLSH
T1A1F43D257EDA0C3FF3A29AF06FEC64CAB86EF7FF26525499007503854B02951DED1628
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Known Folders API Service.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Known Folders API Service.evtx
Size 68KB
SHA256 5ca609a3eb4c6afb9cdc178c3626253bbdae58926635b598b4d2b1d161ddf5a0
MD5 5a205707c2c75c6a02873001eea08450
SHA1 443af66ca7db93e3e6c679130bec6b2b2680a062
SHA512 ef4d02865517a8cc4f2ea422249dcebb4e39248ebfb1a11f76924f3a044268e271137aec9938585789d266244b79bc94f985c0ee04e488a4c790c8719a8f62eb
SSDEEP 768:wiio4YwvOvMXkp81ZjxDVFPu5APzocqVpQA4cCVlEF5d3VEVttBnVYN:QD
TLSH
T1D4634C1113FA4978F6F38F3A44B31B286D7BB5640F52A64F5290528C1D25EB5CE32BA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-LiveId%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-LiveId%4Operational.evtx
Size 1.0MB
SHA256 e9b2331512fa2e035a5dc454b89d789cc6e7ad1f3eb0ea5db08e3487aa16b7c4
MD5 a7aea1486201aa697b079e5f0752eaee
SHA1 28602401790ca37a9728b92b377b4fbb344bd1fa
SHA512 e8871b125b7b3acfcda92d2cedff94815862510cd2e82c36eac23a51d122e060195fcd81fe430ba14ed78c40f0e758ae1221e12385623ee5bd958405b035d082
SSDEEP 768:zKL47FNplwBLkhzxbtCgJO9jSHab2KjbFoF5F4eFN3CgJO9jSH:ecjwtkhzxbaQHO2KjDXQH
TLSH
T12925960DDCDC4841F3A3CF38AAF3AF8824F5B76A84D9655E26A0505DFD40CE88165BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-NCSI%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-NCSI%4Operational.evtx
Size 68KB
SHA256 7ebffc5dbbcb86edaaf300be73f6e42a897e2921380b9cfb44d46da157b3bacd
MD5 5b3fcc6549d1170dd5874d7cfa80d427
SHA1 5bb2ac7cdd33b6e8ba0f97b9be419466b1d0bf88
SHA512 48452b5fa37b9d6c16f849ec277fce7557e6ed5a76d7b80d7736a08c0ed6b26ece36fe91120a814310e53df40de2f5f0c031b24ff464d4f86dc7f0c08a3ce522
SSDEEP 1536:d1wGDgEGA5hnBrJG5nwXxUDtd7/8xaBA:QGDgEGA5hnBrJG5nwXxUDtd7/8xaBA
TLSH
T18B637C425AFD053CE1F28B7980B30F38563EF6380A967E1B2110B1699C19A5D6F71FE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-NetworkProfile%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx
Size 1.0MB
SHA256 d1b44ffe1536d42ad41a749f807b61114a33cf9c9fff8c21592bb0f545d1f694
MD5 4653756b953d78ab87c703d271811efd
SHA1 64245fb2d5f429c33735200f64fe48c9ab944a3f
SHA512 5a3c79c2673c14ee96df47f6aa6d6d9d5f6210dc0dfeffa82aa7a795d8a587e1e8736ccf2b6925a962edb65a47bbb597fe7dda03719162b35cf521f780bc77b1
SSDEEP 3072:64VUMHh+84VHHacOgo/Wq2fuLmMOhAdzU1pmaczx6gEQO7Li4Y7s2RvWDqGf8qof:Ooa
TLSH
T14625290217F90A38F1F28B7598F71F38367FBA2419856B9F1414709C8C659698FA0BDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-NetworkProfile%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx.FileSlack
Size 947KB
SHA256 7c3b866115922d2525980142899bd13e972c73642ee73b31f51a319534290b49
MD5 450a4a1efa92af9e606b5e49627043a3
SHA1 4e1e4808feb48809cd0dd424d115b0e8c98bb182
SHA512 a199b0213efa1dedbd6cda6c9da81e4514a73cf4809545555aff4a8b23c7891ea496ec3843e012384519cc843d5a44fcc29e63104b278810576f4cb9d2fafa30
SSDEEP 6144:SPVvppp3tay1lrFVbTxaRKxYa4xRP4wgenLvMvi0lEtPPN:OLtay1lrFVbTcRFa4yN/l2PN
TLSH
T1E925323257FD0244F2F37B3159B956A00E7B7DA3AA79C24D2149651E2EF2A208E30777
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Ntfs%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4Operational.evtx
Size 1.1MB
SHA256 bc6d066ac77abd049c77f11784b0dd8ff3cff6541ee32c8ada95ef657ff96f6c
MD5 274133cec5d3e077087f2adc5213f8d8
SHA1 51bd219723f08a24795a50194689eb909e067fa0
SHA512 9c3b81dcc0132fd91a37fabf3dfb80ca1e1f66c5e3bc217089150048c48684b0552c6c0a771c5a3794dc83bca888922d4d13275d445029a3e4af37fd1a80bc4d
SSDEEP 1536:u3iIn20HYnaNjQWh+IJK8ri2NSnq5JsNnSjPNCDhWoYm2nYD7nxwuuGpnCjE5X:yonaNjQWlJK8ri2NSnq5J
TLSH
T1C235DC051EFD1529D2F68B79C0F3073B173BBA101E969A8F10D063894D96A15DFB0BEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Ntfs%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4Operational.evtx.FileSlack
Size 704KB
SHA256 388ee314c6a736e18331a2c0e88b65baa420f0a3b38d5408f377a5eed34412a9
MD5 fb78d1d384a1b60280f42d1a5e2fbe97
SHA1 8c7dc94b4cff054b96af68c61643deadea5abb36
SHA512 51da5ecd8d3c138297ea5cf97327f80038a136cfc727c22fbfab6392f631a7545cbb6e642abd63ac7186fe29b426f3d24295f8345009761436674c3b02f3f266
SSDEEP 3072:QqkjNdQNpZsLTEFtLkUfmJY0soz7W6tZmiAZvF0H0Qt6xyV4Ugm9cXQgFpe:ojvkzsLyLDsW6CZvF65qy6Ul9cAv
TLSH
T1D0E42E01BF94D6C1F1724A328CA6CF855636BE92AD21660B37C4730F8DFEBC1E922655
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Ntfs%4WHC.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4WHC.evtx
Size 68KB
SHA256 18aa936c92985c29d0af065175698b5c5aaa7c671d92b707e3fd2e9f53478184
MD5 456596079052014e48b3447d0b35d051
SHA1 18bf4e8dba4b1a222cbc42f5897269517aa2cfb3
SHA512 74b644b596264aaa8f14e17f47d09b1e3cb14d9a293ad660c60ea447c3f82dbf599a0088894ff949ee9d2d5e69548e943d072fd736e666662948c9d2a4f26285
SSDEEP 384:rehvIh5VIhImIxIS9IVAIAEI0BI3IiI/dIdIcI0IZ0IQIEQSIFeIlI3kI0IeI:6AX4W
TLSH
T154636E030FF95829E1F28F3E8493073D2B77F51459898B8B1110A1ACAD5EA66CF70BD6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-PCI%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-PCI%4Operational.evtx
Size 1.0MB
SHA256 52e1de565ca72e8e56516f2cec5932f081c9b1a3e6a9fc01f5d9aecefa18756d
MD5 d64ffdb7158c97cb1e4235eea47fd7f2
SHA1 0165566f2e28c748ef01253d2dee7202bb13be03
SHA512 4e3d4669bf4741d7f5f3ea7c7b5957b8f863af313d3c38e463c3bc8832ab20d1f7e3d7d957e799e5e0725c89e01594ddc41d03b4da2782907d6119e5fffadb32
SSDEEP 1536:JeUn86igX5IEbRDLHzqkUUIYasgJUdgJ:tKL
TLSH
T124252A023BFE6518E2F2AF3442E30B37277AF9585AA287075244939D9D525618F70FE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-PCI%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-PCI%4Operational.evtx.FileSlack
Size 768KB
SHA256 bb240dd5ddcd8bfe1c86f3ce8d012b159c7cce129b1dfea058cf1b62be2b1f9c
MD5 a36539ae692a7a31d692703cb6d36838
SHA1 d9d91829ee7b2fbff885d91336d46ca02a488d15
SHA512 888138227a143beca8a11a7280103fa2b0cd27403e852dc673bc81b7d8f546090bc441da5af485cd098ffc7db0d875ade9e70390f0c7f74e44908c90c171e65d
SSDEEP 6144:5jKlqr5wBtbVRhkFz/9OTp4EZ1OTeXuzmSdds:FKlw58BnpD
TLSH
T145F4F52450C40548D2B142B1E6BDFB91FB76DD4302425670397F336A1FBAB838BBB5A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Partition%4Diagnostic.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Partition%4Diagnostic.evtx
Size 1.1MB
SHA256 400a9c325d714f4d8c2ca3a1e9a42f8a7d33e18b0fd75bb58800bda06b347f4d
MD5 b0b43c3b4e19ee523e32b5b168142c8a
SHA1 833301aa30e348345b736fb159d4bc61d2e6e540
SHA512 b0ce61c8abcd744bcd4db74e3d01975ef6247b061aabb4d6788591d2a34124f3bc36fd235457e25aae9ec3200b351fcd18e53404d39fa30a6da65d1a51c61806
SSDEEP 768:Rm1X8zfFFMa21SZ1k1x151w61E1y1811y1E1z4111q1+18161x1q1V131a1CS12n:sI3dhScALd
TLSH
T1CC3521061698171DE262C73186FB5325663F2BA88FA1F54F308CB39C1BE264D6F60BD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Partition%4Diagnostic.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Partition%4Diagnostic.evtx.FileSlack
Size 960KB
SHA256 b526e504c3247eab934615484edd5db59f1d4be35a02bd671708ed8b4fa57a7f
MD5 bef2bcf4a8bee9e81cabfc58db2c2793
SHA1 a2721b917fd55d4ae8bc441b435a253dc9f11b3b
SHA512 0158e360376f9f613fdab553b96d2906162f0dc07a0cfa5595fabc494dbc7e422925cb20aaa87c1f5dd2935ad99b47e2871ee6b4d71c23f6fa21e9ddafae9caa
SSDEEP 6144:y6v2I7ygWV8mbnhqZqUMX0Igx7DAJoNNMX0Igx7DAJoNKrEkMY:BPK
TLSH
T12525BD0267FD4209F1F37F705AB642A10A3B7D92A979D25D1289701E1EB2E60DD70BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Perflib%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Perflib%4Operational.evtx
Size 1.0MB
SHA256 96a681aa471ea271269ddad4957ac29520f4fa3feb7805d14a6e3b5e2e6eb1a9
MD5 09f863b0ad10d929624582605b786956
SHA1 ff77a69c575db608f6fc061b9cca1fdfcc6b5c02
SHA512 8bea83b1bfdee27afc1f0b4b78af818117d299a2fcfa34921f2e0f9b7f46fd68e7944108f6b89471fc784d34177e77867e70402a86906f14549b359a7266ceca
SSDEEP 3072:ziRMugUmd0jJawob8LnXfb3MVvvNCji8XGhgG3sWvXGTmvli4WQfEzVyOkaw5hQI:uIngPxesa
TLSH
T1F625EF121BFAA434F1F38B7544B30B69183AB8240E06E98F7150D3EC8D9B5559E71FAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-PowerShell%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-PowerShell%4Operational.evtx
Size 11.1MB
SHA256 13b6310481bc3522b1dd7340aa740fc83bec2b11ff3c21b1aa0b67ab368aa981
MD5 a0c7aa7aeb2f3686df422ecfd3480012
SHA1 07a8e2703789a5181c90494a7ba1d92c42d8ddf4
SHA512 ccbb8a91123a73a0bbb9cd9904d447c1aec9fcc97de990690e0faa20535b562739972c6d18c0c1d1d29902a4051c89fdce5722b40f04f2392f2a21dd7c72089e
SSDEEP 6144:4UfDbCDbfDbXDbZDbUDbqDboDbqUTDbCDZLDbXDb7DbUDb6Db2DbpUjTQH3Db8Dh:4raUGP+VSvXU
TLSH
T11CC6AF5253EE1654FAF76BB9E97E24741A733CAD5A38C26C109CB05D0FF3A0488A1763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-PowerShell%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-PowerShell%4Operational.evtx.FileSlack
Size 790KB
SHA256 abf78403e5a58e41e8156e0159df975320f6d594f15287226c5787812511cb9f
MD5 a6ee4199a29cb8d2006708559c0cd596
SHA1 57a754b2bb287f2b1ca963fb15999a05c37b693f
SHA512 5f13a6ca8a7386d097cdb0a50770f5bcc3e93b8723075569dd152f990ced881f86dc801bf9f3bde725a904c143ac5ecbfa71145c2f427819da34563dcd0cf9b0
SSDEEP 12288:F6zAOpQShRYe7NUQ/HI4RVkbtny+RPLm8f:eRYe7RBkRny+RPLTf
TLSH
T1D905180233F8522AF1FF0B75BD7989944BF6F8456EA2DB0E1864155E4CB3B4089627B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-PrintService%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-PrintService%4Admin.evtx
Size 68KB
SHA256 ddb8858481c2ff0f038717c25aa4ecc686fb8b41fee8c71ae54341276563b922
MD5 c54fd569f6d03f2bc50efada9a59f27f
SHA1 2c63af9e57c12a4b9cd9fb3b56963a7ed01f1198
SHA512 44384ba7d6440f1e36a16df9ff61184e48d22f5708c4674a37131ac6b78fee837341d806e51197775773c7b09b30b9df95ded28360ec5b6551eb42a958bd87cd
SSDEEP 192:GS8V7QpTpRfpRTpRMipRUDpRFrpRmpRaKpRo4pRvYp:GlhuTpVpRpmipmpLrpopgKp24pup
TLSH
T1E4638B02ABFD4E14F1F34B3984B607153DB3B8504B21AB2F1638A19C4D66D65DE71BB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Provisioning-Diagnostics-Provider%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Provisioning-Diagnostics-Provider%4Admin.evtx
Size 68KB
SHA256 8e36108c4f0c0a180d1f5e3fb8d9f545d711a7750cf29f840d92cc50d77472b4
MD5 c605c53714ef70baf3ddfaaa80016c4a
SHA1 d84d5b21f04d9425c81e00002fb3d60c7e489730
SHA512 b1208010cc782431b1e22b1077c4ef54b7d972e947f90ebcbc6a89f7e23a4e44990babae3e98df965dad8ae78702aa7f699bcdf894963bec1e801b9e8bd0bb97
SSDEEP 384:zuhgsjNseGsBsscns8sGsusxsUCJsPXsbsesFsiosesOsmaws2pus6zfsuHvhs6N:yriaLkpS
TLSH
T10163100607FE0268F1F78F3C99BA0A6128B6BD45AF518D4F126051584D32E56EEB0F7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-PushNotification-Platform%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Operational.evtx
Size 1.0MB
SHA256 c417fbfdfd8115c9a00060c1eb2e248a1af2089111c69cfa4210df95b56b797c
MD5 d27c83376163465b011d9e4b7252fd05
SHA1 d626b1ec0c030b13a0a5b8ce63db52bf25f72f29
SHA512 2b152ceedf50b6b17f5708b6a1e246c5d88a81ea681bc6d00dc8b5f1464400c3a0472332725ec8de43c77efb6151ae4608ced2779be15c1f92415aedf1bae219
SSDEEP 768:FCIQLxJLPzfAwNK3KJTVPDJFVEfdbJLPzfAwNK3KJTVPD:ZQ/fAwNK3KfVEfdVfAwNK3K
TLSH
T17B25990257FD4A2CF6F38F3990B72B6818BB7D690F42A95B2311625C18959118F70BFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-PushNotification-Platform%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Operational.evtx.FileSlack
Size 896KB
SHA256 b2090bcb10ef1757cdb71b2f08386b2b7e9ac8cf9ad539f8aea7c27d845bdd22
MD5 d18739d4922aa67ca0f0eb1063e2b969
SHA1 aaa0cb40c6eb3e6ddbf19244a3046c54eb70ba27
SHA512 63816527934ef0be9c9f73fab47f2bf2aa20412173ee1707b5095910ffec6d031b53e19dea155712022cf9fafc342d97ba0ac33464f98d06fbbcd37d92fd24d8
SSDEEP 12288:veVhAeCUc0e1q+VHegSBae51FeeQwkluE90o:EgUsq+TSB1Ewcus0o
TLSH
T11F15ED35E99A43F5EB9E2235FE4C71C3E91D6CF09191C520914AB94F8CFC2419EF4AA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-ReadyBoost%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx
Size 68KB
SHA256 107e7be567874f352a0a1d84e80624a70e61c283682d97a3342c888e5a3de4b4
MD5 92b4c5fde71e97ebc5fdfe1a8b437bef
SHA1 5b0698fbff58ed88d9ccc7a3e289209d8ba7325c
SHA512 4673d810dedcb5b4588c2514fdc1397c85a4b3e1761106e9658c089209a2515d7eaa0a756d8dc0ec863902626dcf01e788b34284f425334c482733058c4d8c03
SSDEEP 768:7JANcDU6IZSyimfyHwvfcoxFSux7VQRXe3P9m6UnSL8fpT3f5qeGSvrgv:9gpTybG10nSL8fpT3f5qeDrgv
TLSH
T15F6305031AECA819F0B7AB75BA7A85663221BD78DB51D42F7045235D9871F40CFE2B22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-SMBServer%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Operational.evtx
Size 1.1MB
SHA256 996ab74b9caf62be9ec189221144225ba86e85af3a7f144623b746b303703a48
MD5 523df1d5605063d76705d3bdb1568316
SHA1 cf215139ef98d3aa5840ed117ab67abbbf459ada
SHA512 0efa42703032e5e290067e53878e73fd5c1ea4ebed1631f5492b52734e477059431f78b62b305c5ddf1190ef2eee120ed669e4ec4bcaf038cdb40dcbe4115a56
SSDEEP 768:B+DzRHpHlZl4jbUW9fWKgNkb3E4I4tdli3Mi0DXxsCWJDtwrh51iXT2Ybcdg/:w0EpT3M26
TLSH
T11F354A0217F85834F5E38F39D0B34B393A7BF44496825A5F1064B1994DA79B28FB0BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-SMBServer%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Operational.evtx.FileSlack
Size 960KB
SHA256 b1d440c71c9d07ddd10e1329ef41577a15e2b314f8fcafebd010d5cce938b897
MD5 ef557060e7fd504e3211f11c0734d40a
SHA1 eeff8192899b1b2ce96d5b9ff794b02b4ca71b52
SHA512 0cb3694a2c4b4893861a04332d8d9504ebc28ae4298f62c8b72216260e599f4b80426482e467a794420419c1f2a0187ca4e417e1ad877d09b4807e97aa3f548e
SSDEEP 12288:AvQ7a67aD7ahRRPXidhV7MAO/RUgVvXzz8nuxUHGZUdQ+:AvQ7a67aD7ahRRPXiD9O/RJhz+HGZoQ+
TLSH
T13725064382F803BEF0BAC73585F24217E6717859AB258FCF5252421A1E53BD59E38F29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Security-Mitigations%4KernelMode.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Security-Mitigations%4KernelMode.evtx
Size 68KB
SHA256 82362db22fd396f1891844ece950f5552d26aca25b5e95d5c67feb6cdad4887f
MD5 2ccd318041e6e74e3221d62f06995b14
SHA1 77316a106f14f7c09db1d55dbe342c7664de5762
SHA512 fcb9c2598d266c071f60b8ba3ce6886fac2eda15d4a1b9f218df979ff2e69e68d8b26df17d252e750e0d39e8393f23461c73b01b31ec9507e2798fc036f7d928
SSDEEP 384:ethV+Ti+6D1zNvjibQFEYie53iGNJieqi46D1zNvjibQDiBTiqigiaiBHiCiBKVz:mPd1PR
TLSH
T138633310EBFD0139F3F34F38E9B39A11A97ABC461D29CD5E1155128D0826A15CEB2F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Shell-Core%4AppDefaults.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4AppDefaults.evtx
Size 1.0MB
SHA256 8c74b251c9f72f9e9ac7b419c37649497e1b60895e14deb09802084cc4538601
MD5 971a3d086345fd99cc13a593f4b0765f
SHA1 c486f71ac13c2086b347a73e7031b03c568fa654
SHA512 6578c1ea143cac29543d053dd7d8bb26f10a32fc8c3ca6bcfd3a0801c095c761ee2d112e9bb5ee586d583c14e0cb713751d4c589df8a6f90c5999b6d9725afae
SSDEEP 3072:2lLLpvhXZ091wf6JxvRoR1yiNEB/emx7pb1DZvaWLUWkxvdK53PexNwx1785ZtUy:iQXK
TLSH
T1AA254A0567F95034E1F38F36D8F20B2A5A7BF8294F26AD0E219082544D36E16DD71FAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Shell-Core%4AppDefaults.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4AppDefaults.evtx.FileSlack
Size 832KB
SHA256 7e0e6c6482191486186a367e2a6b15a3a655d978f9762385942d57e99bede88b
MD5 29fca4dffd18cc3f056bb473e4c91475
SHA1 5afa358c80216b84140d82b55ff4375655f25151
SHA512 d0b5a201b931c490d4a9fe7603c989277a4b644b40af2986632d95615d65ddd4572b9c566dbc3e37c85044ea687c3a2e7770cd2c0330c09f1dbf8ec682a5a807
SSDEEP 12288:3o5olPPu2zMo0QmvFFNcjN+KzIXIBz2Va+N3/W5hY6h07FsvMaYbDoWqQEju0+VQ:Yh4
TLSH
T10005E200BFB4D1D5E2B25F324DB78F452775FD12AE21890B2A94230F8DF9B81A51772A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Shell-Core%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx
Size 1.0MB
SHA256 eac5dbf3cccfbba4f7e7dd0412034bfde2949e738c0a2f2f26f8ff5d693f4569
MD5 697092126412e9f90512e69e7d1981f2
SHA1 07717ac31725d8d4799a71b5a2a2788ceda0ad17
SHA512 67a6d6674a603410fc93c93ba1660071b5129c5e3952c4bd83fb26e068f35ce4a9774a9a41d35be7cc73d24fdb952a862409d9d321e71898a519e272aa5965e7
SSDEEP 3072:WjfHKEtDAOxVoPMT4PrBVfU9coiJbogxukHskFBxRoTbl7tyRIPyiOFIPD4FfHcn:kjg2mwlSN9GU
TLSH
T12125360267FA9434F1F38F7998B30B286A7BF9685F43685F210451588D36E158EB0FA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-SmbClient%4Connectivity.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx
Size 68KB
SHA256 cc06a1bb1cda87d9d26f4d4d8c0c646d429e7fb83d1b4823f9a27858b1ec437a
MD5 818e7ba848f4226e4a7815869500c393
SHA1 650edd82d7b4ed70bbf6cd6d3768a48e5a36b39f
SHA512 d178b5b82df34866f9b860664802887c3be39aad68fa253f5e0da523bd935f81b847d8cb64fab32db5adada7396ffa672add13cb4dc1620ce6ca24d700074a27
SSDEEP 768:varc013uX1yzIfeLUEDdYDV/TkJ9NO5k68oN6mtgL1fGL:vKjCDZ
TLSH
T1E36354051BFC1434E1E29B7E94B74B2C6E37FD385A81CA5B1114A09C5C16EA1AF70FBA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-StateRepository%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Operational.evtx
Size 1.1MB
SHA256 9587d9e76200472186d08306b2a06aab82b64c0b627505d563b50de365ce2e20
MD5 c9ff0ba0a1852f183cf761c39e4364be
SHA1 c3223791b8e0557358d6df699ca230df5526d89f
SHA512 f5bf8a93ad2e27f58411a63ff487d1ded9eceaba8fab5da33db1031db62e718b5f5c4678e65ac353d6ef5f69e23441e7836f6849a917b6200da642aba050a2ad
SSDEEP 768:TSoyoNwu/ey40HCRFd0b5ahHj/yQyPXB/06d+Bi0GiUQ9ASH3720fdiBSStydi:C/u/+A5GjCPyX720fYbtyY
TLSH
T1293538032BF90938E6F38F3A40F30F38667FA924199AD60B1144A18D5FA7955DE70B97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Storage-Storport%4Health.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Health.evtx
Size 1.1MB
SHA256 51e88de8b8e5de5bb1238f4cf1df0cc50e22185b9aae6d1d96df730f9f4472f2
MD5 8fffe7562bf3f9cde28ac5dcf0e14804
SHA1 06f3375184e885fbd57be450daaec777f8f58e2d
SHA512 b2e863f376741a887d11a0491ad0886dab97ba85e5fa0ebb589d363d6b5ef9f190785dcd996e44c079a8c92b67f850ae6c1fe67beb4aea9745a7040e9e630fab
SSDEEP 384:TPh7pIBpBNpBIpBzpBIpB/pBypBtpBMpBflSpBpxpBZgpBXHpBh+pB19pBjspBpW:L2X8pK1ql2fBQpzWTa1w/J3WnpIg
TLSH
T1F035F6551BF70629F9FB8EB516770B74AA37BE342A95F91E508090EC5CB24108F207EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Storage-Storport%4Health.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Health.evtx.FileSlack
Size 768KB
SHA256 599c1bb5ffd4b87229a81958f33f1060821cd01cd7aa7ccafa0d862f4522f3f6
MD5 cb18a5d28e77522dfec6a6255bc3847e
SHA1 6db99ec3aead0e567d869c2f5676483b66422d38
SHA512 6033893c75b32cc906bcabdff02fdbbbb75f0b4d568962b38ea023c00b2273f90bce4482358d4ecc64c22bceaa628d55d17877c8301a1406f67c55c86fc08723
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

Microsoft-Windows-Storage-Storport%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Operational.evtx
Size 1.1MB
SHA256 d1d536229172e0689a59f4df730d16694b3ca889861753da3c456d01d8a2b983
MD5 2f4e89b73ab59c81417b32f6b617feb8
SHA1 7c495efaafec0e5e1afb21fbc7fdacb7c17d59ea
SHA512 b60476e5184a5a2c3a9e2163a0e01f291e9cb6f8cf7aefcb68f2460743eccd219853a7fe1c2a58b2a372d103cbb599b3435fa22d84ca6a8262fbbdef97931a7f
SSDEEP 768:qvyAXnvUG1ZcKOwPmqH1hltApyYTGYNtU35Oow0BJP5OKs6oZF/6GZgWy6rc59ls:TyYaStUJOoMFT
TLSH
T1A03576062BBA453DF2F3CF7558E74B38693EBA142A41D95A304462EC9CB29449F707E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-StorageVolume%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-StorageVolume%4Operational.evtx
Size 68KB
SHA256 24650005f435fad840167585d01f29e7f7334a305c968e4ce1e403e330c19bf2
MD5 b43acf95f84fb6d6e85ab45472758642
SHA1 0d070bfe92b303d7ae5ec54a685283d13b0d0702
SHA512 9bbfe3fe2dfa2548c437f2106122e257d7265557851a02410e4c33e3d4942201691804caf13886ae527f1e865b761283a9f1547032d11c1262bb00a328a94f93
SSDEEP 768:j2NkO3Ln0TcsjWur+kAOy6mvvCuidG0FJP:8n04sjWur+kAOy6mvvCu8GG
TLSH
T11663AA021AFC5429F2F3CF31A9F7473A613ABD255F51D15F309463AD9861A008FA27AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Store%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Store%4Operational.evtx
Size 1.1MB
SHA256 4a4c247a4695199ca36d793dbf3369b5e5429dbe890704209c61417fa84fa445
MD5 f2c61544887bbdb9d3364c26092fd8f8
SHA1 593cb7cd54056b5f0707f971b158d500c863d764
SHA512 f71913eadd22518a56357a56b6a9de64a58e192fb57afb276d5f58421709f9ede46d836850dd69b5d16a74c16dd459764f883f8a7a7bb130ad94f0b53ba15e67
SSDEEP 768:pwXDCXYnTc87i1Fd68+fNt8EUjTYAt4VCUYwXyiK7BHBCfAB0nCsSudXFlpQ5vi6:iXeY798EU/uVCXmJfxmtRbI/j82kVtn
TLSH
T154359E412BF90538F2F39F7598B30B2D4D7BB8081A969A5F1050929C4C37E668FB1B67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Time-Service%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Time-Service%4Operational.evtx
Size 68KB
SHA256 1a8f71323b4b60d4a958e7559565224173367fca5c2a7eecb2cebb994a465cee
MD5 e42e5deb6d3906e350921d0eeb217159
SHA1 d320647161bf9ca07d4154e9bec5fdd581c2ee35
SHA512 b15accb57cf4005c12c94b60e02680783783609c5452a00720b42db4a17453e92eedca9bba97246df9083d5be5ba3ae070d21e4fcf8b14e0b0bbf9101f2e9588
SSDEEP 384:RWheep1lp2XpwDp1IpwpQpjpPpnFc40UyZ5ScyRn2r+SWIRz1EdptmpgLZjf9+Vp:4o0acj3HOY+SzRadptmahfEEFXmj2i9
TLSH
T1B063B6027AECD848F1B35A706EBAD0ED57727866CF11D64F71C1137F48B1A018EA6B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-User Device Registration%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-User Device Registration%4Admin.evtx
Size 68KB
SHA256 e3d6e3abc1892f1d20b014f087e584b3bc4f29363f96689f3b15319547b9c3aa
MD5 779fdd43f35403f5ba63b7a03bcf61e8
SHA1 aa75442ee12ccfba5498edac8d67fb8bc480e8bd
SHA512 16dc00f19a68a8da9fd03b4206b32cef29444a04e06a84db37f218972074ce9812768acf7f94a6f45d1caee0a4b64f2d77ecb71341b562538a33898c824ba1ef
SSDEEP 768:C84XPsPfsuiip+vXh5BFnUVrbLbcK3BD:ePsnsuiip+vXh5BFnU5/cK3BD
TLSH
T1DD63110017F95A28F1F27F7A85F607290D37B8580D35E54E1224824E8D61EA9DEB1BFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-User Profile Service%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx
Size 1.1MB
SHA256 ad80c1f967f4e5744365ad6704be6188017289aaa2c5663c3e467a9279731c66
MD5 cd55aa93837b19c08fa2fc3ed8c150c3
SHA1 82f2b01181fb3c86cdcf66a6b5621dfb93fe3c14
SHA512 469dd4136016ab3b1aa41135f1058b84340fa164ae03be25eb3cb610fe4e18764a07eca852d61959d29894be46425c8f60eeb96dbb6a683498409242e2d7597e
SSDEEP 384:LNhPmPmCm7m8GmcmbmumbmSmMmpm6mlmem4mVmTmBmZmqmfmdmsmH6mUmEm7mim+:BIQHc/kJQHc/
TLSH
T11A35350297F8492CF2F78F3894B31B293D3BB9A40F595A4F01A460544D659798FB0FAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-User Profile Service%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx.FileSlack
Size 960KB
SHA256 c8e30b8c91b331941b27d2f3d7d9b5f22982ab26eeea927d3b9feb91bbaadc81
MD5 252be6438b963bc9eabe045de2f68fe2
SHA1 b8a73f7e7a430350ece9e94642a414bc9171bc22
SHA512 fba3f7ebd97dffb0864d894961a74fa765d04fb7d1fa6b3c75fccd33faef600069f88ea408f04fb2dedd90a5342f0337f81e0f46264800106fa2a66fee3a822f
SSDEEP 6144:ilsHsJUGQkDyPTx4VWLliYdWLlSeRZ2AP:uUGQVqVWLliYdWLlSeRz
TLSH
T1E025750263F94204F5F27B746AB641B04B3B7D95AA39C65D118DA01E1BE3E60DE70BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-UserPnp%4DeviceInstall.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-UserPnp%4DeviceInstall.evtx
Size 68KB
SHA256 4df06beecaed78c9c8c72e622de19179e695ec156b79e0dbdc695819260e68f0
MD5 9f827e23d0a5b0cb76c571edec5a12d5
SHA1 63bb68d1ccdb1ff631e8ac33676e5362d7159fb2
SHA512 b12c6cc1774e14389c309df3370baa34293b84caa0ce00cbc7090c15dd3a78b283a0df021a066897e9dab354c792d4cd13dd14853281c2ef3269c64d87313444
SSDEEP 384:8fhi7i7R7fQ7V7Uzx7mI7kH79D7o7B7M7vt7Y75787uS7I7Sd7zkLq79o767v7WP:Khek
TLSH
T1AA63870117F1693CE1F38F3D84770B6D293AF9100946668FB164A29A9C7687ACF707B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-VDRVROOT%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-VDRVROOT%4Operational.evtx
Size 68KB
SHA256 8534891ff8f28d1628a922310641fcaf6d77bcfb976bdda9fe6774eaef5e91af
MD5 540b65dc57148f0d0faa8a3346bb68ce
SHA1 b5a6155e744701d266af0d26a128af58b146df8c
SHA512 26be5f9dd09182e16867b2d1ecec29bf0de821c4838b761cbb67d8a9929df4faccaed0c23cdb1795f9b3fe6d98932eec5c3ad63903c90bf07e6301c21add196e
SSDEEP 3:MgAWl1l0cQ7MfaltpRTtPl2tVRl/l:Mk8vMijRM
TLSH
T11A63020477099812D1080A3944878B91BF70FD501F7A9753A960362C8D753421D52F59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-VHDMP-Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-VHDMP-Operational.evtx
Size 1.0MB
SHA256 8fdb787995916e34ec5f73b8845b5e4a4cb675c0cb4235e8bd108dcb27d482b5
MD5 b1f69d02c7be8050cf4ce98c569a1ecd
SHA1 484f9d95c601774ad361aa3d8c1cf07dc5285306
SHA512 f4fde0437bfebd8290d7e078c042b805066ad170029ae7afc96c6d2f6ed312b4d5780ff56abaa9367af47dd4b6dc287d98b95d7beec21c6e2838a8bef3a6a808
SSDEEP 384:EahEmumPmxmU1PmpmhmwmPmEmCm8m0mcmFmQmMmlm4mhmEtmJmimImzmdmm3m0mf:r+ui7nkkxVTq+e59I0
TLSH
T16525F84267FC9138F2F35F39C4B70B241A7FE6980F8AAA4B1140D1944E15E658EB1FE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-VHDMP-Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-VHDMP-Operational.evtx.FileSlack
Size 907KB
SHA256 f608bee2565b5288bfde099e7c10b0c56b70f64cfc6fb71ed25d2410da79e13f
MD5 e09998b2b395e26a08f96044949edb1d
SHA1 add94c6367c19c2235a36247829ad11aa7ef8ee1
SHA512 3b57dbdfc0d58c78b3c049b2499957e40f1e78fa9712167c4099a1097e09bf7b36b9eca34009fbdd3ed8e4ecd4db2c45de3012e8b91bb98ade036f8c257321c9
SSDEEP 12288:1gnC2oUJOwQuisT71sCT0EHFgwA4LVI6zDBpW15G4ifta0EF2cOMfx203R8RebPq:1gnCsJAul7B0q4+Vzmfjo6fbfeq41ca
TLSH
T1F015F1425D687D51F398B072F9EB01616FA7D89874D33D2E8F3A6A322553D80DB3381A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx
Size 1.0MB
SHA256 b91744ac5c08a7613eb4ad17e87f66b408a234a2f6ac70987bf7d1480e557319
MD5 7aaa334d56e0f06ebdecd8a970fe0ea1
SHA1 368c7e1256517ff32677e1463353a00bcab29e3b
SHA512 a4a9b6e389698261b033a83a04e295b0337deab90865da15f79e60452837d7e49feb385edd203cab7a00ee936030151ce37b5a85b4d3b8955a942c06e950de16
SSDEEP 384:8chj2zr2s2i2j2w2R2B2m2q2i2f232j2fGU2+r2wi28x2M2b2C2V2h2K2P2Y2h2f:hES8GNgR3r46pdR6+l/hhExhB7P
TLSH
T1DD2547176BFC0928F2F38F7884731739257BBA980AC19B8F101071599D61A65CFB4BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.FileSlack
Size 896KB
SHA256 10c689fce2d9461cc19538d29f7c1ab07e21136db7c1d0d87d3a0663669347bb
MD5 b40f0d653dec250684e2905d3ca3f8e6
SHA1 17b1d2287da9eab9b97992984a9a079980338e91
SHA512 6d295cc8339e1d770f05b358ffcbd0b653e0389d041effb07a1c4043822cc5d5ecd56ed7c81f59266dd9e0ae71ae820d556aa8353f47bce7386a4e730e1b5e24
SSDEEP 6144:kDiXMyArr2eYWIlnbnteUPfkmRiSfOZ0PFvCavJ1pgD90IEnOkoLbnLC:iDRYjLte+tdvZvJ1OD90IEOJm
TLSH
T15D15FA12E4CA292DC473B138236D9771D703FB44A5B8C6AC42E339585ED7CD72EB58A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-WFP%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-WFP%4Operational.evtx
Size 68KB
SHA256 71b713e3efc8f053f635137afe3b9e16f465473aa104c20222354e30c114bf39
MD5 6e40dfac92a4c118eb9d88b4d8d93f32
SHA1 a72ee849cf0cf2340b46538ed1a169b7405e6bcf
SHA512 da87661319fa8cebbc30a3d732ed2cd78dfb816fc25cba7b149b6f4a216399763ea7b9818f4bf8c496ce26ab6988d6817237ec961eab8a99c7833b2f626058c4
SSDEEP 48:MSvSsW/lrP+MZQNRBEZWTENO4bpBOo1ObQIJR0XtHt:5CPKNVaO8eo1ObQgR0X1t
TLSH
T1DA63FE03EFEC490AF9F34B7E427A8226293679268A11D19F3514326C0D72F50CFB1B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-WMI-Activity%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx
Size 1.0MB
SHA256 f13b3a450ff05714cfbd3bdb860a8d948562d4923653e4a51019a83f24f1aa70
MD5 9684f92447b7b54205a91b7fd5733b19
SHA1 08c622e4aac82951b3fdf38e597b417ac7f34496
SHA512 31a3143e851345d8d665ddab8f0f82ce364d8010fbcdab460b61efa46b468f3cacda8b03ddbfd75fa4ac8f5c2f4855a8924e6b91b68424ec7b08512f9d797f84
SSDEEP 1536:kkNyJOU+ThGJy5fPkVwFGs/wOAvZ+Ku2De2/:kkc0U+9GJYfPowFGs/wOw+KrD7/
TLSH
T16D25550266F80529F1F2AF3D95FB171B5A777C89096ACC9E1054138D0D629B0CE72BBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-WMI-Activity%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx.FileSlack
Size 448KB
SHA256 b2f55341aa950fb5d0c49c958c102138b0f8c81e2a2b0ca28b6b6ea5a8ec5ce4
MD5 a99879ccbbadd316a205b1b8f4e0cd7c
SHA1 15a76011343fdcc2ca0d698dfaa447d113682c08
SHA512 89b61bdd8fa1f15006f0d0149f2857e2682b40dd41e5eafbda88064a14f6217a317fa0c0086bee49bd0446f277d658cc3741d3ceb6519ba672f83e951e52ace8
SSDEEP 1536:z+3j2jpx8IwF4R8b/Vr5xZpnX14aTqmlMTNqTY0pLMK9s/z2ZIV7w7nUgcUXa0y:z+B4R83HZg
TLSH
T10CA4BA10B8E6D742E5B33A462540F755EE08308F68FC052AB9CC6F6BAF75582F663487
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Wcmsvc%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Wcmsvc%4Operational.evtx.FileSlack
Size 896KB
SHA256 64e13439a9f2f61a0a4f102ad89e2b7f7ba9de50623188b3464c8d624e471131
MD5 a9d0d0f7fde408849fde2d802d151b61
SHA1 cbecb1e7be6ac1b74ca1735512e11ab82c53e71a
SHA512 4c4a6d018465dd1e8b61bebad667b6d9f430f815f49bc2f94a507cb5befa561b6800d9d30523ef8092f0c01fd40004597c621a1c27ccccc7f1c1dfccd7d2af85
SSDEEP 6144:itvwdFYHzFYmeFY8FYOFYqTfpM679MA0TsXVj:gwVfpdGo
TLSH
T12B15B61233FD5209F5B36B3059B581E19A3A7D966B34C25C318A650D3E71E239B32BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-WebAuthN%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-WebAuthN%4Operational.evtx
Size 68KB
SHA256 ac02eb115239fb7b16be6f388b6e670edac819a05f13ef5952cfb32161a4a47b
MD5 9e62e1d1d68d158165a2f4ea2751c7a8
SHA1 4e04ede55f2d9fbcd40f3a1a5cec1c2eb96d32ad
SHA512 44f749e61e341f9c2a28aa2ceb40bbb185167fa1f55ea7b609818384162eaf234f2c503da13c3724e3d528761129fd8f1097ba8408e813377193d61932e70736
SSDEEP 384:dYhlVm0VZFVRVdVQV1V5VsOVfqZVFVEKVrLVckVLhV7tV4wVbV6VPV1loV3ZV8bo:GQKkO0XrMA
TLSH
T110636D111BFA0938E2E28F3E95F34F3C397BF85458828A5F6110A26DDC56561CF717A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx
Size 1.0MB
SHA256 d84e924c1a64cbe865ce5d55d36f6596fbea72b9330f7810fcd276d739d1a3e3
MD5 26a9eadf4d0172d926bebb7d91e01bf8
SHA1 094e8006cdb30868d95fbc04989a26aa1fb6461a
SHA512 682f9a076d2aac16bfaa623e57eb9586d1d4565f4ea980d726677ac54419c60170cf6858f6a373af68c42c6eb889616fad90609e15e1d10c1116e6d69cc73eb0
SSDEEP 3072:4+fYvbwYavnHnFzZQjAiDOzeO3nbwYavnHnFzZ:4
TLSH
T1EB2557406BF40618F2F38F3E99F22B2A5D37B9541E56D6CD0251718E0C26FA4DE70BA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Winlogon%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Winlogon%4Operational.evtx
Size 1.0MB
SHA256 4a84d5e6d873a591fe2c1dc1a98e7e57ba54ab225395ec7b68d599cbd700f236
MD5 4e4f0b517be6c26578416cd55fe3ff17
SHA1 fca22af3dbf4bbeb6f91ab0eda80c586f0098a58
SHA512 4c9727bfafb13aa075be1a5539c28743b0bfbfc5a7854420a1bce277dab8d93b54f6eac0e8c9ce684ce2a270fac263adf63510d4062c173b9183fc6170289563
SSDEEP 768:KCk+P/nBdRpDLl8iUnJIwtGdwGhqYZJolh:dRpDLKb/GdwGtZJQ
TLSH
T12025084667FD042CF4E2CF3D94B71B683A7BED680A86994F200062785D56A524E70FFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Winlogon%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Microsoft-Windows-Winlogon%4Operational.evtx.FileSlack
Size 704KB
SHA256 547c7dfafa10d3c76da2ce018afd591c2e9b3e420815858361c15f775837bda5
MD5 8e0811ae0cd6302fd3cdb14a5cea4cad
SHA1 d7dcf5a7220ac35720f6bb03c3e8e70d6792d577
SHA512 bb49ef8b8a8c00db11fc318c232d0aaee61e8fdb839b770812c38eb1adf85f86c04608d98f73a84975301bdccbdd4ee8ac5ae5284e0d6aadf1db14c57ef264fa
SSDEEP 12288:XT/rA8vLUv/tmktuUu4S/zCc2aa4/BhzAqRfInu6FP8NzlGalcTurXP14G:Qo4NZu5z32uZONhFENh1lcUfOG
TLSH
T135E423294E23CD3085A7F21680857773EEFC15754AA325A89AD9C717F3CC257C90DB8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Security.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Security.evtx
Size 20.0MB
SHA256 91ade5d225da3967f5a15cba6bc73acfb75f2feb7bc5e1739c7362da892d6b76
MD5 07c3181ea2668f9bde752e3c5dfd6613
SHA1 5bde07f97d68ff36f31ff20f3ef63ba037f0b3da
SHA512 b0ebad103342fa73547b01a9d1ae0487b0d790c93051758da6aeb50fded759eaf258b464c8b91db1cb49ad0ca067292e0a2d8c37bf4ef21e369c8b1203445e99
SSDEEP 12288:keoOZQ2DAUd4/nFaoditYdgVWf4+gmKYZ8PWQh5qiTbzsqlW8cTwOC:JSQYdLf4+gmK1PvTzsqlW8c2
TLSH
T1E327CC44A7FC0639F3F34F7695F3034A6932B8626D029A9F4149038A4D52925CE76BFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Setup.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Setup.evtx
Size 1.0MB
SHA256 93451939644c594db3c9eee87d3d213b94fba7c717174c4687419831c7c85f5c
MD5 57edcf93ee9e776fefd9ea085f1aeb04
SHA1 b1ee88cb7d3d8300bbefbcaf68fb1874bb8b89db
SHA512 6ccb4ee8a1221ed05856d5c014e5b3a652fbedcbc1490a370572e2e0d7b94044ac25a4928c4a8870251bdd0a61ba9a8a13138d6deae946ecaa4952c956803b13
SSDEEP 768:M6l4Wag96y6Dfb0vDjW9bLjL9hpDrpIkKTRCS/pjGOjH7J8GJcsi/cGJc:bn3sL9iWSqa
TLSH
T13E2526422BF54428F1F38B39C6F60B162F7BFD849751AE4E012052998CA6D558FB0BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Setup.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Setup.evtx.FileSlack
Size 768KB
SHA256 c1cb66521c348b8b4343368e8673c3e8803952c990439b810201912567ce3bf2
MD5 358e1e1a5760cb9ddfefcc8dbf96d86b
SHA1 12ae4c3e1a88471ce3b09074baceda20039ec3ed
SHA512 bd98d1b2b6a4fe04b0b80b15ae1f1859ed52a99c7d191cdb5345442c7db54d17780a9d2c404ad54823fe69392916267ebdd545b387ef1b787f38b3dffb8d49ba
SSDEEP 6144:L/V+hVXXFxjUapJ1qNjmsz5IEsm/baxc50:jbaFqNDIZxcG
TLSH
T126F4634167FA0648F6F75F7869B966618E3BBDA6AE31C39E0190154E0C72E44CDB0B33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\System.evtx
Size 1.1MB
SHA256 9fb33d91f470ec8880b558fde8daa3615fd712cb3c7eae50d876d7e2a68b71ea
MD5 7b2019811998d67ef8b32d133d8d09c6
SHA1 07acab5e3ea1aed59c1dc4c93ade7bf6e8534dd9
SHA512 e1511aaeab96fd2c2d5a0ebfa120e770690503e5ea162388bade77427bbf7e16bb848bf0581fb7d1328acf33c0c752d8035b30731e31034cf042838c2d9baed2
SSDEEP 6144:+X2NeM3k326F+T0571awLYINBXdW2NYTWhlK+t+:c2NeM026Fr571awLYI7XdWOYTOlK+t+
TLSH
T10035FE0127F84928F2F38B7A84F347392E7BF6601A82974F21A4B3D8AC115A59F717D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\System.evtx.FileSlack
Size 128KB
SHA256 add4e26781230aad7a7ea3e5a67122a72ab8b540832d0f79e93ca7cd79f0ed9e
MD5 374c5600722694f324762cc421ed2777
SHA1 21f56de0c3ce749c01f38d19137c994531081368
SHA512 434b74a62168215aab6a0ad2e4e2977868f8012f9c0f5d2f55ea7e09aeb490f1b11c5d893752b6d7d78a9745c860e145a0cf0ec6946e47cd5c6a2d38d0a699a0
SSDEEP 3072:jLeWYqub2bEwYuTHr0wkoMWEeUrvDlxQ1flSCLHbz:jKLqubUYAkoMOUN210C7bz
TLSH
T1D4D37C4BF1D900E8F04DE1359786A223EDA2B4860735B7DF065047A52B7BEE01B3E7A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows PowerShell.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\System32\winevt\Logs\Windows PowerShell.evtx
Size 1.1MB
SHA256 cfcc6b39518432cdff72ab1c65dae1de7c19971488b9e7b658d9c9ea4c8f6997
MD5 837baa60f9daf13fd719e6b558450dcf
SHA1 d5484aae9463971aecea0a146710ddc471f593c2
SHA512 138a262bc9871a5472110a8a5325bbe1194a6f645edcf29e393e1e8201cf063b4e91c9d3e465c362175d6a5d4cc159a4346c46b806b2c67de184263d122fd505
SSDEEP 3072:D0QyIC5YDn1v/nQyIncQyIkT2hJ4kNSFJ:g5YDzTD
TLSH
T13335CE0726E85004E5F3AF78EBB351B59B3A7D206D39DD9D61C1404E18E1E80BD62FAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Amcache.hve

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\appcompat\Programs\Amcache.hve
Size 128KB
SHA256 4fac0f108db737b15d655286101aad146356873bc4ce5e8cbd71751a494a2770
MD5 43f73aa11f69a394f7408aa2833bea81
SHA1 15cf1afca8e565423b1cf3e032b47565f4222a20
SHA512 0714233b66baa7daaf7a850358f9f32773ea4ef8cda687aae1ef86f9bde3aa822851237d2cc1011a9446dc65a5a85db36c695cddb4539c77cd54d85ae5edee61
SSDEEP 1536:qvr/KsBcPGo3BjEaQlD2rMh/mVu0nGE/b3v:GGA63Vz4ED3
TLSH
T140D3CE597F9082F1E270C7350EE25F036A75F816BD205A4C6380274E8EEA755BE12BDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Amcache.hve.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\C\Windows\appcompat\Programs\Amcache.hve.FileSlack
Size 12KB
SHA256 15842e92ea84302aef0595956cbd4f478e796d733a4dab4768188922ce3f3384
MD5 c506118c4dda74425c38adc36bfae3a5
SHA1 dbc32997aaddca5f40546b2666f6d61e68718fe9
SHA512 4c847838303860c1cf6830ed0899a43fdb0968f99204e9384ab61632f58bbaad9a23ec90ae295032839c4acc8784fb6fe999509f555200528e8b216c104c4e49
SSDEEP 48:rzK47KLZToSz1pqfYffSKGmG5a8v4nHLJd5bMYexdt:rztSAKGsLrJd54B
TLSH
T10B42141133E8A61EF3B31F7279B491201439BD5A9E52CBDD1B6871990C35B60CEB3356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$MFT

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\F\$MFT
Size 256KB
SHA256 25641b75273a6cad670184bdbddbd1893b9c37df915322c249b4ad28e53e18b7
MD5 8b262ebec5c949e90204681d0c9f5d99
SHA1 3e683f95f5c4cafd4412d16b105e43d57422d9e2
SHA512 5f2c4b245f5699b22dee8a0bb33203f3e1f006e1458b0ad9e5f4f57223145a01d3e19c6285b9363886bcfb2571ce54b84e6df4c6a102e6704310775b0f5b027f
SSDEEP 96:fMLLkBOemkUJ72ZMxzRz51UitCyPV5SGgnzgzQ39W6yvky4/kiXFNhUB1wq:bMRkdZYzRzZVV50ncz6g4ai2R
TLSH
T1FC443766ABBFDA32E1FD67F185FB07022764F1194E75470B2764B3AD6EB22400D21D28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Listdlls.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\Listdlls.exe
Size 215KB
SHA256 29d23bc492e48a5ae68444302d3430e07d08e04278d53aa70d9367d9cf8bceb7
MD5 8336396d50dcc9d5a5f66b078a8460dc
SHA1 42bf0bb282512e4c638b8f03617dd973ee09afd9
SHA512 08f34405f8d5ebf695391f9cb1deb6eb22b318b698ce9540d37eae45d36476a96d379e9f338c64d5f2f3e9674751bdb7f3661845530605b8fb1eb14ee91702e2
SSDEEP 3072:CcSIBqf7UxpYs68VYO1KpygluJrTiMLGcaad5UFyn853tOwDmh8DaNv3EL:Ckqf7Uxv9VYO1s+rTiMCOoRb0py
TLSH
T120245A5173E800E5E4F7AA3089718606EB767C564B34D78E13A442AD9F63BD0EE39732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PsService.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\PsService.exe
Size 314KB
SHA256 554f523914cdbaed8b17527170502199c185bd69a41c81102c50dbb0e5e5a78d
MD5 657c2da84107644a1397d49e0b526f24
SHA1 5c9ea381169e745d68e717cb7ad4adbf6afd6391
SHA512 f71064bbad6aae5ca94da9f49d672d04b9e1435f9e13b724f00afd2213cab402f407e71fa18817fceabdcb7c114c32febec35f39cde70c3e3c3f096e8f94bc4e
SSDEEP 6144:DG1HIY/dt4hEotTabamlJCqTH7BXohll9vGfq:DioWP4eoA3lJT5ovlt/
TLSH
T111646B15B3E500F9F5F76A388DB19506EE367C564B34D6AF13A081692F33A80DD39B22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

autorunsc.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\autorunsc.exe
Size 785KB
SHA256 60638c8b1164293e009bd0326dfc7dce7d0b1d64ebdf044beb75f3152387ad04
MD5 6be477f8a7168fe079bfb549114cd890
SHA1 349c935f210f29e83383b3866aa737eba486ccb9
SHA512 2a5629180107d196ef13854e1886b1c93dab5145101b72016109a804dd1f3c3a046c2cbc58c78a489f4b6a8ec9af3c2f80b1357a2c7462981be3175be7d46467
SSDEEP 12288:VYhzNwa8WD84VMqWwydeTgqP4CMIt/KzIJ/sD1QGAYr9nStcmLmSnNXuiJhq3T4h:Vz6841hsqP4CMcyq/AKge
TLSH
T1EF057C21A7F802A4F1BB95718E764915FA327C571B34AE8F0360497E1F37E58EA38721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

config.yml

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\config.yml
Size 8KB
SHA256 6fe76b3e56eba816690f8254c49cf18ea9141e7df51e75cfa0fd1cbae1eb6072
MD5 c13e2e2cc082e69f9df5d49c23ca9b6b
SHA1 1949ff3d0bf9844dcf98088e14b9427ef12c6af5
SHA512 588111be30f719310a4e31fc2e952abe73057adf61f7cb5c6f10ea9afc9019ba44f103b614a69f23f7f4166a1bdd6325522dadd4d296fd2ae829a81b4c4619ed
SSDEEP 96:9CYvnEpsxsZ1KABR6rPRNJ4MYNVbdkoYPdasGeLb5TYES8lwoCzpc:9dCN1SyrSoc
TLSH
T11E02CF128421D8F378FEE34855926E439635A0C393E4E935B7CCCA944F0E9D984DA7EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

handle.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\handle.exe
Size 406KB
SHA256 24bafcc570cc9bbb6b6e6652a57a519e0464e3996891aaba6f55299cce20b04f
MD5 89f845fc4898f2d47a3a81f0b57c60f1
SHA1 b04a2347a0f94e87215424d816f9912c7bc248d5
SHA512 50bc14c4221ad984c3aa98327ee9127f7470a9a2b0a953544440a7b05f60f7f91209a96bd87d0d8f1e05551863dd43193f7f4231f382d6ad75d9f0a245939f04
SSDEEP 6144:MjRme/IYVCQ45De1/8GzfaD3f7oxakAuXeh3ohaYLCAyI5ub:MN9rVY5C1lq7oFpuoIGi
TLSH
T12A948E05F7E400E9E5B7A6348D758546DA727C594B30D6AF23A4866E1F33BC08E39B32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pipelist.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\pipelist.exe
Size 431KB
SHA256 c7c3e2e7b729891141f5a7cb172390e57072783187edc92db95d4b7b7fe8cc4c
MD5 e794ca9cc2af5f555ca573ace7fbde00
SHA1 9f7cd59b08e2a4f810c68745a26b633c685bd7de
SHA512 7de6e6b81df65ded8c2779051e5a677de0e6db390ae1ea3abb5c9deffc3f7a3a54012c88e2573c83f4d3c83e54210126b4bc95127dd2ce4bd970ee818b77b1f1
SSDEEP 6144:EXaCBWflr+fDPiOOQ14h0WRKIqLZRto+hLhLlw7X8A0YfvaJXW7gUNBhtBxLVug:EKcCEfDkRKIqLZRto+hFl0XZH7HLl
TLSH
T114946D5677A405F5E177E23CCAA24B15E9767C164B31E74E03AC826A0F237605E3EF21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pslist.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\pslist.exe
Size 260KB
SHA256 d3247f03dcd7b9335344ebba76a0b92370f32f1cb0e480c734da52db2bd8df60
MD5 77bf50713a9eb7b270a73a9797f8ddfe
SHA1 630ccb6bea18f6224f830216273297ae0bb43718
SHA512 80d0fbcb25d81c6146aaa1adfffeac67681c6c6c5afddd5f84bc5112a510c0803936a3efa6753baab58cb73cf674ba6f6d077da7ddf864ea9fbe17e7626e6fdb
SSDEEP 3072:90UJu9scKE2FrJojBdfQ9heIlNDvZLByZhRg9bH9UFgwNVVwUElCSHzuD856bFz9:9RJu41FlWBdI9kIlN7RdMgBPlCuyFz9
TLSH
T1AC447C5973E508F8FDB7963989A49506DB727C524B30D64F03A0465A1F33BA0CE3EB22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

maintenanceservice.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\suspicious\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
Size 272KB
SHA256 4bd1dcf4ca2347b5181957297a22926bbe64fc2eee3dec93bca6f0c654167b5f
MD5 e255f1082448fcc9185d973c71bdcb50
SHA1 c0800fb7d2e66dcdd60414cf137db7b3eaf6eab8
SHA512 6cd5eeb4a31bab908354c0d1e5d37d87c8109ed253b793bb3b0e539217e4957e332535f8130b517d49adc3b6514f99c6f98593d49a84b25c2e6a455fa5ff855e
SSDEEP 6144:Xr1XLss/oct92xA1YXs2lRBN2/iJPsfUrcAe:b1XLsswWkxy2lRq2czAe
TLSH
T1BF448E28B7E408F9ED67827CCCA28512EA73785547A0E7DB03E489651F233D85E3EB51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OfficeClickToRun.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\suspicious\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
Size 10.6MB
SHA256 1dc68c7eb3fc39e118521c7425c47da841283a076cc422a480bf9ef637c43000
MD5 67e6e37998718f746ba52eaf94c4c0a7
SHA1 83e7abe8c919c75660b4f7e327dae54a92064bb1
SHA512 21521aac07b47a3386dd789a5ccdbe0175799dfbfe5758670a35a6b642b89578ecfaa4e0086dfe3b734bce1af317671339aa2f5650705ac317b182c01c193f3c
SSDEEP 98304:GhDYh+CeHpUwnAJV84AB9Jn8Ed00k9Tfd1WKh:2lJHpUwkO4QD8Ed0XBdoKh
TLSH
T184B66C62E7E480E0E6B3D2758D3AC672F672BC4129B1A71B5295C60FAF336805D3C725
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OSE.EXE

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\suspicious\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE
Size 257KB
SHA256 8c47f981e1a46a42a268f53ef1b1476555a54bed7077f7b13b1e562c4c9c049e
MD5 17dc54ade85613728a43f2d733527c5e
SHA1 6420a7744edb234f8cf989b7f261265baa381e94
SHA512 632541e69c61398c3eb07ea7b8e7a21a6a765b592939f091bf8319cacbf7f294860e5f80c82e8e7ab29e2a20e67dd4d1e34171b2c5858d30ce9b9bcbe167ee43
SSDEEP 6144:bmw5HEiIsCCINUGBZjgXwYz4WDZSFxgHiGfE:bmw5HEjsChNVBFgl0WDm+Cp
TLSH
T1E8446C4677A40CF9E96795388697C536FBF2B8022A21DB1F0760C65B5F33351AE2DB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

elevation_service.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\suspicious\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
Size 2.3MB
SHA256 d31094b8bbdd28d04cf290eca7920804b0052ab83faeffa84e799c4a3d45d1a4
MD5 f9a5b444d4032ef6d0247e8327cca3ac
SHA1 e6ac15d499bfff2af238e9dc8009cfdd15a08de3
SHA512 3989c59eff0ba479ad97470a283cfa99977a588fce26b7cbc16c2195496fab7fb225dd53d5d64764702998187ff88a1ecc7eefa515739c5bb6d01849ac937c96
SSDEEP 49152:FB+taZ3usBWOBr4tEGW0bqx0z+n217aau1gl3:ru6Jm0xd2d3
TLSH
T129B57C13F1DA01E8D06ED478974A9233EA62BC490B35B6DF0A9073562E77EE46B3D710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

svchost.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\suspicious\Windows\System32\svchost.exe
Size 86KB
SHA256 324451797ac909a4dd40c7a2f7347ef91f6b7c786941ad5035f609c0fc15edaa
MD5 0cd128f416a04c06d50ec56392c25d9f
SHA1 55efb424933087d755b18468bc574db4463d9ce6
SHA512 7d71e09d063a1f805abfb5d584b59e5cbf4ee357b67d48c3cd880ca904224bdb2684646829dcebc7ef59fafaa25c4ba82a9bc96ee740e68ff7736513eed058a0
SSDEEP 1536:fLXMvWgR/K1oAoJVqHY5uZgSV+lLNsUP4SzG:fmR/K1oAowY5jSQZrwSa
TLSH
T186835A9EAAE830D5F57A917484724256B972B930271096FF42D0C03D4F37BE4AB39F86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tcpvcon.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tcpvcon.exe
Size 244KB
SHA256 f9fdc027050d59608062a95c41e3965e3800fd5a91f35de080a432d62bd129c1
MD5 93d2aea4b5923f7b63a4ec2ef3dd9c68
SHA1 402b0d55f36e67153939b5ec9a91493e2671b9db
SHA512 193e4451dc5bfd0aadd9f9d8450f4f31b8189d8bc36fa1b16dc935c5848a975a72a7f46e60d2f4b9f9f8e65a27c8bb7ccfc01359598025a0d46b138bc5903e44
SSDEEP 6144:yVBXgfxDRDz0I1Pu0DXiCLkSJ2Ma8RuVW:yV6fVRD/1PusXt4v8Rx
TLSH
T136346B5573E908E9F5F76B3489758916EA72BC524B30D64F03A0425A4F33BA09D3EB32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Autorunsc.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tools\Autorunsc.txt
Size 13KB
SHA256 d312ccd73d05f237c08f6854d1b96bebf88bdc1e41dd3b53402c7ed4bc21cc10
MD5 1f84b30da7cfe3f200da0502738bddde
SHA1 8173a4e59a60fb1275daf43c716ac7a17edf2c0e
SHA512 27eac5e8f14188d4dce7d13644b9181ca33cfa77571ab3b71067009152fa4a5857c3f1b40873d78c53884c87e2400fdc56898fb8c2e8478d1821c325a155ba31
SSDEEP 96:niuc8vMmuc8vMPlskQ8hqPTTLW903UCSNduTOcvOchKeC3IbZQq8UqmMSUCsK8Uc:MQL3ygG9Pg2kFvFp2ehrhJ
TLSH
T1C252E404E7F81218F7F69F5669B998668A37BC255C2ECACC02A01F4D0835E15EC70B3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ComputerInfo.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tools\ComputerInfo.txt
Size 12KB
SHA256 21754cff0eec543f579660e2a5905c307a0a36df44bb055fb8d5e525eedfe111
MD5 76eeb1f8eb865d41db63b7df2cb5a253
SHA1 5a36fe5af53de0b6bfb7b1e6af74af65569cc449
SHA512 a66c78e939591c5b469e61fb0fa601dd030192613600a7b76f2648f7e96e6e956329da68daacea18ba7de6b50eca9304a1e6f76fb021b452b87e6396b451584d
SSDEEP 192:MZXAGEr9Wws1/8nNCiGzUoKcxIcf/U8a1:Mm9ZoKAK
TLSH
T1FE423F6759C8817BF89A013822519732FEE1AE453CC7731C708FA9049BA77487756B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DNSCache.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tools\DNSCache.txt
Size 9KB
SHA256 895daf80c02aaa286f95f5253cec8fc62268e5a4796d10c771b4da1a6a343e69
MD5 51c9eb6408f1cad249018529af6ac0e2
SHA1 d014c18ff62eebb358b07aa152536ea013dcadc3
SHA512 b1640a6aac6ff4f77d920b70f9166d966ae1472c9a7a10b2d30202df325193b116e190f63bcd15ef3be780cef4134e4c2f266b316990bcf2ac046edc309cb7d6
SSDEEP 192:Dw5AVAydysRsQYfmQ2dSRbqWRDm5GoIzEjrnOHj:jq
TLSH
T10722122B9E0A32071731CA32AE5531B7DB09BD2BC58FD9593D9F01C84F71482268D2AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Handle.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tools\Handle.txt
Size 973KB
SHA256 ffd345bbfc0d494b5a87d84b5ef0c51fd46e4788740a4df3fe0119e8d0071685
MD5 2a7bcb940473b44aafd5dde533021c0f
SHA1 315e5ccfdc365081c61b5c9bf0f7862281e3a9e5
SHA512 a7e26903baebcac578193f9bdf212ffb97cfed00607253c18ef39200a7b22a17be53fb6a62ab7f1cddec8b0120645d44466f3d5fd8aa09c5d7e8536f2934ebde
SSDEEP 6144:8BZeZc11saBz9ogakIvPSPbQYNNJo7rnAUwakzRNXBFQe07s7nOJW/PK9q7nTPfc:J04eOumAQX
TLSH
T1832569050502C9B14372E33432044A07D7E5E7E76A737D39319F6AA49B7338A7E9E2A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IPConfig.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tools\IPConfig.txt
Size 1022B
SHA256 7f30460f16e6e8ea3631d4b90840def8a2da13cd498d8183a6ed1953c167aa8c
MD5 7471f751a80a802096c00a76987b5c68
SHA1 349c12619054845bdc89b57ea610046fd2e3b3ca
SHA512 973836007993336b49dd9c878029a8d079a6e1795f04dd6e20e5435aba7a837762c6d3c1ec85d69ecfc37a2a0bc412578d2f7ea24ee3d283a79a29b4f7fa01fe
TLSH
T10511FD8C06E8F857737B46011CAA9B34F1944E83C003F160BCADE2887D361F8A7459D3
MD5 SHA1 SHA512 TLSH

Submit Download

ListDLLs.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tools\ListDLLs.txt
Size 234KB
SHA256 f9b01f438abfd4ddeacce31fb3ce48b25a297f90eba072bd776fc9e02204689c
MD5 4e361b191c5b435da41d108e7388ba58
SHA1 3e10f5758ad808a1a63b28099f9b108915b3c19f
SHA512 6fd2ec62c21b7970ae007ff51d5969aaa47752da5cb1bb41b021e4d51fd7cacce9a5cf88c4285f6410e0b80394912583836e3fd3c7c7ed433e4a6c8870b6057e
SSDEEP 1536:hQxM34xqokBB4KJAJ1OgAoi82igg8KaB5T:IGP/B41aoiXKM
TLSH
T1763400548EE44C91C070CD68750BFF5DC26EB56676C39AF2139862C0E96B04BAE2F97C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NetShare.csv

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tools\NetShare.csv
Size 501B
SHA256 4acd111ea9e3a63fdf21a06d7f10e6914b58cbe88ca36370797681f4a605ca5b
MD5 e512078070991c5f3877f20be00d949a
SHA1 04727b0caa89d9d3108ae87de14f45f2e7923843
SHA512 b5820d584cb44f804c2fbc140b2e9e5d1a1327da74f47ae6fa1fe1c55e5aafb8649c9c750cbf8a45eca95e67a9c4cd551f235a33a550e8691182b4149f9d1417
TLSH
T1C2F022057C0DC1260231C343C299A921C8828B4570231000BA3EB2C85B78283AECC8C4
MD5 SHA1 SHA512 TLSH

Submit Download

NetStat.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tools\NetStat.txt
Size 4KB
SHA256 3b2ec4e4bd86bc85e257d5698c0eb06d61c440c757232fa3738617e7f5571e62
MD5 21e810d4c7c649fc5a9a7ac47c6d5068
SHA1 c6ca60c45e1dffe80820214452946e74d1b76b8f
SHA512 fa0ff3b7742dc4eaaac51d2f2cc8fcc697ae359868649ba060e0f6881b7d9b97c323d7515b91de95098dcf76b6136ec459fdf376e63e50c47fd4895f1036980a
SSDEEP 96:01/jpmUoi0gmeu48ddeSvzaBosZRcOPJ5fab4VeVMVNV7Vj:QjpmFPgmeu48ddeSvzaBosZd7MSjxj
TLSH
T1B5A12A93B63C74CA203FD682412ED997D9AE46423A2F146DB96D05E1C31C68E7BDF18C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PSList.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tools\PSList.txt
Size 7KB
SHA256 3cf7d69628c187359f6d32ff2c808eee59fed2352ae6ef479368d58b111c17ab
MD5 6adc18c5f87f1c8fad44f4f017426368
SHA1 db978152eca4b2d8cd267d0aada009958b5c212e
SHA512 62c7d9e1071d978e64ed29ef242f2e6f24cf454734d05c165a4f60c421af4fa5db2b80fd880d4c735ab2445687632e6dbc5cd352f5058ff7b95ecbcd9e3beb30
SSDEEP 96:rKXqIQip36/96ALsEspi4ljjbjKd/qVj9r/TS17AarrC8DBXBrynG:rzsphEspi4ljvjg/qVJrrS17AYDBXBuG
TLSH
T1ECF1FB6C6B2FE5C86738F283522911272C059522A6920C6B324F4FE29763149FFEF477
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PSService.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tools\PSService.txt
Size 125KB
SHA256 f8ca079b816f8b5219fc8e9c5125da2d9d8a812a49e29412437d5547e1e6e4bc
MD5 046a1e60526717d5a2c267778ef949b7
SHA1 a4beaee1d6565c9a88c2dacba0194057c7384aa2
SHA512 4bfd3f74cb37ed8233974ab44350d6bd0b373ebe2149daa84b06f477ecd9423c7fa8501c73e2d8a478f75d9af371561dfb72dd6032c727ccb6fec1bc970f5d85
SSDEEP 1536:p9wo10wYGG0p1uFRoKNtRtXIWm/vitzs/hNhX/UnzzUw:p3u/0p1uFKUvtHm/vi65rX/oXUw
TLSH
T18BC322038BCD635D0F1782623E3A5057AADE568E69B05F1139ED39E833AD55CC3A18EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PipeList.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tools\PipeList.txt
Size 2KB
SHA256 ff4ed11582568c42749fd60d3efc3796383e046cbab2985ecef2ec126d47cea6
MD5 c32afd47abf8bcac723f3d7fff413896
SHA1 2a804ddc4fc7ba4a10b7661436464f19ca62d32e
SHA512 793999b74a4a104730598888367aac4a36604f085c0ddd244cf979f9279a848d78fdfe0c1a8a54303466db42995baa0dd7c89244a7940df8e2a79dca53667257
TLSH
T1D44102691F6E127812AFC34BA153B031C4ACE4C85103E875728CBED8AFB1E856FDC499
MD5 SHA1 SHA512 TLSH

Submit Download

PortsInfo.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tools\PortsInfo.txt
Size 130B
SHA256 b3df50444861630240f4ab67d33416c8f57bdf8633dabd1b5a6eb5c562eae929
MD5 a71e5ba84c784766d47d761327386b8f
SHA1 639bd53c2cf68b2f8d6645711f7d326d56db4bcf
SHA512 8f07bef220ced52b2a4ae121ce1f51426891bdb7e400873ee136d50e28d514393b6d38711a999a6a80e2431892d7d88845fdcd56ded86e5987dceea55003e4dc
TLSH
T100C01212020071CD64190601415DCC80E859006F1E0D1019704C9A4003F032D1D55804
MD5 SHA1 SHA512 TLSH

Submit Download

ProcDetailsInfo.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tools\ProcDetailsInfo.txt
Size 192KB
SHA256 e60f993a4cb36ea500fedbb4243e25e9de8f4508bc218c20da04fa82fc739a68
MD5 2aba79c3ebee247742f2fadf3a60b250
SHA1 8a83d75914bad00eb702dec18809e0bf6b25653c
SHA512 cb929f17ca972c523307ebd236a078475fe34462627222e7de6bec1142edf1ddebdbe05ee56f4529a35d438a289897b90888010c35c447481c77c4b04fb3c3f3
SSDEEP 768:4/cnKFbZISmPVZuS6ZSjRvxGfzvzS7Yv8g4SLn:JHGrv9n
TLSH
T13114C838C8B5CCD7C5D92975592E4F8B6222A0AB2D543D00778C588DDF8D42FE933B9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProcInfo.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tools\ProcInfo.txt
Size 4KB
SHA256 419acfcbad14aae4bbfdc9357d2a7c2c899c6bd335f64039afe6232c6d77fe80
MD5 69e53b1e6c7279d5646606799637c332
SHA1 098b168abce38d6ea8c8b02748f8eea612b7f800
SHA512 f82fe498454ab58d0f9e8a78c44a17910c4524f52dd892294714f7abf449c7f1f89b540a004e3b41e793aca41c6bbc4984d0e92226af72a38fa09faf64b27e00
SSDEEP 48:cCYKBy0MHPYeju6XWyYpA3AxnysYstMhI:hcLu6myXQxysYstaI
TLSH
T169A17A18720E6279D515AF7F07B022095ABF861290A764F4B4FD6CD86C4842CD4EDFAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SystemInfo.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tools\SystemInfo.txt
Size 2KB
SHA256 30f5b1a5de1e54a335ebc7b2eb6b2a6a14bdb3611ddbe3afbfd37642f6b7d532
MD5 25354a231a660d3280e6f196df521680
SHA1 4bb2797e81b87936b0a00eecb1bfc89c912d6076
SHA512 bc8eec2d4de947417c356d469ab283f9e7861a72200ca86609aa20a82e9e5572309528199bb72841ec07ea49e8017e8e879f9546ae3ed8f5c8a4afe26a559f9c
TLSH
T1C05188BC8258B0613E5EC2552313DB02F4B495C7A6B5423530DD86844FFA398E3E5B6D
MD5 SHA1 SHA512 TLSH

Submit Download

TCPvCon.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tools\TCPvCon.txt
Size 4KB
SHA256 4bec6b46098e6517b11a69d7acd3ab83113218cc5c403124a6b279b47b79cb40
MD5 dd58ee44cbd66f01e57e28fe89629e6d
SHA1 db588d89456378bf41a0afac7cbb803ec78b77dc
SHA512 2ade4d0150de293afb96520619d3b886512fd4751fd5c0908be0bcab78c44aa249560616b7de7adc46644268138cd4846452418891d429df67481fa897b59b97
SSDEEP 48:xy3NyXRy3uzEv9LzEv990y35Qy3z0y3Yy37y300y3pm+WhL1zWWLWhpcmmmmmmmZ:eAOBzEpf0Jp4222dIlyyyA
TLSH
T12D81A8CDB337AD0B885F2093F13F886AAD7E05D977C63288E508445C992D6ADC364E66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TaskList.csv

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Grhzdfjn_2026-08-14_05-10-20\tools\TaskList.csv
Size 9KB
SHA256 c6467bc8f7d587d68e855383f987f5ce7daa63cc9df6f40455a270d3bf9c2e76
MD5 f54d6176cb0c9fd99ba7c2ff15d6788a
SHA1 206082800db881bab25b16d84a1edb52f2dfb914
SHA512 98537675cf2f077c6249643a81d17830aacb44e4c5fef56cc48656ea35e4acaed637fbb58dd06e11161ee35691ff8fcb9d54023f57bb18ebedd7be7bd2c92345
SSDEEP 192:zAflsJqjDou7pBmlNvmRKCY2KmFSUI6N5ODuSJnSzTF:ECJqHou7pm+RLzKmMcY8h
TLSH
T1E7124B1E41D6CBF20BE7FC62DF41E30F519DE92062C76A5FA2C6521EB0E091C9437A96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_r3rqh0hq.f4s.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_r3rqh0hq.f4s.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1492-2624-0x00000171D8280000-0x00000171D82A2000-memory.dmp

Download

memory/5064-2666-0x000001AD8D620000-0x000001AD8D62A000-memory.dmp

Download

memory/5064-2665-0x000001ADA5660000-0x000001ADA5712000-memory.dmp

Download

memory/5064-2664-0x000001ADA5640000-0x000001ADA565E000-memory.dmp

Download