e0dae1a04b7a3b2ae07377b0fd00681e9633532788870b3709a9e149f3ccf0e0

Analysis

user interaction
yes
max time kernel
298s
max time network
196s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/07/2026, 01:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Procuracao_Digital.exe
Size 62.9MB
Sample260706-bt2djsg121
SHA256 e0dae1a04b7a3b2ae07377b0fd00681e9633532788870b3709a9e149f3ccf0e0
MD5 15801b64c170752caaf1fa329f946382
SHA1 ddeb7b9b6bf4e88544ef0576c74726805148d4fe
SHA512 62733960e4692d146c770c9672f2081726d02378ffa87dedb92472c534eec33fc765dd0fe774fb676f16925aab469fabc365abac261087680ab5b8930708dd39
SSDEEP 1572864:GAb5tU/EvsBLTW4qIIbDNCRJ062JC3JuuODB7SUOTa1K5X:GAb5tUesoaI/NS2KJ0DUUaa1K1
TLSH
T18AE73337F149523BE0AA2B355EB3A124983B96504C928D1BC7EC759CCB356303E7B297
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery installer persistence

Malware Config

Signatures

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\electron.app.Boost Note = "C:\\Users\\Admin\\AppData\\Local\\SuperPlusifySuperUtilware\\Boost Note.exe"	Boost Note.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\electron.app.Boost Note = "C:\\Users\\Admin\\AppData\\Local\\SuperPlusifySuperUtilware\\Boost Note.exe"	Boost Note.exe

Executes dropped EXE 9 IoCs

pid	Process
2096	Procuracao_Digital.tmp
3244	Boost Note.exe
4304	Boost Note.exe
1308	Boost Note.exe
2404	Boost Note.exe
2408	Boost Note.exe
4288	Boost Note.exe
3820	Boost Note.exe
3916	Boost Note.exe

Loads dropped DLL 14 IoCs

pid	Process
3244	Boost Note.exe
4304	Boost Note.exe
4304	Boost Note.exe
4304	Boost Note.exe
4304	Boost Note.exe
1308	Boost Note.exe
2404	Boost Note.exe
2408	Boost Note.exe
2408	Boost Note.exe
2408	Boost Note.exe
2408	Boost Note.exe
4288	Boost Note.exe
3820	Boost Note.exe
3916	Boost Note.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Procuracao_Digital.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Procuracao_Digital.tmp

Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/memory/992-0-0x00000000001E0000-0x00000000002C8000-memory.dmp	innosetup
behavioral1/memory/992-2401-0x00000000001E0000-0x00000000002C8000-memory.dmp	innosetup

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
1308	Boost Note.exe
1308	Boost Note.exe
4288	Boost Note.exe
4288	Boost Note.exe
3820	Boost Note.exe
3820	Boost Note.exe
3820	Boost Note.exe
3820	Boost Note.exe
3916	Boost Note.exe
3916	Boost Note.exe
3916	Boost Note.exe
3916	Boost Note.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 992 wrote to memory of 2096	992	Procuracao_Digital.exe	86
PID 2096 wrote to memory of 3244	2096	Procuracao_Digital.tmp	99
PID 3244 wrote to memory of 4304	3244	Boost Note.exe	100
PID 3244 wrote to memory of 1308	3244	Boost Note.exe	103
PID 2404 wrote to memory of 2408	2404	Boost Note.exe	107
PID 2404 wrote to memory of 4288	2404	Boost Note.exe	108
PID 3244 wrote to memory of 3820	3244	Boost Note.exe	120
PID 2404 wrote to memory of 3916	2404	Boost Note.exe	121

C:\Users\Admin\AppData\Local\Temp\Procuracao_Digital.exe
"C:\Users\Admin\AppData\Local\Temp\Procuracao_Digital.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:992
- C:\Users\Admin\AppData\Local\Temp\is-BV5CO87PHO.tmp\Procuracao_Digital.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-BV5CO87PHO.tmp\Procuracao_Digital.tmp" /SL5="$9016A,64665588,887296,C:\Users\Admin\AppData\Local\Temp\Procuracao_Digital.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:2096
- - C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\Boost Note.exe
    "C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\Boost Note.exe"
    3⤵
    - Adds Run key to start application
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious use of WriteProcessMemory
    PID:3244
  - - C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\Boost Note.exe
      "C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\Boost Note.exe" --type=gpu-process --field-trial-handle=1772,15671339292310131863,17802636678946935725,131072 --enable-features=WebComponentsV0Enabled --disable-features=CertVerifierService,CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1780 /prefetch:2
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:4304
  - - C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\Boost Note.exe
      "C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\Boost Note.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1772,15671339292310131863,17802636678946935725,131072 --enable-features=WebComponentsV0Enabled --disable-features=CertVerifierService,CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=2084 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Suspicious behavior: EnumeratesProcesses
      PID:1308
  - - C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\Boost Note.exe
      "C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\Boost Note.exe" --type=gpu-process --field-trial-handle=1772,15671339292310131863,17802636678946935725,131072 --enable-features=WebComponentsV0Enabled --disable-features=CertVerifierService,CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1020 /prefetch:2
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Suspicious behavior: EnumeratesProcesses
      PID:3820

C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\Boost Note.exe
"C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\Boost Note.exe"
1⤵
- Adds Run key to start application
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2404
- C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\Boost Note.exe
  "C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\Boost Note.exe" --type=gpu-process --field-trial-handle=1852,13365280027764967184,12763390047325605992,131072 --enable-features=WebComponentsV0Enabled --disable-features=CertVerifierService,CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1860 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2408
- C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\Boost Note.exe
  "C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\Boost Note.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1852,13365280027764967184,12763390047325605992,131072 --enable-features=WebComponentsV0Enabled --disable-features=CertVerifierService,CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=2160 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:4288
- C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\Boost Note.exe
  "C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\Boost Note.exe" --type=gpu-process --field-trial-handle=1852,13365280027764967184,12763390047325605992,131072 --enable-features=WebComponentsV0Enabled --disable-features=CertVerifierService,CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2180 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:3916

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\chrome_100_percent.pak
Size 123KB
SHA256 f1a935db8236203cbc1dcbb9672d98e0bd2fa514429a3f2f82a26e0eb23a4ff9
MD5 a59ea69d64bf4f748401dc5a46a65854
SHA1 111c4cc792991faf947a33386a5862e3205b0cff
SHA512 12a1d953df00b6464ecc132a6e5b9ec3b301c7b3cefe12cbcad27a496d2d218f89e2087dd01d293d37f29391937fcbad937f7d5cf2a6f303539883e2afe3dacd
SSDEEP 3072:YerKzw9bpxlr+bEfF2DGb0+VvfGGY304F2DExm/KLQ2I:YeKzw9Vh90Gb0OveGe04mExhLY
TLSH
T187C3D0D373F0ED7DCF6756B7A52A41B1ECB302391A92034A469AD8356A27348DDC8393
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\chrome_200_percent.pak
Size 183KB
SHA256 7f9ded50d81c50f9c6ed89591fa621fabbd45cef150c8aabcceb3b7a9de5603b
MD5 1985b8fc603db4d83df72cfaeeac7c50
SHA1 5b02363de1c193827062bfa628261b1ec16bd8cf
SHA512 27e90dd18cbce0e27c70b395895ef60a8d2f2f3c3f2ca38f48b7ecf6b0d5e6fefbe88df7e7c98224222b34ff0fbd60268fdec17440f1055535a79002044c955b
SSDEEP 3072:yDfDQYaEM+9bslr+bEfEfRIGMR+F8fQnYw9pGbXGYoDd+qHqRxmeK/rIM0:6DQYaF+9bMhCWGMRe8InVXYopym74
TLSH
T12E04D1D7A3F49D3CDAB30A77553A01F1ECB6127516A3424A42DBAC347A5678C4CC9293
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\d3dcompiler_47.dll
Size 4.3MB
SHA256 44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
MD5 7641e39b7da4077084d2afe7c31032e0
SHA1 2256644f69435ff2fee76deb04d918083960d1eb
SHA512 8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5
SSDEEP 49152:aYlc/220PPiMLKam+VMrLi21f4i3jn5ZO3XUDmOZQwVd2uQpN3WsGVUWd55i/jrs:a6KD2Mrdaix4NQnLt
TLSH
T16F267D5677A840A9C27BC178CA574313EBB1781403349BEF55A0C665EF33BD26E3A728
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\ffmpeg.dll
Size 2.7MB
SHA256 8653b57b37618f11e358c93aad9dc9ef0193f0288f7e59147194e42b0842b50e
MD5 b34d74a152e1788532b0acfa8cfbdf1e
SHA1 e99e5a26d8b695b57cb1a1bb0d2c032d822d0461
SHA512 06f8def21101d8c899c321b3a445e6838f824d6d6305d569b49fb7ad14a197a57c601a8965c50057e7af1d5414b74dd2c79e2f27a58eedab31b3b36202947dd9
SSDEEP 49152:nSFoiJBtTcoQ9mjUBA6vXH4VjB0kxryYTK8gJ2EDE+oM0iloSa08UHdiVqAy6cTC:ijUBA656ryEpEdiVq4
TLSH
T1DFD59D0BF2A645DDC029C53083AFA233F934394A4725A6EF16A156252F3FFD0667EB05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\icudtl.dat
Size 9.9MB
SHA256 02db39ba465fc8b7a4cd280732760f29911edde87b331bf7cea7677e94d483e0
MD5 70499b58dc18e7ee1d7452a1d7a8bc6e
SHA1 41c5382f08c6a88670ce73a20c0dcdb3822f19e9
SHA512 a80939e9809bb7d20f00ad685c94d5c182fa729616c975e605abf09afb58376be73a49fefa35b75ed1a284eccf208af7656c8df44c5959df7eaf51367d232dc6
SSDEEP 196608:uUGwSv9AAQnt6liXUxR0rHa93WhlU6t7CLhl:uoKlQnAliXUxR0rHa93WhlU6t+Ln
TLSH
T131A63947A2FB4DC2F9FBAF30D8F452679467BD496E32805A11042F3B5C373A096617A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\locales\en-US.pak
Size 85KB
SHA256 ac1cdb4fb4d9fb27a908ed0e24cc9cc2bd885bc3ffba7e08b0b907fd4d1a8c4b
MD5 6bbeeb72daebc3b0cbd9c39e820c87a9
SHA1 bd9ebec2d3fc03a2b27f128cf2660b33a3344f43
SHA512 66944fb1abcc2a7e08e5fd8a2cee53eb9da57653d7880aea226f25879e26379f7d745ebf62a3518378fa503f3a31b3ea3716f49fe4c7db4f4af0228b81b53a10
SSDEEP 1536:MzBh0wu6Y90fYSKD0R4RlQ2trhWMJ5dBxgMSO0JedMVrBHhQYVfD3ggl+C/fpkwG:6hp1YSwhBxgrvQY3ggl+CGwG
TLSH
T1BB835E1BE3C41266099243227F06E3B6AB26D079936311663C6CC16C3777FA982777E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\resources.pak
Size 4.9MB
SHA256 367467609a389b67600628760c26732fc1a25f563f73263bc2c4bf6eec9033df
MD5 5507bc28022b806ea7a3c3bc65a1c256
SHA1 9f8d3a56fef7374c46cd3557f73855d585692b54
SHA512 ae698d4feacc3e908981ee44df3a9d76e42a39bf083eaf099442ace2b863f882b43232e26e2c18051ca7aec81dccef5742acc7b82fb0cda2e14086b14d5a9a26
SSDEEP 98304:1jMQZikLH2tMPwSGBNumogFJlFlh1wTJntwyqWBsCiLeD8crwrb:tMqimHmGfgfhyTh8YsCi6Qckrb
TLSH
T1FB362302F2E4283BC6DB31766C6BA161B73444471068BD2E7A9D52DCAF5492802FEFF5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\resources\app\index.js
Size 233KB
SHA256 71f69978667dc421e7edf8885e9f3bde9dd527d9f7974228c9a6eac84c2ab71c
MD5 187bab3548439b4b11a1fdbcea7b22d5
SHA1 a5cf8162403fd63254c046f116fac364f0216fb6
SHA512 b5fdde90286e4087a52b3e5e1fa846b0b53520a804afc674942b512eab7bccf76d7b5bfa0cb6aa5902fb91baf6794268abc340591dc3be6f1f21db98b84916ef
SSDEEP 3072:ZnxPxK7CEeBpt0aaAI5hRwvvCpJwm6z8u0cFAVgKo4imY6KX1J56MY8:NxxKGhiaaAI9P6z8u0d+UY6Kl9Y8
TLSH
T16134E88437D1B16B810D24763A5B2029F8ADDCC2364D4898E3E568D2FF7E31596BBB34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\resources\app\package.json
Size 326B
SHA256 ed559a3a3027667ce6302f1debaed9aef5bef1c6d4236ec4da01199b398f78b2
MD5 48f234e36eba960bf0f66519a219e17e
SHA1 988d574c95e613f177e81417c590540f77ed9845
SHA512 08ac57c789dd209ceebdc73d5ee709ee141811f0955b982454c3459eeac9353eec08aac68646d18c55a181a1f5f64f56fcbebe203597dabef54f2deb40e5e276
TLSH
T128E08C18DC499E23129B888A3068014728612C079959F80DB79E930C1E5C96FB2FCAAD
MD5 SHA1 SHA512 TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\swiftshader\libEGL.dll
Size 458KB
SHA256 bfd1d3fb9e50a3d9a58d9c62663fbf46bedcac24744020b801c9bb4cdc55f977
MD5 21a07ee229edc5d8de61de97f1a65210
SHA1 a60f93adbad349e25cca0eca5a81c78fbf24f133
SHA512 6375d8bda8cc187f79f6ea0cfd8358ac0d85508327f44d0bbcca641a934fa2b690933eb1ab588821a2f63f6615b1926aa433bc759b787015170aff11e633d0e4
SSDEEP 6144:e6txlbRay7iVeTIM4gkZ8A9YfCmpmXZvrpeK8MbhGG+gwLuggcAgAeG4:ePZ4IM4u7BmXZXGuTcAD
TLSH
T13CA47C16B7A504A9D036C4348A574A43DA71B8DA0F74EBEF0294A27D2F7B7E05F39324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libglesv2.dll

Path C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\swiftshader\libglesv2.dll
Size 3.1MB
SHA256 54b6e787450bfcebed843ad1dafb31ca0904a908131d1005b567513ee8e2db46
MD5 07a0f70d8e06fcb7e9063f39c0ab8c68
SHA1 896f3401b019c31ab1de2a376a66829daceccadb
SHA512 f58e4b23eca4aa4eef435288fc4d3740ea700debe82e083167a68df709c383f8bb7393ee74558acae8804ed105536ac86c5657912a98d284a1fc57dcf25586ff
SSDEEP 49152:cgnhCIFndJN3alVO7hUADGoJJ5AtyPzaaujA84dvCilHS4E0JhHHRBHpJbftopLw:TYIFnXoLfauC1DeFR
TLSH
T1EFE55A43E08880D9E05DD5BC874BA62EE132BC856B7272DF12946B222E77BF0573DB54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\SuperPlusifySuperUtilware\v8_context_snapshot.bin
Size 160KB
SHA256 31c3aa5645b5487bf484fd910379003786523f3063e946ef9b50d257d0ee5790
MD5 b64c1fc7d75234994012c86dc5af10a6
SHA1 d0d562b5735d28381d59d0d86078ff6b493a678e
SHA512 6218fcb74ef715030a2dd718c87b32f41e976dd4ce459c54a45341ee0f5ca5c927ad507d3afcffe7298b989e969885ed7fb72030ea59387609e8bd5c4b8eb60a
SSDEEP 3072:pBgpuz1xV9mRTUAnPH5lZw15qCy0CmiRNiA0hTBAzZs7q/JBXTPv:p4O1xoTPyqIRhTBAzZs7kJ1TPv
TLSH
T1F2F3121427D0829096ED4094A25B06E7C5D26C6D1E2CFF0A3BB5FD4C0AA3DCE55FE1B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Procuracao_Digital.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-BV5CO87PHO.tmp\Procuracao_Digital.tmp
Size 4.2MB
SHA256 9e09e924ace013429a51269a19e515e3b9d95cdedd08f3276f59fe21b5fc8cf5
MD5 e52874a33abad8e81758082835aa188b
SHA1 ce445547c53002893c0279ca98e259fa4f846208
SHA512 c7659dde612decbf96d3a68d439a68b36c3868ad0591093b3e7ce7dfaaf7737c84b2db5f74eb03bfd3bae308b6464b1bdb76df7582663dee65c3d490ddc79821
SSDEEP 49152:AC+KV5oP3m5US+sVlCGnmJc8cnoWwDgxtIDjVT0r333PhC:ACDLoUnnmJc8coWwDVT0r333Pc
TLSH
T1DC266D13F284653AE46B1A3B483BA658583F7F713A168C477BEC2D4C4E396406D2A7C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE_1ac153

Path C:\Users\Admin\AppData\Local\Temp\is-KS9KAWZTLQ.tmp\LICENSE_1ac153
Size 765B
SHA256 4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b
MD5 82703a69f6d7411dde679954c2fd9dca
SHA1 bb408e929caeb1731945b2ba54bc337edb87cc66
SHA512 3fa748e59fb3af0c5293530844faa9606d9271836489d2c8013417779d10cc180187f5e670477f9ec77d341e0ef64eab7dcfb876c6390f027bc6f869a12d0f46
TLSH
T1E401FD9FB2E26BD458D09B603DA16DC962CAB03B7803AA152468E298DB7740FA47A400
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE_3e3af4

Path C:\Users\Admin\AppData\Local\Temp\is-KS9KAWZTLQ.tmp\LICENSE_3e3af4
Size 1KB
SHA256 861908ec818ff6142fdd6c4b66d6264c206d3d5a46003b1342e1853a9a85abac
MD5 9a2baa6947d5018096b83508bd94026e
SHA1 cbe9761d4d16ad1a0a2007b305bc2951bf94be98
SHA512 6fea6e2f30885cdd6cae236637ef194fe9eb06276437e370c02eac651e170031980ab201ff5e8a95b7b5c21f24788fa93807d6c4f2cf79d5f71792e6e8a61fef
TLSH
T10C11421E72510B76189A13A05579A8D9B22BB25ABAAF2A84146EF245232A06CD5FB840
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE_541d35

Path C:\Users\Admin\AppData\Local\Temp\is-KS9KAWZTLQ.tmp\LICENSE_541d35
Size 1KB
SHA256 3fe8d55a98dbf260eace67c00cf9bc53edb46234e840098a0b93df3096b97fb6
MD5 9befe7026bf915886cd566a98117c80e
SHA1 a95ab3a4b0e4bd978897f09b3b430a449da20a08
SHA512 b52ba143042812d6dd1031a12946afddb6e8f8ebbc7169c59c138d16aafc5e261aae92fe6b1ea94a3d80e39d2415c4b219710ef46939a2df135db24a0cf712fb
TLSH
T14E11B91E735507761CAA13605579ACD9F12BB25F7A6F1A44146DF340133A06CD1FB840
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE_a9b8a8

Path C:\Users\Admin\AppData\Local\Temp\is-KS9KAWZTLQ.tmp\LICENSE_a9b8a8
Size 1KB
SHA256 0194571d45a06ea2a22ceb51f981e3be92525966d28847dbc0d9982603bf90de
MD5 78fd36a7284eb85369521bcb6e863186
SHA1 8ab3afa5af90b0fa4421252da279bf563b3c47b9
SHA512 265c0b9cb7e34ea63851a6bf0da02cd3da5beb2839b79bdec72607b26a5aeb0f34a812f37941d77c692f9f9799a706de704f41c9e0f360b8d40dbb9d0b416481
TLSH
T15511755EB251077228AB13A05578ACD5F23BB25F7A6F2A84246DF345233A06CD5FB840
MD5 SHA1 SHA512 TLSH

Submit Download

angular-sprintf.min.map

Path C:\Users\Admin\AppData\Local\Temp\is-KS9KAWZTLQ.tmp\angular-sprintf.min.map
Size 429B
SHA256 3d6885b5d3ebce0c1119d558c8784806cc79f076a5af8279051b7e94c412b697
MD5 88110c6656f210b1a33dfbacaca20bc8
SHA1 7e346bf1faac9cf2a443b934627d644c4a2a1e1e
SHA512 580fff2450e6afcf8be2d46fb46babfa89c157488cac31b322de78869ec3027067d345360cbf5a63b77a008f5213a608677263a507102e580f067a173a67d417
TLSH
T102E0E5F4CCC96D1869394DD9E4990E4C2BCEC09A7EDDF3114A94C56C4421F0DF0A0430
MD5 SHA1 SHA512 TLSH

Submit Download

license_d653f0

Path C:\Users\Admin\AppData\Local\Temp\is-KS9KAWZTLQ.tmp\license_d653f0
Size 1KB
SHA256 5c932d88256b4ab958f64a856fa48e8bd1f55bc1d96b8149c65689e0c61789d3
MD5 d5f2a6dd0192dcc7c833e50bb9017337
SHA1 80674912e3033be358331910ba27d5812369c2fc
SHA512 d1f336ff272bc6b96dc9a04a7d0ef8f02936dd594f514060340478ee575fe01d55fc7a174df5814a4faf72c8462b012998eca7bb898e3f9a3e87205fb9135af2
TLSH
T18221931E7254136318BA13A0696A6CC4B32BB11F7DAF6B8418ADF244233B46CD4FB840
MD5 SHA1 SHA512 TLSH

Submit Download

license_f462d0

Path C:\Users\Admin\AppData\Local\Temp\is-KS9KAWZTLQ.tmp\license_f462d0
Size 1KB
SHA256 48da2f39e100d4085767e94966b43f4fa95ff6a0698fba57ed460914e35f94a0
MD5 915042b5df33c31a6db2b37eadaa00e3
SHA1 5aaf48196ddd4d007a3067aa7f30303ca8e4b29c
SHA512 9c8b2def76ae5ffe4d636166bf9635d7abd69cdac4bf819a2145f7969646d39ae95c96364bc117f9fa544b98518c294233455d4f665af430c75d70798dd4ab13
TLSH
T1EC11931D7254136318BA13A069696CC4B32BB11F79AF6B8418AEF244233B46CD4FB840
MD5 SHA1 SHA512 TLSH

Submit Download

pako_inflate.js

Path C:\Users\Admin\AppData\Local\Temp\is-KS9KAWZTLQ.tmp\pako_inflate.js
Size 106KB
SHA256 ec7e5936c652800e132c63cc1fcd00c23103a6a10a294ed3736bab70e38fc592
MD5 18ba5b8f0f9d69b8443df838577b59c7
SHA1 f21e39c5004036d69c56ad7b0f81607d9687714f
SHA512 98eb3873b102823c64154922bc5bb60107a8e78de7ec8e0d7a9b0d332be23fc6c8eb456640e5513f193a7d92f33ddd0092bb0688e3ee29ea19a3516b5fc2bdac
SSDEEP 1536:VWiXPnKsErlxSelzMs7GfJUVuNhaScFDYRe:fs6ON7E/a7x
TLSH
T104B3F84526F3221B181660B5DB8F70A567E6911F430BD9643CAE83847F9063E82FDFE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

updateInfo.js.map

Path C:\Users\Admin\AppData\Local\Temp\is-KS9KAWZTLQ.tmp\updateInfo.js.map
Size 68B
SHA256 7318ccc42e283138707b3e67f39f03753f5ba998ab0d4e5bbe28fc79bc4f28e4
MD5 8d7f8e1cbd902a2427246d4831e90812
SHA1 608ab180e80eec4ce60ecad7fbdbabc055820342
SHA512 b6b21a0956d75d56105fcd38af04fe95bea39401f968a93873282d46f0919fe36c8fa91a330b08d91ed71927b35ae6830bea07dcad5a0fe4f5b75dd9e5a6b028
TLSH
T1F5A0028B58706F711F1007A908551FC272E1905AD80D405CD8D58C88573C01E4DD5C13
MD5 SHA1 SHA512 TLSH

Submit Download

daemon.log

Path C:\Users\Admin\AppData\Roaming\daemon.log
Size 8B
SHA256 5f1299d16606d39818af47ee34f276e6ecc558f723df7b9f69a6a700e269c2d2
MD5 930a9345f293b74f68970e4446abb61e
SHA1 31e3c5552aef88cb2a01f180ebe3799c7fa6c1ac
SHA512 23e736d7a393d2c79e53b01a2c6d91dc884a1cf4587348bad928ceb3c13ddcfbbc25661ea4c0bb7b8fa99bce48de06888b29157927ae0f046176e0a28b69ae6e
MD5 SHA1 SHA512

Submit Download

memory/992-0-0x00000000001E0000-0x00000000002C8000-memory.dmp

Download

memory/992-2401-0x00000000001E0000-0x00000000002C8000-memory.dmp

Download

memory/2096-5-0x00007FF8D6610000-0x00007FF8D6805000-memory.dmp

Download

memory/2096-2402-0x0000000000A20000-0x0000000000E6D000-memory.dmp

Download

memory/4304-2392-0x00007FF8D5700000-0x00007FF8D5701000-memory.dmp

Download