2a208c5668b12b99d1d1e50572cf24770bcf2b2c2a849aff7e16ad42fdbd8b93

Analysis

max time kernel
149s
max time network
169s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/07/2026, 09:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Supermium/Supermium (Classic Portable).cmd
Size 248B
Sample260701-lzqjcaa16m
SHA256 2a208c5668b12b99d1d1e50572cf24770bcf2b2c2a849aff7e16ad42fdbd8b93
MD5 b4d752e2506773ebb291f6ba4e296e1d
SHA1 0f0459bd3e98f77b6f5ae5cbe3f4534ee645e743
SHA512 4070352a4b67be5a93f1ed8aae55f4228fc0036532bd3a9e3a64882c4f0a1a969cd22c85b0a771d92de0aed4ac1b378d4bff2e4200d5ac8ccbf154701803c2d5
TLSH
T1E2D0974EB140BC2C380FE4323C2AADDB6F317E86930C1A2122241DA84FEB0A0421FDD2
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery persistence ransomware

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5044	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134273738835572389"	chrome.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe
2196	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe
Token: SeShutdownPrivilege	2196	chrome.exe
Token: SeCreatePagefilePrivilege	2196	chrome.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2196	chrome.exe

Suspicious use of WriteProcessMemory 43 IoCs

description	pid	Process	procid_target
PID 3696 wrote to memory of 2196	3696	cmd.exe	88
PID 2196 wrote to memory of 2524	2196	chrome.exe	89
PID 2524 wrote to memory of 4532	2524	chrome.exe	90
PID 2196 wrote to memory of 4556	2196	chrome.exe	91
PID 2196 wrote to memory of 5044	2196	chrome.exe	92
PID 2196 wrote to memory of 4556	2196	chrome.exe	91
PID 2196 wrote to memory of 1164	2196	chrome.exe	93
PID 2196 wrote to memory of 1164	2196	chrome.exe	93
PID 2196 wrote to memory of 2692	2196	chrome.exe	94
PID 2196 wrote to memory of 2692	2196	chrome.exe	94
PID 2196 wrote to memory of 5656	2196	chrome.exe	95
PID 2196 wrote to memory of 5656	2196	chrome.exe	95
PID 2196 wrote to memory of 4188	2196	chrome.exe	96
PID 2196 wrote to memory of 1344	2196	chrome.exe	98
PID 2196 wrote to memory of 5304	2196	chrome.exe	99
PID 2196 wrote to memory of 6092	2196	chrome.exe	100
PID 2196 wrote to memory of 6092	2196	chrome.exe	100
PID 2196 wrote to memory of 2980	2196	chrome.exe	101
PID 2196 wrote to memory of 5368	2196	chrome.exe	102
PID 2196 wrote to memory of 5336	2196	chrome.exe	103
PID 2196 wrote to memory of 1220	2196	chrome.exe	104
PID 2196 wrote to memory of 5072	2196	chrome.exe	105
PID 2196 wrote to memory of 2456	2196	chrome.exe	106
PID 2196 wrote to memory of 5176	2196	chrome.exe	107
PID 2196 wrote to memory of 2324	2196	chrome.exe	108
PID 2196 wrote to memory of 1984	2196	chrome.exe	109
PID 2196 wrote to memory of 1984	2196	chrome.exe	109
PID 2196 wrote to memory of 2200	2196	chrome.exe	110
PID 2196 wrote to memory of 2200	2196	chrome.exe	110
PID 2196 wrote to memory of 2776	2196	chrome.exe	111
PID 2196 wrote to memory of 2776	2196	chrome.exe	111
PID 2196 wrote to memory of 5508	2196	chrome.exe	112
PID 2196 wrote to memory of 5508	2196	chrome.exe	112
PID 2196 wrote to memory of 3328	2196	chrome.exe	113
PID 2196 wrote to memory of 3328	2196	chrome.exe	113
PID 2196 wrote to memory of 5428	2196	chrome.exe	114
PID 2196 wrote to memory of 5428	2196	chrome.exe	114
PID 2196 wrote to memory of 4072	2196	chrome.exe	115
PID 2196 wrote to memory of 4072	2196	chrome.exe	115
PID 2196 wrote to memory of 3392	2196	chrome.exe	116
PID 2196 wrote to memory of 3392	2196	chrome.exe	116
PID 2196 wrote to memory of 1880	2196	chrome.exe	117
PID 2196 wrote to memory of 1880	2196	chrome.exe	117

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Supermium\Supermium (Classic Portable).cmd"
1⤵
- Suspicious use of WriteProcessMemory
PID:3696
- C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
  chrome.exe --disable-encryption --disable-machine-id --user-data-dir=portable_data --classic-omnibox --classic-omnibox-border --compact-ui --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,TabHoverCards,PowerBookmarksSidePanel
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2196
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data /prefetch:4 --monitor-self --monitor-self-argument=--type=crashpad-handler --monitor-self-argument=--user-data-dir=C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data --monitor-self-argument=/prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Crashpad --annotation=plat=Win64 --annotation=prod=Supermium --annotation=ver=144.0.7559.252 --initial-client-data=0x198,0x19c,0x1a0,0x174,0x1a4,0x7fff6307ea38,0x7fff6307ea48,0x7fff6307ea58
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2524
  - - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
      C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data /prefetch:4 --no-periodic-tasks --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Crashpad --annotation=plat=Win64 --annotation=prod=Supermium --annotation=ver=144.0.7559.252 --initial-client-data=0x1c0,0x1f0,0x1f4,0x12c,0x1f8,0x7ff73d5b45a0,0x7ff73d5b45b0,0x7ff73d5b45c0
      4⤵
      PID:4532
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=gpu-process --user-data-dir=portable_data --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1632,i,10972148334641989516,12958108053103949094,262144 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1984 /prefetch:2
    3⤵
    PID:4556
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir=portable_data --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=1820,i,13974496802973980726,11781713659234354334,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2016 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5044
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=2312,i,12767610177187508209,9156042258751306182,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2332 /prefetch:13
    3⤵
    PID:1164
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=renderer --user-data-dir=portable_data --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=2976,i,18412334571450430258,6685061864410027438,2097152 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3008 /prefetch:1
    3⤵
    PID:2692
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=renderer --user-data-dir=portable_data --force-high-res-timeticks=disabled --start-stack-profiler --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=2984,i,17327721405846414857,4830166929138982256,2097152 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3012 /prefetch:1
    3⤵
    PID:5656
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=4736,i,5675937234315260914,13859232826494416606,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4740 /prefetch:14
    3⤵
    PID:4188
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5312,i,9704937261112236692,15585284573928728963,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=5316 /prefetch:14
    3⤵
    PID:1344
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5044,i,7925455038720792755,16131279744810350226,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4732 /prefetch:14
    3⤵
    PID:5304
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5336,i,9397785576333293961,15206011750547708475,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5396 /prefetch:14
    3⤵
    PID:6092
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5400,i,10255051832128575087,6737686673013392839,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5436 /prefetch:14
    3⤵
    PID:2980
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5592,i,10527056190804685677,3026998725591035399,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5596 /prefetch:14
    3⤵
    PID:5368
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5656,i,13925415433519161094,11004209693140527107,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5660 /prefetch:14
    3⤵
    PID:5336
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5708,i,7937374373358073156,16248836329382632074,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5376 /prefetch:14
    3⤵
    PID:1220
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5780,i,435172118782017019,11980885371214985507,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5776 /prefetch:14
    3⤵
    PID:5072
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5784,i,11686036659931916918,14878364242703878320,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5772 /prefetch:14
    3⤵
    PID:2456
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5312,i,14840911990120629591,11705107719238204889,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5336 /prefetch:14
    3⤵
    PID:5176
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5416,i,14852463518186293401,17602488129069872125,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=5852 /prefetch:14
    3⤵
    PID:2324
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5336,i,329641443112852823,1020637791759433204,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5772 /prefetch:14
    3⤵
    PID:1984
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=6020,i,4435262753992954555,16298035362728577247,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6032 /prefetch:14
    3⤵
    PID:2200
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5660,i,9176356541392142466,442917661862213289,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6000 /prefetch:14
    3⤵
    PID:2776
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5872,i,1936000372438754239,15393014003516857051,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=5864 /prefetch:14
    3⤵
    PID:5508
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5560,i,3749728897087017103,5212635229906656200,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5564 /prefetch:14
    3⤵
    PID:3328
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5724,i,5230990544596458137,2192933826387825529,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6168 /prefetch:14
    3⤵
    PID:5428
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=6320,i,8310091154710146358,5144312484039617615,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6332 /prefetch:14
    3⤵
    PID:4072
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=6192,i,5725431093081207717,9696683454972357116,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=6484 /prefetch:14
    3⤵
    PID:3392
- - C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe
    "C:\Users\Admin\AppData\Local\Temp\Supermium\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir=portable_data --force-high-res-timeticks=disabled --metrics-shmem-handle=5556,i,14559385090733668005,16979955258345637072,524288 --field-trial-handle=1988,i,12298575338786420366,14216471261238150038,262144 --enable-features=SupermiumCustomTabs --disable-features=DownloadBubble,PowerBookmarksSidePanel,TabHoverCards --variations-seed-version --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=5336 /prefetch:14
    3⤵
    PID:1880

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

en-US-10-1.bdic

Path C:\Users\Admin\AppData\Local\Temp\Supermium\Dictionaries\en-US-10-1.bdic
Size 441KB
SHA256 a075b01d9b015c616511a9e87da77da3d9881621db32f584e4606ddabf1c1100
MD5 4604e676a0a7d18770853919e24ec465
SHA1 415ef3b2ca0851e00ebaf0d6c9f6213c561ac98f
SHA512 3d89c21f20772a8bebdb70b29c42fca2f6bffcda49dff9d5644f3f3910b7c710a5c20154a7af5134c9c7a8624a1251b5e56ced9351d87463f31bed8188eb0774
SSDEEP 12288:CHZsTLG/6lu8riHP1qmOeMlh+ebMiCB64or:EZmiv1ClhhA6d
TLSH
T131A494CAD369DAE3D005C63C341616412A3FAD9ABE0AD1F40CD476373B597F88D2E25A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5cccccf9-342c-4906-95bc-e7049d46c411.tmp

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\5cccccf9-342c-4906-95bc-e7049d46c411.tmp
Size 10KB
SHA256 dd30d961fd182d708c3f76c107bb3807da833640c53424e269d10dcdf6629fc1
MD5 da9953e9251e526a3b9724c79b77fc7e
SHA1 c4a8d94288e215a95c461540f2ab1b1d44b84dc4
SHA512 74ec791d2fbefca54510c9343c0f898d95ca71095f29f20b7b9f47bad897268bbeac842e068849b5cec758fae25393c03000cee5f06c54c5c3366b17f5e5c5d4
SSDEEP 192:zRVIw+ugYLL/8qaid4/gIfG/aPDAe7oAaSv7L9cx9VJHsb+WNmqZzi8rrb6yIsnN:zRacal2dwx3l
TLSH
T15A22866FAE20653B5CC7D22AFA25BB53DBF9102131D02E48D6F98B2C16D7ACC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Cache\Cache_Data\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Cache\Cache_Data\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Cache\Cache_Data\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

0699fc07-a23d-4fc1-a08c-26b7f520a9d7

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Download Service\Files\0699fc07-a23d-4fc1-a08c-26b7f520a9d7
Size 2.9MB
SHA256 dd9ce6b3ae599ee1a027bbd1e53c071cda2f136ee144a7a8597f20e53405a29e
MD5 908bd695bee0ab27a83dd85e354d7b52
SHA1 cefa0550799dc33f0eecb9d6b6f522eaf6413245
SHA512 c13e4864d7b284b1c125c8d5901b16d53582cce1d51037600eb7206cfe8e4ec62d7d936beed1a536713703757b725545435f846d4353d8e2ac0d3b4091ba6065
SSDEEP 49152:NhAVYf3xssIVMJmS+/tJo1zv04WKEmTMmEkqRjViS8Nypc1c7EaKGjGf1tn6aHxi:WyGsIVMJ1gAcKXTMmUBcS8NypcW0fffK
TLSH
T1F7D533DA3E3922F0B25CF2D7598BEC2112B993555C2F3504573BFA7304196E628E2CA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b30934ad-b23a-4579-98c1-cedd58bd9003

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Download Service\Files\b30934ad-b23a-4579-98c1-cedd58bd9003
Size 258KB
SHA256 8d21fe1bd251856bfaeaedd6a72ab78f153a047b6042e0fc614f57a32b56d340
MD5 5adf364735dcbe6bf26ebe3f705c9dbc
SHA1 a891521fea2f61a2fd16ea9f0a3fc3c2c5fb3a46
SHA512 5f77f8923ab3800ab754f4c60095077b529c5f5f230c6a0b6803dc28597f42ed682921267ed344e190d0f08e0a23eceace7bccbc9d22432029a3e6f4838420e0
SSDEEP 6144:771bE8xvMX08XghZNhvfhua/I4dMdYuw4/xCRxQkdE6oO:7p1xE3g3Nhvf39dMNxxyxGLO
TLSH
T12B4423A9480AFA919B0236F2BF61D07C234649142C9E2B9DDFE48F70E7FE715658F108
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b607e5bd-aeee-41b5-8c6a-d544c0f6b796

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Download Service\Files\b607e5bd-aeee-41b5-8c6a-d544c0f6b796
Size 2.6MB
SHA256 37da69b3f3be524b0af3c483b2d606b3b99eaeee1e9d80f331d3d65512d6ae3e
MD5 b34e96e57b4152e3b426abcfb71639e7
SHA1 8a46024732d966e729003f29522f858a0d3c00d2
SHA512 d610d80439028915a1c8785c004234c1d02c9fd40d72ae7f2b4d5a2d90b245ac8c93e8de104b8633d744576a52dd9d2c2717c9ec785c90626e92b438a330f2f7
SSDEEP 49152:mbhICrfotHFXmy84KRLjte+AsypG8h44AGvVvxMeiX7vrvhIQv/XhCzYvnFpod78:mVrfotHUymjA+8p9jzvxMeY7Lh/nxAYD
TLSH
T112D5331075B5ECB0B69E5466EB641CE98AB3333996B42E703B20261BF57BF4193B44C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bc50e0f2-de68-4440-8a80-2258cb657bfe

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Download Service\Files\bc50e0f2-de68-4440-8a80-2258cb657bfe
Size 18KB
SHA256 97ba2f1725c7180957dccfe821fb47e04c9d246c84e4f4f8cff80dcfee3b07b6
MD5 2382c449962b608feeaf7789e0fb6200
SHA1 6d35fcf0aa21c0dd8e7594c9114b8de2510950d8
SHA512 e9571bce8ab55e80dfb898f0774d5f85ba4471054dc416308d8d80fe23bf81e376ca5c99402b425fdbcf3bfc1f611728c49ed9f5b36af2aaf4179ce07d16b88f
SSDEEP 384:eXfvqPXzfCATGFHqvjdCDYRIOB1e6cghrt3m+gst:evvqrfmFqLEYRIOBM6cgL2fI
TLSH
T1A982D0073D5BD227D09215E42D684934CE7E0DB8AF46922B76A460D3D57C6B80EB9CCE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

be9b5071-0889-47ff-b72b-03c387191c19

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Download Service\Files\be9b5071-0889-47ff-b72b-03c387191c19
Size 115KB
SHA256 7648307a0ad082edc5095a571a45391e465adee5c13d4c9145724c34b64f81df
MD5 f9049a00258e63877620e41614264230
SHA1 4375b622c1f374f07530b793c05e3357b0e582c6
SHA512 82c8bc56fb6fca5858c5e99123ae166a129bb4e39dc286114ccff02aee48bcdb2c037f8acdbac19bb50d1b31ef902a3e39afc6e769d8b0a1d0996d19e331b67a
SSDEEP 3072:Xm4V0YJnnMjlCDIABZkPNOJVRkC6RTF3GS5u:XmG0WnMjsDIA4PE/RkBRTxGGu
TLSH
T1B7C32200AE38BD9BF5E5FC3CF68060E196ADCBE67C3BE850017E0D1EA1498EFA051009
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

deed82f9-5989-4cca-ac45-04b32168fb3e

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Download Service\Files\deed82f9-5989-4cca-ac45-04b32168fb3e
Size 18KB
SHA256 b6dea0e56ec1cc735d8369cb8ca7dd61698415a9f80eb177218892597d06e18b
MD5 55c17b6a8e1180f1979c7007bc696f25
SHA1 f8b8acb1fd08da73156c23f6c7e072b7add68caa
SHA512 9a9b26bf4769fe234b4c6fdb651e27a871c8268847761e90e0329ee99deb629d4d7d8520bf39fbc188e24eb2b0ca0e215ea2aecbcdb26c9ced605390a6016b1e
SSDEEP 384:3WCbdAybDcNvPdLkfYccqK9JKcljLYPB8U+mV/yEeiGCtBDz:3WCbaADEvJAKHLYVqEeiNtBn
TLSH
T18382D1A500336A57CF04CDFD9393E3EAA9D404282080372FAE797D97B129B6C5974D5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e06c970c-e1d3-4ee4-85f0-7b1390d4ba2b

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Download Service\Files\e06c970c-e1d3-4ee4-85f0-7b1390d4ba2b
Size 4KB
SHA256 cfee341cf97ad8147f9632d4ff1a8c4b22d7045c0c6b64cac9945c415a035751
MD5 624fad4ca58b3d7813dc754c1902b79b
SHA1 08904ee53bbfe8fab917b98441d144f77932a25e
SHA512 3724665097d8c123fba4a99b2e6055da8640f264d50b7f4da7df51e8f3e2ebe3771f3180aa9a7eefdd08ae484b8bbfa894e7b7d20cc05a7bddd1001b3bed9c86
SSDEEP 96:m3Rj9mJ51AO+mgvLQLOdpfi5NiLu2gYxB4+7G8qP:c4AO+XvJnu6ux94G8qP
TLSH
T1AAA15D8D4DFBB8E2E31283F476E25B629360C24CC1C12597602859DF2A3B6B127D5983
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Network\Network Persistent State
Size 2KB
SHA256 27b4627dd0bae1e5753c889f1745217f76332bad3ca44e6f3bb3a52316a4290e
MD5 aa9ea79028bf8072a5f8a25cfb63b159
SHA1 2ae8f48e9905312d8398f477720dfead19f9d7d1
SHA512 eac1184cd68b823bae05faea8e02ea5ae5065f594e0385776e10f833b21fe46e676b4b00d368bba87370cd62f48de2d844a448f2f9304b6995b8e5aa894890de
TLSH
T10751ADF7C7E8862DD81115F5A7117F1BCE2D091483283C2A88E4AF5BD3E1471D259B4E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5a12be.TMP

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Network\Network Persistent State~RFe5a12be.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Preferences
Size 10KB
SHA256 43381d0d2abb2d75f8bc1cf7f8d4f2a2f21e6c64180ed4ad8a59d1734dc09d6c
MD5 48c1d1a6f0116a7dd3bdaee2a210b0bb
SHA1 a7dde4556b0e2205acd70366ec3b82fbaa857b49
SHA512 07f5c0fee2284517bd97fec6cd843299d7d45d764c97fc72de7efac11fd336486ffd302f5d3d37ce6b2dffa8f6c7e8e24eee5613359eac7bc36e7a6ca08f31e4
SSDEEP 192:zRVIw+ugYLL/8qaid4/gIfG/aPDAe7oAaSv7L9H3Tx9VJHsb+WNmqZgi8xrb6yI2:zRacalvdwx2l
TLSH
T11322765FAE20653B5CC7D22AFA25BB63DBF9202135D02E48D6F88B2C16D7ACC1257417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Local State
Size 2KB
SHA256 2e66d5cf1894a4511e192dec82e15a7f66433240309c9dd4aab75d4406286b9a
MD5 aeb0c8945f13105f0a3231defcc58cfb
SHA1 942889f4f23c9a66080fffbef7469d6913138fcb
SHA512 868097f402e77366f98ae193c7db095e985f06caf929f34b80503681ef18f65bac8cec2417cf2c2ccd8eb04a639726b32a22034342b9866201c64cc09e5a43cd
TLSH
T12D41A4626869CD7348B7E6D5B6426A03C7792025A2616F98D1EE0B0C02F7BEC1383523
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Local State
Size 2KB
SHA256 8359bdde423a6e6e721a90a49402150d7559d3364dca491e36e71d2e3e73a82c
MD5 37f292176b68a8894ca8a2d1e037a949
SHA1 db5647f079353972a49a0b4474fd7f031e6cdd2e
SHA512 e66d7610cbb5a84177210e335be1174c57bc2ed5dddddb187f50e6b8bb1e9c5933deb90f948cc022b3340b7a8ab32c17bbb1a30c06ef280898bf861d8239fde2
TLSH
T170515262B85A8D3698B7D1D2B7511943D3381219A3D32E4985FE860843FBFFC178355B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Local State
Size 4KB
SHA256 4f814906cd5cce66b6a9a5b25657005141cd88c29d8a303f10188893980cd650
MD5 99026baaf5eae1f6d3b2807d0e67039e
SHA1 ce7a67afca73717e84b278383885ff5102d66ffd
SHA512 2d179748daa843dfc279c44e903ae44c68a20cc439cabff2c11be55b5810804499a881c0c6ee34fd1c4976089db084e11d692323180535eade603cd3c44b5696
SSDEEP 96:8+7bJlzq3O7GdyJcWlLB+I5+Doto7VK0DVsB6hSqYvJ8jYiI+4a:8CtNqe7G0JNLBODUiVBVgEnjYi5
TLSH
T1F4812166B84DAD3A887780A3F75014429B381225E7C77D5886BAC20643FFFAC274365B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Local State
Size 7KB
SHA256 6a70b8c4b46afe65d7630f5e98741bb790f7770ff140dbd07d4476ca7ed1ed54
MD5 616b6a13517197709f7a4e98949fab7c
SHA1 0671cbf291a992cf680d1a2026de48c9f77c8d3c
SHA512 d394405c69ff80c56467e594b5bff56cb8a531c2c7076c14649eeefb11e437faf1dc5139a7399bf0f2cc7b63cfbdd589f8ff4ab92f6b33e5180facbab0c93f56
SSDEEP 96:8+7bJlzq3O7GdyJcWlLB+I5+Doto7VK0DVsB6hSqYv5TvKQTf8Qzy/vAyEy8jYi5:8CtNqe7G0JNLBODUiVBVgEgmQM7mjYi5
TLSH
T1F2F1437AED46CE26D8F784E29B10E882D714526497869DC44CF68D4C42EFEEC360BD1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe59239b.TMP

Path C:\Users\Admin\AppData\Local\Temp\Supermium\portable_data\Local State~RFe59239b.TMP
Size 637B
SHA256 8ebe2f6156d33faa8066ba80ecab4fe70bbc62ac7fdd06816fa26d9174c54951
MD5 42460c6418926ace0454bf024b439aaa
SHA1 910c40a0872dfa89c5eb8ea45c1cd5f6d11b8e31
SHA512 13bd30502c65e4d73f7da2f91ca14b711169bd7db216c0785dad5c3e8efaacd255f79b231cea42954179fb65ed4c67c5123527ffc1e181880124ee39e0afd35e
TLSH
T169F0AC9358606B70ADC1E7FDB393CB935625913082928E4DA2DE83154377BAC233B835
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1164-41-0x00007FFF722D0000-0x00007FFF722D1000-memory.dmp

Download

memory/1164-167-0x000001D30E1E0000-0x000001D30E2B3000-memory.dmp

Download

memory/1164-42-0x00007FFF734F0000-0x00007FFF734F1000-memory.dmp

Download

memory/1164-168-0x000001D30FF30000-0x000001D3100C9000-memory.dmp

Download

memory/1880-341-0x000002528B240000-0x000002528B313000-memory.dmp

Download

memory/1880-342-0x000002528CC50000-0x000002528CDE9000-memory.dmp

Download

memory/1984-240-0x0000021BE3490000-0x0000021BE3563000-memory.dmp

Download

memory/1984-241-0x0000021BE52B0000-0x0000021BE5449000-memory.dmp

Download

memory/2200-238-0x000001E4D9BF0000-0x000001E4D9CC3000-memory.dmp

Download

memory/2200-239-0x000001E4DB6A0000-0x000001E4DB839000-memory.dmp

Download

memory/2692-169-0x0000018200090000-0x0000018200163000-memory.dmp

Download

memory/2692-170-0x0000018201B40000-0x0000018201CD9000-memory.dmp

Download

memory/2776-275-0x0000014464940000-0x0000014464A13000-memory.dmp

Download

memory/2776-276-0x0000014466770000-0x0000014466909000-memory.dmp

Download

memory/3328-272-0x000001D200090000-0x000001D200163000-memory.dmp

Download

memory/3328-273-0x000001D201B40000-0x000001D201CD9000-memory.dmp

Download

memory/3392-333-0x00000223C74F0000-0x00000223C7689000-memory.dmp

Download

memory/3392-332-0x00000223C5A60000-0x00000223C5B33000-memory.dmp

Download

memory/4072-334-0x0000018833ED0000-0x0000018833FA3000-memory.dmp

Download

memory/4072-335-0x0000018835CD0000-0x0000018835E69000-memory.dmp

Download

memory/5428-331-0x00000212C29E0000-0x00000212C2B79000-memory.dmp

Download

memory/5428-330-0x00000212C0FB0000-0x00000212C1083000-memory.dmp

Download

memory/5508-270-0x0000020028C10000-0x0000020028CE3000-memory.dmp

Download

memory/5508-271-0x000002002A990000-0x000002002AB29000-memory.dmp

Download

memory/5656-172-0x00000283682D0000-0x0000028368469000-memory.dmp

Download

memory/5656-171-0x00000283668E0000-0x00000283669B3000-memory.dmp

Download

memory/6092-199-0x000001ECC1D20000-0x000001ECC1DF3000-memory.dmp

Download

memory/6092-200-0x000001ECC3B50000-0x000001ECC3CE9000-memory.dmp

Download