9bd77af65c9eea9ec1d517f573cac3e9eabbcb39c3e2c116a985f8a02f3969b6

Analysis

max time kernel
148s
max time network
138s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/08/2026, 09:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
Size 7.1MB
Sample260815-le6ptsfa52
SHA256 9bd77af65c9eea9ec1d517f573cac3e9eabbcb39c3e2c116a985f8a02f3969b6
MD5 546e138421c2ff977955212dc1bd4991
SHA1 4debbe587b2d494dce3ff328c60d640ecebbe7ca
SHA512 0998bec660749f96a6dec288cf709281659c25d69164e177d0784f94178acfa3cd7445e9c222980ec7ec971f06d8786828ea3c39defeb8807ef9e9c9f364edce
SSDEEP 98304:dVEAkjzOmH4Pko6ypeoxZ0DtZ15xbNwOjcETFP2bT1QA4Ts8ChZ1elf+:dVEAkjPikLyp1iweiQA46hZ1Uf+
TLSH
T1C276AE02B6C2C0F2D0A71630E42997399D7BB9246720CEDB93D499785DB27D05E36B3E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution persistence

Malware Config

Signatures

Drops file in Drivers directory 1 IoCs

description	ioc	Process
File created	C:\Windows\system32\Drivers\PROCEXP152.SYS	handle64.exe

Sets service image path in registry 3 TTPs 1 IoCs

This determines the executable launched when a service starts. It can be used to establish persistence.

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Windows Service

T1543.003

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\PROCEXP152\ImagePath = "\\??\\C:\\Windows\\system32\\Drivers\\PROCEXP152.SYS"	handle64.exe

Executes dropped EXE 9 IoCs

pid	Process
8132	autorunsc.exe
2592	handle.exe
4924	pslist.exe
3044	Listdlls.exe
3788	handle64.exe
3932	Listdlls64.exe
4736	tcpvcon.exe
6784	PsService.exe
6416	pipelist.exe

Drops desktop.ini file(s) 4 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\$Recycle.Bin\S-1-5-21-1014449518-1831897916-4205727055-1000\desktop.ini	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
File created	C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\$Recycle.Bin\S-1-5-~1\desktop.ini	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
File created	C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
File created	C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe

Enumerates connected drives 3 TTPs 24 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\L:	handle64.exe
File opened (read-only)	\??\M:	handle64.exe
File opened (read-only)	\??\W:	handle64.exe
File opened (read-only)	\??\Y:	handle64.exe
File opened (read-only)	\??\A:	handle64.exe
File opened (read-only)	\??\B:	handle64.exe
File opened (read-only)	\??\G:	handle64.exe
File opened (read-only)	\??\H:	handle64.exe
File opened (read-only)	\??\O:	handle64.exe
File opened (read-only)	\??\P:	handle64.exe
File opened (read-only)	\??\U:	handle64.exe
File opened (read-only)	\??\J:	handle64.exe
File opened (read-only)	\??\K:	handle64.exe
File opened (read-only)	\??\Q:	handle64.exe
File opened (read-only)	\??\R:	handle64.exe
File opened (read-only)	\??\S:	handle64.exe
File opened (read-only)	\??\V:	handle64.exe
File opened (read-only)	\??\F:	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
File opened (read-only)	\??\D:	handle64.exe
File opened (read-only)	\??\I:	handle64.exe
File opened (read-only)	\??\N:	handle64.exe
File opened (read-only)	\??\T:	handle64.exe
File opened (read-only)	\??\X:	handle64.exe
File opened (read-only)	\??\Z:	handle64.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Discovers running processes 1 TTPs 1 IoCs

Running process information can be used to identify security tools or plan follow-on actions.

discovery

Process Discovery

T1057

pid	Process
8160	tasklist.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
6304	powershell.exe
260	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 17 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ipconfig.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	pslist.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	autorunsc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Listdlls.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tasklist.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	handle.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	net1.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tcpvcon.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	pipelist.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	netstat.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	systeminfo.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	net.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	PsService.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ipconfig.exe

System Network Connections Discovery 1 TTPs 1 IoCs

Attempt to get a listing of network connections.

discovery

System Network Connections Discovery

T1049

pid	Process
7772	netstat.exe

Gathers network information 2 TTPs 3 IoCs

Uses commandline utility to view network configuration.

System Information Discovery

T1082

Command and Scripting Interpreter

T1059

pid	Process
7772	netstat.exe
3484	ipconfig.exe
8184	ipconfig.exe

Gathers system information 1 TTPs 1 IoCs

Runs systeminfo.exe.

System Information Discovery

T1082

pid	Process
8052	systeminfo.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
8132	autorunsc.exe
8132	autorunsc.exe
8160	tasklist.exe
8160	tasklist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe
4924	pslist.exe

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
3788	handle64.exe

Suspicious use of AdjustPrivilegeToken 36 IoCs

description	pid	Process
Token: SeDebugPrivilege	8132	autorunsc.exe
Token: SeImpersonatePrivilege	8132	autorunsc.exe
Token: SeSecurityPrivilege	8132	autorunsc.exe
Token: SeDebugPrivilege	8132	autorunsc.exe
Token: SeBackupPrivilege	8132	autorunsc.exe
Token: SeRestorePrivilege	8132	autorunsc.exe
Token: SeDebugPrivilege	8160	tasklist.exe
Token: SeDebugPrivilege	3788	handle64.exe
Token: SeDebugPrivilege	3788	handle64.exe
Token: SeLoadDriverPrivilege	3788	handle64.exe
Token: SeDebugPrivilege	3932	Listdlls64.exe
Token: SeDebugPrivilege	260	powershell.exe
Token: SeDebugPrivilege	4736	tcpvcon.exe
Token: SeIncreaseQuotaPrivilege	260	powershell.exe
Token: SeSecurityPrivilege	260	powershell.exe
Token: SeTakeOwnershipPrivilege	260	powershell.exe
Token: SeLoadDriverPrivilege	260	powershell.exe
Token: SeSystemProfilePrivilege	260	powershell.exe
Token: SeSystemtimePrivilege	260	powershell.exe
Token: SeProfSingleProcessPrivilege	260	powershell.exe
Token: SeIncBasePriorityPrivilege	260	powershell.exe
Token: SeCreatePagefilePrivilege	260	powershell.exe
Token: SeBackupPrivilege	260	powershell.exe
Token: SeRestorePrivilege	260	powershell.exe
Token: SeShutdownPrivilege	260	powershell.exe
Token: SeDebugPrivilege	260	powershell.exe
Token: SeSystemEnvironmentPrivilege	260	powershell.exe
Token: SeRemoteShutdownPrivilege	260	powershell.exe
Token: SeUndockPrivilege	260	powershell.exe
Token: SeManageVolumePrivilege	260	powershell.exe
Token: 33	260	powershell.exe
Token: 34	260	powershell.exe
Token: 35	260	powershell.exe
Token: 36	260	powershell.exe
Token: SeDebugPrivilege	6304	powershell.exe
Token: SeDebugPrivilege	7772	netstat.exe

Suspicious use of WriteProcessMemory 18 IoCs

description	pid	Process	procid_target
PID 2400 wrote to memory of 7772	2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe	92
PID 2400 wrote to memory of 8052	2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe	93
PID 2400 wrote to memory of 8132	2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe	94
PID 2400 wrote to memory of 8160	2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe	95
PID 2400 wrote to memory of 8184	2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe	96
PID 2400 wrote to memory of 3484	2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe	97
PID 2400 wrote to memory of 2592	2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe	98
PID 2400 wrote to memory of 4924	2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe	99
PID 2400 wrote to memory of 260	2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe	101
PID 2400 wrote to memory of 3044	2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe	102
PID 2592 wrote to memory of 3788	2592	handle.exe	103
PID 3044 wrote to memory of 3932	3044	Listdlls.exe	104
PID 2400 wrote to memory of 2376	2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe	105
PID 2376 wrote to memory of 1444	2376	net.exe	106
PID 2400 wrote to memory of 4736	2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe	107
PID 2400 wrote to memory of 6304	2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe	108
PID 2400 wrote to memory of 6784	2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe	109
PID 2400 wrote to memory of 6416	2400	2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe	110

C:\Users\Admin\AppData\Local\Temp\2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-15_546e138421c2ff977955212dc1bd4991_akira_amadey_cobalt-strike_elex_glassworm_hellokitty_ice.exe"
1⤵
- Drops desktop.ini file(s)
- Enumerates connected drives
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2400
- C:\Windows\SysWOW64\netstat.exe
  "netstat.exe" -anob
  2⤵
  - System Location Discovery: System Language Discovery
  - System Network Connections Discovery
  - Gathers network information
  - Suspicious use of AdjustPrivilegeToken
  PID:7772
- C:\Windows\SysWOW64\systeminfo.exe
  "systeminfo.exe"
  2⤵
  - System Location Discovery: System Language Discovery
  - Gathers system information
  PID:8052
- C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\autorunsc.exe
  "Aralez_Sldtiybl_2026-08-15_10-27-54\autorunsc.exe" -nobanner -c /accepteula
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:8132
- C:\Windows\SysWOW64\tasklist.exe
  "tasklist.exe" /v /fo csv
  2⤵
  - Discovers running processes
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:8160
- C:\Windows\SysWOW64\ipconfig.exe
  "ipconfig.exe" /all
  2⤵
  - System Location Discovery: System Language Discovery
  - Gathers network information
  PID:8184
- C:\Windows\SysWOW64\ipconfig.exe
  "ipconfig.exe" /displaydns
  2⤵
  - System Location Discovery: System Language Discovery
  - Gathers network information
  PID:3484
- C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\handle.exe
  "Aralez_Sldtiybl_2026-08-15_10-27-54\handle.exe" /accepteula /a /nobanner
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:2592
- - C:\Users\Admin\AppData\Local\Temp\handle64.exe
    "Aralez_Sldtiybl_2026-08-15_10-27-54\handle.exe" /accepteula /a /nobanner
    3⤵
    - Drops file in Drivers directory
    - Sets service image path in registry
    - Executes dropped EXE
    - Enumerates connected drives
    - Suspicious behavior: LoadsDriver
    - Suspicious use of AdjustPrivilegeToken
    PID:3788
- C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\pslist.exe
  "Aralez_Sldtiybl_2026-08-15_10-27-54\pslist.exe" /accepteula
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  PID:4924
- C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
  "powershell" -command Get-ComputerInfo
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - System Location Discovery: System Language Discovery
  - Suspicious use of AdjustPrivilegeToken
  PID:260
- C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\Listdlls.exe
  "Aralez_Sldtiybl_2026-08-15_10-27-54\Listdlls.exe" /accepteula
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:3044
- - C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\Listdlls64.exe
    "Aralez_Sldtiybl_2026-08-15_10-27-54\Listdlls.exe" /accepteula
    3⤵
    - Executes dropped EXE
    - Suspicious use of AdjustPrivilegeToken
    PID:3932
- C:\Windows\SysWOW64\net.exe
  "net.exe" share
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:2376
- - C:\Windows\SysWOW64\net1.exe
    C:\Windows\system32\net1 share
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1444
- C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tcpvcon.exe
  "Aralez_Sldtiybl_2026-08-15_10-27-54\tcpvcon.exe" /accepteula -a
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of AdjustPrivilegeToken
  PID:4736
- C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
  "powershell" -command "Get-WinEvent -LogName System -FilterXPath '*[System[(EventID=7045)]]' | ForEach-Object { ([xml]$_.ToXml()).Event.EventData.Data | Where-Object Name -EQ 'ImagePath' | Select-Object -ExpandProperty '#text' }"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - System Location Discovery: System Language Discovery
  - Suspicious use of AdjustPrivilegeToken
  PID:6304
- C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\PsService.exe
  "Aralez_Sldtiybl_2026-08-15_10-27-54\PsService.exe" /accepteula query
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:6784
- C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\pipelist.exe
  "Aralez_Sldtiybl_2026-08-15_10-27-54\pipelist.exe" /accepteula
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:6416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Connections Discovery

T1049

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 18KB
SHA256 fc39d01edbc3fdb624f3a26ed350ca9d00f5fad1e1d3f45e671cfc0dc25443e4
MD5 b6b052cef4966b308fc357249537ca56
SHA1 ceb0ea141d29062125764ac9e1e17889b12fc705
SHA512 efb0e090a417f17381c5bab24bffa6035a14ae2a3b5aac69aa0521d222297d86bd86719f7cc5bb44886258cded6e53c49027d6903ef9f1d498b3a5a281fc748a
SSDEEP 384:qSEcGMv1ideGW14bvysc+geCrUW7Pa0Fc20mIAXr4PWYWM5OKwRvYbhNo1mzkrD/:e/M9StWij5c+cUiitlmIAXr8Wos+bhNU
TLSH
T1BA82A779212F99C7D8992272505501A7FBA0D08EDA355DF8BF2BCA2F7C50E763B60530
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Aralez_Sldtiybl_2026-08-15_10-27-54.log

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54.log
Size 1KB
SHA256 73d58add6f2141242429771535ab5f116a913def6b00aca05c489f1df2f4aa6a
MD5 7276c9640874118917c4798af25a6f7d
SHA1 fa7870d18289b3f433b6aa3d53cabdc32e0805cd
SHA512 e1537f11b76bf97a79d1eee0653d0ea0442aff3543011c88ea10418ea9666a092b50979224aae5efd762d8517d141c0b4f38a9a9aa8fa48aec7506feb615c9ba
TLSH
T170316B5338ED50E3DD87650ED9CB5F135A767867044B6D99621223D8B686D220C3EC2C
MD5 SHA1 SHA512 TLSH

Submit Download

Aralez_Sldtiybl_2026-08-15_10-27-54.log

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54.log
Size 4KB
SHA256 a5167ca1f946a0506d29be728130064bd412426b1407c6cb9f06e04fdd77565e
MD5 337b7f72db1266e4b4bc4e0e8c0432af
SHA1 82c1744908257101e6211933516ffd2b9ec76a9d
SHA512 983c73c432f10a4499344e071f622bed3c72e60fb909e3cf980bc8809174d58c1eb12454fe6420dbad98a91ca6bf34408149705039baf7c03323575b276f005c
SSDEEP 96:oVjXFUpoWoMKPkPJiCiFQoLxoREoQJ8ToXJ82oFJ8Ao/J8ooMABaq/s4w7sh:QWjomMywXZJSsJTWJxEJd4AVY
TLSH
T12FA17B0378AD14E3DCA77049C6CFFF066665B8B305C76E4D66162BAEF691D12183F818
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$Boot

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\$Boot
Size 8KB
SHA256 40000ab373fad4ff42dbedf358277e4d6023a64acd76926af9a90315952f85c9
MD5 4bc2c05aa7aedbe5a7b64fbce3d44dd8
SHA1 3475b7beb30bfcaf4fae632af3754eddf5ffff84
SHA512 7c3b96ddcae4360261f48a01754efd9661d9bbc45a306e6804b20637327b2039df6fae2e78f81b2a2a70e4c17994c73b8c62a763266587096e820e111f706656
SSDEEP 96:vCzaNcdCmGUyH52j0V6nPt4ihC/U8remKrQUqjfyJB7y4AIwVoouE:Ke2d/5yHEj3Pt4ihCvresUDBm4lwV
TLSH
T1DCF1B4F72C06280DD0C16779DF4DDC666CB7ACD4AA7087B4A190793A214178066BFFB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000C00000001B82E5916E1AF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\$Extend\$Deleted\000C00000001B82E5916E1AF
Size 83KB
SHA256 9e31c7e382294e6dbb49a3d05b969505a816657868cbf26337718baf2e5ac694
MD5 b9f0c406fad955a54399bb1c9a930f4e
SHA1 e37287a36927cd5820512584f1da119a6536262d
SHA512 485718f358b0e90dc76dc994bca535bfad7a7d6949649d3c824b4a593f2437014a757e5c38e8af901e878f3d5df6cc7455c4578d06114bc5d7a5fd1acc4b68f8
SSDEEP 768:ukoGkGXAIFe136XLt/J6dX4LejmxylIjLRmJnRUCvVbam9+l:ukS9IFeZ6H8JnRUCV8
TLSH
T1C7839A243AF58625F2F39A725EF1D6999671FC129D128B1F2181734E0931E01E8A7F3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$ObjId%3A$O.idx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\$Extend\$ObjId%3A$O.idx
Size 4KB
SHA256 a28f39ae9ec8e297b9ee3f533f1334bb46f5be4a8de9bfb976c26d940b389e12
MD5 33cc6d27ba1247e5920a877277e14a5a
SHA1 aa5c14c6746224100f0ebcc3388eac4218cc1117
SHA512 a1e973e8ea69dab97001eb30f43a26e9d8b24c3da3150fb4439117238cd9c6658de657e8264523873789ed147f972c0700373183b312227ac35ea59c13a533be
TLSH
T1EA81633318AE0A19EF8F00F4F96265B39ADC87B537755820068A7D5DBFB3A1B50202F1
MD5 SHA1 SHA512 TLSH

Submit Download

$Reparse%3A$R.idx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\$Extend\$Reparse%3A$R.idx
Size 1024KB
SHA256 48e1e1cd7348903d88fcdad84f80b67cf28548727187f8ca2b421b12fb34e824
MD5 e34761f42ef24509913b7fc6e7bf9e5d
SHA1 da656658d13d41fafaca97b37be5452a7e268748
SHA512 a1b503351dbad56596bcba686a7d5ddc5ce5d99c994f405d3c3be9545d00d8bd735af73262744f196a775c3c31efcd4b8ebb74a6870f4fefe9487f01c8c29b49
SSDEEP 1536:IuaZ5W+UeuuWFOQa2tttttttttttt0ttttttttttttttt0ttttttttttttttt0th:iZ0euuWu/pd/Q0IEKtdBC5m
TLSH
T1EC2538057B92863EC574E7B4AAD31F69B7A6C87686E64B4E034090263C8373173B5BDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$TXFLO~3

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\$Extend\$RmMetadata\$TxfLog\$TXFLO~3
Size 10.0MB
SHA256 e34b51aa07c658a12086b3d91dc32276c6ea78e5e9926f84dfe0c80ece315d15
MD5 860f5715c05719869019979cceac2bef
SHA1 46e9088b4d04662291d4c451b2951caea49bd863
SHA512 8b147701c3c71d1c6dacfe79bd30819d754e9d7eeb4343555d893c9d21366f957492a28e5fd9b3e36a1c2ba7e5ae6a1e2e8ebd9147f7eb7d75cdf2d32960e480
SSDEEP 24576:rk2VVqqOULOjUBmsYUINkbXEWxMgG8Wl3N+70hb:rk2iqvOjUBmRUINkbXEWqg8
TLSH
T110B6AA1467E80B17F2F24F3498F253667A36F88AAD41CF8E114753580EA3B60D9B5E1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$TXFLO~4

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\$Extend\$RmMetadata\$TxfLog\$TXFLO~4
Size 10.0MB
SHA256 68c086bf83dcfaa57eeb062ad473902d2343828b12b14a5a29d591089d6b74ef
MD5 179f56328b236d253e8c02eecfc38337
SHA1 6a0d4734d296f86a5fa7e979fedd4ddd19a86491
SHA512 356b92ab7431289ea1d8085c1cc4c658f5b73e1538b088a484507ec52af65314edb72fde97b072132153a22a71456c420fba62f6354d044e869cfdd77f038bd8
SSDEEP 49152:/06rYvdccTGsluDBdsSLWKK6dszHU9v3v652kfYLF:/06rYvdccTGsluDBdsSLK52kfYLF
TLSH
T12BB6850067E80B16F2F24F3598F357567A36F886AE41CB8E110792581E63B61DDB4F2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$Tops

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\$Extend\$RmMetadata\$TxfLog\$Tops
Size 100B
SHA256 fd73abbf174997b6cb9a5f90db6c56f46b317b0bdc2198692f51bd07a8da454b
MD5 3d334945880e1f5f23148227b2477468
SHA1 ad67898434a395032acac893fef852f1c67082fc
SHA512 0c819ff3d3a667bde1fb87a76c074f1a6d9ab3893513c13413153e5a8ce79575fd8bb5a4d616fa23b5d6d77403e3b473333e6a69b2974b97625da9bbd0f71038
TLSH
T130B002427115D40DC00149B11CD0C2FA14AD3D949D0D4007324BB70E26753401115410
MD5 SHA1 SHA512 TLSH

Submit Download

$TxfLog.blf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\$Extend\$RmMetadata\$TxfLog\$TxfLog.blf
Size 64KB
SHA256 61ac8f7a4616d5006a1fd6dea49ba71c6152164571d555b29f71278efb8cf881
MD5 f4e0a975090d715c21a58be3217dd4bb
SHA1 57e3b3239f0fb38da378573e756620a1642b0393
SHA512 374ba139d734a1890e457ef5513f5a66c1a2018d8c6f47e5cf567e20fed6a43f658a6eaa809a347f1e74848b134489b63b8d1102a50df02ad0418435e46a7935
SSDEEP 96:u5tTtuv0/Fuw0NCaYO+PffCmlunf5t2tbvP/FC0NCaYP+PfICGn:uzKFb2lIW/b
TLSH
T19D53A0A4AAB1282EE55DD2B394FF61A377359F2149CA420D6031DB3A6971B8F113CF21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\$Recycle.Bin\S-1-5-21-1014449518-1831897916-4205727055-1000\desktop.ini
Size 129B
SHA256 e1b9ce9b57957b1a0607a72a057d6b7a9b34ea60f3f8aa8f38a3af979bd23066
MD5 a526b9e7c716b3489d8cc062fbce4005
SHA1 2df502a944ff721241be20a9e449d2acd07e0312
SHA512 d83d4c656c96c3d1809ad06ce78fa09a77781461c99109e4b81d1a186fc533a7e72d65a4cb7edf689eeccda8f687a13d3276f1111a1e72f7c3cd92a49bce0f88
TLSH
T169B09B0A41476664B05ED15DAC60E147117D547A4D14A2008EF0B345D1A33550778D69
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 202de62a022e7bf018f1d42193f989a5b3aedffb165e0397e7fee777aed896f3
MD5 c98bd01f44bc7b4b3014469e39c200f4
SHA1 12d77b5742a984f0eff99296c930a56a59c57cc0
SHA512 c8ee072d32aa308a490611254d6351cd47f248fac2a73ccb6e0c5294cd5d08598b4e0a6a18824bf4d297681b54645a1469060c703860cc5c0100af81ef385c5d
SSDEEP 96:bam+FtejzH+bF+UIYysX0fxQp97oEHt/DfLjLqL/9bbEOVpZf24JkMfXSFR+CFqD:b79H+bF+UI3iWGVoWN3qL/9VVV63
TLSH
T1A024EE4E5F343722CDBD913669E744A35C7CF03F8B5366DA686114B4CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History.FileSlack
Size 20KB
SHA256 286753ca70c4ba73921a88238dbedb178203bf2a34dbc44b07a4796478d63a59
MD5 a3b608e8bf7cca8f006477cb7f582ff6
SHA1 8ba24e5c0a29c3ced4c3fd52bfb3846a45303806
SHA512 cb1ee22d46c94d34bde63ae9826c1780bdffdf680894ef5736a8fec8c958ba0b0200f4ef5bce05a10abd64cafe9aec493e1034de831f9009a9c523dc8efbf0b9
SSDEEP 384:rKkrR7fHHtDD/EIFOMWcEn6fASWKKLHeOSq2uklMFjSUY:nrtftvEIEfc33KL5S7boW
TLSH
T1CA929DB2E5038609F93B9179A97B3E32848BA8709F1F1542EEABD4D977350C5B4E06D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AssertRedo.xlsx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\AssertRedo.xlsx.lnk
Size 641B
SHA256 9d041c4aac62d881ab21d97fd84e4e2c7f474511b28c29618efd741e92d80df4
MD5 fd35ffa5a9251b3bcbbb412e32ce8168
SHA1 5f1d5e3268edb59ad4fc40b27c8deba83c748cff
SHA512 d50629b857662606fe60b5c60fc173f880f6d107f66cc3d51286ec6cf9c811cb42686d97daffc00b99ddb421a323a78688794858d10b94708bec7add2deef1bf
TLSH
T136F081122EEE6F0AD7B71D3A1B720264D1317C25FE34DB0C040042AE0975E24CEA1F1B
MD5 SHA1 SHA512 TLSH

Submit Download

CompareApprove.xlsx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CompareApprove.xlsx.lnk
Size 661B
SHA256 79f67bcef3a1bb5c627aecaa39e61a3c08ad4fd2505f5798f2ce8ee162b93f4c
MD5 642ed60e4b9690918141de65922c3065
SHA1 a05167cd5c51f2010b3f3112c3fdb25b35542031
SHA512 fdad9aaf8ca6ae5e386ef0e7663de5150acd3e487815b53ab2c205e154c17ab98698182a4963f94eee6e006628f6c53146b96391547d64fa7fdc3c66c1a64f73
TLSH
T1AC0146153AAD2B0AE2B70DB95B364374C639B861FE709B0C040092EE0C7AC658A90F56
MD5 SHA1 SHA512 TLSH

Submit Download

ProtectResize.xlsx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\ProtectResize.xlsx.lnk
Size 656B
SHA256 eedf4d79df16bc4c7f9b99c9e6aab4c1fd5b4efb23a5b77ffeadbc111f8c3d0e
MD5 291c57913a79c40e0d05650034eb1887
SHA1 80c4c761cbd3db15c4f413d6d07a8f93d34f806b
SHA512 384072888f30ae75bcf5e1186ead8228426eb31319fa86d6291bc2e8bee42e10b087c0a5afb7409795287702a5b48f5023b74e4a44ecedcae8bb9fd82d95d114
TLSH
T13FF04C011AAD0B1FD3B61D7A57370360C571B866FA78DB0D045411DE1969D20CDA1F26
MD5 SHA1 SHA512 TLSH

Submit Download

StartCopy.xlsx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\StartCopy.xlsx.lnk
Size 636B
SHA256 588475c175a504045039f075514f0cfb2227e6931521c1b0bba61e86edd72c67
MD5 e124a399ee54a77a19d9d4b7c2546419
SHA1 9afa65924d58d7a807607e52d6b174c7697fa542
SHA512 b326e4d806d64c45a42f906719bcc0f5e91c532cfc41b1d2340cc6ee56bcfcec9db3d74d6cb4aa87ac3926a875c8f14bf5f6e80de03899e8fd6275c2e90ed735
TLSH
T166F08B251F6A6B0FD3BA1EBA5A370761C235FC60FE70DF08481102AD5529D288A60F16
MD5 SHA1 SHA512 TLSH

Submit Download

UpdateRead.docx.lnk

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\UpdateRead.docx.lnk
Size 631B
SHA256 82b6f8bbe5c7085fb7ccf49052804d261e360c353ca44923a0d92f522c364c09
MD5 8b2ac2d10b3f40445133296fe4e02f7e
SHA1 1d2540c57a329791d0c6d7ff531811c3e98ef6ef
SHA512 7fcb98825a9f69ab7ea74e9bd41f06c2b9f2a566229c758130c414944f0c026ac745c5a4f66383fc14baee403b8b091dbec666864e175f4e4bb16d4e571084be
TLSH
T1B7F02B072BDABF5BD77349BE92794264D935B830FA71DB080014C19D5D19B54E854F09
MD5 SHA1 SHA512 TLSH

Submit Download

desktop.ini

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
Size 174B
SHA256 cdb11958506a5ba5478e22ed472fa3ae422fe9916d674f290207e1fc29ae5a76
MD5 7f1698bab066b764a314a589d338daae
SHA1 524abe4db03afef220a2cc96bf0428fd1b704342
SHA512 4f94ad0fe3df00838b288a0ef4c12d37e175c37cbf306bdb1336ff44d0e4d126cd545c636642c0e88d8c6b8258dc138a495f4d025b662f40a9977d409d6b5719
TLSH
T119C08C38D2E9322141728D33BCB4A002DBB1F8212C1BCF9E06C0918B08A0A09EB32B43
MD5 SHA1 SHA512 TLSH

Submit Download

DISMOU~1.DLL.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Desktop\DISMOU~1.DLL.enc
Size 696KB
SHA256 e3eee3c74f2dfd6e470a5604051eafdea7770f2fa19d921e0dc9c7825147bb1c
MD5 554d924049eede5355f22a9a6734ea60
SHA1 82871a5b8f1a6856dd8b7c64a24cee54115c85b7
SHA512 83204f78ee91183433d9b017486bde3daedf681449ddb9320c5e098ffbdc322f62bd4c03e232ac1bd80100cdb6448a67274166cb78917ab986dcb8b639f46e88
SSDEEP 12288:uRnuPVivsOoCljkQ5+GOrALdapcRxTt2yfsCmsy/+XaSfSFIEXX9BO1QX4tf6BKt:SuulpkLXEAExTt2yfsCBy/+JiIEHP7XW
TLSH
T139E423EB02EB4C5C3C329A1B161E0B56351EC377C4A630ED3ACD8596F7B59279E2069C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DismountEnable.dll.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Desktop\DismountEnable.dll.enc
Size 696KB
SHA256 f18327247b1dad8a128ec793a3314739bf778d1ec2c711410e3c4d01d1437262
MD5 f5eb31c4c201b16c5ef78179387ab0cd
SHA1 b3db4cf36086f527d0f748bc4aef021208c21587
SHA512 f7d47d4dd21993bafc923a2e6d20025af6ef3a111e23ed62dbaf698bf5695b1cd80a51f8c4891099ec49bac0bf37f42abfef37f09b0731e11f87c91618935be6
SSDEEP 12288:hpPLPNdSrI0GqmMixsLyvGv6Mahpc3EAkGYRBxUNfU35t16k:hpPL1AITIkuqCuvRiGtZ
TLSH
T150E423807952DAE599ED648CFE4C10CF4F8C694EAB2C57BA3D1CB20DE6B261CB42531D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PUSHUN~1.XLS.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Desktop\PUSHUN~1.XLS.enc
Size 788KB
SHA256 ba5616238ca14ea5bc645f838870d980b98c9ef587ecebc49023eb4ffb7898e7
MD5 c0b126018569dfaac88a1c19b22daed9
SHA1 f63507ef3af094c5d228861307348fd28cd0f61f
SHA512 cbd80ee4f8f907a4bcc2c67fc1c6a20a35ed0fac603211d7b2923bc9c20c7b0e329092468fb03cb66d650c63a9f0c6fe25585b650265bb3c12ea4cc0fbe44d5f
SSDEEP 24576:GE3wE7Y2IH8KiddXtKxM7rcnaJQz+1T+ZYAmwfwRDGfa:93wEg8Kidd9KnaJQC+mkwDGfa
TLSH
T19E0533ADA221AF10132885A53C2EE64D20F6F07C46A769C3F4E3C3463D72FD75617499
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PushUnlock.xlsm.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Desktop\PushUnlock.xlsm.enc
Size 788KB
SHA256 390b64831c9e8fcce5204d5066d835447378e4079e7897563d73b0c46809c4a1
MD5 49de3417e5486fe684b183fe3697e25c
SHA1 9153f6ef47e1ed4e361d3ee99d787e5ea20e91ac
SHA512 05c37e561e649c35da780ef1733a3c9e76b5ac9ee52b4882493a167d88545a96834f6d26f3b5a32e2d5f3d9893e92b9c62240952ae27a3c0c1bf223121d2dab0
SSDEEP 24576:1Ei/jPk8htGfrBgL69Ao1pN+ErDVwdKnha3yyJ1i:1h6f1gL6PdFCdgaFi
TLSH
T1D40533C722CBA3D7263FEDD61A9885D0302188D35FA00BE4445DF6A917773786B4649F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RESUME~1.JS.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Desktop\RESUME~1.JS.enc
Size 278KB
SHA256 898deb7eb91997dd154f6266fab5346ba68408dac58bcc7c81cd4bfd92f27169
MD5 e0b8716528ee768424025878d463651d
SHA1 56597d5b0cc687273b349dcf035a3a84f7e56934
SHA512 855f0edfb92eb7398dc4dfdc25ca469b5b89acbe9e966973dbd7dc34023062fa8962e06fd928fe0a3fbd9a70f86e8bc591ae053b03d4e4feb490216b412cbcb9
SSDEEP 6144:NbBlFFdJ0oCL9hNhZgfEp0uSUFvDtYLmz/n9CoLA:N9LFkoCBPgHuX7a2bk
TLSH
T14F54230EA308E41F7DBE9EA7973050835D26FC5D2A473C7418E7297ADAE1630BC71899
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ResumeSelect.js.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Desktop\ResumeSelect.js.enc
Size 278KB
SHA256 bdd71ad38eb687a39ffa4407e1b98ad8b05c3faa476e3d3d863da6527ecebb87
MD5 b5767f6a0305572d3e8cffd3f3f59e37
SHA1 2f4a617603a94bcf5498fa8dc8d9b715849ee68d
SHA512 d4640eae7caef233f205b425258a8ad8407f4de43d94dfa2c51c172985958b8bb0c635c9218ad88833df4522cec1d6148a037f8aa7542145d0e0447bb11e3552
SSDEEP 6144:fyAlPNDhEMj4zvcFUTegao5n75OnrHn91R0A6SCmEIhM:fn7j4zvcaHao57SrHPASCGM
TLSH
T1FC542318D7226727C7A6298B374B90D34D70D2DA1CE32FFDA1706755CBA8C61149E78C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SELECT~1.PS1.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Desktop\SELECT~1.PS1.enc
Size 324KB
SHA256 28a67a346ccc497fd5b57bca90c4581cdf352ca508d43b40eb08be739d55f263
MD5 05dbacd6f2c50766b39f8c14a265cdc5
SHA1 e6c780797e9cadb8330944f379c02f1da9b8f26f
SHA512 54593aea163127565de9d85ff16d7b01095e8abf7638b9cf93b8ddb5c8270266fd078851caa88268d07bf596bc77de4e54f26b7b1ca79f901b908623f30ed754
SSDEEP 6144:p7mOokDaGdJp1CEUAFQmDfv8TCMkoiziRpF1HW0HBiAFnW33rR0S9:paOosaGd05AFQmD8TCiiziRz1ZHkARWF
TLSH
T1EA64236A47785FB31DC285C06B1BF9B6859F3AA34D89DEA514F8711B80C3B42062C7F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SelectMeasure.ps1.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Desktop\SelectMeasure.ps1.enc
Size 324KB
SHA256 213d2c4256c264a0f09dde144cec27c1b475b80ad2c23c946c1d1d33ecb7887b
MD5 3e90185748b02e7254a44610994df8c4
SHA1 6e31f2bfb0c028df420f8ea5ad8b0a8c4171cfd2
SHA512 21d50c65d469344ac1b07a7403c5510e9eb16e04817dfa82d00208134b2c5a924627ad7cd17bc06144afee0a34cd264cf82a7060879ba7181b6327899b210452
SSDEEP 6144:Rtphrr8Xt0dbB5nHDWww+nz2UNQ2L98ov8K90U0AlyyIxu8mPCpKUQEh:RtjogTiwwu9Q2p8s7Z0AlkY8mOTh
TLSH
T1AC6423BF2586A44C4332F41F444015AFFE64BEE1891B6C11E2BA4909E1F0E6DD1ED6BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UPDATE~1.DOC.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Desktop\UPDATE~1.DOC.enc
Size 18KB
SHA256 1207a459db88a75d2c21ccaec60aff704ad0b3e24ede3b8e67929c3ae0e68ed6
MD5 807cf4b8612329f3683ef66fa938e11e
SHA1 ab9094577a67bf0b778440bb42a9bddb5ec8706d
SHA512 ea85a077350f7e44f0562b4d7c1cb68f03099f35d39ed0d4cee20bbf071ad7ef455287d231df00030ac08780f8502cdcbb6e098e44a7550db3a94c7dc8d14f14
SSDEEP 384:Ka0+ZEPJu4IIfJvkb9qK6jgHbdca4XDvwXtd3kqfKjRMZmhWlTjShNx:KaYHfKRHhca4XWdTOkjShNx
TLSH
T1A982E15C6E1C4D0ABE3D0B999102132DC70A9553A3437F4BF9C46CFA4A90ABF59A0D4D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UpdateRead.docx.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Desktop\UpdateRead.docx.enc
Size 18KB
SHA256 c127c804237b996689b516d1ca36e9fc4fb85a791d2cb2a8ba2cca7ef2050c59
MD5 234302ff4824c3473d9d428de40b7d18
SHA1 aaf6ae93613730c0a935163aab3c865651fa6359
SHA512 304a1b0d24ebf4899209704041276c419e908926fcac981eee7f6e51a0b6af4ce977eeff15d700c1c47e5eb76c8f78788abc4fbd8498c00263da56cb60ddc0d3
SSDEEP 384:rU7lF+WHbkqG53I5CkDLIPdk8WGHJVAtBoW8l6ZTzVw7ccoSLda:oREWoqsIFHd8WuVcBT8yFnwLda
TLSH
T14F82D0EE2A60D5E3215BE75E13B5065E4DE5B73BB8A433081FC992A15C1D2CF4A1FA30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

INSTAL~1.DOC.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Downloads\INSTAL~1.DOC.enc
Size 552KB
SHA256 28a10c1e5ba67b001980bfee51dbe3ac6d1a7d7a5f603ac93f72e4966e86bbc7
MD5 7800072f80c7492df73a5f62f1e45d82
SHA1 2b0a7fb62bd964b098c76bdf441f8a90bede3606
SHA512 805961fb20d122428b62bad0f30e1ee18515f103fe3c98e43c36dbb6d6c35ed1c2131ac81c69d04b8068ab756ce6ccb170883264c0d30fe219cd2e0d8b262d18
SSDEEP 12288:JO9b9aXQaqMZRsl/v4dSFI74h5ZwQcD9X50UEdATCeemq:sG8ORs/v2ttQcBy7dATxi
TLSH
T187C423F6852F5F63D168DF33622B2182E0D8216D7359E56A1311260C7E66837923FE2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

INVOKE~1.DOC.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Downloads\INVOKE~1.DOC.enc
Size 871KB
SHA256 702b9cdfe3616f5e2053cceb14ef65c832dfef70e5b3cfff81a241f9ab2c54e7
MD5 99a8c904303ddae6f88eb379507ba9a4
SHA1 92ffa340c20e01567abc5f64dd8dd25734ac5968
SHA512 d97d78db6ee0f0c2bc2327ea11cbc0186762571dbade199a236af15cda5ad5b01ce40fc9a9153b559113abda96d0570894f80a140285a1b85d1a9e41d143763d
SSDEEP 12288:jrn8frSgO4+WsazdsjXOeU0KbleJqmxESGBe0KP01aAuiNjYWVSOmlNfQYvIHu0F:jb8fHvzmPU30vxDGBVo63MqEou0kd34
TLSH
T1C215330ED2B0CF33BB01A5EF70F72E65383D6629C982284B68A4603F7905D63F696575
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallMount.docx.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Downloads\InstallMount.docx.enc
Size 552KB
SHA256 33f9ede1aa1c9991698a1e7fc4513cdfc3a9e9c25acbcb1577ec832c43fd28a6
MD5 ca6d9cd44f3b02efea0c10a25c06e427
SHA1 59a19b46218ccf1dca7af432b3db5430232e51a4
SHA512 71ad7b21c35414ccad633008502fb613590492d91bb4906687229e0821c1ff6037c23d6ab6ddd772008f3915401fd03ffab8a19deda2ab78312be3e2f0db55b6
SSDEEP 12288:PmGdROaxS5UUIiewh1gU7xltKdyIUQtEU9RpsJiJ5m8BwGuojnrpj:uGa6QIcVxly3lsu5m8BfP9
TLSH
T149C42302C98B3710D3FF4D643BBE60337F28A542CA2917BC5AF774A9692890DED98475
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InvokeRevoke.doc.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Downloads\InvokeRevoke.doc.enc
Size 871KB
SHA256 a5e87711c8022d604eb4b91426a8af00cfa773de13aedf89d183fe5fec7bb223
MD5 5a6cabc4bd524a8822a8a1e75e09f342
SHA1 e4c21633dea485381e3e2b7bd25be4d9af54b2cc
SHA512 a805c4b9585a60ec78b0fed75523d4992fc7da56fd546d6d40cbe12a184da71b6b91847db14ecd5ada6adfb87d2ca90f41d0f0fabd40e897d6d06487903b4794
SSDEEP 12288:x8q8JS7wj1+1EgztC8czkt5Smgf2nT8WawcGzZILnG0/PxLnZ3EuJlkM0aPLHdVp:eIs51gk8czkts5WaTG12FZJOuV9k3uJ
TLSH
T1851533DF73EAA6C85332FD793AE7D6B020F62128025F85406A971D269783C05497DEF1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SUSPEN~1.DOC.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Downloads\SUSPEN~1.DOC.enc
Size 797KB
SHA256 4d28c15a6c36fe57bbde85d62a9c0d9b59f0f90c117993929e35ce1c75727781
MD5 1cb40117ac069841fdc965324d0691e5
SHA1 eb8b58cb3d1ec4d5c8f3f1d3a0bd7652ec8f69c7
SHA512 63a5443848c7d153604b4f5e31d0fd2bce1f70e50354587c878bc48d0399e15c3fdb2d56a8427f36b1d514d897dddf8fa4f3b1e9046f810e6f6cf8e9bc7406da
SSDEEP 12288:9oa67vP549TLxqtwH9s6qYCAsHin0epQSkXsdMUTLNyLY3SyJA:9o9wwQhqFAsHI03+lTLMw+
TLSH
T13D0523F527AD4B25156B950FC81CC6B6368A28A95D5FF6503B6C2F20E408FA1FF70B12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SuspendUse.docx.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Downloads\SuspendUse.docx.enc
Size 797KB
SHA256 10e3338173fe4083fccba11b464f04c00a719554f25940bf6f81d498117a7e74
MD5 14112b25a054b65f41938ffff2472009
SHA1 2de3684544fa55ea539d04d3adbcb2d8ab95dc74
SHA512 3eba731ec522fd613274dbd2591f1ca7772691012bfd98b7763e29f9481b3727151df55ffb7e0577f10498bbea2ae01488d3eec32efb668685fb6aa734e1ab4b
SSDEEP 24576:cw/r2/fsZGH/W1DBxWdlqrpnakePLL0LCvkrhpBf:z/zQ+1FBrpnoo1lpBf
TLSH
T1BB05336C36E4D1AB1A685E4A1758C0C1B89261830BA99F57A8A134CCE3F1D79CCEDC9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UPDATE~1.XLS.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Downloads\UPDATE~1.XLS.enc
Size 625KB
SHA256 c929a9fc5bcf9e3dc67340f8a1f96f14ec55b1b4a245fc85e704f7e4e947b090
MD5 58699f6557ba19d9cbb54f01cc7668ba
SHA1 eaa8656bfa545ebdff872179405bce72f5214267
SHA512 0fbaabec7462518f3fcf636aa84934d9960f89f92a18d7ed707627968a1bd7abacce8d83f0e7ac3be59923cc37abf130631eb437af1464ffc729794a34e152b9
SSDEEP 12288:FaKMp5mIiqjWlhJgwkv8qUjhI34cG3GP/NcUA1cpqJmwJv1X:FSp5mIiXHpkNUVIygZIEwJNX
TLSH
T1A1D43317D8A252A3514DE742C66745468FA6E2B7D30E6BF66F39B6E32C230B70013F80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UpdateMove.xlsm.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Downloads\UpdateMove.xlsm.enc
Size 625KB
SHA256 650c12fe278ea1928e4afe102577b5f50d66e926e3bbda48f5eeafe5ee08e640
MD5 976864a2da1a3d411c85b16bd9de2ac3
SHA1 a7e1bb8fe4105b89f6740bb7005949be5c07cb94
SHA512 2b83906b0038fe19628e28a567103587c91e120970209d283b929f4f460ebd461a8c98333fff47e86a7c020b8168b8bb9ba077295e18d2cebb1f71cb0a904b76
SSDEEP 12288:z+A5bDdvqWQhFnTQ7LrMAl5wlCNEbENszxdvWWMPIchQqEtUHZ:SApRIVE3rMhuUENsldviIlqEEZ
TLSH
T17ED4239F03FABED0090978DE605BD5C52258CDB8F9608DAA4CF90873401A9B7E74FD96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WATCHT~1.DOC.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Downloads\WATCHT~1.DOC.enc
Size 650KB
SHA256 63c450aea3c38cabbadcc4b5438277194a313ff9ad192ca8e7c8593511014ea5
MD5 30fb44828402b5991d25be4b88146e2e
SHA1 2983da7769b7ae25a8686d59945bab5c84a8aeee
SHA512 23bc90bdb82bc615f1dff5ad80f560ef8070707022e9e2005b3a765a6d7aeb2343fc6756aca9476d6ffcd3d5efe3e5dc60de095bbe98f966f9783f082973074a
SSDEEP 12288:MDFp70VSK2tDJwKdNAsySCc2ab5p8cjOK1B0UNl8u9u48ot5VtmAs5ow:eF82tDJwa+25hOaS8xxtHt3s5ow
TLSH
T1A7E4236DD799C4D5AFDE352E0E3D07034BC550B256F224AA43A724A10FD5EA8FEC8262
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WatchTrace.docx.enc

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\Downloads\WatchTrace.docx.enc
Size 650KB
SHA256 0523b4e0f18d8be24cb2639e8e63b6c7a9402c805b099424814ad5f560e75aa5
MD5 9a6e2d527fa7dda96817de1bfa3fd909
SHA1 3ff6d416b32dfdd99b8dd3f5d87d7f1c37a045d2
SHA512 84d4bd42edad606117bebae411718867907d73f73b75db53e895a3563e6f891e9f32e05819e50a9cf43d122083fa7ab8e8e1d6318dc0986f52af3aaa132787bb
SSDEEP 12288:Jpmf4LUJa9fh0S0phb3OCgf2SCHzo6pWX5XUgRQ29vXbkXork7se:JpXAY0frhNbzX2VUKp2Ye
TLSH
T17BE4239636F6C5C37AF17491C2D0EB6B16AD692937884C18336C74C58B23682FAC359F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NTUSER.DAT

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\NTUSER.DAT
Size 2.2MB
SHA256 b6a0e3f03c4cca1d06caed73e254b62a7e15dac79e4e4d2309e77c0182c10ad2
MD5 47b62e5d480e5d93fda81f0c32d16de1
SHA1 613cc529999fed24f2105296e56066819358f3bb
SHA512 ccbf36f1129735373e28e913ed443a6c799cbddfbd386f911ee3933710e5577cf0680861791c0ebcecb4adf75b6c61eeff2f8e0436475d0a31a33d54950eb739
SSDEEP 24576:uXq66SiP76Hsa6+wG6N1Zst469pUaU66rNsa:qASm4sYwL1ZstdpUaerNsa
TLSH
T140B55068F8679453D361C6768DA1579777F33F832D0C4D0321CE2BAE086F12A9889DAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NTUSER.DAT.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Admin\NTUSER.DAT.FileSlack
Size 200KB
SHA256 652c50415981512e798b5e7b1f0393e84c8b103efc480d0f061040186fb996eb
MD5 06a871247231c40bc50fd04f4f831afd
SHA1 067727e47718daa45350cc55d3bbf70046558a00
SHA512 7b9c56f232c6b2a66b795c1ad87affd792367fd1a4fecb1b2bbf80fcea78f476b70ea2e8a0ae92e3c3a4f4ec184bd670e403439c15a5560419fca62d94b4221e
SSDEEP 3072:y8EPSAa45uMxeXjjXKEyLssE4Qe8X3ESXllCTUXTE/T12KEN:BEPS7wuMQv6NssfYhTlj0/c
TLSH
T11A143C81C2E86646D6F31C30E2EAD95AFC3D1BC7B6014E6630B6B1197DC3389AB1917D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NTUSER.DAT

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Users\Default\NTUSER.DAT
Size 256KB
SHA256 45600254be14c65f215740c525b0f3ea620ecb97658cda1e524fb70a163728fe
MD5 b28f73dc3eba27a7e1dbf5443cbf4775
SHA1 e10ebd62fbb881b386755096f9939f4422828f0c
SHA512 970dae92313df622c14952773a3f11b4f393551ad2f72ac2bf294b05b4a5798ea0ad14c10c3c18610b691de6bbaec9b23e9cfb847423b0f59a9aebed04f3a356
SSDEEP 1536:j9zlGc6PeNbHfnf/DzWLgKy9CZJ9/3Ks8+N1KR+:jGc6PgbffWbLJ9/N
TLSH
T18844FE41BB90D6D1D1B349329CE6DF966737FC51AE12834733803B2F8DFAA469E12681
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

APPLICATIONFRAMEHOST.EXE-CCEEF759.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\APPLICATIONFRAMEHOST.EXE-CCEEF759.pf
Size 17KB
SHA256 c7114e5b9492fbc0101a7115572a6d7afcad2631c2c0c2b96d7b09e4aa7db743
MD5 40061402b5e4ade4134bfd8c04f530a6
SHA1 9c10a8fb5f858f36e1d5298ad823a4275086befa
SHA512 1497949f819a9d2b80242dce37c28531deb4c05950342737564af583f270cff4371efe0a0c4818a5f536ffb2b3dabfad5b5a778ebf95c755341dc86e07aaf94b
SSDEEP 384:Oz8WDvcEhH+T18sOEDA2Il9ky6hY91jxbstwl2IB:O9cEhH6182Ul9kyRLjDD
TLSH
T1DB827E17465DDADE910C0833B4D8960C86F98B5FF194E1C72BDA88F5CE90DD1A6D2BE0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BACKGROUNDTASKHOST.EXE-104C7847.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\BACKGROUNDTASKHOST.EXE-104C7847.pf
Size 11KB
SHA256 8ab268ed12e206c3bca7c268a4afd187f85ff10c204e204a95e7ecf5312b8adb
MD5 70292b77d03da176c158c92532011b90
SHA1 032b2da124b9348363ce06852b153d8ded9bb58b
SHA512 341bab7fa74438996364a0992c6b68640399736548f9fd71f1961a25e8015d82ed61c0e13890ac84c6a75361b527217b286a8ba2d8b783f9a7b27b97cf04f28f
SSDEEP 192:4sArL20gFnOKG+IPB2/zyOG+8oJY+a8nsxoUPNDVl5kJZD9h6QqLISJQihfWk7EL:srS14+yB2LyFxoJY6n4o8DCJ16Q4pJQv
TLSH
T196328EB3A83D198D5AC7C85FE14656535610D533A0B4B2A33B05A283378D0F266F9DBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BDEUISRV.EXE-4D0648DC.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\BDEUISRV.EXE-4D0648DC.pf
Size 4KB
SHA256 8f7f02e8bd41a2a64a910ab309b693f6825ac62773acd05190cca541d97321cc
MD5 ed7938c3c8bd1e4ab51a8ec5e72993bc
SHA1 c605cd67c5f773d35342abac17f8d3701864c2fb
SHA512 35fcacbb05bf612f63affe13170246f9e3aa99bf8efa4c0f27a0886c44f3847d924912e8c1d7f51ad5245a37bd014e386d3be09f577a613a05cc27c746231fe6
SSDEEP 96:LD2VBIo3voOQ18pvr4HjghVop5DXN3CanfeYyYkAgaNsaUpwy0S5vPro3:L2Kk5SCr4MXg5DZCanfevYkVat0wy0S2
TLSH
T177913D657C169AECE981DFB8736506D059723C0E879374A152DA3C2370CFDB6A07C0D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CONHOST.EXE-1F3E9D7E.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\CONHOST.EXE-1F3E9D7E.pf
Size 6KB
SHA256 b807bd7e9643598211849cfb2204f69b6c1514a6f3817aeeeb992315cf249400
MD5 3b45b82d0cb6fb674715140b94224360
SHA1 79a8311d6b7a2ff2b0081a15acbce5f47eaecc67
SHA512 5e6325f6d5da251a147d6dca34e234b704c19831cb734406f44022bc03b0fa34f6dfdfbd7014ce6e3870da97bb4b66dd9966d0737cf607cdc85940f6edaa7792
SSDEEP 192:so7MEI1i9XA6/pOP7xCDzumONszycuB+9xMWY2H:3uieCOjCz+Sy7knBYS
TLSH
T171E17D04BF2F6557D446CE289A4B3C3D6811CE78C481BA7EA56F3347285A6E41044F8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CONTROL.EXE-817F8F1D.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\CONTROL.EXE-817F8F1D.pf
Size 10KB
SHA256 f5bbb633e313a89d9b1b8a623b8e3d2ff1237b67adb678ee636c0a7e48ad66e1
MD5 52a974f0c2a66f09fa2c80d9fef7ff3d
SHA1 8bd3d624535e029f00d071bdaeafe2bdf8606f14
SHA512 9d319c82bd323923e6c841a476e5092eb96c589618557af5921e7a4beb79fc156ec81776aecdb34c936d8a09f079fbc3120762e4fa8b47419c1a533a2a32deb3
SSDEEP 192:3WvxrjMVzTLLGGci2L9fPFcxgFgDRySADKLMahbGai81:3WRKXG995LWDQuLMahbGlQ
TLSH
T148228E61E9BD6D4A52C3D0BBE95690325018A612F477A7131F0621B3B3CD0B766F05CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CSCRIPT.EXE-D1EF4768.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\CSCRIPT.EXE-D1EF4768.pf
Size 9KB
SHA256 081a8bb7f5ec4af44912ff8d9467bb755a7447e8c5868eb140a16cb7d0f501e8
MD5 08e51ba409f75f538f55c797bc1947fc
SHA1 598c35b3b06d4d89208404f2ce2b45c12d1dc5b7
SHA512 b9903e5c5bfe85f6d517afde0bd071428b87a25a25d1c093925ff263c9683cf04e8988bcb6df77bc001a18146bf4da78cd63bd3a01ea3cd9875bdc01c533929d
SSDEEP 192:HwA8Zp54jK4N/e3vAGXTiNKSheOmQ0tzVQv8VLlRRUqBBK1iernBqQcl:R8542vAGXTiphe1Q0DQEl0qBBK1ierBc
TLSH
T12E127D62E06F3D0CADC1F02C62DB497A8034C15389E3B431D65962D7674A3B52A487ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DLLHOST.EXE-ECB71776.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\DLLHOST.EXE-ECB71776.pf
Size 5KB
SHA256 ae215304dd0be33e6e1e023d47394c550673baf3af923c622e9e90bdb805258a
MD5 418f09b93baa21a58bf46f2a65592be2
SHA1 72dc8f8bf0a538614a960e8365dc110687a41670
SHA512 aa89f0a5a119603de7817db0ed8076b6f2aed515e84d5364387f72d3d04822e492b0d0a88f78f24ad3426024e468789af0ac67d05e094d72bbc631dc68a3871e
SSDEEP 96:FAxh1RGJL3jxZBCHVmQi5kqerGBAbfXzNXVZOzvfKlii0119kE:WdRGJL1CHEkqeKkfZXVZKcX0119kE
TLSH
T1E9B16E06BAD9FDCB9D67C9768B840BC4BF30FA0A121AFA4073F560E1E056CAC152435B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EXPLORER.EXE-A80E4F97.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\EXPLORER.EXE-A80E4F97.pf
Size 32KB
SHA256 3340496db3cd874ffcbff76184257c0679177034c4265e9b0a79f5a092a0b6dc
MD5 42c46f651eac5620667d297b9b53892d
SHA1 b34d2bdbbad8daf2e4a47884f79c543fd11a6ede
SHA512 67368949f2e57c286552a242af39a0881eaacad74af6bd390b550e7a6b42be373f561de503ae282a8ee214f969d78cd563df77d28d0daf3a81722e480d0253e3
SSDEEP 768:cFU+oRIK1XkSfAX0Ks7QxFblMCv99cTnpA+XyuE:cFytjfV8xRlMDna8yuE
TLSH
T16EE2B07678746B19E787C9EEA1811B163A15C500E140EE633A562EB393CC3D35DB82FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FSQUIRT.EXE-BBD9646E.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\FSQUIRT.EXE-BBD9646E.pf
Size 7KB
SHA256 c0210b029b0d885189ff5b11b9705ae5f33a91d3b1fc1b0945acd44848eb1bba
MD5 8c214f907fef3d3e0c56f7e13698bc2c
SHA1 d7dd5e3676c9bba1bfcdbc6c7bca7cd17c1dc495
SHA512 23a44c4b6079e56a8bbf8299109420fa097f703fca04dba0898098ece7ff9e1c9733d2e0a9d8bf42cc6d04f66ad6fa9c5162390ff82941ac88feee4512e1d5ef
SSDEEP 192:xUt0w9bMJGXPxLoIJjtYTjh5Hi6Ouv9CURT/F:xUtV9YJixL2jXTOnURTd
TLSH
T182E18EBA4337395178839363F63B097B9D0A8EFE464504126FF87AF76A411E441A25CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MICROSOFTEDGEUPDATE.EXE-C4317749.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\MICROSOFTEDGEUPDATE.EXE-C4317749.pf
Size 7KB
SHA256 d44a045e097b2e3d9e85b075eba2cb0579fbb9be4eb68d0a7f80b3883a9d9146
MD5 30cdb1c1c3fa7b0f6c9c057009a36dc4
SHA1 0f5006da3ca2f3fe5d84199b8e3d64039196af73
SHA512 0ffb1d4a195b412bc6ca916395fdacb728965371df35411c56debf3e5efb918c318ad9c658c7b14049d31014146d9243ccf63da3e650e3a2a7e2d79b69e29995
SSDEEP 192:N7nIe2KicNcVbyYhEkyewkZlgSVmSE/aB58CRe4GS:N7Ie2KfWb7hceV/8SE/A55ehS
TLSH
T117F1AF97037E340B4BC854DD9C85DCAD38B36AB7574E80939161B5F9A6B145904042FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MOBSYNC.EXE-C5E2284F.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\MOBSYNC.EXE-C5E2284F.pf
Size 7KB
SHA256 ec9b3fa5d071f08e7406e84fb38428ff0512fa2f87fd11f13a9a6ec87d5ff42a
MD5 630be8e435189f1e034da6fb6bf78283
SHA1 9e2b271daa6680d6d15d275510214fc403e4fe12
SHA512 645c4c2d79f546b258ff97c61ddb0aa079e92eef05a976230c549f659480a7ba1cede7f483a7b3784733e6508eca3cac68b912edc1b3e81badda2a5aab929644
SSDEEP 192:oWRVdDQxS90t3IycYxMEg/69VX9rEl2lk2KXb6wOumm:5RH2rtUYxMC3lP2b6wSm
TLSH
T114E16B33E4BF2D088753D09FE18A45B69014E92AB9A3B2D3234E469633495F22AB46D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NETSH.EXE-F1B6DA12.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\NETSH.EXE-F1B6DA12.pf
Size 8KB
SHA256 fb7d9dd73b3d1b8135075faab4766b6ba299c2150b266803b29e1fd628f4fc7b
MD5 2d4d854d2700fad96521457658aa9623
SHA1 6439c679e2cfb8a9ea0bc3d9227e814ac7c84922
SHA512 3eaace48a3c0e176b15183e64746ab7a6331f871045f5cbec183720e9ee5ad6cc5032c2f38644fbccbe7467cc1a0d00c9b7e275fe99f22f5461c45568c6b6dc4
SSDEEP 192:HHuEwc8qhxByN0OZJ3vnJvpmIG6Nf1lKIQlyvYI1vjQlO4FrSp2e5K:Hbwc5hxkN0OZVnJjGQ1lilyQI1KSp2eE
TLSH
T1B502BF07800C39158B43D975AC36452C6E98ABAEED19F834A0F47A85556CDFCF0C4E9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OPENWITH.EXE-5C93E816.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\OPENWITH.EXE-5C93E816.pf
Size 28KB
SHA256 4c6e649085934431470d920e2ca1aecec56eeb0eb66414791497f40a0b6e6069
MD5 f484b2654c1eb52118cbe3ef9c1eb71a
SHA1 becc4bb8ed6590095e8f88839cf8ed5fe56f676d
SHA512 2b5dddf9457de8a8c44e0819fb60f4c82fac6e8d9077a85a3b635af778e750cb7448b7d348c6899b27e5aaeec86e4c4c3d039c71710d6625eba81968a1054c80
SSDEEP 768:YMer+PBHTnpQIEEhupRHMqmQbyAw1hPfKZg5EtQxEn:XPJ8f/W1hHL+n
TLSH
T1DFD2BF7A8A3E982BB69040FFB184597923638417F9EDFD112F45A049F3487223D947EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PICKERHOST.EXE-B8A68B3C.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\PICKERHOST.EXE-B8A68B3C.pf
Size 19KB
SHA256 cd0ca982f6d998345b30adef811868ce47759061f85eef35105fc68e4baf0ea3
MD5 b7e97f71379740d0bef7e0a2387c5dea
SHA1 763caadb5447cbaf1e1e0fc497b3ecd381bc4a05
SHA512 72f867addd345a073f8d2c4c7b57151f056797c840f3025ea1eb505d1957383216b28f54c888cc6bbe7c1489f1a6607dd6a09eea26284c8e631fd739013d7775
SSDEEP 384:eM5hy6xPr49EmIL224NLWMhkdgWkZwOhqhsJe:rvBxPrBmIL22PLnILhv0
TLSH
T14192AF474F8C4F2EED266BD1B267B825258E9C7CA185E8474EB3C826F14941F7913BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

POWERSHELL.EXE-920BBA2A.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\POWERSHELL.EXE-920BBA2A.pf
Size 45KB
SHA256 8f4547c9a16336c3dfefc68b884a158774ed1fed78400995bce5de5924ba1f9d
MD5 9e5d4dae90dcf1f2a19d53533b868a1c
SHA1 c09c0a966c051752cbc731eb38d1f131e462e474
SHA512 880586b413a81c1df696e35e703582c7d499e0f0dcd6d8af6f9e12e91cb004cc46ba073b5d92077cb317806bfded0719186e2765e22dbe8c80c67bcb484125d8
SSDEEP 768:ca3FsFBjVc++dgHFMMu+dyiGq+v/zNoiq1aslu63fQdAtp6aEwSLkdHXQEWnk/Q6:lq/RkCiMuET+SDFumf0x2HOnk/P
TLSH
T1F823E02C03791596DAC5BFDC6A65D300C052C89D09D9BE43A01B92ECEE24D9E53FB37A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PSEXEC.EXE-80F89DAE.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\PSEXEC.EXE-80F89DAE.pf
Size 6KB
SHA256 0d9cce724ef424076719942e1696c7dd71138b27698ea8a44e3e53aafbb59de0
MD5 610b41fc9b5799a2b21c5864291e7888
SHA1 aa35a1152eb8f66823ab652a60a0f887141f089f
SHA512 a93e8fd4247ff8f062cd2925f852055d6049361131710533967a54074676ea13bc18a37e78877262fd56348176ee8e80c3b4dbf85d3b856c2cdad54d4c1083a3
SSDEEP 192:0dyJmf9M/mQOM2/5tSSGgPRyhdPuo06PaC1:0dykXQOMOjShIQdG4Pa+
TLSH
T13FE18E8D8CBD1E53F8375DD86D78103FA144F63DCAAEB902A7A4224465C3D75A15A680
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PSEXESVC.EXE-7F956DAF.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\PSEXESVC.EXE-7F956DAF.pf
Size 4KB
SHA256 f2025cb770d6b64ac0d593bfa8024eab922dd816fed4949924ec6fc05afe9dfe
MD5 2cbf25a69aefba82cbd5b866f5b9f96d
SHA1 11a931cb6680ae48e3c288fac22b3dda30ddb66d
SHA512 59bfc4d808f74c560749ff5921b000033fe5f1eafb4e3ea4dcb728c64b084be8baeca5f3a21f95059ac408233cb32980066d3d4e3e145ba48fa22476db5c67e9
SSDEEP 96:B4BRCMuyUSzxZZzDsQCmA9vSgUEHYuOeHRYlAjdPKo3APsAJ:SCgz/m/JiGRjdP+HJ
TLSH
T1C7919F4DC8526C1EEA50CEEC1713A9873F115022386CD67C7B6CBE2B79E491E7C08951
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

REG.EXE-E7E8BD26.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\REG.EXE-E7E8BD26.pf
Size 1KB
SHA256 af0d6cfdf25784a88a5cc5f5ad8a2be684e65d1d62c4483f2af22f17fcd42839
MD5 c1792db1f47497166012614895259391
SHA1 3741f085b631f04f46de600701678600cdd7eeba
SHA512 c4fdd66c4eac86a30f06c74ba84d906bd8ac934ac2f5e2f0d4c311818444cc7f3d2634263531c7c4727f848227c4435fda592af9672c473d6938bada9496b855
TLSH
T1B7310B3F80D18158CF61093D0915580427AB8E4AFE51ED991A7F31B2ECDAD4EB5CA6EC
MD5 SHA1 SHA512 TLSH

Submit Download

RUNTIMEBROKER.EXE-4C0446C5.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\RUNTIMEBROKER.EXE-4C0446C5.pf
Size 6KB
SHA256 0d303054d3bf65d3a3bb5356a69dbf9cd484e799a901fa846ad3f2e479f6b839
MD5 9ec20db27904fefdf5d17db030fa9f57
SHA1 a103d82ead8dd060c91a8e2873435bb5041dae48
SHA512 2e37ede285bb62e47838abc6c7823653284cff1fc3a5b94b13994a9a2fdaa6ef995d6c6d78ec757850bbc5f7ac397f3acec8c88122307f0ba8c21dcc44ca65f4
SSDEEP 192:J6C/PhxFzD4ICGWakvr2KPIYL2LkqobE67jy4:Jv/PND45GZQPI8MLIE6j
TLSH
T198D10B32B03EAB495587893B906518E6B432C57961B6B232071226C2FF4C3F325F95BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RUNTIMEBROKER.EXE-FC4F7215.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\RUNTIMEBROKER.EXE-FC4F7215.pf
Size 3KB
SHA256 2fbb300570d2e620bd190ba6257841278ebea64f76605d44393637e98d8e2903
MD5 40230054e21fcd3c53027afffdf15c6b
SHA1 4389b4384501a8bf6d4f49b381c7babfbec7ed81
SHA512 805ac72112c25d8f09b1c32d902f4bf8af7bab41cfbdbb26844106046daff8294d3937fac8ff3ea7bed0aa064f3589f945d952b465d6fe3102b9e81300adad4d
TLSH
T17E816CC5653B7F3AEC16F0F8FBA3511A4880CF060C853C830B369686956B7634228BE9
MD5 SHA1 SHA512 TLSH

Submit Download

SECURITYHEALTHSYSTRAY.EXE-41AD6DE1.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\SECURITYHEALTHSYSTRAY.EXE-41AD6DE1.pf
Size 5KB
SHA256 773de289e1a69aae73ed1eb2ad9e6abefcff0959ee13aa32bd533af4fcf09f03
MD5 394289b11cd82632c09499fbb9269eb0
SHA1 ebeacd9098d323845b085f440a37c339d7f947aa
SHA512 1cfd0d60294ee1d1fdda16cb4da7b80e4d0bfaa0f30f3edf99e31057931ce70fff93c0926ddee35aec1b657f330c87f9436ad2cd0851b9b9778bf7bf479cc5d5
SSDEEP 96:rWz6f3vMOsL7vdDTXkO8+7aQ2MT0Qi99fsoRaZr6xXaJ/XtV4/W5SI+wcWPWPvTO:rWzEHsHvdDTQ+7aDOuRsrsxX10Smc3aH
TLSH
T1A3C18D60FABF745DFFC245A13AD79BAB8425C203D9FB9721A30214815789CF1E2481D1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SHUTDOWN.EXE-E7D5C9CC.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\SHUTDOWN.EXE-E7D5C9CC.pf
Size 2KB
SHA256 927a3531b10d6239a1c021e487f2f07ac64699a4e60cf79f6233bcced7007a2d
MD5 b1ef59cc20613de72d7f89e4cf6d9dd6
SHA1 fab8f194ed5b50866129667d1edb4f6d0d49ff64
SHA512 a35d933b9dbfc172b34da0fe310502dd432c3ee23cb607ef4352ecf44da30fba1084c3161df9c8be1a2c54dfa97679b689c88955fa39de7968d8b15c1d1c6e24
TLSH
T123514A48B09E73D8C5C1DBB150F55C456BF6E876C202B78394CA3CD5686E12D2D924EB
MD5 SHA1 SHA512 TLSH

Submit Download

SVCHOST.EXE-07A3B3AB.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\SVCHOST.EXE-07A3B3AB.pf
Size 4KB
SHA256 d4a5473479a4366ea285de8a6e8007f7f50f7fcde7ebfbed855d3ac4c97d88e8
MD5 9175da0d397fbaed6b356cc4cbadb7a9
SHA1 9559cd9cd284276964363eafe357c3fd708cafeb
SHA512 945199592c324b130c969590c112720de931bf6fbadb8a89bed774a1eb52661a00bcf86a8afd2f5543473f52b95c5b505ed01ae0f3ba4c16663ca67a2d7b1ed9
SSDEEP 96:CK1HrEjMybRMdwaayLLnshSEF4tdD/lTedX0kgkw0wcRChMeLE1pWqo8jUi:Z1olM/sDyt0fw0wcRChLGpvZ
TLSH
T167A15C15204BAF53D417A23FFF46AF3558792F0E802572524A4A7A82E0CDBF488D59EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-2F0E0AF4.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\SVCHOST.EXE-2F0E0AF4.pf
Size 11KB
SHA256 20dcfaedb5b416d8ae63a57d057c9e9d79f4b1c0602138744b784fb6ca2e3552
MD5 6270b1b255a2fa2acd5d6fa757f41fc6
SHA1 983926380eaf75e025ebb6d66647b2c565136755
SHA512 d1eb83ce136648d99cd0e503497ffe9facb24ae052f99eb65a9f0497474084c98a706731bf77c421212cf94ccdc0e4a7184daa1345d9a499001d273e54f38f47
SSDEEP 192:uNuriAzN2hpr9W7PB5pHVCUoioxzW0VJHCUOzmxm7UIrxy8BioX:5rlErr9WjTlVPohHCUImojVBioX
TLSH
T18F329E30DC6A1C4E16C790DEE04E09666101D627B2A3F3C32B5A6793339E2F622F096D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-96A7E1CF.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\SVCHOST.EXE-96A7E1CF.pf
Size 4KB
SHA256 22e6a0c7c55d38a90bf5bf5bb61eb572066ed44564f10f50a82bc87a7829d64c
MD5 93e32994e2b346769a39f99cd7d8a076
SHA1 e0e639e047fbca13452b3a828b48a54699561903
SHA512 b542d6a5e34d09c7fca48b9e167f235912196c58134a41f75e4864e7c865c1e04c7c34562f0b8402a59e9a63631d2d7782caa7845f685925064d75ac94c8132f
SSDEEP 96:Zhq+gjHWRirRQZv0bgO2XoqRSWolDypSqmg/7cJrtfk:Zhq+groidEOt8oqRShDESqmgjchpk
TLSH
T19A915D34287732A1EFF54973EB08BA248175CD919836D12199C9669DFF5A74CC0BF0B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVCHOST.EXE-C49E779A.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\SVCHOST.EXE-C49E779A.pf
Size 10KB
SHA256 f27a07b812d45d8e17d4717eabad41f7158a6b280c9bdc1afdc8297fccd397e0
MD5 2250235099776a726c37db2183e836ff
SHA1 89b4718acb09f5bda833def2442db04cbc5ad8f2
SHA512 c97e5c5ff3a2ed4bbc2b06f757a4892f5871e3854f8af3bc060b10c948c1adb8df04b9b562235b3492c266cba410938281948312b72be3cfb667c72ef627c999
SSDEEP 192:O4BcuOUMP7rgtpjJVi+s3lV7BXuiSpVDI0y7WkmEX3Tlt8/q8hadkmn2SysoYcxc:BZ2Porri+ClfXuiSpC0y7WIX3xt89adr
TLSH
T110224D32D07F258C5BC3C08EA0895DB69005C533F972F656074661A7A7891F317B9E9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SVF29E~1.PF

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\SVF29E~1.PF
Size 6KB
SHA256 14cac17b059a974eaaca443449be5730178b922f5a53f9d500ec4736678e005f
MD5 71ee71ee99425a074fb75f495aacc05d
SHA1 4d338130c7dc95c53dbb566f0a9fe30659557b93
SHA512 d83c9ca2d42ae498840812a3ad9d5f3865d6382c05317bb2f6a646bf79d6d28f5e047686bd5185092fea33097b03c0ab8ad59d30cafde944b5d70976ad872261
SSDEEP 192:ag5FQdYCxfRjoVdTfFKUw3dHjKcZ5OD6Roype/AWvk6Y5+r:D5Wd5xfRjmdTtI3dHjfPM6R1pe/y6Yq
TLSH
T11FD14B63A59D394A7D81C136A01C49A22050C47652B2B6E32F063BC37BC937257FC7AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SYSTEMSETTINGS.EXE-F13C32B6.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\SYSTEMSETTINGS.EXE-F13C32B6.pf
Size 53KB
SHA256 db7c47cf237b2f9bb738f2375fe4f73763eb38455a233f5b4c6312cfc67afab2
MD5 c95525a8623771e6c27515b5f6a7875e
SHA1 26b9bb88538273eee21e5cce78ae525bcb31743f
SHA512 ea3969b1d73570c78bbf27c6f532feca1bb4765224bfc3cb9a727c4fd86219d244336e923225732926da2e7e7071f7b1a0174bfedee14859b630c1bf98b3e27c
SSDEEP 1536:f5P4LGbR/qDitOxCzLXvZK2sDDmKDWLl4:f5P4mRDGC/fs5D1u2
TLSH
T12533C021D4FD990AC9C3CC3AF49484F6552AD9338420B3E26F07269AFA486F6297475F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TAKEOWN.EXE-A80759AD.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\TAKEOWN.EXE-A80759AD.pf
Size 2KB
SHA256 4c1ea099ec084bf2fc8111351dbd225cc9c0bbe058bc7918a0ecb2fbeddb4908
MD5 febce105fe5a1e8da9fb04b1803e900c
SHA1 07f92a14fb91da303510f799fc9640975d602420
SHA512 b87be2d8185fdf22c47eceb875ddae42acc15b4e4a184ce754b78a5131d56688de642e29faf3db5f15eeae7fd0aa1f727242be1a0f1a893c239e65b457347c61
TLSH
T144411819661E6290CC462EFE0C190A49FD35A58CB915A23A834D7DAE28FEC11B07D93B
MD5 SHA1 SHA512 TLSH

Submit Download

TASKHOSTW.EXE-3E0B74C8.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\TASKHOSTW.EXE-3E0B74C8.pf
Size 5KB
SHA256 9fea49110d0059e2db81a1aabf8aea3585fded1fee907ef8da5edc5871eefbfd
MD5 a14b7b0ac7907d5aa7cbe93e077c5204
SHA1 107694d7439b385e15558a00ab26b196e62d1eda
SHA512 5bcd944550e12f58585856dd3641f172e57e1c9ad86508e5cab0c1a900fc3843294989b2898d0cc75c3c42ecf050e5252264c185d8056fca70edfc41563473ee
SSDEEP 96:fXO8eqofY+HCJXq/kZX49pmmm2wV33Yso6xH10pBVsYAg172pLb6zOM/:uAfJGkUmmnGhH1EEggpqzD
TLSH
T106B16D20E02BDA7EF0A8DA30742113701671DEA81EF7ACF1660A348B99DD8D93915489
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TASKKILL.EXE-8F5B2253.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\TASKKILL.EXE-8F5B2253.pf
Size 4KB
SHA256 22ddec0484dd9596e68f82978e2d57d8a57fc472354960f2f83079a7570f723a
MD5 88c9d7f1d0edd78a8b6dfbd323a095cc
SHA1 93ee425bd708c455533a3f6724dfab99da6872ff
SHA512 9c2e62a9dae44edf0cbdbd66b57663840c23dce7931270aac30a7727d72c12385b15bd301eff06155492faddecae5b90506c869342ed1981b6a2dde5c0f9e6d4
SSDEEP 96:1CzjkIbKWkeeeuFt4SNpdoGj14VC0k2YJJsvWz8CSo7p8b2uXIBmoUzW+:1QkIbhuFaIpV49k2gJsvG8roWjXgCzj
TLSH
T198A16E5275B3721AE9844817DD1328798E6C0E2BE01136AAB79D8823D7D0D9441CF9DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

USEROOBEBROKER.EXE-D2992F42.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\USEROOBEBROKER.EXE-D2992F42.pf
Size 4KB
SHA256 b30f450c4fa44cf3ea0c889e01ad80be729cba96f0454e1669de39f5f3e8eb6c
MD5 562edaf4d9168e533c5f743f444c8597
SHA1 d45e35cd784245dbb6e82ed620adb94fbd68cebb
SHA512 0b59d1086e4726f7110a79c6dc178014c2ef0e4a1d1eddfcc3e20c0c0c999a3cc66c4c5877ee562cf597a317dd5f23d28b7668db3f622adfa2b26247b996b7ba
SSDEEP 96:xY1RJ1z0MTWrLtXndgYcTVbTVpV6Yp6g8sW7YSledCd:s1z0PPF+Y8V1Nb8sKYSfd
TLSH
T184A15B301AE42F1DAEE840B0F9C57B1E091A58EF80B12F92C6A6B01277E7703C7954DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WLRMDR.EXE-C2B47318.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\WLRMDR.EXE-C2B47318.pf
Size 6KB
SHA256 4890bdc935a6f2e5a1ab2eacfff1caced32ca2465c2472371cb39664abf00335
MD5 30405d428bbb2a03f352948422454366
SHA1 b7c241b866a26b262e842c27c2fcbe3079c153ef
SHA512 f3dcea4b4ccb78726d81cb8cdeb3568f2515c9ebbf2d12162c8229c28e760b66edbc5a914e1821b9dd1a66c7d3555ea0e046caf4e0c9fcbcaa359c407ed09f1b
SSDEEP 192:CasW6uoQ8W10hGtTiuM0yCKtsTf9CAJ7lzsaX86gTENj7h7NX:CasbeRbKTGTf93f6MX
TLSH
T126E15E39B8617B899DC7D52C90C71E73E5768626C398C3E53F287505BACC0DD36E0148
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WMIC.EXE-A7D06383.pf

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\Prefetch\WMIC.EXE-A7D06383.pf
Size 6KB
SHA256 c8c880bb0058447e52f57912b8c0d9adc2e186ad17a78c6acf211a51aa2bf63d
MD5 8a8fdd105a28f475ff61a20b9219fd69
SHA1 95258846df38bdc8ca9691ade12bfd2a79b4662d
SHA512 1fbdcb1b7526108268dc78130880ce78255792ff93ad3a7dcb206492ce1f9baac01c795e806ddb1f6726addfc77e3ab353c6a333627e5d909d2821fadd69e118
SSDEEP 192:geqPTprnEnSjWQbtPJnAGly/4y8MF3Jlr:geqbprEnSaQ7pdfMFP
TLSH
T16DD17D66158F1CCDABC7D33989CE99111501A33A2593B2F1D6063A93364C4A842B2BEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CimFSUnionFS-Filter.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\LogFiles\WMI\CimFSUnionFS-Filter.etl
Size 16KB
SHA256 1c36e232863581493ba99a91eabab6029ea91130d7813511c2e8d4aa9109239d
MD5 b50b3cfd54a237ac6f3c8738a596e5a6
SHA1 dbbeeae61b48ced8a78c2cb286571645430a6e43
SHA512 900492f01cc37c56d52463cfdaa7cc102e4cb498839169ad8b4e4c39f5585f1ff272321864d4443b4505334352fb5068b4315f79c0ea9226241e18ac3d35e86b
SSDEEP 192:mfae5fNPYrHAFsBCFN+zSL+i5rCkeBKetxa:mzp
TLSH
T19C72AA79E75228C8C5F94472BD8FF6252871CDAF0D159E01054C35CD3A3728A9AE1BEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FaceTelManually.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\LogFiles\WMI\FaceTelManually.etl
Size 16KB
SHA256 1772e4336b6243ec5111dadc66545d914cbc3fe65dc45df283705c576bbe2232
MD5 b534a65ab3b9a318643b46ea44a143e3
SHA1 fb3b4bb8104671135717c6052199269ef883f313
SHA512 a2527996401e5b66517a9fafb37246ecee72974ecd8a5afdb75f1dab592f583d52be5ff87fed67e612b0a15a108054c1abeff3e0b4b83223e792f37835317353
SSDEEP 384:bKt35YuWuGuZPuYPSuYSwLJYKeTBJwzKDuYmuYUuYsEBT0:yNpZo60R6IV
TLSH
T168727C96E648022EC92152356C1F5BD05953AD53064B663802CB7B35FC7FCFAEB226F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FaceUnlockManually.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\LogFiles\WMI\FaceUnlockManually.etl
Size 316KB
SHA256 c0a9b3a9a8bb6673e61c178dd1bacd4edafeb81788a21171b710f7c9919be03f
MD5 b245925683806fe5606f743b5141b792
SHA1 667fb3f1126952bd9ce1ff80d6779e9f114ad0a5
SHA512 4a9bbbf022002736023fcbad5a6dd0c3d34f3de8ba9bd8188ea0a54168253123c5d83a1ab2ae57d90f6ea05dfac2cc14750ada3b4ee65e60fe605d017e5fe0a1
SSDEEP 1536:QEfK+CvHYjOCzwVSXI/rPij+xn7dBCErm:jQH2sPS
TLSH
T13E6412F5419C1859DC6D28B8FC2B1FA559832D8705824E354BC2BB39ECFFCE69E40994
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LwtNetLog.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\LogFiles\WMI\LwtNetLog.etl
Size 192KB
SHA256 728daab56669585b61e9a80fc16793075a157aff7a47ea9e61e6af2d1bd05c4c
MD5 eb3b0a6e158e99c48aa49b7caacee35d
SHA1 0e732e38b4f4f501a675ac225d6f2d7572bffe3b
SHA512 2c821dbba06779abb89c3a0bdea07c053b7995a9be387629cdfd4bc9cb7f549647fe3a67cb0f3b453f5529d938b6694c56de729179286bb6b77cf3a3f262e3d0
SSDEEP 384:V2zFJbeQHnUUFpYvoLtfY5v5docCVpLsUQB9yVlKXf/o:wltHn3FpYvcq5v5doJYbszWQ
TLSH
T183144DA06A1DC174EA27B1B5816B8FC931747E2243CC8536E760773EDEFB7928852D18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NetCore.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\LogFiles\WMI\NetCore.etl
Size 22.0MB
SHA256 90e49a3df21187960fe83f3f2d8bb363c4f27eb053adedcc9c967161212fac15
MD5 441fc3ade9917bb9f630878add62d5dc
SHA1 dd98fb57dd08903fd5b8884131e010a4a8769ac6
SHA512 508b7e2d5c67a1d270239199ce2bf778c1f76296510f8162506cd54f24524602500ef4e41ca6e927040935b3b1329ad1670220a35cc0d3b6a7e54553ec37859a
SSDEEP 12288:HYPO1PPT7Ux2qErIGqtFNGSjtXhBqfaLAPwPlI1LWGXQDoRG:HOO1PPT7VqFVtqibaW
TLSH
T18937982EFB581036FBED013258BA173348341CAF2563896F077D76359C33A81A9E5A9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RadioMgr.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\LogFiles\WMI\RadioMgr.etl
Size 6.0MB
SHA256 801c238a7c253da3538290529ddb1e477e57c44a0178ee2de8ca9a2223d48c31
MD5 eee99b9ce084ab7a3566421e4de048d4
SHA1 4b3c9789c720906c655ea5a84d265e388a0baefe
SHA512 47a826df864006b9b094f2aedfc899da16850f7675bd48a5ee26e20e6e8a44bdfa987ed47e335119e57a591da27b6730abcf2b34fbc10911b5a5011f6eb30ac1
SSDEEP 12:cfC5KQIDncCFYlvryI92+Uc+prlyI35l:cfC5X9/92+/Ul/35
TLSH
T188568622AFE54696F275C735FC66810427326C24A6038A1E5A4436BD0C75B545612A41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RadioMgr.etl.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\LogFiles\WMI\RadioMgr.etl.FileSlack
Size 5.9MB
SHA256 19d32c327919ce33a58fd14a96e0ddd8b679afcbf93d5beb66d7638f046c8610
MD5 c60482b87d9a85a9c855695631dde66c
SHA1 0d90289910111f9a6dcd6f38ed014e2a29a5be32
SHA512 89bed8a9e5a7d07757ae1127d131f95a9eeb2e64c67e6365100cdede02db5aedda92439e6c842bbb969d71f8c3b52a6e3288ea716c49cfe93fc20d60d1591e63
SSDEEP 12288:1MXI+MCgJ9ZSwA0ZYtga0H25fvGw7Z7KXo8YCOkVr5Je9m3D8Deq9wr3y9OnUDc7:aX0ebgKm5qm
TLSH
T1C3560661AFE64C26F6B2AD749FFCA0CB9C3FBBFF6551A89D019D83484112440CD91B29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReFSLog.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\LogFiles\WMI\ReFSLog.etl
Size 4KB
SHA256 dbc01f1cb50084999c031c34a7f4de3e19088a14e17261d39b1c1b3b42fa65e9
MD5 2508522392b48f4e2b4d2b558e97e0b6
SHA1 67efce4252261a482ac386bac5d45507bebc8919
SHA512 9c1b4e8ef6f814badb82daef00c0162e0886908cc70dd0f3d6aa9592e86f14ec20bae51b464763424ff305cded0f043c569a4ac9adea87e0e555fa3635750daa
TLSH
T1E18186117BE25796F2A5C735F97251002331AC389A065E0D5A08319C4C787289A61741
MD5 SHA1 SHA512 TLSH

Submit Download

Wifi.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\LogFiles\WMI\Wifi.etl
Size 240KB
SHA256 41e2f9fd5468d80e7744ac5e046482706dd380444160feaf05e5fa435980737b
MD5 164091a26bd66772ca861c3949eb31f7
SHA1 0b0e6a213c8933271e4717a740f949dca18c8cb8
SHA512 a513b5a29d9f4f607a4f9eec85cf35421adcbc0d0b2749cc0465445ea510167ac121198a9fc96f19298191449e65cb453a9ebfcb0a6726ea0e600cb5c15a65fd
SSDEEP 3072:uyPdRAwbKnhs7yxB8goLlJ5RDulqeDZuI9pRgokKj:uLweroiJ
TLSH
T11234DFAEEE585969C4390033596D7B0250723DDF0F26BDFB26483E78E8B7BF18804596
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BootPerfDiagLogger.etl

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\WDI\LogFiles\BootPerfDiagLogger.etl
Size 18.1MB
SHA256 125598eb837767334650295a314a4b6d637ccb9a808ed66f8b022bda804dddac
MD5 d4de0e1385d64d3e80bbf7dc35334ec6
SHA1 774758f072ed3b2aa7e36234cdda6e0a7f150fb4
SHA512 23dd4ac0754e5f6e4f4f8f0e785975b046a73159da5043de38a72f516fbfb23db4fadbd48e8073c572ec2dcd1f2626da675d2b4f6601c038b723e649e457237d
SSDEEP 196608:jwyJz4CmRpOOwX3q84KJzeWwz4QRcBbAPohFUX2+eDwKCow+wrd63xym/FoDB4r:fJORXwXxv5e44crq2K+G63xym/Od4r
TLSH
T1F1171221ED019FB3D5EA8F7444AB6634BAF29D57BED33044E47AB1B20AB2311AC53D41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DEFAULT

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\config\DEFAULT
Size 2.2MB
SHA256 5f471fe8eac194dcd4c528f8cb6ac56d77b0b0b6d79c701395b9c67d40c9acec
MD5 604e1b5ae74ad4476e91dab9633189c5
SHA1 fe7efed8adc84ef5badab879892a175843c25304
SHA512 1667491dff43d9bcecc1f8bda1aa84e6622e051b6599965657159c23f10619d68e75c9707a973b7c8b70b1e08728c8be59d515146a5466a4259e6c3ee5605267
SSDEEP 12288:uHq4Watxxa2d+l+V9HJdYQ0K1EiD6lJYu:uGatlq+VxN6f
TLSH
T10FB5BD257BD9E744F2B386305C30C3A06A2DBD92EDF4834F7640F78DAC3A5158962E99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DEFAULT.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\config\DEFAULT.FileSlack
Size 152KB
SHA256 9c95951b6a8f224c002ef19553350a11d24cdf34406b6e86993366df4ff18b6b
MD5 a1f49fce2fe2f6cd822d06d8e82313dd
SHA1 4837f2a30b31cc7a156b06e324d0cb5e04ed88ac
SHA512 67b4019b29a8e9ae2f772991f3b30c515c8dc6593d617e8b3e33d102d5798ecba5eb97a0ca909f52af279390dc577459cdbd17b00e9fd5bd6669eedabc51a90c
SSDEEP 3072:dxFQEs6Lmw1D6lqlkMJ+PI8x91q+Eh7sji4fkc9lh6Y7q:nF3s6/1mlqlVJN8xoxsjLkMlhRe
TLSH
T14EE31388F3098EFBC29E37DA1B2009ED04962A1539053F0DE6FF37594F98B55145ABC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SAM

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\config\SAM
Size 64KB
SHA256 bdd38dca3dd71e0142aa93217a5d3c4a4ac92cd157810c9059764dacd22f0bed
MD5 37f3140f784e3fb11ed1b70b9ace3903
SHA1 318b4533acd3d6a31741b31c69c4e0796d435a22
SHA512 edd62796c45f54098d76160e149e321f108dc8d6fd233ffd756d885b5f0eff13d2016c98e3e41a537c0e9e344ca5f3e21f6b5b0c966bd03c2d9f253cb3a25286
SSDEEP 768:/05UsqU6o+FWlG/jwzBEdQobrwkfwb21fA:/8MMQY
TLSH
T11A538D41B684C686E4B60B31CCB69BA07776FC925F76930B3305233D6EB5B919E92307
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SAM.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\config\SAM.FileSlack
Size 20KB
SHA256 927e05b7f5fe5c84cb52d6bcdb629824fa1d6d0bf3a1b5cea3c71e6b224e9363
MD5 9eec28bffc8c8612dd68484b605aa009
SHA1 c8a51562613f7eea068bded93fc7febe9065c1af
SHA512 6a1033b37127aa49640383a4e5bfbed911a1d3e3eaad15e6869e7c363423e29c1e0cac551b6933ad9024e4184a02b15f34cee8d0c5b5fc3ec377776228f27557
SSDEEP 96:dOcgOGEy4fT0EGTrD5/TlATIppRcdADud6AdrdAdxds+ar+ac4bR2MR6DFUGFulQ:DYEipN3yxQuFY2zpvHiBb66
TLSH
T11D920764A2E50BA7F0778BF964F2549775B2F823BE438F4C422213550D26B669C30E6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SECURITY

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\config\SECURITY
Size 32KB
SHA256 e950149e9e8dbb14dbf745e5658fdfc939432e58e7d7fbc99e4a9afab67c975c
MD5 7c6b81463e7e2c967d9122b0e4b122a0
SHA1 d7715928e48b69f0f5be32219e52d214b06d6b80
SHA512 c5eaad60f650611eaa0d88925ce42bfd99c772025b17c2d3ce41bccb8df81390d6c86d7144a881f0b14dba9a16c8393fc086c847d40859126bdfdc16fe22a8c5
SSDEEP 192:87WqrBV+HGQzwnKwVD5LeJ9ig2x66DIJ/Iu5m/We2foa+QfQ:87WQwzwh5KJ9ig286Dw/In/Wew
TLSH
T10AE21112BA04C6CAC06546338C67CBE93766BC169E9643073B95331F6EFE7E2AE53105
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SECURITY.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\config\SECURITY.FileSlack
Size 4KB
SHA256 62bd21ecd3894201f3cc1355507910f8316288fdfc49a0e07da7b8842c0da377
MD5 f6c313f07ddfdd07fcad189e712747f5
SHA1 e3e8105a90674a7812333e2e4293f6624ecb7586
SHA512 b3cc3a6e5b3aceb93baac766efdb857bc9c06aa0142d9a763799c3954f782d2614030839dd003499f311d96456a13d682946da51b078ec369aedcb21b9ac61ea
TLSH
T1D481300533E84A20E86CE0345E5B9ED4A397E5A0633FC71E6709C13D1C421A5BE63EEC
MD5 SHA1 SHA512 TLSH

Submit Download

SOFTWARE.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\config\SOFTWARE.FileSlack
Size 112KB
SHA256 96c6a932b2df5e4a12cd381c2e634dc65a931691ab77f12f90ed761f28660e94
MD5 4723266cbf70b00ed6efe31eefc3612e
SHA1 330d48099798ae1e4812a88368e528ed74f764a1
SHA512 37e37442e335184c98dcb8915e399962d0ff825abae37a36b4453b4988e410a99707ba5044265ddc3427a631024af81e0f837cf5f8e4243b5d15a6d3900dffc3
SSDEEP 768:0bP0kQWSMR6CN+MACY8Q9DPPcm/ev2//lyKHHIWDxb47mMuhj:0YdM4CNIsQV3c3v2/9db4S9h
TLSH
T18BB3CEB2CA58EAB0DBCBEAF7E17A8F44EB209D57D9094D1F01D2874A52D310ACE16461
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SYSTEM

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\config\SYSTEM
Size 10.2MB
SHA256 fde94bad0eacc68bb819c6f07301781405d640c0c32eb3889786e7115044de86
MD5 bb626e8cf6b2e960df6005eb7d92dfe9
SHA1 32bd3895728a09a7925946e22aa2df8d5cb9b293
SHA512 8f6c9e9e64fd7e8b9672573d06d0af7da2f69f3522ab9a0075524a8df75398bdfa0cdb94ce6d4a86b202a734e000d60179047a9c19cc5422275d1c1e82da9abd
SSDEEP 98304:k5aWRdBiHVCm1bdc4FAKbH4VHG9csSfJDjl2AkHG:k5aWRrpVHGWDvk
TLSH
T1F9B6FC01BFD4D6C1F1A64A329CB6CF855A36BD52AD219A0F3394330F4DFABC1A913616
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SYSTEM.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\config\SYSTEM.FileSlack
Size 212KB
SHA256 ce4a3fed60ac6618111cc2ea60b595d6a0a7423a3ba899b2b1865dd7483af292
MD5 00477463d927601996eea49ad23070f7
SHA1 3535aa987cc4aae4670c4398abc694f868c28723
SHA512 04b8e154322b8bf23bebf8f2414bf0259eb88a5e8e02f199fcf0120dac3556202499a8f645ef4a958309f1e9417aa50795243a537e4a3199bacb9a84a82337d7
SSDEEP 1536:HIF8pkgbiVj6rb4rZ0Ykll6HilGa0/g7tS2FaDoKzsJoJQf1ZvO6iLRjEztSfRGi:HIF8pkgWQMr9H/HrMIQfHiLFEztCgPLO
TLSH
T18224FF02F4CAA46DC473F23853698772D723BF1592A5C62942C32C44BDC7DA72F799A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Application.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Application.evtx
Size 1.1MB
SHA256 2d4f04d14dce81b441a5550a6cdb06f5f6dd56562ba35d3f31149405c1412c6d
MD5 81138365041f7eef389e2859382b5eb3
SHA1 99e555eee55d60e03299ad85852e38d4cd9edaaa
SHA512 6b482dc4b22dc16dad4cbf4595a0bb6a2da8ac0805f42ec77036933077b7ad2c3374f20b93cef3d6df12de7ab7dc6ea7e0b16739dbfae58d47532d734abf9b1e
SSDEEP 3072:rwcX1cgG3D5W6TaAO9tsE9cpsJcTMtUI8XgcycncD5cx0c8cXHcX0c8c:rBoD+VbH
TLSH
T14735EC15AAF41156E0B3CB39A8F742172B36FB112E31CE0F6290538D1C12E5D6F99BDA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Application.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Application.evtx.FileSlack
Size 640KB
SHA256 1b7e70158cf4c11ea1f8e7f6af621e896b7a5e9ea76c72d68c58404563a4a2fb
MD5 e33a003357ed720fa40cd10171a3e724
SHA1 ff6c1a02c8c0ec082214aeea20fd3b74d53642b2
SHA512 e076555eb7a54a101a841c7501468b83e37c4620a44f2bf20a8754c92c4aeea6b69db8b7db5781cb83534ecd60e74ad48a24bead04141cc202d007c120345499
SSDEEP 6144:nEfp4ll8O2jKlqr5wBtbVRhkFz/9OTp49:qiaOqKlw58BnpY
TLSH
T109D4851066D89508E2B35A70DA796791EB7BAD430D32CB4A382D321E1F736434AB3777
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Client-Licensing-Platform%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Client-Licensing-Platform%4Admin.evtx
Size 68KB
SHA256 eaa0702e639ef8083c58173e5c60422bd206756982224d2a6c3f1762c7717c79
MD5 1010f8674acccfab43d4e0db2a491eed
SHA1 479baa6c721639f0ca2ffac5ab957b97cbb69744
SHA512 48083d2fa873de92c345f44c846234300f1a8830ecbc278696b2fc4795dd73086da36f7c11e5428f5c3e2f07b73dba76ce3b7a35f25e9f5f139edf7ee033dfb7
SSDEEP 768:9biKgGVMGAthRmDtppY0W3HqdITe2/mNvYgL1oav7at67ocFyHEnC2BkB6ph2X:5
TLSH
T13063260607F8652CE1F65F35A8B787242F32FC206A51EF0F51A4625C5C56EA28E34FB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AAD%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-AAD%4Operational.evtx
Size 68KB
SHA256 2d2f97ab209af5cf72486e2170935bae0e51cc7a27b1d3b064dd98ea1535cb83
MD5 d7f91e527db3d2ab4f35a4e96b97fdba
SHA1 e67c42abd2a5a412c05b7a6a23a2da7b6db0d7bd
SHA512 b2455eda49ec1d58ecf71574b9b49590d8db3dd00d6869558757a25c318fec97f177343bbce9df4f836dcd6bcda8bea2673e60a887acd62df796df430128d400
SSDEEP 384:lbhe/9K6G4Lmc9KgYN9Knt4eS9K1z9KjC0CwCsC1CPCFbYCFmyCDVfqCDewCtXfu:5Q/G4Lmhyt4evBB
TLSH
T1E863242867FE1668F0F38F7985B60A415CBABD552E40AD8F00B052994923F61ED70F7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppLocker%4EXE and DLL.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4EXE and DLL.evtx
Size 68KB
SHA256 d67afcf9b51a2d5481ea4ef4f24808b1c9fa035c5d0ab8ca7ab25f46739cd0d9
MD5 00dc1977848218cc034c42c258bd30b4
SHA1 7fb4ab864821b0db98bc3eb07155ec92b96a09cd
SHA512 2e7b1a6c34d44780fccaa5a490c81cccf1edbc1fbac4abb9157916fd13cb6849c144c69be23d971eed3184376318dd255b41d58784ca4978d118853425d8528b
SSDEEP 48:MSvSZWzrrP+MZQNRBEZWTENO4bpB2oXanaHnHtk:5/KNVaO8moKYi
TLSH
T1FD63E003EFDD450AF5E24B7806BA9220557A7C658A11D24F7550A67C1C76F60CFB0B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppLocker%4MSI and Script.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppLocker%4MSI and Script.evtx
Size 68KB
SHA256 b44c4570ffc90defb0e42903561d2569d091a0009c4e38b2a446257b35c06fed
MD5 5431d68bbeeab0bf974fc51839cdc693
SHA1 f16a06baa516e595b074e9a0934b950c695f8a36
SHA512 ef88f6e9c464a2f6252ab0b2d6a9e0c493ee4c9bdba41b840e27acf2e24d2d768343efaa0de3d4a182902df5ddaba978e1389d9faee1fe763fec94426c73f1f3
SSDEEP 384:JPhr9YutGK19YJ9Yk2Oc9Yn9YeTZK9Yh9YN49Yn9Yxntk9YC9YcQ9YFD9YUye59t:N/GpjtWqpttb7tnepzsWp8kfkJXu9
TLSH
T1C963DD107BF44621F5F3877DC9F31B21AE3AFD61AB626A8A0004F2555C16E618F70BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppModel-Runtime%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx
Size 1.0MB
SHA256 d698b5452c749ab286ea55e85829703247071a597978537c8248f5ff61a7388f
MD5 0d4d74b10d182495f447b1ce03a2131f
SHA1 72593704cd8b08eeefc249b6c6a8e23e33a70c97
SHA512 9a922c35b1147ea78bebf2d1420c050e561f70f9bd43d619fa26631939a986d65ac022ca51b3f54b33bf3b07151c9085469f611876d671269be1ac2f0c6caae6
SSDEEP 384:NwhKNBNJNuNuNH4kNH3NHzNHDNHjNHBNHANHSNH/NHyNHhiNHhLNHdNHSNHdNHya:y5Dib7koEY8kXqUAVN9PCNHlG6
TLSH
T1FD256C013AF80624F1E28B3989F36B25597BF8684E519E9F0160A19D4C1BF759E30FB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppModel-Runtime%4Admin.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppModel-Runtime%4Admin.evtx.FileSlack
Size 896KB
SHA256 52c98ce70bf26711c938b1ff1781ef3e5df7edbf143f484e33d1735385b30344
MD5 67022a72660762785ab127be3e8b4fa9
SHA1 0dd1a8ca1224928bc2ebac477a9bac6de63909de
SHA512 e8ce5cb3b27f88c11f1aeeb23be7aa65f67acc1c1221c980efd3095c2abdcea643b375665ed332932185d74f7a92b1b89fa495a05202b635ac3859c4a90e7c02
SSDEEP 12288:lT1rjBbP6Xecdk6wBlk0hZdPBXQdamvdajnyVp:7lc/klk0hXPBcamvdoap
TLSH
T1EF151810BBA8D1C4F2B149326CB6DF846275FC526D228E4B3394335F8DFAB44A927716
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppReadiness%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx
Size 1.1MB
SHA256 eabd0c75b226715d2ddae11466950d6cca5322cd6619b48ac7a5f9d3fa5744aa
MD5 c675098c38c22bee718a68c492b79269
SHA1 abb18ccb53f00c4d26320ae43f1b358e5bcca3d8
SHA512 72a7d48776fd284dd417fe37406f75bb905998bcc02daf5670737dfc7166a4f340c5aa1dc47c92d87344f8d085fc101b5147882eefbd0ecdd57a724830c9b9ae
SSDEEP 768:Lf+s1nhctHWSXpqCfkPNPAcVB9G+yq9CUrWEsPAcV:Ks1atdp1fsPAcVSiXuPAcV
TLSH
T1E5359E112EF02530E0F38F3EC5F71B299A7AB8641E515E8F019162689D56932DE70FEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppReadiness%4Admin.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppReadiness%4Admin.evtx.FileSlack
Size 896KB
SHA256 4a4f357251593beafeaadb6b1f1e5a40fdef54774743f627cf2552707b1d6b9f
MD5 6ae0940349dc24349bc0437306ac3fb1
SHA1 ea3cc0ef608ed4a4316cf051e670296238b1bb6b
SHA512 ae1954830eda164282abeee37095d54d338f0061c46172e9de26dbf1ba0afa55a12136b8c06153ec55edb5458a72098c202efe00077ccbafc950e043d43e81a7
SSDEEP 6144:rEwfWdApqPnn0OGxZM3D+9fSSFSSSS5SSSLSSSGt+ZwwwGV/2jPPPhtHNIq:rEwfWdrn0OuZYD+9Xq
TLSH
T11415AC1297EA8618F1F37B746EB912645E72BCD6AC39D65C1280905D2CF1FA08DB0B73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppXDeployment%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeployment%4Operational.evtx
Size 68KB
SHA256 2ef2cc75d5bef184dbbdf07ffdff93a15b8db5ce50c5efb20528d6c6fe1f6022
MD5 089badc150d06ed13f8ba39fba2b04e6
SHA1 c8f99e236895cdaf4fe6b38a6952f8eb7ff0c3ce
SHA512 8e6e3818e8f816b1ca8309d7ec00f829b08910de8400c2f2d1e503ff12aa102b335f1391eb971a8adb576a084408213b04df32344f59ef3de78b46d69acb5e8e
SSDEEP 384:XdhBV2zVjv8BD1cpBVIKVquVBAD1cpmVq9VSVqEVyVqxVRVqGV8VqfVF+Vq9VTVf:Nm0BVxfSRUys1cHkXh
TLSH
T14D6355256BF00715F1F2CB3585F22AA76A3B78E59D41E7CD10AA930D0826E529C64F3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppXDeploymentServer%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx
Size 2.1MB
SHA256 64249785fd47942272e4b197772b1649f30a9784abd5379f46aa18f16e510eb5
MD5 aab64a23c3ab45d0bb2684b3d7b0468b
SHA1 97cf930b514c8c39e1068291e8042d897a5b207f
SHA512 3eea129833640c849a29b363757a3e7bf6c29a9059e4f270ee2da41d14ed3b5593fa0d9b0576ea689b0203c7b3f99302a5a5b6c16d82403b98e6dcd8e9bb362b
SSDEEP 6144:ZHjUkpqc/yE57b7+RJUMvulOGvoal8AXIuH/LT/:ka+AYuH/X/
TLSH
T1C7A5781237F81628F1F28F3585F36B261A7FB99549518ACE0165B24C0C67E219EB0F7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Operational.evtx.FileSlack
Size 896KB
SHA256 2f598e091622e0ba8c4bad315acd5289fcf5885b5de61a56e5ffdd24f872e311
MD5 3f05253f6698fdec9c8b1fae2d68bc50
SHA1 b27d93be92add575892bbe6f7439f83965fc3137
SHA512 62b265489e86902b8df4679f8a312de09653d6dbbaeeee765c2db972b416c068b565b51113cf0f7815f1028c97e9052f19580d1390db2601324d983a265b3a3d
SSDEEP 1536:CxWVOm3pShvt5sNgLWvpKg1U81cemi+g1U81cjTt0heKIJ+O1U81cJ/:2Wc0A/sN+mKwjcemi7jcjTt79jcJ/
TLSH
T11515974962D4C5EBE06735B1CC5A7BF001902EB9EE62DE6FBD047E03B931789507292E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppXDeploymentServer%4Restricted.evtx
Size 68KB
SHA256 e17a40ea684ff74c4e91e0f46f0f6edd8a5c26c6bed79f2ea4793c8cdd17221a
MD5 9c66e7a330000a67fb4ca3d6c6186b8e
SHA1 0843e000dc1e0882b22bf42a34d63988736bc656
SHA512 88b80674fd6cdd93f4d69a32eee2deb5e997fe5909e42705cf06dd5795d809925020da7e0607df87b728a1c77200160547dfd12dccea54b79a01f048ba34f6c5
SSDEEP 384:wBho9m8bp8J9mD8x9mD8Ra9mD8z9mD8U9mD8S9mD8Z9mD8:YiN77qVZCYf
TLSH
T14B63BB26BAF82718F2B34B3999F757274A2E78565D24C98E0129634D0C23F10DE72F76
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Compatibility-Troubleshooter.evtx
Size 68KB
SHA256 f5f9e97a6b1ec8d46a9bd5b9d4ccae96521b85517b0337b248814d2e974a968b
MD5 1f83dae35478669aef357fe90594264a
SHA1 c70bfff0a559af8cb76ad80a504dd55bd6cc484d
SHA512 94cee3ba110b815812fbb1339e54cf4b7b2942b0145315019d2a5acee75a90326a6bb0e74388ff5545afe23f85856c1404bf35698b5bdd6fdfe2be6645ce84d5
SSDEEP 3:MgAWl1l0c5MfaltpRTtPl2tVRl/l:Mk8IMijRM
TLSH
T16563020476099812D1080A3944878B81BF70FD501F7A9753A960363CCD753421952F59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Application-Experience%4Program-Telemetry.evtx
Size 68KB
SHA256 2ec6d21ed1f7710cb66ad2f9ea18d44e76a40fdfffa654dd5b011e9bb4c62b28
MD5 a93eb99d4822fa38968e988f25be3782
SHA1 4bc1f556c7c8b3aab07ac2507cc0048c2821e370
SHA512 7542f81916669d922d28d4a861f50ec691db9bd8ea5af67ef3eeea0a14d8a26e308ff3e297353557433d04de9fe79c160b7248ce2dd2504d6bb8e819053c13a2
SSDEEP 384:Tszh+93bKA+4j93G93o93R93o93293a93V93qY93l93193f93i93D93h:ua
TLSH
T19B6357126BFD9638F5E38B3949B75B256D7FBC240A00995F1068A25C0C77A648E70FB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-AppxPackaging%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-AppxPackaging%4Operational.evtx
Size 68KB
SHA256 aa80c4224ec8a53c02a6a4c4abdc422a2b426f0c142208682a36e253988a7ae1
MD5 7d13ef8c2fa7ad0fab796c83e340a219
SHA1 a4554f6e6d36e7c7eb7d25e280f3257cb09d7ffe
SHA512 975ebcaa4290d1e70db45f02bac8e8d518abd4cd969ef7342d283d502c9b98b2b2e100390bd1ded2e89effb3b69ad450623eca1e1abef8b353923b8038c6b12b
SSDEEP 384:yzh7FQFpMRFe/FZFVFpJFpfFpUFpSGpFGFpSFB7FkF:8mM6fNbKSGYu
TLSH
T15A6357023BF51128F1F38BBD45F71B155E3FFC614A428A4E22B4A2581D5BA628E70F67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Audio%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4Operational.evtx
Size 1.0MB
SHA256 89634034f24350205abdb0cb57789a33d45d3ef28705d3aa54b037ddd9f996e2
MD5 a054d1a929d00c7248c4ec44429a6cbc
SHA1 caa24443bfc29a47cf9d2e7c039426d2a37df3cc
SHA512 ea22c9ff2108a69b947a9794f0c3914be46c428bdd27c7e428fbae4604819d947d7085ac7935a90f93b76c2d185bda5e28dee9dcbbe3627fa6fc67eac523e5f7
SSDEEP 768:ei580WrToMPNi98U4T++BD2+WAZlBgIB1ZsVlPs9VCna+UNss+QGunz8A+GXKGPf:e/VVNOT
TLSH
T1DE2589241AF45739E1F3CB39C0E7072B2D37B9458D825BAF10A4D3949C15A729FA0FA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Audio%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4Operational.evtx.FileSlack
Size 896KB
SHA256 0b4519b6da20c81c78fb303ead8456e183a0970920a43fdee47828136d3e3d7d
MD5 56ec45b4daac9493fc61c74f7569d45b
SHA1 95b6b33f4aef72bb8d7a65d53dd028e37a38a570
SHA512 e5d7ca67d2238dfe4bfd475b75b69c643989a36c61f2125377266e3bbe87aa8f0fc83c3d19fee89f2d27f0ac55544111ae06a316a067ccd1552024b7fc6e899b
SSDEEP 6144:KJ+MryE6XBeWFSnM9z2yAXwajViEBOr4Eym:k+5E6XS5kt
TLSH
T1CB153912A3FE5608F6F37B54AE3916254E3ABE96AC3DD11C1290D05D29F1FA48CA0773
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Audio%4PlaybackManager.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Audio%4PlaybackManager.evtx
Size 68KB
SHA256 86c1c2821afb4ef1232c0097a8091d4841afa471a5e185189b1a533b3fb11378
MD5 4080c824745bc7014aee4278d766b707
SHA1 a5adb31057372e4c7fd9df7ee3ed5a66265e13b7
SHA512 80e23b2f876a3fb06e9eece20d0c273ea4dad42ebc92c5631b1da726f1c802579ed4c194a228a290eab17184d6e8a1e96a6ce9a7e363b7336370473e92a75b44
SSDEEP 96:EyKNVaO8moBjdjlhaYCMjdjlhZ8jdjlh7jjdjlh:Ey8V78pqbMpJ8prjp
TLSH
T1F163A801AFF50228F1F38F7C4AB657391937B8654D00D79F2164A12C4D67AA09FB0FA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Biometrics%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Biometrics%4Operational.evtx
Size 68KB
SHA256 201e3bce8f155c3c512758bfe8530f3858932e8fc06cb198d9abaf3ee699aff7
MD5 208847bb225648867b0539f8169c5910
SHA1 d20d0db7dfbd10df153b7f0ae224579173f555e0
SHA512 2be1390e1f666f889df72fe63f4aea3166a5e200d7cc6d97db8d2d17b2ddcb190dcadbf344fde4d75eff96c16428a9cb775109bb63091ea54b3f13e5206fabd1
SSDEEP 96:P9zKNVaO8moYJPrrc1yrAL4jjKv+rvjcRr:P9z8V7fJjrc1yrrqv+rva
TLSH
T1AC63F002ABF94A19F0F3CF7AD9BA8324187AB9141D11D57F3214226C1D72A51DFB0B67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Bits-Client%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx
Size 1.0MB
SHA256 7ec2efd114230b6a5cb675afbb3f7e25d4bd30ee4038552cb15efb2985633d69
MD5 1ab03781a38c4c255cd71c4c1b89f18a
SHA1 a18966092815acfe08076864658de4a88bc46b4c
SHA512 bf47a7cda9269afe59c80fba6a228fccbe3b48f416c4f97d6f09be90eb3e38bc4280402d56b94a8d16ec0dad4aaf7eee8888be56badd66b56dc403281c884ae3
SSDEEP 1536:FunwZ4k+Bfo+f9ZvJyxJtUkTWG1iOZvJyxJ:FunwZ49BA+VvCtUkTxvC
TLSH
T1DA25EF112BFC1539F1F39F3998F24B205A3ABD256E81DE1E1190521C4D66E219FB0FAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Bits-Client%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Bits-Client%4Operational.evtx.FileSlack
Size 896KB
SHA256 9baac163feb8cf9622037ec590ffe2291f6e0a8707f37353fea2efefbb4b2049
MD5 8cecb59a66369e45817dd77e79a7418b
SHA1 42943b499f725f1f32f78fa0486ee93a083e2fe0
SHA512 aea5862f106c600daab3b3dd199fc962df3d6999ec027d25be10edee804b4136301359697dab4d259fcd9a9cd9682b9c0efbcf1e209467f54e6b9048762d2954
SSDEEP 3072:57S7Gr20mDZ8kbLzx9FwnUWoh6CVXOJsUCVXOJs+CViY6cCViY6n0Da0eQWeQfZP:ESzlwBH1huPo
TLSH
T14D15F21367FA0204F5F37F38A97A16244E3BBD96AC38D52D0198145E9BB3E518C61BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-CloudRestoreLauncher%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-CloudRestoreLauncher%4Operational.evtx
Size 68KB
SHA256 18d700b59ffb6e0e55490a4c79c671ccfac504387c5aaa19888c71b6111f1670
MD5 fb7f0f50662434f0a43bd5a781f1ebcd
SHA1 55d3bb123a1b5d7a5728cc2ed21e19c87b71e80b
SHA512 331eb8af8f522fdfdffeecbb75c0e7d917589418958955b526fe69d54c1d42c22f4f8c24376029d387f9229c49ccb178764880ebeabad4935b012c3cfb471e55
SSDEEP 384:8zhK9DT9D99Do9DN9Dg9DK9Df9D49DJ9Du9DL9Di9D79Db9Dq9Da9Dr9DN9D49DK:6
TLSH
T17F637A2217F5F128F5F28F3994B70B18AA3BFA095FE1965E0210D3458C697219FB0B97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-CodeIntegrity%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx
Size 1.0MB
SHA256 1c9b86303c69e817a92978daedb62b5b699ad988b8c99a507c2a43cdb17df899
MD5 39f83873a74eea56f31e50bf57e43bf4
SHA1 01d4449ebf844471dc342eb5e0867c42b2c93ac9
SHA512 250e2c42572d501945e7f0404b9f9cd97c622bbb6ecfe161e5988764e8e20bbe0a2addf252d9e7088f5c6140dbc36706ecfbb454c7e1b223942bf80c47d15af1
SSDEEP 3072:8s/POwKwrAXaG1hEgzsjPEjq61hEgzsjPEj:or
TLSH
T19C258A012BF80539F0E38F3984B30B195A7BB9644F59D98E1220725C5D5AEB0DFB4BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-CodeIntegrity%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-CodeIntegrity%4Operational.evtx.FileSlack
Size 832KB
SHA256 d92700ca11a1b2df97aeb7a4562a764c2b1bdf5f669a487a2c76a8a5875442e1
MD5 3592c176e9b8072b1c177ed56504877d
SHA1 a20c30807be75fd8927b0fe61f7d6e5f816ecbf0
SHA512 3904fe0dedad65060d567a4d0ba21d52266787c1247bb57eae68f7ee5383598480b06126869479a9687b4629dd6690f56d95ae83d3d143eac1c91f62e0f1788b
SSDEEP 6144:K7SeHr+pMG0p4FcRZ5gtPqIdogUVTGOew7ccoCIsrBdjbDocu:MS0r+iTfRgPQgUVqMccoCBjE
TLSH
T1F505E912B4CA382DC033B038275D9BB1E703BF0541A9CA5945D32D94AEC7DE72FB59A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Crypto-DPAPI%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-DPAPI%4Operational.evtx
Size 68KB
SHA256 c8b4e6acb83ddc034695e686dc9ebb8357217e549c7328dc5df3a3eba28ea844
MD5 b39d4a379972f917b28836ff9c679391
SHA1 8bac17a6668d332fa6e1a50f7c915280f62989e0
SHA512 3816edb092e1b24226a723fce554a024bf5688767605be25105edab6762e5d592e80004f39e9719feb77331d29f2da82ef1eabcebf99ed9214b7979b32f3129b
SSDEEP 768:nsBwdoW8HPQollBpQ01hMEhRJ+s8EcYRlNJoMRJLLLSaTfGWSa:
TLSH
T187638A4327FC4634E8E3CB76862B2B141A7BF524CB538A171144A15C4C79D71AFB8BEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Crypto-NCrypt%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Crypto-NCrypt%4Operational.evtx
Size 68KB
SHA256 b8f7f7ed8f2d4f34e3294a2f3469e1f155d7a3b07e56101f9b5c9005b5e4bf3b
MD5 1d35136a480e8fc1acd00ddc1050239d
SHA1 53e967feeb2c1f36c4eb3417d32b16b3e167d4eb
SHA512 0e090634fb5776dbb304b706c6065dac5760dd39d5688e2716ba052b65dfb8c5e10a1ce773754f3a842f1814b0a34f5e4d9d80fcf922b09f140d604ff0994156
SSDEEP 384:HDhxYJhY39eQH9YmAs9YN9Yw9YDzAYEYAYKYzqYVt9YTD9YnYYVB9Y4j9YN9YFYn:jfrNd8AnB
TLSH
T1616318162BF94535F1F3DB7A88334B24297AF4649B62DE4F1210725C8C69B214FB0B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Admin.evtx
Size 68KB
SHA256 bc034e88e6ba335f9b77863cd8e68cc93118b5658da01ca0eaeedbbe0a5f24d0
MD5 c424d3b4dea4c24c45360528f032fab5
SHA1 eba2ea3184e5c21bc24490e6f4e43d604dd28801
SHA512 ba093414dac2abb4ff92590f344ae4befb2d7d5e41b6681757a03f75a94cd9ece0080d064083bf419594abf1d8d0bd004f3e5cb85b2dbc9ba5eee2a267a525f5
SSDEEP 384:xvhVCkCG5CwCfC0CwCsC1CPCFbYCFmyCDVfqCDewCtXfZCFuKCD2CCDtQCtwfCXh:BRBnR
TLSH
T1716324285BFE1668F0F78F7985760A415CBABD552E40AC8F01B062984923F61ED70F7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider%4Operational.evtx
Size 68KB
SHA256 33262f5ca018ee09371d3b0cb352d63ef81624878a909145d76d555669ef033a
MD5 9cb1dbfa1be5597190e7943c5d4b0b9e
SHA1 8bcb2d8d37150a197dca1c99af2efe04e035414a
SHA512 f692852e63efffd8377c28acb7fda067814743ed3cfa66794e776be2d4aa954f52b1d4af8a75a601535f5728892e55da70e34858c23de7ce86cad98ab29e4cd0
SSDEEP 384:/wh0CyCUCSCmC+lC+C1C+mC+1C6UC+sC+SCiFCi8C4KC4bCgQ1CiFCi8Cg:4VC
TLSH
T1E9634255A7FE1A68F0F78B3989760A1019BABD552F40ED8F11B061A84833E64ED70F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-DeviceSetupManager%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx
Size 1.0MB
SHA256 8af152f940b1a89aeafa1b77c8b1682466a7222cc7a6952dba4f704401445cb5
MD5 cb2f9da3e59fa8ca28594e49b51bd236
SHA1 60514bf9ee2fab456861e4f25c11b1fb8f911c23
SHA512 1b361f9395b3f1d570848d8d9030da1c632ff76ea44738ffa3aa50199842910c71512ff0fc715c75dbe25df168881f5bdff79a3367d1e72fe6aede32c34978f0
SSDEEP 768:cDKuXSHllp6v0ZMgRy31ADYrvpooEkXBy/XSW5DJ7L9TbzpqZZjPOjP:jTqkUvMkXBy/XNDJ7L93zpe5POjP
TLSH
T1192566012AF45A29F1F3CB7A87B317252A37FC6419969A4F1030A1589C17DB54EB0BFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-DeviceSetupManager%4Admin.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-DeviceSetupManager%4Admin.evtx.FileSlack
Size 704KB
SHA256 9494179ff0003964f35439433d9e6eb7c59735c133944c144d54e46a1de03836
MD5 99a75af62859be3c48adb2e7d0cfc230
SHA1 944b35aaa4785d7daf5a25c473e1d6d4595833fd
SHA512 bf87236c2bf25e8d7c3728780eaf0e952232bd4e5518f21b6e846f628ca142a707e19dc3fd5ee5138650ef3247e975b4e7b76ed4f4bab4f63aea3c50db0fe3d3
SSDEEP 6144:kqoj//aVYnATrV2iw5R+SCmSc8P7oSUZVu:jS//KxFUkSbE4u
TLSH
T19DE4EE0079D4C0E8EAB29E311EF1CA9652777E12ED534A0FB684730F6DBB782D11B925
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Dhcpv6-Client%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Dhcpv6-Client%4Admin.evtx
Size 68KB
SHA256 395cf6f60dbe0ae6fb03e73361bf4c3f2e67d2e1de70084580ceedd849cf5577
MD5 c1e679cdfe8935ef04b5d9f71fcb0501
SHA1 77b29c1751dc2e7c0a141870da19f83827e7e9a4
SHA512 f10214e6895e2047d3006da23df6069daadafb534cd6036235b50495a14c6274cf81b4d280231338746ddae1e06973a47017be8c687472c35a00e56dbdeb6cd1
SSDEEP 48:MdonWyWrP+MZQNRBEZWTENO4bpB2oaSltamLmncpQUSDl0BXYty:udKNVaO8moTtamLmncpQUSDoYty
TLSH
T19763DD029BD9451EF4E28BBE4A7657352932F9505F00C19F7260B22C5C66E50DFE0BA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Diagnosis-PCW%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Diagnosis-PCW%4Operational.evtx
Size 68KB
SHA256 2a6d1fbfee2bf84320454fccb9449f1e0992971354b9985cf3c82a4c94b667a9
MD5 ce838875da0fb2858e629413bd81b2bb
SHA1 74b809b90cfd9b0b69aa358c24d8640899e2a6f1
SHA512 edf7c38c4db552db709b6fb2ff016a03a24fcbad5947554318810effbdf51d9b3ffc3be81f9c06efd5bc3e2b35b6c98fdcd8c055aa386dd7c93181af74bce76f
SSDEEP 384:69ch35M59K5L5V515P5D585YV5z5a5V5m5V5y5e5U5356585G5l5E5f5R5K5T55t:0cs5/hJ
TLSH
T1276325021AFD4628F4F3CF3885AB1B24097BFA640ED65E4A12606164C869979DF70FF7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-GroupPolicy%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-GroupPolicy%4Operational.evtx
Size 1.1MB
SHA256 ab1f5fccca37bf496a1d5c075bd4acbefa10cd91099e5eb7e78cd698f00b34d0
MD5 9b96cd238f3affdecf68db6ca4bb2a8a
SHA1 612544a4ab5c18c0099dfffb348c57dfa4b4daa4
SHA512 f79c217d1f20905eb8372311061901ad0e6c3c74c0d0b8d54b1cb6b10c74d5b5a195953e039e340bc2268c7fd704ef5f9184327010f27ffb3986542e3307a578
SSDEEP 1536:YS/ZlvueUz1AIKsKlHv9iKVKKXRpKTdAGMufc8AMPbl9U4+C3Gr:3zuee5OzmrxwM2r
TLSH
T15F357C033BF81A25F1F34B3D84670F342F7BAA581B469E9B2050A1589C699259FB07F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-Boot%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Boot%4Operational.evtx
Size 68KB
SHA256 8556b8386c11b780684029ae293d5bbe9ac21c77e28078ae6816d8ecc37780b4
MD5 177c6433f1888dfd207f56fe061bfe4e
SHA1 16914fcd498c19c6f0b57344846bc2d822d1b32d
SHA512 4fe2b63299411526b2be726e74854e880fa5de698fd912e3bda662c6674632a992127a6aa3f93c93a50b08a1823128d15d0f5a7feea2f3f73324126df1a5ec88
SSDEEP 384:MjhcDhDDmuDcD9UDdDLDrD9D/DHDfDvD9DJDxDoTDpQDMZDDeDCDoDQDQDaDoDcE:euebjNZk
TLSH
T1D763284667F52938F0E38B3688F317382A7EE9141D815E6F2190626C4D759329FB0BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-Cache%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-Cache%4Operational.evtx
Size 68KB
SHA256 7c1d27908755dcb3de63ef0ab09c99f858379104d797ac34b1f9f78a4e229e6b
MD5 6c34c0c920094dd90fd96ed2f20910b7
SHA1 33da226a5b13952d6b1a4eb09858bad019d7b514
SHA512 6186c1b1449c9188802bee098424ec965e8f7d578888d1a9ddb31417fed7398a7f86b83df1b80ba410144f6822f29f9e612eb3ee168aa23ed141e9af78b99dae
SSDEEP 384:13huO21OYLODgO0cOYL7OYOYMODXOYoOlQOY0ODl6rOYJOl/pOY+ODzOYZgOlYp:h7zkMxO2rIuy
TLSH
T14363A40227F80438F0F38B7A64B74B141E7FF9A48A814F5F6120615E9CA99758F71FA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-PnP%4Configuration.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-PnP%4Configuration.evtx
Size 1.0MB
SHA256 9891ca29f924446126e6ba04cd6c8224265fb64f580506a5502f19549fb2ffaa
MD5 a6d4ab49e13c2a86caae599c17895a9b
SHA1 16582ea0369fba8afba91c5967509ae05ef5cc56
SHA512 a42d7685bcea3cd5da48ed20ead0f28044ae1f3ab62f9382a9b9781ab969d12aa15e7a67aaa241efe9652e6fdcf7ef60baf3c270e00ef5d1ca7f7683c820f192
SSDEEP 768:dIWAnvD52sagvE6ZI8+hSq4rG7YDlxJ61UEfZerkSjZermSkvE6ZI8+hSq4rG7YD:2WAnvDksagvETXEEivETX
TLSH
T1F825992123F44228F2F38B7685F30B17693EFC915B425ACF2050A3455D66A619F72BBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-PnP%4Configuration.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-PnP%4Configuration.evtx.FileSlack
Size 896KB
SHA256 8d3eb71c7460c3510a5140bddf5c87dbc4f8b441964e6da07c78727dcc3141be
MD5 e5ab1a1ec632a55b0f6e2d645c6b24c5
SHA1 857c73f39256cb3e006b3e1c7746588934677c07
SHA512 7780dcff0e539120229dfad082f43a49474bde907c4b5c9fa355ae5b2fb5a77076bb9766a62f64cab96b9c17ac9e92be72e7dbfcea861d84e4bebdd2d9f5e018
SSDEEP 3072:Wxu5Yo1CCpr2jUCp6QfsNcspHoWRujn28/IYshWayvzTOhRVHNILg6DGBV/qs21N:Wwp1CFUCtkuspbRuT28vayvW1HNCGTIz
TLSH
T1AD154201BF91DAC6F1624A725CB68F882936BE815D71590B3BD4730F9DFEBC0EA12254
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-WHEA%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx
Size 1.1MB
SHA256 16f0a2d841307c8bbb26e966ba1632b237fdd4de28b836b2cfed1b1aa378867c
MD5 45f8d33e14b914c23cbc775b6c1c24bb
SHA1 61d4518434f7f99cbc3e5cc6b27c7c424868febc
SHA512 9dc50fb2646b8db3a82082279f77eeaab4d149f4fe0e0c2cd72d86eb828f1dcb2df16e724b80b0c3e9b58c39effa16de4b13a2d04bd637595115b9d401ea0df3
SSDEEP 768:F9YmQ6I0aMGLOULO2Nk42bEC+APhcA8puQTQwMNtz:fYmK0aMGKUKlbqhMv
TLSH
T1FA35DE0177D04D22E4A2473588A3D7A0257DBE448E42560B3A9C732D7C7BD7CDF6BAA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Kernel-WHEA%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Kernel-WHEA%4Operational.evtx.FileSlack
Size 754KB
SHA256 de54ca556eaa7c729a30c1494da336436ee584ce766ad1a78fcfa4f590bd0e44
MD5 ea9dd37ffa6fdae1ce8987f1145a18cc
SHA1 640ab6f59d0e213d0e6ba2bfe1b2e166437ae20a
SHA512 db00900329cc0bc26a103ddceac38852f524d001e1be8727793bf15fb11ae019715c3a0e159316a4eb2e0335366f78a9cfb8db2dbd26f089063d99f64bb21ff8
SSDEEP 3072:+I55McqvI+T+04pJE2zYbDIkrbf57CqqEpe4YVetyR1ofIQgY0MdohQ:952cqgRjz4D/lW1EpFgOeQ
TLSH
T102F47D036F8965DFFD81A72BA9872F71E36C94DA9830ED5378B0B0E9D9158842435ECC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Known Folders API Service.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Known Folders API Service.evtx
Size 68KB
SHA256 cc32b1b9d2fa42ed42b1ec335ec18c282c34813a5ded16f37f6bb633e25f93ee
MD5 13fd814a2a244513f862afddc0f8ed7a
SHA1 3d1c309b801ab2f8f85305588a9e5dcbea68c0c5
SHA512 bf3111d9fde39372d7177c326154f12e7a75e384f8e565c4c5980372dfd4bfdf8c0bc70d26afa4440d2b9fabc0a2c8c8be2944cd85290ece9d5f25cc9f7ba769
SSDEEP 768:Pji737L8YipkOK59yZwqkVasNenm1GyAVX2ia2gVPW6+e8VXiquOsVT+:Gap
TLSH
T161639C2113FA4968F2F38F3A84B61B146E77B8640F519B4F4294628C4D29EB5DE317E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-LiveId%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-LiveId%4Operational.evtx
Size 1.0MB
SHA256 e9649b9d819645a2f4401539379f25512472395bf42a11d216c5b63d6d67b7e3
MD5 30fa655f676318196135fd29cad43217
SHA1 74320e39f41fc8f02a957331fdca71ecb6448099
SHA512 6bef1fee1a25c35a8081feafa06c80e9abf16b9f0d054cfe0849b221bd9429e791728433052de0a339f98089b72c18c04bf34e9c5ce21f344f23267e2e0355b4
SSDEEP 768:MSnMGFNWwzMUGe4ZMj8r8cul7YLCqOREBF5F7Fvb8cul7YLC:lMOzMUGlZMW8RcwEZ8Rc
TLSH
T14A25C80EDDDC8801F3A3CF389AF3AF8825F5B75A84D9655E26A0510DFD40CE88165BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-LiveId%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-LiveId%4Operational.evtx.FileSlack
Size 832KB
SHA256 da777936fc7f7a871c10ee1cc911dbb040eef5f036717225eaa9551ff897b219
MD5 fd8e288fa52f46725d9ac183a955674b
SHA1 2cc7ce7da2383f9fc1912cd01226a69da0dd5cbb
SHA512 433f726225040835ef7eb4902b9cd2aefc99e02ec7fd4afbdf72e0c2188b1bc818e088a8634565c36b801db071a6636f4c5670e778b61059258fc3f71bc0fab4
SSDEEP 6144:w4LPZthi8JCJ1wRX49MAd5MtI8BWwE62fVT3R3m:wCPZvbXeOG62fF3R3m
TLSH
T15005B910BFD4E2C0F2B24A325DB6CF411675FD226D228A4B2390334E9EFAA54E577716
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-NCSI%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-NCSI%4Operational.evtx
Size 68KB
SHA256 0e17619ca709cd3056d9651064e4673554b8d27226410c436fa1b7d858b38a29
MD5 d75300e0789c4b5ec8d6c89c84c85407
SHA1 12fa2be9115bf373ef201da72890b511907b69ae
SHA512 2b9e17ec966c7d9cbb4daeccbe9c6fb04ba830f366b3ec39c06845b0b36c213ee04a7ba6ab015d7ba02b17e2f10d2b36e92a5846a58b9ef406e19bca1edc0667
SSDEEP 384:XjhDXMj1viMoFMjDMBnMdJMkJM2YMb7MQrMYPMVEMQLMf5MCGMOLMO2MrHM27MYE:zQ1
TLSH
T190636D0366FD0029E5F28B3EC4B30F24563EF6781A826F5B21547279DC166296F70BE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-NetworkProfile%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx
Size 1.0MB
SHA256 72ec3006f1292926c907716726c1f11b272c25e505e15d17936f299cfe81f718
MD5 526dd8678097418c70be2c0f74825b34
SHA1 e8d3571533bf13eb22845c32c9787b915b2cd988
SHA512 7d920fc1cc54b8f01aaf57d289cad486858bedc8a2b399419362d13c8c31892caa99a14600a1e751b6ef0bebf7c01e2f404f88e4acfed0cdfe26bf817e4149ab
SSDEEP 768:fpaeOLuSslxVIDZBdvpWqKZSBFtryn8yHrUVL5fv5jNpuG97i6po4B+1wF9q9RCq:z2N6l
TLSH
T1DF25150317F50634F1E38B3998F75F24367BFA241A829B9F145470A88C669758FA0BDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-NetworkProfile%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-NetworkProfile%4Operational.evtx.FileSlack
Size 947KB
SHA256 a0b758d76be5d7eaf6f6b02bc0378f54edcebd68cfe5ca88d4f577eb3263b882
MD5 3b924ed2cfe4a22d82d8c53e82fb150a
SHA1 73769a5f8033a9874fea4f3ef84cec7be6b75d3f
SHA512 55f6b3c2ec6dd72a1eda0f0c5dff7c7b09c9af92c90c82b1029e373ae214b309b3a7ca2a23b629c31fcbb16fe8fbdb8acb423efb43aa81f8ef3f467dd30cd0b7
SSDEEP 12288:3Ix2FsSyFcG/2EW5xwipJTFE/Y4gSStG2F4PV5YYQw:y2FsjZ/SRFeStG2F4PVQw
TLSH
T11225080127F88B19F6BB1B35A8B701218A75F942A939C75F788C515E1FB2B50CD227B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Ntfs%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4Operational.evtx
Size 1.1MB
SHA256 d1a7390067e97920cb1ef4d3a14410d30f30f128dc751d5c67a1f4c3f17bc640
MD5 45bd3df96a400899f2819124667d0086
SHA1 7c9c478f8a44a48966242917015cf5be5cc10458
SHA512 2a54686b389f713606dae397dd6894bc3ae14970645a3e8ab3e3d35ea1e57cfac1851a4036303483dd3e469c6df23f3d605d935b2423e2f998778c2d6ec42e13
SSDEEP 1536:haAtnp56BQ+Z86n0SunnJ1YKpwbjny+fDcjv7i7slqyvVFnrxOjv7i7slqy:h3o
TLSH
T12835EE051EF91529D2F78B79C0F3032B173BBA101E969E8F10D063994D96A15DFB0BEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Ntfs%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4Operational.evtx.FileSlack
Size 704KB
SHA256 b9a525f8a17d5f2e992019d3bfa44f41861c8ede8514ef56e2aaa57b4f3f402b
MD5 7d506c6894bf631a4068fdfbdf6de476
SHA1 0206aeefc49797e5781f287dd3d0762bf0546574
SHA512 c66d16ebab42df0d9e577fb7687511da8a4f0c2af9e6e90454adbc6358f83a3a7f42f023e21da212522853f3a26a83e5a0d87e79fc7cd704a629dd1deb47a28e
SSDEEP 12288:hLjU3X5ZJreMV9a2AythQyG1xy65Eajnh5MAbo3ukKwiLmDh2X2s3qx0xT4:T4
TLSH
T138E4F41479F4965AE221A6B1AFD7C68AE336F072ED120F3F1291434F0F999019A47E3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Ntfs%4WHC.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Ntfs%4WHC.evtx
Size 68KB
SHA256 2e279a48f799d628475dda5ae701ee2aea6e6a56ebdb0635ae197371b6499992
MD5 e997729dbda8f112dcde11f099d8be71
SHA1 c279c5f00ce92066175599b8ce0684f871791f95
SHA512 3a8c9726e042b2e424a346d743fdeb22e1f74bd39e619a72dce73f73ca43a67f9764dee986861f466d3a5ed5db0d788b3fb968188bad1d6176d950920842d46d
SSDEEP 384:rChkIIJITIpIKC3I7I0IHIrIJhIfIAIDI5nIqIrIgIwg4I/IjI5IKIB9IKdT5CkY:+y3elTcnxkaT
TLSH
T1DA6327421EEC2408F1F79B70AA7A51B93A32797A9F10DA2F7015239DA871F41CFA1717
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-PCI%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-PCI%4Operational.evtx
Size 1.0MB
SHA256 801b09ca2bc16c2593c32602ca89b1e684ac3b91d05db8bb42adc8d0777f7817
MD5 7420265008c48bcf64013e775ae6a1fd
SHA1 23e63392428ad6a2f145c029df89dbf0a7bd3896
SHA512 a11026d4c6d7e65d5249f66ecacb75f661d66c6d57ad0a6ea4a4b29e03c480e5d024221c00923b05d2104a9fda190df414098553a22873646a6c8deefdda3ccc
SSDEEP 768:Eue4yRXSoPd3dqbQXnxwIWjlc1UV2iuU/91cTMsx971AY3xOUiwhUya53sxTcUsW:E7lajjiMd
TLSH
T1812568023BFA6118E1F2AF3482E30B271776F9685BA387475254939D9C525628F70FE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-PCI%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-PCI%4Operational.evtx.FileSlack
Size 768KB
SHA256 391fec3be08c6654b383eb0bfa546fef08bc8256292ce610a679b48218a6eee7
MD5 9822360394cf63e2ec4c1effc86321d5
SHA1 d7affb83a4661e617fdfac1a51dfe25db80ab46c
SHA512 c638949d7e610068574221f9c4c188cd7df114dc4dcd77caa262bfbc163991fe115dace14049548bbf05c377d22398f21bd8d93af06b2924274e6231af4e5340
SSDEEP 3072:E9d3R0YTke1WwhzQoWyLV8IYiZpq0xuD2X4Zw79qiZGVkMtcpliHkfb:2Llv
TLSH
T1C4F49C295DF91233B1B2CBA5DBF88467F955B8E7B9045E6C50C307490793B02A8D3A3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Partition%4Diagnostic.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Partition%4Diagnostic.evtx
Size 1.1MB
SHA256 e85ff210f4f3296835114b572f33390ddd199406d0f9a45b78c196ebd864509a
MD5 62f1b56c463f99395df619c718e17f31
SHA1 f39b8ac1069b0eb38da537c339ff8be79831c3ff
SHA512 9333b44743ab3ce57ccb84f3da2984713076ea908b2d156e43b6e01f3ba9c51075e0c9a10e45fb5b4f298d88a87b45ed54ea9224e53de928c2113c86278a6a64
SSDEEP 768:kP1n8zfFFMw1z4131K1K1y1i1B1Z1r1je1Y1/1z1K1D1L1j1D1j1G1c/1Nbu1KSU:WWzfScAKt
TLSH
T19035640617A8272DE262C730C6FB4325663F7B585FA1B54F308C73581BA264DAF60BE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Partition%4Diagnostic.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Partition%4Diagnostic.evtx.FileSlack
Size 960KB
SHA256 0a574cb71cfd9911cd8311f202b1c3bccaa4c3caca8690969fdc3a275873c5bd
MD5 93bb80ec37bde03abcdfe5476c22e872
SHA1 cf241f60cecb5c1dad214ea739df470583b88c6f
SHA512 ad19ade441809790ae30adb8b9e0e23319983e33e8586b0f35eb827694190ed5061bfe56d8976c6491051099bdec7018cf1c353afdd7f9b4bee151249868f3cb
SSDEEP 12288:NbEseyih08w66Blu34SSTEjw4Ee16UNWBm+F83zhgWVil32a5u/bYR+C+bJHKF7l:9Q08wXLuo3i+eJiZ1uDJtgv5
TLSH
T1B525F1A661298B22E32D7271F1EDD35D47F9D46849E30B1E9F7F320A3641AC1EF12A05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Perflib%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Perflib%4Operational.evtx
Size 1.0MB
SHA256 4d2d81f7920558fdc4f90c39deb771752124e406e86499a10c248fee550c0f28
MD5 e9760e6bafb5c6c54d5386261e597b56
SHA1 e944fedea7bba5b7db9971c0ace0a9fca2b32e6c
SHA512 3d4e6527492e50fc91e7793d29c668c8fc25c0abbfecba8e0ab472f72a280c06ffdc258f11ce765aad43b0db35df9f24bcb9be9e8a82fcdefafe5808db32a071
SSDEEP 3072:HMeXYKUUOJkzhQszArDfvTNSpv/u0VoWQ3qsjGl+aPzPz2/uvZewiYDvxSSUmYFh:H5PWXz5
TLSH
T19C259B131BE66434F1F38F7994734B15193AB8241E02EA4FB160D3EC8C9A5659E31FAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-PowerShell%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-PowerShell%4Operational.evtx
Size 12.1MB
SHA256 a90166b6a6b1878de6ae7d720344cff5cf996fcf2c0905d334ae2482f15729ab
MD5 f6b9d42153d61ff82068eaacf4ab899f
SHA1 832f08c63584ac488e13af20ced547ebe9775e0f
SHA512 cb305b646f60ccfce36dcf839be3d7d0e4bd68731dcdeba327604239ee7204abb60a697a147576e2cf9a111ca3bfc25ce41f8342fdcde8adbe63479e8f7e8690
SSDEEP 6144:4UIDb7DbVDbXDbZDbbDb0DbqDbtDbOU1Db/DbHDbXDbFDboDbqDbzDbfwUtqJDbR:46FwvX8
TLSH
T15AD6AF5253FE5654FAF76BB9E97E24640A733CAD5A38C66C109CB04D0FF3A0488A1763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-PowerShell%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-PowerShell%4Operational.evtx.FileSlack
Size 576KB
SHA256 096717b326a9e897ff073d7ef96a231d1d73b2e2dc34178fb1143bad39e3d542
MD5 7312039ea10fda70c6f0c2e53b02dcd1
SHA1 14b5c5f0b456577a0cb4681ef4157f71cac66153
SHA512 528895a1026830fa34298292f5470acbd3997773f8d08ff5732fbb64e9aa32c6db505cec42f71f006df6383e5c699ca8e75bd7d29ddec5d08f83981c223ec384
SSDEEP 3:RRD:LD
MD5 SHA1 SHA512 SSDEEP

Submit Download

Microsoft-Windows-Privacy-Auditing%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Privacy-Auditing%4Operational.evtx
Size 68KB
SHA256 73fc38365eb2372e9fb8cba8464e55dcac6bec0d1f417cc461c5e60623458de0
MD5 bc0d1c685c88626a2e95bc82dd92c845
SHA1 99c4e64f2c39f576ac2b28e0ff37229cad6a17e1
SHA512 0ae7ae51477f2109775d99e2b83e2becdcfaa831db0d4afd2beb6439163100adb117fce64ecd56e754c05efc6b0edda81577793ad82fa562474e819b61564309
SSDEEP 384:8VhXZXlRGzEbw8JzwwfwFYwbXwI+wCkw04wSewDTDwtqwmPhwfJ7wLnwE/M3XD73:w5X1n+WpDus
TLSH
T107638A436BF99618F1F38F3996771B240FB77C080E51C98F1264628D9CA59218EF4BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Provisioning-Diagnostics-Provider%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Provisioning-Diagnostics-Provider%4Admin.evtx
Size 68KB
SHA256 859b6b69eccac0393a190e8d4dd2fd265993799de20d448c5ffd9ac8c9485e12
MD5 09668b2fc0a703f4561aa0edcd0c5e4e
SHA1 3dade42ccd658ed2e60b5f030ec7a627966c6326
SHA512 e42627426f3b2cd762fe98d0412a968c5ab9c78dc9d4b4afc0e877c42c441d415babe4f0acbe907b22d3734f53ecb2c117d4a5546761d160f90934262c449f46
SSDEEP 384:zj8hosjssOjsB1sWEspsHsrsAsUCIsPSsesLscsits7svsmaBs2pXs6zCsuHYsfJ:/8fGaKu
TLSH
T15763200657FE0268F0F68F3C99BA0A6128B7BD45AF419D4F116051594C32E21EEB4FBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-PushNotification-Platform%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Operational.evtx
Size 1.0MB
SHA256 0a16de8e43d2f9a542252751bbc18d23483262320002874708d5ca1700ce8e5a
MD5 d99f91231815690e2188e0d0a80441a7
SHA1 7be857b7a6e997d87eeed8854c677d25934abce9
SHA512 7d93d7857a3ed6be51d12f598f89fd02bdcf886a0b22a867b1abab0d1a59cc5f25d866d705664c49f1e4aa5dbab280575cc3ded194460d9ec777f5e073d76232
SSDEEP 768:GFnuz+DfdgaMwly0yTr0ock4o2gaMwly0yTr0o:yuz+RTRooT
TLSH
T13E25BA035BFD4A28F6F38B3994AB2B64193B7D5D0F41ED5B2300625C58959218FB0BBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-PushNotification-Platform%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-PushNotification-Platform%4Operational.evtx.FileSlack
Size 896KB
SHA256 292fe7d23a2445e7d1d0b1293fef2c2647154e66c9d3fcfcd6e2878a6f3ab14a
MD5 1b3950ba22fb1033f77d53e73374bf97
SHA1 b89e2f66463cb7373b490ed1c6e84cece4a24773
SHA512 2360b51a8b0b4367c66b131d6a7d2a7de135ea704754386734d12cba46866918f482235d81bca115453bd4bb15ad1901c3176454545d8019d13f23b99e4db690
SSDEEP 6144:ksjitSh8kYzwn7RY3lUgeMHhqEiw5akgAZHFCAHF2:FGtSh8kVJgeooEra4ZHFfl2
TLSH
T1CD155741BA51E9C3E1A645B38CE9DFD8492A7E029C31AA1F77C87B4F6EFA5C39503011
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-ReadyBoost%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-ReadyBoost%4Operational.evtx
Size 68KB
SHA256 1b4ae5548a3cc85e27fb1b173cc5774d6cc9b0dfb9f55661250a5b0cdab29505
MD5 59bcec0bca9ba7b3489050bf592934d3
SHA1 1ef474a567811a756a9268ae58deb295a6e8b510
SHA512 d1adaa28518c227c488b6d0986e08675a7845f7c106bd33d5be852effa4c893bba87e68b74f35b653537b79b07d4487b85f6d136e370c3244eaaa3335f6e634a
SSDEEP 192:7Q8V7fV8hAb8A18Ed8b5T3i8hN8eTfU8dT:7bhN8Q8g808py838iM8p
TLSH
T16763EB039FF85824E0B38F7EC0F75734293AB6184E21D5AF2254335D5D26A60EFA07A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Resource-Exhaustion-Detector%4Operational.evtx
Size 68KB
SHA256 2cf50e48266278185b5b1f47a7221bb06091b51be30494fab809d48aaf5e3759
MD5 4efaca149cf9dcd242aeb9513f4b79c6
SHA1 eac2f4adafbbf49f5272be92a83fc01bac8e845e
SHA512 8959e6c618bc5a8162b9919d323909afe2fa8ece66fbdf4d3b8d96b237f12f25bdeb2b511d7e70a2813af79cd5af70ded4a64cfc6f97e697e12c77f12ec7ac66
SSDEEP 384:avhWvPvovCv7vDv+jLIFeyedl64d6yVLS343/kX7RybuL0axOjrwch6YICZ:wFnXVVMXBL0a+
TLSH
T1906301036FEC9909F0B79B74BA7E81692225BD399F10D42F7056635C9CB1F408FA2726
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-SMBServer%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Operational.evtx
Size 1.1MB
SHA256 e82b1d8c65a73e732a7bcd0e727a17d51ec8f141c47a48ede82ec386c3cf17b1
MD5 a75f6a1cbaa32840402be60c86f0a568
SHA1 849033f51092a533b11d470d70ca40dde9594bde
SHA512 555d63e00ba10d14dd08c3d3a8c9bb5e6ca43e509cf39059bced007a1b1e5fb1fdf1fbc3431ed06d89df080ac169580732022061310db222667ae7e308f4ae53
SSDEEP 768:/qMyhwemgbV5vVmbmQzSCJOxhL1JEEBO27lHlriNeZpV+:/qvuYhL1tge
TLSH
T1D8355E0227F46835F5E38F39C0F34B353A7BF85096925A5F1060B1984DAA9B19FB0B97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-SMBServer%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-SMBServer%4Operational.evtx.FileSlack
Size 960KB
SHA256 cd65153d2292e677e80c6dc8b5f2cdd8906813af2cb12c22052bdab325255659
MD5 96899bd0b1eb66990ced49b61c911b11
SHA1 e8b97a367980515e00a0d84a1ea9485cf03c1307
SHA512 e057e05b8fd44e953819e9a54c06cf28b3b6837e782643dd97968946486ad39904f99233ba0c90b491489b13500c947359e357f14cbbf1e96307f12481cada3e
SSDEEP 3072:W9W538FJpQBvCX9d3R0YTke1WwhzQoWyLV8IYiZpq0xuD2X4Zw79qiZGVkMtcplf:UzLlp
TLSH
T15D258B295DF91233B1B2CB65DBF88467F965B8E7B9045E6C50C307490793B02A8D3A3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Security-Mitigations%4KernelMode.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Security-Mitigations%4KernelMode.evtx
Size 68KB
SHA256 23c4d124947481e56908f8f80d0a64debc573abe8faeb5523709105f00906174
MD5 d92ff25895d591f14b032fa00045c264
SHA1 4d30fd5c8bdc77d219b968fb64c946d528bdee59
SHA512 d225e49ae256831d53d8261a74eaf2952053ce7cb4be4faa1c8fd4606b4f93f76e286bdf26351b81d65b964526250ed750ad6e4b26de6de002ad18914bb1cc8f
SSDEEP 384:pghdSi+6D1zNvjibQFjXieoaiGjRieN9i46D1zNvjibQO9iT+9il9iU9i19iTzl:KT7rp+k
TLSH
T1B6635615ABFD0139F3F38F39E9B29A12A93A7C4A1D29CD5E1151124C0C76A11CEB1F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Shell-Core%4AppDefaults.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4AppDefaults.evtx
Size 1.0MB
SHA256 a4d2c2ef4aea84459fdc7bd6760dbe5eb4846853de2410c760f66cd949e48e85
MD5 4322b269d77e8ce504dadbb5a6f965cf
SHA1 c6c5552aa537dd28a42c44113d41c9693af83c22
SHA512 a348857cfacd6a4150addbc3d7fade9d1cb621a3f06b14fc236282e4a7100260eef7b9d4a7268ef6a2ca0bfb351ca91f9403270ba74216441cb3773bb4e4fdce
SSDEEP 3072:k3eaaWy4GiGUHP5LanGc6ytn6byc1oekGy1y5ci4jXas1bxV9w7u9s8jpfsjRf4Q:7V
TLSH
T14625571167F95031E1F38E37A9F61B165A36F8684F629E1E219083084C3AF61DDB1F9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Shell-Core%4AppDefaults.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4AppDefaults.evtx.FileSlack
Size 832KB
SHA256 5d72c59e4b770781ffe6b760bac2f83faa9a1872c07d5d70c45eef46ac229667
MD5 9be8774f26de5cef799caba0767515b0
SHA1 65ae2ea30930f81536b4e24959e8c3e26b4afe84
SHA512 e81feb68cf054d841edfa6a8555a35c9f32724f1fe2a593dea905dacbc4793339a7cfb8c5d48b4fb592daeb8524fa8248a75e613e3a2803d57d08ff287ddab7a
SSDEEP 12288:mBekIAXkRfo2MGrDLHPM4hGzGMzFpnzfobTY+NSFK0pwSStZavU4:YdHbGrDLHPbh+GMCTYwbHt6/
TLSH
T150055B1078C0C1E9D0B9CE710FF7C69B32767D56EE234A17B945232F59BD682928BD28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Shell-Core%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Shell-Core%4Operational.evtx
Size 1.0MB
SHA256 c6cc12858ec7a2457f6a8ae0a3d57187387da37d082649f2e29b293519774254
MD5 0d75159426bc688c47bbd2a4bf5480d3
SHA1 109fe2953ee95ad3f169934a8eac193d162e8f71
SHA512 a40b1735a8f41dcd70fe766feaa591e93152f58756563cdf02e9de42dbb404a3191f7b13f8e2bb2ed2b1c85eed63e5bf5fe47f619c55afd6994f711d14b0951d
SSDEEP 3072:lQflOs04+171k5qzLanGaye6ZSxNMQRMi+UWg9WoaHhcF7Y3R4crjzbDaDSc+NZJ:gP
TLSH
T12925161227F59130F0E38F3AA8770B155A3BF8689F436D6F115491588C7AB258EB0FA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-SmbClient%4Connectivity.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-SmbClient%4Connectivity.evtx
Size 68KB
SHA256 4ba208c4434d630f411fcb71a2eed9fa3910a5a26b7d6b4f83a50ac5ea3798b6
MD5 10084ae675a1e4429483af312cf75092
SHA1 3425fb0fef20359580299cfea2496c841880fb20
SHA512 ed8559fc34852d7a53d7ea598e14dc714f23a346411d748adc90a425065fc23b21e5740eb7c78f5a09cc644e971688a653934475aac66089a6ea9b81c8f5d6fb
SSDEEP 768:9jR5SbmHc8YHa6kOQwlQ3We8gOHzIaVBV:lzLUj
TLSH
T1B66388052BF85435E1E28B7D80774B2C6E37FD346A81CA5F2064A09C5C29EA15F71FBA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-StateRepository%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Operational.evtx
Size 1.1MB
SHA256 263e1e4e6745a459e618d72eea6d4773ed7673d6d1861ae1763a53be8365df61
MD5 05d9f04f439cd0fa9d1d651577a99203
SHA1 a0c4bb91494e7b8032fbda288494b8b77695213a
SHA512 33b8d528e8c657951a8f5cdf16b617e5ec0b4894319d3252173c6451a864d9da988e68e143bcbba16f09c55a24c47e26c4ef2bda85354bd3957b5eaf2bceaed7
SSDEEP 1536:tku//gIcPMRrvcF6GYb1Vqcx/uqC/S5hhQUlW5h:tn//hC/CPl
TLSH
T197353A033BF51924F5F38F3A40B30F34663BB9241A86DA4B1184A19D5FAB964DE70B97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-StateRepository%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-StateRepository%4Operational.evtx.FileSlack
Size 832KB
SHA256 48b0ca4748d120a45110704ad7a76c4d3e3a1268bdec611c4180a137affa0523
MD5 d2b2b2bc6fbe0d6c15d007da1c44c267
SHA1 706b9edea235c4a97dfc9f361ccb26ac0e7e02c3
SHA512 7edd7564ce3cac43bf13c1dc5153f309b1458895b02d341c12b136ba508eec957b1b9f0ebfc61b3c2e22924f84a00e82a6f57e6f781acb48cdd628355101ff15
SSDEEP 6144:p1urNT93KMIXfl2uabRH3MtsUwRYdBzCB0ao3v4tUVlEW5Td:fuxYMINHU3zvA4tUlE6Td
TLSH
T17B05DA017AD9C1C8EAF29F322CB6CA9016767D12DE1B824F3644B34F5CBF782D526616
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Storage-Storport%4Health.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Health.evtx
Size 1.1MB
SHA256 09bc63bdf8152b9bc8f1f9d0c242560634e337902ae9fa481b6c024a9ad44a0a
MD5 4c0d2dbd367089c313b10faffcc11446
SHA1 386081d9abf872f3d9082cac35a4d11decace25a
SHA512 76257ed19318ef45cdbca776d1068f35b8819ab9218286639b7fb4a21e6df00db19dca1b3f6e2f76ddfd2b7256c43a7c170b53321490964d1dfaa4fc376d47bd
SSDEEP 384:Tfh5pInpBDpBepBJpBMpBbpBypBNpBYpBFmpBGpBfpBCpBhpBUpBbpBKpBhpBMp8:72ahzel96f6c2WN
TLSH
T1283506551BF70629F9FB8EB556770B24AA37BD342AD9F91D508090EC6CB24108F207EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Storage-Storport%4Health.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Health.evtx.FileSlack
Size 768KB
SHA256 09a0afc24e714b723ef31bd400624d5b8c3641afd8d055257a699b26c922ab1c
MD5 e4bea0e4d57b1242e19e25b77ea3c58a
SHA1 37c8235b85cef3104f10bb9fc4e1e5f6feeb7f7d
SHA512 2cd6f7ccdf84ea9e67d544a0439b56be5e003e810f3002ab04c99c54ae8ec042dc3807b55d916bf037b6f7c4c930d8fb5e0cb978ff95fd14a0d76ad626d97acb
SSDEEP 6144:5nuBauShxTteIDjdg7Mr6ep5w4COroofXn1HUW/3ztmPSScCO57vZOpY0iLIM3Zp:TuQ7ogIm
TLSH
T1C5F4D901C2969FA1C5A116F6213BDF004A6F7F30059E513EA6B1061A4DF7F8998E8F7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Storage-Storport%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Storage-Storport%4Operational.evtx
Size 1.1MB
SHA256 ae89a08845234d7e3d3c2a08852bba5e50b911359ee0ba93cf793ad819db409d
MD5 d6bcbca68dfc765876806c03c7281d27
SHA1 e90a454cc5738ab6c056b5fc8084090e79b703b4
SHA512 fb89bc0ae58163f898f0e0c9620026a8505331302ea48a854955749704b775afcacc8d082c164db422b613d42c01c07e4842c5d28686b42d14a3988cc765f5be
SSDEEP 768:smAKkaVyKMgDdJ6NppUtO4MvyK0PAg9aH4446IHZT/BtWxd0fLe1M7jH:XT7j
TLSH
T1C53599063BB60539F2F3CF3989F34B28693EB9142A42D95A304452EC9CB69559F707E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-StorageVolume%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-StorageVolume%4Operational.evtx
Size 68KB
SHA256 fd1eec098fcdff754ecd496b0daa77132ae7cb74b5f283ca77f9384165ca1bcd
MD5 1e1755a2d62aa324b1c2c329ddcfa50f
SHA1 0866aa477807a384b1ed27c9f1b36c238ce89fb4
SHA512 41d2ce46136b184ee02274bf07a035e99a9feed32c3a285b0dbd489dff0c84d39ff68ab87383f13d2f9939b0a3e9c7528d5344fb200fd8fae29476732d30c81b
SSDEEP 384:1nh06BY6d6X6xEq6cU6t6u6e6H6a56Z+60v6J606E656v6k6Y6/G6pl6/6e6N6BV:RZFEA3ePsjWur+kAOy6mvvCuidG0FJP
TLSH
T16A63D9022AFC5428F1F3CF31A9F74736613ABD256F51D55F30A4636D9861A008FA27AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Store%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Store%4Operational.evtx
Size 1.1MB
SHA256 82c0170e8a6bdf29b15572621b6c0242bf7be9ca98b0c34fbe840a4638270ead
MD5 e40451fb0ebf68e29f0643d068972e52
SHA1 5b6c5ea1c964e02411bc6e12628452a3cab0954c
SHA512 06ffc88c41382897eabbc1a484c41ddc44d313622cc852301188dce3d965ab04c548787e6024c5dd84787e23adb3edbde1b75e906dcee3ad5bfa0099f8ef68d7
SSDEEP 768:HlDG+Q2q9R/KxUTfyndSNsY+fr47HibCd2M3omfYXcTLp5y:FSqsGjc7ldDo3cve
TLSH
T1E9359E0267F50538F2F39F3998B71B294A7BB8191E968E5F5050628C4C27D718FB0BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Store%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Store%4Operational.evtx.FileSlack
Size 822KB
SHA256 3227de547af0631b9500910ade010fc470d611d727a824163f928818a6104eff
MD5 146a9046343462799fc4c48bfb47f426
SHA1 c9c16b31bc2f7c41d26e4369694e2ad7f316b906
SHA512 1bbb562b4f75fd772437872293ab368f9099d7883777859006798aeeb3447f5bf776195f0c88e036cf30c71f75861bb128d95d3afbbdd8563d72cd898e0aa562
SSDEEP 24576:ci8GeaJCxQBgoKiITdhwUV8K4RQ5URyivzmzGMso:cQeaJCUgoKi/k8K4RQ5U/vzmzNso
TLSH
T12605C869F66A02659175C4FFD383BA2BEB713496A3341DD30103CB921D27AE6D139B32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-TWinUI%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-TWinUI%4Operational.evtx
Size 68KB
SHA256 0da9654069f20dd06141d900b2c11c9f64895af9f876de2efbe61531e86e24ed
MD5 0d08df96a02ae9b9365224ea133f4bac
SHA1 4b78b58d468100c648f80ca342a7935a5ba59de9
SHA512 2ba3d4466aa076763edc6f5069b49fd1d9db5c75a10153a620d9dfbbe7ddaa6def188d2814e5086f3a20d0ae75330cfbdc409ceb48c8a53cc9ad8c609c4a420c
SSDEEP 384:0ZhR9GJ9Gu9Gqa9Gq9Ge9GW9Gu9GB89G59GZ9Gf9GF9Gu9GC9GG9GKe9G19G59G4:Y
TLSH
T18F63671627FD4154F4E38F3E68771B295A37BC588D455E9F2010A0988CAA922DFF0FB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-TaskScheduler%4Maintenance.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-TaskScheduler%4Maintenance.evtx
Size 68KB
SHA256 e484e76d1774c2b12ccb7790d6898f635e95a36b08fbc7d8d98fa84d57f210d7
MD5 f2472805af8772e5fe4c6406734b02cc
SHA1 7b297a5ce3f1511be85627a9b3aa902bb8b09147
SHA512 50db9caf096a2fc5e3da4f1fa057654e8721da4373e27148222106bf045b70deedf6eca4c04a675eb95636ba73bdf4fa155e67534f08915172dd71ed47f126e3
SSDEEP 768:4vKT1KT3lKTxKT5KTUKTQKTbKTGKTWKT7KTZKT:WKpKJK9K9KQKcK3KSK6KnK1K
TLSH
T1CC636A0597F44929F7F35B3A05F39B2C1973BD045A318A8E1120639A5C29AB1DFB0B7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx
Size 1.0MB
SHA256 5a99e8cd548e7c32e8d49c4ab7002e30dfe4966d88c21c26884fa7d133299623
MD5 da6dfef7969bd2b4e705c83616c86a62
SHA1 0493beb8e6fb3ce6c0274d204f6926c0195764df
SHA512 8dec368f545ae792b8a9fd431c2f7f5e626d8745260ad1707708bbfeabec9408276e8a8c2a5918b55f5a16118a2a992433d144188c7adf2c5c0da639b25b5240
SSDEEP 384:SiiThyvi/viPixixiNihipijhi5i9ixiJiDiTi/iDikriDFiKiAioisisiAi4iwQ:SNcH4m0rU3Y0RG15Tl0Hvx
TLSH
T17025F401A7F91828F0F39F35D4776B1A2BBBFD600E698A5F115491584CA6A60CEF0B73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx.FileSlack
Size 896KB
SHA256 93936d0fc7a2b17c8abf42cb16abaf1552baad9c91704647dcb7a2ffa0a59420
MD5 92581f09d85cca3c344d67d236470a7e
SHA1 edc72781a95ca465047623148a787acbfe60250c
SHA512 eb69927b96c8a529bec419dcee0eb3e57d61441fd77d2e03a802e2284c59c2a10963d4cdc7db08926f47927723a432c3f32108a58146a83972eb76717a2007f3
SSDEEP 12288:1AiS0ECMZMlJku63tg2rALbg8n/mCQXduODv:OLuI5E0B
TLSH
T1B815FB12B4DA642DC473B138636D8B71EB13BF0981A8C65942D32D986DC7DE31FB986C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Time-Service%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Time-Service%4Operational.evtx
Size 68KB
SHA256 d8dc6dcbe35a110048fa969592c2a7e86a0ca50dd722f40939553568f79a7ec9
MD5 73ce1b828382595d4dce708ff03ced35
SHA1 acc3a506a89019b77b2c4e2ac21fe76858c7fdcd
SHA512 09e68b3ca1781569c46009fa89a4c3dceba26bb5e681d9a14b709bca60ab17a3c08f07f4b2f64b6f7ec25141c8119b3892e504f3c08943e2cd43864698ad88f5
SSDEEP 192:RJN8V72n8pbQvpG+w9q8JXuPpX/hpgrhprzpdXpFEphqp:RJSh2n8psvpiCpPhpQhpvptp2pwp
TLSH
T1A763AE019BF81518F1F3DF79ACB322151FBBFA641D61894E2094A35C4DA1E608E68BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-User Device Registration%4Admin.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-User Device Registration%4Admin.evtx
Size 68KB
SHA256 9a369ff8f898bbbdc10a61728a1673ba7364e7308c233d189cfc0806fe362eeb
MD5 fde79f6adf6e862526556e750ac31cf0
SHA1 3a68e6bee3773919646ffd05df116e5c0b797277
SHA512 1d98919852aed6ca631a1f2e0b3113b2b2b1b371c8218eb27b58ac99339fa933a0037e96ea85b2616cc7116781cfe00f8a0a505d4ee89233f943853996b3a08d
SSDEEP 384:T9hQ9Xla/9Xs9XesXcSJXG8GXy9X41XSXGzXI9XLX3XGyXF9X6XmXGHXE9XiXeXt:RRVDp5RN9llldIOha9LI9N
TLSH
T1DB63120027F54A19F1F27F7A85F60B250E37B8980D31DA4E1264824E8D65EA5DEB07FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-User Profile Service%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx
Size 1.1MB
SHA256 c9918c8595cecfac2d667c54a0de0c0771baa035491ca23c5ed10d9b7fede10d
MD5 bbfe355d798fa731a8b05f796129ba7f
SHA1 05d07955000ddfb501f0dbd92f76d6c59212191c
SHA512 6cf6f128b8aee08509dba12878a0f9b97ac303a1dc09537ce9f41f614be970fd60b1392d0beecb34c46466d8313e8b56edbf2a5446c82b20bf827a1c1b014114
SSDEEP 384:LKh/9mpm+mpmy9my9mZ9mC9mhmimOm99mh9ma9mk9mrHmUm4mf9m79m09m59mE21:+FokvycWwJz3okvycW
TLSH
T10A3506025BF44528F2F38F3994B72F292E3BB9A44F654A4E0164A0548C69975CFF0F9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-User Profile Service%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-User Profile Service%4Operational.evtx.FileSlack
Size 960KB
SHA256 238040fea7636970077b2389cdacca7cfb327bc6feb2fc92dda504baf9852e36
MD5 2eaee0ca6bc790d859208771ad1122ee
SHA1 440b15e2143353b8fb287c261b8c3035f55641d3
SHA512 ce6cd50a71437ec8a325df9c985b67c5c9e74805785625b18a0c03b184072a39299102c4979d45d1755bffbf32419839277199f06798f6f405623378b5ef26f2
SSDEEP 6144:Q6VPkNqMydWLlSud3kVi4OdWLlnzVAovwvg:9VPkNqMydWLlSud3kVi5dWLlnxAoYv
TLSH
T17025150267F94208F6F37F706EB502B50A777D91AD79C24C128A645E1AB2E60DE70B73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-UserPnp%4DeviceInstall.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-UserPnp%4DeviceInstall.evtx
Size 68KB
SHA256 e338765b14dfdac33f0f526f9046a51c44ecc631b9c367fa0543f081393d968a
MD5 2440fd99f4e2731fe5caade5b4546dab
SHA1 a69d59e9ca5858b57b25e8c1b69da4a21825cd6a
SHA512 1ed3ee1124381585af8f2a6bbbe86bba414baaf27a0b4b6036acd88c62b5fb6a1c93d145a22e4143d2d6df062f8f395e7806d48e7ef780e4e1aa239dfde35619
SSDEEP 384:UOhQ7M7Lz7DH7O7iA757s7A07Y7+7P7f17Y7k7t7S67y7Q7t78/7n7A7t7s57h7e:bFcg
TLSH
T15B63BC0217F0593CE0F38F3954770B692E3AF92409426A8F7164E15A9C7A875CF70BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-VDRVROOT%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-VDRVROOT%4Operational.evtx
Size 68KB
SHA256 8534891ff8f28d1628a922310641fcaf6d77bcfb976bdda9fe6774eaef5e91af
MD5 540b65dc57148f0d0faa8a3346bb68ce
SHA1 b5a6155e744701d266af0d26a128af58b146df8c
SHA512 26be5f9dd09182e16867b2d1ecec29bf0de821c4838b761cbb67d8a9929df4faccaed0c23cdb1795f9b3fe6d98932eec5c3ad63903c90bf07e6301c21add196e
SSDEEP 3:MgAWl1l0cQ7MfaltpRTtPl2tVRl/l:Mk8vMijRM
TLSH
T11A63020477099812D1080A3944878B91BF70FD501F7A9753A960362C8D753421D52F59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-VHDMP-Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-VHDMP-Operational.evtx
Size 1.0MB
SHA256 4c7678e7ef0fd793ce0b91172552e649fe43377e633972484c61815d83b53b68
MD5 5460c701217386022d5dfe5737024ad6
SHA1 efa71e415cc7617def9193f930e8595022be70cf
SHA512 3fbcfc120fbaec9b935f5d98e946b02d74511b6f3da0936dd155185ccddad20e20fe734eee05fe07dbebf2707c508d8353039bf9f9c483812081828c036e95d5
SSDEEP 384:Ewhgm3mW9m69mU109mg9ms9mh9m69mZ9mv9mN9mf9m99mw9md9mV9mi9mP9mC9mQ:J9Of6EKqHz3v08Lzu2jg+
TLSH
T1BA25289327FC8124F1F38F3A84B70B14667BF6591E899E5F0190D2988D59A708FB0BD6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-VHDMP-Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-VHDMP-Operational.evtx.FileSlack
Size 907KB
SHA256 031fae51a02e8c6a723e5c5b883527391613d43e1765310189c88c2d63d5238b
MD5 064f74f06011b6206cbff6c296be96ad
SHA1 f93fb7b365a44fd7a0701da6fb3406fd38be7c0e
SHA512 fe8e8d19e28e5a164fc9157d1ede969ef1edb1a31919786bfc7d1697b15ff6ef245029fb9073cc550bc357327fd8b6186d89edeafb0f743b3da7f3df6f41ea8b
SSDEEP 12288:j41pTTNbE6Wlg1mI5g/NZasPRAx74yUUUUUUUUUUUUUEutuXKEUwNpM7:wojlPRAx67mNpM7
TLSH
T1D9154A017BF98E2BE1AF477808B3520047F5F6669B43EF0F6655592D2F93B60DE102A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx
Size 1.0MB
SHA256 489bcdd6f22ef908d624bababcfa6c6decf8d4bf3b13db3f8fb9cb7050ad2b07
MD5 87ad323477a3778197895e80312546b3
SHA1 88124fd79e97fbaf48ea791f77f3a91b94d04ee6
SHA512 7d7a31c340a3dd3b09fa97121bf758a24cadf444be3e27e9740114985c7940f3cd8cccc42bcd8746348e700d59bc05d5acfedcc38ba57fcf6641146148a0b27c
SSDEEP 384:8vhi2zw2mm2l282j2N2V2M2c2Z2w2U242EPF22212S2j2g2t2i2u2KO2c2/2ES2L:KhglPKxuXP7FaltKn2N6x0
TLSH
T1AE2529136BFC1928F1F38F7484731729157BFA980AC29B8F105071599DA5AA1CFB0BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-VolumeSnapshot-Driver%4Operational.evtx.FileSlack
Size 896KB
SHA256 9d408c97e52806b52d7ece5cf561400c87a7f4578e145849956eca4f5e7fa43f
MD5 f8813607ce4560eff0f1e6eae3f2e1db
SHA1 bd3cfe7fb0e6e299874910134c8d7ba02cf1df79
SHA512 c3206de4aa547499ff678e7fac523816eabbbe9510a0ebca952011323bcc99f3b4eca0cffdb3f453fd02e3dca417a20be3c5fc4c41f95f93f0b7adf349541947
SSDEEP 12288:uw1Q4ejh62G0Go01x4CocI4eTHbm3t6uHVn7BPFhh8g2:V1Q4L/83
TLSH
T161154A5133DC560AE9BB0739AC3655895B7BFD266A00C71E749C316E1FB2B4286233B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-WMI-Activity%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx
Size 1.0MB
SHA256 5e27d02035d9e4d37a817f4265fcc8b2d8680df8bcb9b1a10826783d6ae3c817
MD5 98d6f934bc1eea2686666666fd41b960
SHA1 dc051c3587be1d8332a48e09da5332a38dd9be63
SHA512 6f51fa8fe6f0d2c79bb9e01ecd541b1df3fe1b00469090cc1371fc40e17c2b02e78213fcd79095d673651251fb30de4743bb672be9fd11d5e40e5e50ba36d89e
SSDEEP 1536:4RTCZEQ8BZv0GcSo3EREqofU4Q3rzTPnSorY:4hi8BZv0GcSo3EREqofU4Q3rfSo
TLSH
T1212546026AFC2525F1F2EF3945FB471B5A7BBC89096ADC8E1054138C0D25DB09EB1BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-WMI-Activity%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-WMI-Activity%4Operational.evtx.FileSlack
Size 448KB
SHA256 4cad77f8715054feb0d1c407a22c84a5b98ae0ac4bd9c65c84bebc056bda6801
MD5 7271c81785ed4b62b37dc64a91fa2fd0
SHA1 3c63136df3845eee79a35097c579d252e53942cc
SHA512 7e78c145c65d49570bda62af89dcddb1969c6f2d081c0f58566228b2a20eac466a4816ba39a580e43ef805f2f47627206676e7f51e60508dfd6ce009e122ed92
SSDEEP 6144:7eH/2lGHVqnY8QdiaQdYz39Ft2ZeKhq2y9qThBRuNhfi5iwXEFoofAleYoak1Xlg:7eHFHAYrEvYkrMK10dBw4ooCVi1+Xj
TLSH
T1A6A40122CF018A27E7DC03F141B711A57FB1D849D9EB29ADABFE50705E167A0FD42A09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Wcmsvc%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Wcmsvc%4Operational.evtx
Size 1.0MB
SHA256 1a21aa1c6947d44f0311123360bc1d75cb283971ea3b00616511dd9bb8630b65
MD5 3e331d684bf14093a2b7cd709b59538e
SHA1 d16f438feaf093ec070cbaeb654be2da3e05b788
SHA512 e4f52bb855824af375d664b5990e00650cc74fd33a1dac43b2d1de6bcf1e0204ef6ba2ffaa181aa7440ed78681552994cf99b954f87648044c0034dcf7c659f2
SSDEEP 384:HZhRh5h6hBhBeh3huhnhSihathA8hJhAheh2hhhohRh6hDhFhchfhFhihuhqhvhg:5lZ+LBGdQig6qXn8aLBGdQig6qX
TLSH
T10C253C4B1FBC4920F1F38F3894A30B191D3BE9590D925A971360A198CC1AD75DFB1BEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Wcmsvc%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Wcmsvc%4Operational.evtx.FileSlack
Size 896KB
SHA256 36bfa9761be54d73b023a522fe79be0079a57777c07eb41191ef0dc08eafab9b
MD5 2ede7e4affb3589428526eeecf4bf49b
SHA1 036a59e0da1026b723e7766b5a703665406b6a63
SHA512 408933351dd6fbc196d0274815a26be938fd823ba1017058b25dfc97e95133591623221c0d47d04d98b795773052192102275ba2b57855161f0c0db7e94963f5
SSDEEP 12288:y5hqxSw+dhxWAjYMNH6OBLuAr5Q0HjXkhAlx9:yPqgw+jx1NHJLbr5Q0HjXkhAlx9
TLSH
T1CC152A1533F8036AD0FB8FB578F691185971F829D4D2D66C198A1A8D2CD1B4089E3BBF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-WebAuthN%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-WebAuthN%4Operational.evtx
Size 68KB
SHA256 4abeb53a9bf10585519a095c3cd4006f83ce23d776bfd5111d2dfaac0964d3eb
MD5 d97f81d200425346e1f257828cc7a357
SHA1 f2b8a738040645382a2fb8adc4d3eab6a15cfc08
SHA512 9293e4e0cbbee6cae54a9185d4cf9859fd6b42e5870ad8dbe3f69be65a308d6ec27eff665bcbc21800c8b080731e7fd0f9db73bd2c348c03c241dd94e5058904
SSDEEP 384:dyhTVjVmhVdVqVDViVBnVqrVpVoVLVOVQVyV3VeVdlVuyV3V1VpVkVtVTVpVbVC7:wMks
TLSH
T1726345111BF50539E0E29F3E80B34F293A7BF85459838F5E6510A36EDC9A571CE31BA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-WinRM%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-WinRM%4Operational.evtx
Size 68KB
SHA256 0df4f294c43b02535b1e42b17fc962bbe77e2e205d63dadb055f36dad2d27707
MD5 1c949b775d640e0c722d170991e308c1
SHA1 d674cb5939814620d1aa9ddce646f2d0506f32d2
SHA512 71f187ef6e0e86e44e53907025fa9add5e0da394886b62e1ec614db8056770cb3550aed6fa7035b947ff07e2757bd59bd83196133569808d09e3d015b098aa7c
SSDEEP 768:NPqlldQWW3GC5By2J6C3fMLVeJJR4yfbQcw3xljjo:
TLSH
T11B63470217FC4A28F5F3BF3948BB1B205D37BC84897AD65E1250605D4E66E619EB0BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx
Size 1.0MB
SHA256 cf6d2209256625314b49dcff2313d492a1d9577f47300428429a80f097f28890
MD5 db2a7e8ce328947f1feed36ff85ca215
SHA1 89b28d60cbc340ba2b78e97d694e436ff709d022
SHA512 faced3598f490f3752e1426a9a2051185adf2843759df255d8f28e1d6588dcaea6c9416ce518cb222bc663035cd5feb60c5c0863458c9aa4cf613c608b0f8794
SSDEEP 768:P6Fabj00uZQabqg5lugablg41abRpiF3uqabIL3U8bTjdXSMh7d:/PNZguFvSkd
TLSH
T1402558506BF40618F2F38F3E99F22B2A5D37B9141E52D6CD0251719E0C26FA4DE70BA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Windows Firewall With Advanced Security%4Firewall.evtx.FileSlack
Size 640KB
SHA256 4365c8f48812d108fdc3a684d18148f0da8e3626278194edf6e77789c6eee264
MD5 3df049b73492a54931bd568d15b91fc0
SHA1 476930fdcb80d5a508c30692917bb6dc14a2f9cf
SHA512 0beff8bf408ee8f52366f362951763710193697b89fdcf01b7f985cfdfdd1de732f37dea73f12e47159175ce22c404dd7c30ab2d0d5720c0a7de2ef2cebec0c0
SSDEEP 3072:dm46mFdZuOu3hnXuRgGD00DcAAndW9Gl2JG5Bv9kmW8pNS9zRtthPPTI2iVo6Ajp:02+tXyGndW4RhKthTKCNXuDLAGC/
TLSH
T1C0D4D9017AE9C1C8E9F28F321CB6CA9016767D21DE17821F6B44B35F5CBF782D126626
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Winlogon%4Operational.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Winlogon%4Operational.evtx
Size 1.0MB
SHA256 dffe76ff5a87542804d5fb02e9d65b3c3ec1e3f70abec9dd91f6088a54239ec6
MD5 df76b29450b7879e9a36022e8a65d4bf
SHA1 6e083636aa65ece08a54eab2a9ec7dc39e08ea6f
SHA512 ff346d82272ee5c898585d3190dfabaea769e5378e2c969c310a3493eafb69e36015120183d51de35a9769c07640611cb11f5b13b5f4fa7e5b78433a41dc85d5
SSDEEP 768:J0VPDqurQvBPLNvftreRa/kOCrFOW8PFrpAf/J+Kw:0J0LGLOCZOWLHgK
TLSH
T1FD252A9637B8041DF4E3CB3D94B71B682A3BFD640A819E5B1040A2789D567624FB0BF7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft-Windows-Winlogon%4Operational.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Microsoft-Windows-Winlogon%4Operational.evtx.FileSlack
Size 704KB
SHA256 d9f7604f0fef1637e46fe73e9e2a27719effb5b9ca3b5fd91d1ae47f734f1ab3
MD5 77972acd902a31c83ac9f7ad0c87fe70
SHA1 3d4157b43ec0e4ab2d8c61af2624314aa0784bf4
SHA512 764dcddaa92982aa47bd368d97676c60478e3299269e88dd74dab929c06bbca28ae620a123b8e1785ced3f165e7d81d3ad601dfc7b8eee607ac34aa5699f72c2
SSDEEP 12288:yqeZip0SICnPfCcXPLFmb8yxtYCGqi5Eq5l0muNIS231usZOr8:yqeUp1XXPpm5xNG9EqIcMcOo
TLSH
T1EFE4F52E13FD01AA5ABAC25CD2458293DAB1B434632179DF79A1C9BCCB23AC1717DF05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Security.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Security.evtx
Size 20.0MB
SHA256 3782396a8200acb71ac11258f7b84db1335eb3f90fd9c4ef4f027758caf2b7d3
MD5 e8f444fe95ce1033eda67ab27563bd8e
SHA1 311c4785d14f0a596f950f9f0283bf7848ec7099
SHA512 07a0169dca72d340e3786bbc8743a5f67534d3d76a6041a520baf169609c0e99e19d865c0906673f8a3426203d645148c14b65aa05dae366ed88d328d21e4e82
SSDEEP 12288:5qB7ccvkLCIQWyX+LPCizO/1GqcOU+wEqxCZ5xBiQq2EBoq:5mcF7yGqcOUXE57G
TLSH
T18027BD50A7FC0535F3F34F7A92F703466932F8626A02DA8F4145138A4D16E25CE76ABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Setup.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Setup.evtx
Size 1.0MB
SHA256 d8c5f476f3e59e581488287eda8adcdc83b10d499b63b88399692a1bceeed7d3
MD5 9edd3e6c1e3156b5d19b4e4d23fcec3f
SHA1 6b3c07f31e41cfd7a35d20f7144eaa0ac50541a9
SHA512 1dbded4b881eb98bb39322e53adfad956dc19f3cde7969389913d49903519a087e3457544d3eb27472b13f78aa4451f68805b054623ae4e5e8605894d4e523b9
SSDEEP 768:8dKMkTQGU4pMiqT/y5PfJ7TVJDtveftavOiPZrB9Dn7OYGktY0rd/R9iH6QRzXSX:DS+xmJ6Z6
TLSH
T1C525F7412BF54428F0F3CB3596B30B166F7BFD409752AE4E016092994CA6DA19FB0BE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\System.evtx
Size 1.1MB
SHA256 2eab8e19c4574d3ac98d399c8d93017f2eb050486bf1e46e18218e62fa792e70
MD5 348696977d541d52ceb505a789a69825
SHA1 0700947271d648aa8e7e747666a9ebeec4895125
SHA512 4705f6b456266cb82eecfd2f2de08ae0e36567cea634d1e46e9f94c2a7febcb2275920e722c8dba5215f908b542c3587d791ed252ba9807b337cf5f04c18116f
SSDEEP 6144:02YKO0VuNKW8/lRDSpp3jnr83cV2vWAvn6DLZMEznTnT:iwvW8/LYpTr83cQvHv6ZMOnTnT
TLSH
T16B35ED013BF44424F1F38B3A84F747252B37F6A01A829B4F22A4B3A8AC565B59F717D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\System.evtx.FileSlack
Size 128KB
SHA256 414e7c397c3d91db110f98bac351ca54e37cf5efb85b4e7dbf4f8f6ccd30ac52
MD5 1bf73a865ca4f67cc6d8f938a33e6292
SHA1 8b005c6f13cd6e3cf7aefe470d971f1656542406
SHA512 de96f364df9e5e96c583d853aa63366c1529c44d5bf8a0c08eae36035ff2e8424597bd7277fde79069d340be30a7156c353869dd09e09f47f56c0ec0bbdb2907
SSDEEP 1536:juhfZefqU58UFNmcbTNU5RgU7OBMYB9uFCCJtC:xvuUNS57OBMQqJtC
TLSH
T1B4D37904B8D8C0E9C5B2DE750EE5CA9752667E52ED171A0BF584230FBDBB783910BD28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows PowerShell.evtx

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Windows PowerShell.evtx
Size 1.1MB
SHA256 83d3f4c2f5cd8607b43b163a9a73f1a3e568d537af0ee443b70fb7cd2aaedcce
MD5 5ef3c0c2a383b8237c328f402a804427
SHA1 62d9f431c96ab44db28dd69d3db571f34472fc52
SHA512 82d70e02eda437a6a60bfc128b73be6a728be4972d1637b8c5482f2188a2bd94de3886745945b11d327f6a337e44bf9f87d55ba04691ea7ee4520e19ba1863bb
SSDEEP 3072:lZQyIKQzqH0eBbNkcgtOjQyIVzQyIKlHLof14q:DQZlHLof14q
TLSH
T1E435BE0326E85114E4F3EF74EBB351B59B3A7D106D29DD9D62C1404E18E1E80BE62FAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Windows PowerShell.evtx.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\System32\winevt\Logs\Windows PowerShell.evtx.FileSlack
Size 428KB
SHA256 5b9ba1736aaf13e4b44c8f28f55d087bd40e93d94bb59b42c60b1b332349c27f
MD5 ffada16d688a547bc580544f15dc880c
SHA1 6410e3bc0d3ab597840dcad45d5db22009bd098e
SHA512 477974b277223435374fea05d21a8e74700b8108c08ae6f26309dead30b5503c876920be53bb7b4a0c5fb0ec4347b331cef1d8c6144b2e03f63968525c2e7e80
SSDEEP 3072:1JImin01SWQYjY3Il0TSRtbFhmMf2znAi/:1Ja00WQYU3vqtbjmMf2znb
TLSH
T1D4940D00FF80EAC0F6A145328CABDF456A35FD926E11494B37C4374E9EFAB40A957627
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Amcache.hve

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\appcompat\Programs\Amcache.hve
Size 128KB
SHA256 c7379aa3c28102875545b79dd5176be8198fbec2a1c199ad48eb55d30da6a6ae
MD5 e720ce27593388ae6b23ecc60281654d
SHA1 dfe52800fba31810dfcdd63971da48d27121a75e
SHA512 7148655824848f980c452a0c2a1743aec3ab691d32c6caf3a442d57252d87f48a02c917d4a811eb01985d75c15398146609ef4ca4a76f703f25836d8be5e1a76
SSDEEP 768:eoYjSeGIor5XxqzcpMk0w0a5vqf9cEsepK18txtwLAXeoa9t2PdvrDMbTdzn7j2H:eZoWheOce9zDCZTgpuaB5PAQgm8tFjH
TLSH
T139D3AE597F9082F2E271C7350EE25F036A74F816BD20564C6380274E9EEA751BE12BDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Amcache.hve.FileSlack

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\C\Windows\appcompat\Programs\Amcache.hve.FileSlack
Size 16KB
SHA256 3a8812ad1f119325ddc6b19db896db01d5291d96485c7db573d825478b903fe6
MD5 ac66b765df85cd4b80e92cdbb98c9c5f
SHA1 e851815789b65475042217df40987d6984f24da5
SHA512 a727f9a6e3461df29d73b60752439224532fda0594d0e1a51aab1d5ae06fd054803777434e40331f475ff465bd19e470f4c69ae167770a52599542cf23a692c4
SSDEEP 192:4oVFM64edDzEcAVVn263CrNN5nMlByUXPuNShcu5xX7c97R:4oz/4eLa29NNdOAYuNaxrc97R
TLSH
T18072AE147CD6C2E9C0B59EBC4EE68A973377BE12ED12091BB554331F9DBDB83814A824
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

$MFT

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\F\$MFT
Size 256KB
SHA256 d5bfd52c1a6ea520bc64ef6dcce2d98193ec64786219a5f20283ef5bda5dcaee
MD5 937f652324901d99b9bfd4ef650b6a03
SHA1 1cbf20c6e019922d2ddd2fb913f54b36e747bfdc
SHA512 c6b27b166b64b1bcf7b1539cc9192c0c01869d6a3af76603e7dd0cd2a196dc8dc08e89bc5dd002fbcac2063f555635c81642bdcead8205b5878168e23d8d17e3
SSDEEP 384:raaaPaaaqaaaSaaa7aaaSaaaFaaauaaaSaaaSaaaCoEE0aaaHaaaQaaa4aaafaaF:qphOoEqj
TLSH
T168444852A7C4AA21D06D4731F8EF4F662766F6B8569387075724D36D2EF27B84E20F00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Listdlls.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\Listdlls.exe
Size 414KB
SHA256 b0f6800b2bb4c86e091120e9087c75f9b1b3e46b89cf65744d65cf5ab01fd385
MD5 60a2331a2b28968585c7c7229d2424a8
SHA1 fbac538166d61b4f10db934bd4bc1b86c81e56fb
SHA512 159542a30195f58a6957d70282bd2dff79708bd2228ebebf7db48e25d80e68ea17714b518a029d2e21acf564d37982b43850249c944e99ce1b38864ffa00b009
SSDEEP 6144:IejqfgaIqi0N5fZC9kqf7Uxv9VYO1s+rTiMCOoRb0pyeZ7:IinaIqi07C7krtxnkmB
TLSH
T153945A1173E480F1E4F35A7099B09626AA3A7D724B34D68F6394426D1E72BD0EE39733
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Listdlls64.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\Listdlls64.exe
Size 215KB
SHA256 29d23bc492e48a5ae68444302d3430e07d08e04278d53aa70d9367d9cf8bceb7
MD5 8336396d50dcc9d5a5f66b078a8460dc
SHA1 42bf0bb282512e4c638b8f03617dd973ee09afd9
SHA512 08f34405f8d5ebf695391f9cb1deb6eb22b318b698ce9540d37eae45d36476a96d379e9f338c64d5f2f3e9674751bdb7f3661845530605b8fb1eb14ee91702e2
SSDEEP 3072:CcSIBqf7UxpYs68VYO1KpygluJrTiMLGcaad5UFyn853tOwDmh8DaNv3EL:Ckqf7Uxv9VYO1s+rTiMCOoRb0py
TLSH
T120245A5173E800E5E4F7AA3089718606EB767C564B34D78E13A442AD9F63BD0EE39732
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PsService.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\PsService.exe
Size 261KB
SHA256 d3a816fe5d545a80e4639b34b90d92d1039eb71ef59e6e81b3c0e043a45b751c
MD5 136f9205a5945681ec470b8461dfee5f
SHA1 1ca7e6ac6128bb1f4e0318a28310525baf7c67c6
SHA512 a3eaf3665bc8a227d139fb0fd6032c1510288c3fa41a50ee5a774301f88491fa69297c437b4ddec1a0df18ba5085c9c5e61254bfcbd38fd3b5f7c4d074ede142
SSDEEP 3072:e4iIB7s+H1oGlMqE7PbxxY0X8xR1O4yjXUnJfELaQdUFvJPKg+SjWAg0FubMr/vV:e4p7sG30xTX8tajKJGa5pIAOCvM6+e
TLSH
T1E0446B1172E18432E4F32A321DB497661E3EBD614E35D9AF5798096E8E71BC0DE30B36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

autorunsc.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\autorunsc.exe
Size 701KB
SHA256 666aa8972b4b0a1e5df53c076af44479f2f94b16f9fb56e15e6d104ed86ca9f4
MD5 b76978d483ee6afcf5b919a51a7d111e
SHA1 6b0292325505fc3ba638d42330a75cbdf237561b
SHA512 2e7f076441f7cceb1e1eb38044d7a7df4226249d4526621bb23e28fefaca80820f5a5899709862191b03837aa659be076dfc960488e24a8dd5f87b28aefe804d
SSDEEP 12288:WN/2Ekjc139fb/AJEAs8K85G3wwgwI6Ox1y95:WN/LX/AJ9s8/5G9gwI6gy7
TLSH
T1FEE45A0076A59035F1F252B029399776383EBC719A358CDFA3C0695E1DB5AC1AB3872F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

config.yml

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\config.yml
Size 8KB
SHA256 6fe76b3e56eba816690f8254c49cf18ea9141e7df51e75cfa0fd1cbae1eb6072
MD5 c13e2e2cc082e69f9df5d49c23ca9b6b
SHA1 1949ff3d0bf9844dcf98088e14b9427ef12c6af5
SHA512 588111be30f719310a4e31fc2e952abe73057adf61f7cb5c6f10ea9afc9019ba44f103b614a69f23f7f4166a1bdd6325522dadd4d296fd2ae829a81b4c4619ed
SSDEEP 96:9CYvnEpsxsZ1KABR6rPRNJ4MYNVbdkoYPdasGeLb5TYES8lwoCzpc:9dCN1SyrSoc
TLSH
T11E02CF128421D8F378FEE34855926E439635A0C393E4E935B7CCCA944F0E9D984DA7EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

handle.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\handle.exe
Size 743KB
SHA256 84c22579ca09f4fd8a8d9f56a6348c4ad2a92d4722c9f1213dd73c2f68a381e3
MD5 9f637fba2d680e23da0266c1507f870f
SHA1 05d4842c6e9b5f9430dad76a20c2a4a6feae0bf0
SHA512 addf414497df3a057ba57afab06a61f0ffb7c50134b0c83b61fe6542ec25298b893a455b317262977786f30723a23948836b402d310d6ae4bee1e6cf17a0272c
SSDEEP 12288:Lsfe2MShO2bM1teJFN9rVY5C1lq7oFpuoIG6h:Lsfe2Y2bItIHY5C1lq0nus6h
TLSH
T126F47C01F7E440B5E5B36A304AB5D6569A3ABC650B30DADF2394466E1F33BC09E35B32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pipelist.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\pipelist.exe
Size 331KB
SHA256 2156d7d3158ea589e8187c5cb82442ee6c37ee982bc0d728edc8a50a2a1c4281
MD5 0e7bd3e144e966321068c5e9f5ba301d
SHA1 00919feaafecb87369d0605d3ecb9fbe69b41507
SHA512 0ab6bb567e2b02460c724ab3cd83fc94f27ca0e268417bbd3a96f37f8b237c8dcfb62acedb2081e21ee216168933ac49c0fe502077fdb9fd6ed68c1088a05180
SSDEEP 6144:Yxhmgd8B4mPalFmZUYQXw/uc1Jiq0MPiU44tzElX:YSgM4mPafmiYQ6t1L18X
TLSH
T16B745A1179D08032D2B33D305B78E6724EBD78211D359A8F53982AB95F74981EA39B3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pslist.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\pslist.exe
Size 212KB
SHA256 ed05f5d462767b3986583188000143f0eb24f7d89605523a28950e72e6b9039a
MD5 6c08bae0981841e0cd22ff0f0e8f7510
SHA1 cad5355c534cccf48ca8df5a1007cc34d37cb619
SHA512 1080d9e7d3151122518c8ecc09da061086f1d490656f26df99153ddd3f933da049a8364af28fa104da54089271625f229007989a2dff713782066bd8fa142c25
SSDEEP 6144:UJTVdqTvShLDFQUH9To/JPjDXDzM/P77U8lvfhC9GEPyg:KPkQWdPjrgDJlXELyg
TLSH
T1D5246B21B6D08432E4B32A305AF4D6725E3EBE715F34D58F6394067D0E21AD2DA35B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

maintenanceservice.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\suspicious\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
Size 272KB
SHA256 4bd1dcf4ca2347b5181957297a22926bbe64fc2eee3dec93bca6f0c654167b5f
MD5 e255f1082448fcc9185d973c71bdcb50
SHA1 c0800fb7d2e66dcdd60414cf137db7b3eaf6eab8
SHA512 6cd5eeb4a31bab908354c0d1e5d37d87c8109ed253b793bb3b0e539217e4957e332535f8130b517d49adc3b6514f99c6f98593d49a84b25c2e6a455fa5ff855e
SSDEEP 6144:Xr1XLss/oct92xA1YXs2lRBN2/iJPsfUrcAe:b1XLsswWkxy2lRq2czAe
TLSH
T1BF448E28B7E408F9ED67827CCCA28512EA73785547A0E7DB03E489651F233D85E3EB51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OfficeClickToRun.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\suspicious\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
Size 10.6MB
SHA256 1dc68c7eb3fc39e118521c7425c47da841283a076cc422a480bf9ef637c43000
MD5 67e6e37998718f746ba52eaf94c4c0a7
SHA1 83e7abe8c919c75660b4f7e327dae54a92064bb1
SHA512 21521aac07b47a3386dd789a5ccdbe0175799dfbfe5758670a35a6b642b89578ecfaa4e0086dfe3b734bce1af317671339aa2f5650705ac317b182c01c193f3c
SSDEEP 98304:GhDYh+CeHpUwnAJV84AB9Jn8Ed00k9Tfd1WKh:2lJHpUwkO4QD8Ed0XBdoKh
TLSH
T184B66C62E7E480E0E6B3D2758D3AC672F672BC4129B1A71B5295C60FAF336805D3C725
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OSE.EXE

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\suspicious\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE
Size 257KB
SHA256 8c47f981e1a46a42a268f53ef1b1476555a54bed7077f7b13b1e562c4c9c049e
MD5 17dc54ade85613728a43f2d733527c5e
SHA1 6420a7744edb234f8cf989b7f261265baa381e94
SHA512 632541e69c61398c3eb07ea7b8e7a21a6a765b592939f091bf8319cacbf7f294860e5f80c82e8e7ab29e2a20e67dd4d1e34171b2c5858d30ce9b9bcbe167ee43
SSDEEP 6144:bmw5HEiIsCCINUGBZjgXwYz4WDZSFxgHiGfE:bmw5HEjsChNVBFgl0WDm+Cp
TLSH
T1E8446C4677A40CF9E96795388697C536FBF2B8022A21DB1F0760C65B5F33351AE2DB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

elevation_service.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\suspicious\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
Size 2.3MB
SHA256 d31094b8bbdd28d04cf290eca7920804b0052ab83faeffa84e799c4a3d45d1a4
MD5 f9a5b444d4032ef6d0247e8327cca3ac
SHA1 e6ac15d499bfff2af238e9dc8009cfdd15a08de3
SHA512 3989c59eff0ba479ad97470a283cfa99977a588fce26b7cbc16c2195496fab7fb225dd53d5d64764702998187ff88a1ecc7eefa515739c5bb6d01849ac937c96
SSDEEP 49152:FB+taZ3usBWOBr4tEGW0bqx0z+n217aau1gl3:ru6Jm0xd2d3
TLSH
T129B57C13F1DA01E8D06ED478974A9233EA62BC490B35B6DF0A9073562E77EE46B3D710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

svchost.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\suspicious\Windows\System32\svchost.exe
Size 86KB
SHA256 324451797ac909a4dd40c7a2f7347ef91f6b7c786941ad5035f609c0fc15edaa
MD5 0cd128f416a04c06d50ec56392c25d9f
SHA1 55efb424933087d755b18468bc574db4463d9ce6
SHA512 7d71e09d063a1f805abfb5d584b59e5cbf4ee357b67d48c3cd880ca904224bdb2684646829dcebc7ef59fafaa25c4ba82a9bc96ee740e68ff7736513eed058a0
SSDEEP 1536:fLXMvWgR/K1oAoJVqHY5uZgSV+lLNsUP4SzG:fmR/K1oAowY5jSQZrwSa
TLSH
T186835A9EAAE830D5F57A917484724256B972B930271096FF42D0C03D4F37BE4AB39F86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tcpvcon.exe

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tcpvcon.exe
Size 197KB
SHA256 37621bdac3ced1103278e8c0ef7b73dfa1cbe9becfbaff421a46fbc78d636b5f
MD5 356ed0fc156993551a484964f99e65b8
SHA1 6b936b5a5b4451bc4f147dad6cd2a7072a799d03
SHA512 8060b018f256ddf4dbde002b6d6b526362c617cbe8f1930a88cb4f191542240530658e8a7b6ed5c496436bcafaac0a6898e67187c3c8854e73ce6f66809c5fd0
SSDEEP 3072:A/H4UqjYVxwTcy4jPPZAjjF/hd8i2pzjGf9j3nPR1IIqQdUF1cePZGkjqjR96xUj:AP4BjYVeTfjF/r8x3GlDnpCaO0Mxg
TLSH
T19B144A18B2E08072E5B73A3069F4D6729D3EBD705F34D99F6794466D1E71AC08A30B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Autorunsc.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tools\Autorunsc.txt
Size 15KB
SHA256 4766c91ca8ad6bfb16180be0cc5396cf5f8b7028895aa7bd7a5620f59674a73d
MD5 da42eec1339fa71d2006efaba25bd34c
SHA1 2c43e46b3b54a70a86a95693a960d644833fa544
SHA512 fc64be20e4723e0497f5f6b7597925a2757eaf800c85075b4d3dd8b16bb689dd495a841dc63532a8c604e7449cc22b854ddfebf43837935acb493201441ce9d0
SSDEEP 96:niuc8vMmuc8vMPlsMQ8hqPTjLW983UCSNduTOcvOchKex3IbZ4q8UqmMSUCsK8UC:MRL3ygG9Pg2HFvFp2ehrQ/QM
TLSH
T14472E414EBF91218F7F29F5669B998669A37BC265C2EC9CC02600F4D0835E15EC70B3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ComputerInfo.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tools\ComputerInfo.txt
Size 12KB
SHA256 e081d68f46d9bde217dc2418246428cd5323ee399ec26d78bef0972a53d7e221
MD5 17f90c2baf254e8c5e226d22ff912321
SHA1 93c5372d0737612193a4dfbec3659ba7c912375a
SHA512 bde8cd63c161c12c2c4db6f30403d8468d4da20351996ef623a1b91e13c9fccd3f807ea5f5a5f80c780dcb290d974f0cba4c687773734bc1c8a672a61fdc78a4
SSDEEP 192:23AREr9Wws1/8TjCi8zOwnoKNxGHcf/U8qb1:2N9aoKXg
TLSH
T18A424F6759C8817BF89A053822519733FEE1AE463CC3731C708FA9049BA73487316B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DNSCache.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tools\DNSCache.txt
Size 10KB
SHA256 e2f321039568b07ad12a47059502deba0fdc7f505f285f84c75c06ec9619eb3e
MD5 5d5eb99d2859cb09727fe2d34c1416bf
SHA1 2ae2fcb4e8f5c0ee2c001934d0a0e2f7ab8fc0b5
SHA512 6db3007b90f1993887a338f888246b1c38cd2f3e058ff5d921a092a250f140c9a83a764213489c590636823a1b563171ebe7fa406a17db346b2201f6c9867199
SSDEEP 192:Dw5AV2ywsQJomQ2dSRbqCRDm5GoIzEjrzi2C:iq
TLSH
T16E22042B9E0A32071731CA32AE1531B7DB09BD2B858FD9593D9F41C84F71486269D2AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Handle.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tools\Handle.txt
Size 1007KB
SHA256 4626caeecc6db3839b3bcba225aa330b3a5598546bf691747aa9acaded31911e
MD5 1cc037f14fe6b138dcbcc35251e98aff
SHA1 642b777ecb76172fd0c4730572bf8c80ec611614
SHA512 0a241bc325ac4b66890409dea49a22dbe14c84721992aefc7ce6d02eaa169814f4d799bc35d22e98f84ff45bf5cb6fb8e08534b79de3193fd1ed3828795cd3d0
SSDEEP 6144:8BTeXG84cevb38FNPmXrP7K+Nlamn6m5KxQmatoBh3qxduPnbcbLsYvR7Q4a2Dcq:fZCsVvpgxn
TLSH
T1B22559050502CAB14372E33432044A07D7E5D7E76A737C39319F6AA49B7339A7E9E2A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IPConfig.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tools\IPConfig.txt
Size 1022B
SHA256 9bb0156b153004b4e3176e62342c53a2926e6dc73aa1d6ff111c11563ab953dc
MD5 c33e28d6e77053afc595a79712daa997
SHA1 41aa70d5e90e3ddb27f6051d70b599a4b90fb8d6
SHA512 84687754052815980d2bf7fab1e5421ca6908ae1ad246f6b430a2ba9a8c4336e29fa9597004bf2b12e5972185d90b1ab6d8c3e0eb24d02b69b26778a1c3ce195
TLSH
T12311F15C02B8F403377986011CE55B35E0E84E53C003E5A1BDADA688BC321B4A7419D3
MD5 SHA1 SHA512 TLSH

Submit Download

ListDLLs.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tools\ListDLLs.txt
Size 241KB
SHA256 3c736dc0ad9516042fff13fbe39a8caf34bcc0bb0bd2074b238be15dd9f114f6
MD5 2c0d2fd1a70a2d041dc09b50a1ab9535
SHA1 dc27a46321e0ab6ce870638d5c71602d5455b634
SHA512 84f90a8e0c847657bad651548745dfcba777c642fe3bcac3542f98bfb39de49ac0275e6299555b112ba591f1a6799876f791cad631f451b791b280f460a14770
SSDEEP 1536:XMLa0XsRdcC90Ui+ZORj3GY9Al3dFoNmTLY+1CzhggQ:AMJ4GseCzW
TLSH
T115341E588EE44CA0C170CC28750BFE5CD2ADB5A676D366F2135562C1E96710BAE3F8BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NetShare.csv

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tools\NetShare.csv
Size 501B
SHA256 4acd111ea9e3a63fdf21a06d7f10e6914b58cbe88ca36370797681f4a605ca5b
MD5 e512078070991c5f3877f20be00d949a
SHA1 04727b0caa89d9d3108ae87de14f45f2e7923843
SHA512 b5820d584cb44f804c2fbc140b2e9e5d1a1327da74f47ae6fa1fe1c55e5aafb8649c9c750cbf8a45eca95e67a9c4cd551f235a33a550e8691182b4149f9d1417
TLSH
T1C2F022057C0DC1260231C343C299A921C8828B4570231000BA3EB2C85B78283AECC8C4
MD5 SHA1 SHA512 TLSH

Submit Download

NetStat.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tools\NetStat.txt
Size 6KB
SHA256 7f7e400e046e5b4924de80d59523d4fe2579b36339c738d517dd8b1354807314
MD5 50428d26f433b36cf3735a6676f46d8e
SHA1 8e94209d5467e865c1a32161dec6a0ab928df115
SHA512 47909025df443f574e9818121dc3588ac42cc736f18cdf5a566b71769816051426ae6267ff505845371cbaf74e982185372e69ce9d55335ebee998e5c4e6f77e
SSDEEP 192:I0QHCDomfu48xdeSez5uoIZQ5FeMuwOWf:I0Amfu48xdeSez5uoIZQ/eMuwOWf
TLSH
T1DED1D6A3622CB5C930BED612411EE957D86D4296391F601F7DAE49D0C31868E7FBF08C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PSList.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tools\PSList.txt
Size 7KB
SHA256 ec0125462f3c9069b95aa10f5a9d3de8d658c906e7b327630bae2e7e32fb1555
MD5 2715c58dc2306e460d4470c159795c21
SHA1 eb06be7c130b417933bb51e0cd558a3fb86e7bf3
SHA512 9921635b9a81060b0112e8356aaad22e0dc3e975145a73443b05b1ca88bf43fb736e1c479deb0078035910b286aab29b9090e3cfcfa4a3ea4190bcc70b9975b5
SSDEEP 96:1KcviZvi/8OEzQZvzwGhIavwvM1U+flfHZoHyxooBf+2hzzWNo:1h0ytvEsIavyM7lfHZoTo9WNo
TLSH
T16AF120486B3DE788B128F683532912532609901297D28C6B374F5DE8976B107FFEE43E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PSService.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tools\PSService.txt
Size 125KB
SHA256 c68cbb591694923917c985c0f3643b1cbc65dde11e04c731dedc01e3190ab7ed
MD5 0c7c7b31186abf556aca53911ac6d3a0
SHA1 2841d7d01a8ae121e2f04786045485b24d06f008
SHA512 70056d78b6612d0b04a181740f28e5c6ab39929bf3cecd02825e37a5c91a1688c79e4c64990013b9e35679d70de2dae3eff886d45451699c12dde93e21e47a14
SSDEEP 1536:p9wH10wYMG0p1uFRoKltRtXIWm/vitzs/hNhX/ep1zyo:pouV0p1uFKovtHm/vi65rX/oFyo
TLSH
T12CC333038ACD635D0F1782623E3A5057ABDE568E69B05F1139ED39E833AD55CC3A18EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PipeList.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tools\PipeList.txt
Size 2KB
SHA256 dcc0cdc54d9257ab32a8b910fab1d7bec164d622c11a27a90cc75454cd145557
MD5 08eb510f19067a3ef70ce26ee92d7711
SHA1 ef12d75b9a9b0398835e5d64444b18485060540d
SHA512 dfb4c2e4a1846da9e1bc7685ed601ac337240152fa0534e6899f9d1f3efb2923968c625e7c1597ce56b7a9e87ebe0a83102523cda53edba41bc88a176ea89d52
TLSH
T1454102B52E5D6678126FC3167163BC60C068E8800013F536768DBFDA6BB0E942FCE14A
MD5 SHA1 SHA512 TLSH

Submit Download

PortsInfo.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tools\PortsInfo.txt
Size 130B
SHA256 b3df50444861630240f4ab67d33416c8f57bdf8633dabd1b5a6eb5c562eae929
MD5 a71e5ba84c784766d47d761327386b8f
SHA1 639bd53c2cf68b2f8d6645711f7d326d56db4bcf
SHA512 8f07bef220ced52b2a4ae121ce1f51426891bdb7e400873ee136d50e28d514393b6d38711a999a6a80e2431892d7d88845fdcd56ded86e5987dceea55003e4dc
TLSH
T100C01212020071CD64190601415DCC80E859006F1E0D1019704C9A4003F032D1D55804
MD5 SHA1 SHA512 TLSH

Submit Download

ProcDetailsInfo.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tools\ProcDetailsInfo.txt
Size 63KB
SHA256 2c3826e665f386808a74dfa1d5b412d32b9d4f96e633e0a54c1721cb84b6e74f
MD5 56120907964efce1c52cb6db9d8ec724
SHA1 90ae82a3c85d87a9aac5b2bd233e69f084d687c4
SHA512 16d16e2480f442a884959a2f5e14832630470f29903fec040a0090199201a0b02b1c6bb2a4ff9d8517d50fc08709791357eb4f775aeb6b4aa58c99ecd0c577c1
SSDEEP 384:vGc1PbVbtV13tBxVhlzRqaXmgL8WKpQcAWgGc1PbVbtV13tBxVhlzRrQ2b1PbthA:hXmm8nVAs
TLSH
T16853E754C8788DA7528C793B7ABD4B839252829B0C193C01BB5CC54C5F9D23FA9B37DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProcInfo.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tools\ProcInfo.txt
Size 4KB
SHA256 4a0c258b1ef634033497f2d16a066fbb08f8284a139feda31de2a24c996b6d83
MD5 49132100541519299b3267e6b52c4c28
SHA1 15068ac84aafecbac51b05c618b4f9faeb30702e
SHA512 8a15bfa88b606c85fa5fa155f33319f016a3a482e10b926aabeb5da49f1c17e488b59f66199661f2093af67fa9d14994abc24ec4eb3f0a59ef98273f8dbbb4f7
SSDEEP 24:cOXTBnHxYpkHkGkDeSGwGEGe15QGpGmG8GJGDGSGVGFGrGoG2GmGPQGSG0GkGeGg:c+wKcys5AM4iAoAxgXs2sov2PGVHkD
TLSH
T1E9A17B18720E6279E115AF7F06B022095ABF8212A16725F4B5FD6CD86C4842CD4EDFAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SystemInfo.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tools\SystemInfo.txt
Size 2KB
SHA256 4ce2c700fd479f9d4aa4a84b0d337e7b4b534845db8b414f3b606f7a240672d3
MD5 ab32eb3acac1fb8f579046415e4acce7
SHA1 84151993770f0b397b554373083205471d1f0d4a
SHA512 a179742b14d4b25c0c1671259cf7a592cb949ca4a1647446a4531899813f7935e4536106ee0bb8b3dcee6b73d19e474576d451bb94d3a2dfeb29b96c315e2f83
TLSH
T1665186B88254B1703E6EC6652353DB02F4B195C7A6F5423930DD82849FFA398E3E5B2D
MD5 SHA1 SHA512 TLSH

Submit Download

TCPvCon.txt

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tools\TCPvCon.txt
Size 6KB
SHA256 5d0b06bd392dfa6fe9222d4acce4d7357a4ee2ef1245e3e7ff4cf144023c6b1c
MD5 2134471dcce864deaec45c7390c856da
SHA1 2191ec5e124714d4d6ece51703573c0f9823d9a4
SHA512 8bb65428d318d81a0b993d62a11d8eea126c283595ade532bd930f548eff0d307ab09845c017d140b9242e44e6db595b4f68a3e043d30cedb52524878e14d65a
SSDEEP 96:puVyPdizari01VUB221V2vQZxBBgaaBBam:puVyP6Oi01VUB221V2vQfBBgaaBBam
TLSH
T1BAD1728BFA15E90788EF259B203F8866FDB9484E315672C4F14C86DCEE156D8C368E71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TaskList.csv

Path C:\Users\Admin\AppData\Local\Temp\Aralez_Sldtiybl_2026-08-15_10-27-54\tools\TaskList.csv
Size 9KB
SHA256 60d8fc309a0e336b674c8cac9f262cc2bb152eaecafc75922f7d3eeb3066672b
MD5 519a8b2d7e9b4c9289346ad7335c4dbc
SHA1 16be56a7166825b0b59f7e9f030966c39ce5ed79
SHA512 440312ac5a81094a65e700e68fbc1fa20e463a197fca795bf9a129ac470d61976dbbb53eca00dacc4d2c325259bf46c97f417255d87a7ab42674c006080757f1
SSDEEP 192:zA1lVDmdt2dDn7TlmemmRmaRXobvUSo6ZV3ohkVd:Epqdte7Tw/FMXqcSThowd
TLSH
T199123C1D51D2CBF24BE6FC72EF41E31F515DE62161C26A5FB6C6621EE0E092C9433682
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_tx4wpvsx.sjg.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_tx4wpvsx.sjg.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

handle64.exe

Path C:\Users\Admin\AppData\Local\Temp\handle64.exe
Size 406KB
SHA256 24bafcc570cc9bbb6b6e6652a57a519e0464e3996891aaba6f55299cce20b04f
MD5 89f845fc4898f2d47a3a81f0b57c60f1
SHA1 b04a2347a0f94e87215424d816f9912c7bc248d5
SHA512 50bc14c4221ad984c3aa98327ee9127f7470a9a2b0a953544440a7b05f60f7f91209a96bd87d0d8f1e05551863dd43193f7f4231f382d6ad75d9f0a245939f04
SSDEEP 6144:MjRme/IYVCQ45De1/8GzfaD3f7oxakAuXeh3ohaYLCAyI5ub:MN9rVY5C1lq7oFpuoIGi
TLSH
T12A948E05F7E400E9E5B7A6348D758546DA727C594B30D6AF23A4866E1F33BC08E39B32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/260-2657-0x0000000005F60000-0x0000000005F7A000-memory.dmp

Download

memory/260-2618-0x00000000053D0000-0x00000000053F2000-memory.dmp

Download

memory/260-2659-0x0000000007250000-0x000000000780A000-memory.dmp

Download

memory/260-2660-0x0000000006D10000-0x0000000006D46000-memory.dmp

Download

memory/260-2656-0x0000000006BF0000-0x0000000006C86000-memory.dmp

Download

memory/260-2658-0x0000000005FB0000-0x0000000005FD2000-memory.dmp

Download

memory/260-2612-0x0000000002240000-0x0000000002276000-memory.dmp

Download

memory/260-2617-0x0000000004D80000-0x00000000053CA000-memory.dmp

Download

memory/260-2622-0x00000000054E0000-0x0000000005546000-memory.dmp

Download

memory/260-2623-0x0000000005600000-0x000000000595B000-memory.dmp

Download

memory/260-2621-0x0000000005470000-0x00000000054D6000-memory.dmp

Download

memory/260-2624-0x0000000005A80000-0x0000000005A9E000-memory.dmp

Download

memory/260-2631-0x0000000005BD0000-0x0000000005C1C000-memory.dmp

Download

memory/6304-2716-0x0000000007340000-0x0000000007351000-memory.dmp

Download

memory/6304-2705-0x00000000703B0000-0x00000000703FC000-memory.dmp

Download

memory/6304-2708-0x00000000063D0000-0x00000000063F0000-memory.dmp

Download

memory/6304-2709-0x0000000007000000-0x00000000070A3000-memory.dmp

Download

memory/6304-2710-0x0000000007790000-0x0000000007E0C000-memory.dmp

Download

memory/6304-2711-0x00000000071C0000-0x00000000071CA000-memory.dmp

Download