Analysis

  • user interaction
    yes
  • max time kernel
    152s
  • max time network
    153s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/07/2026, 01:57

General

  • Target
    SuperbulletAI 0.3.80.exe
  • Size 314.3MB
  • Sample260712-cdl5csby6m
  • SHA256 2b212667bf982d762d9736bad156bc315ff50b192ca6fb815e90065348247d62
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Executes dropped EXE 12 IoCs
  • Loads dropped DLL 16 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 18 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SuperbulletAI 0.3.80.exe
    "C:\Users\Admin\AppData\Local\Temp\SuperbulletAI 0.3.80.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:6108
    • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
      "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2828
      • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\Squirrel.exe
        "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\Squirrel.exe" --updateSelf=C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
        3⤵
        • Executes dropped EXE
        PID:2908
      • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\SuperbulletAI.exe
        "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\SuperbulletAI.exe" --squirrel-install 0.3.80
        3⤵
        • Executes dropped EXE
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:4984
        • C:\Users\Admin\AppData\Local\SuperbulletAI\Update.exe
          C:\Users\Admin\AppData\Local\SuperbulletAI\Update.exe --createShortcut=SuperbulletAI.exe
          4⤵
          • Executes dropped EXE
          PID:1440
        • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\SuperbulletAI.exe
          "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\SuperbulletAI.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2108,i,9249883442476381825,5624640723234521001,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2104 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4908
        • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\SuperbulletAI.exe
          "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\SuperbulletAI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --field-trial-handle=2108,i,9249883442476381825,5624640723234521001,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2160 /prefetch:11
          4⤵
          • Executes dropped EXE
          PID:3692
        • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\SuperbulletAI.exe
          "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\SuperbulletAI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --app-user-model-id=com.squirrel.SuperbulletAI.SuperbulletAI --app-path="C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1783820954083687 --launch-time-ticks=618671984 --field-trial-handle=2108,i,9249883442476381825,5624640723234521001,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2808 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2616
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"
          4⤵
          • Suspicious use of WriteProcessMemory
          PID:3852
          • C:\Windows\System32\reg.exe
            C:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid
            5⤵
              PID:1348
        • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\SuperbulletAI.exe
          "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\SuperbulletAI.exe" --squirrel-firstrun
          3⤵
          • Executes dropped EXE
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:936
          • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\SuperbulletAI.exe
            "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\SuperbulletAI.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2500,i,6936270630064523041,2406640698023671137,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2492 /prefetch:2
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:3592
          • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\SuperbulletAI.exe
            "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\SuperbulletAI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --field-trial-handle=2500,i,6936270630064523041,2406640698023671137,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2768 /prefetch:11
            4⤵
            • Executes dropped EXE
            PID:2352
          • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\SuperbulletAI.exe
            "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\SuperbulletAI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --app-user-model-id=com.squirrel.SuperbulletAI.SuperbulletAI --app-path="C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1783820954083687 --launch-time-ticks=625182005 --field-trial-handle=2500,i,6936270630064523041,2406640698023671137,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3196 /prefetch:1
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:5212
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"
            4⤵
            • Suspicious use of WriteProcessMemory
            PID:2084
            • C:\Windows\System32\reg.exe
              C:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid
              5⤵
                PID:5952
            • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\SuperbulletAI.exe
              "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\SuperbulletAI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --app-user-model-id=com.squirrel.SuperbulletAI.SuperbulletAI --app-path="C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar" --no-sandbox --no-zygote --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1783820954083687 --launch-time-ticks=626330014 --field-trial-handle=2500,i,6936270630064523041,2406640698023671137,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3720 /prefetch:1
              4⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:4312

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            RELEASES

            • Path C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES
            • Size 85B
            • SHA256 bd79709848d3f4b58708a3225469405b31de965e794776e948136e967fe69b40
            • MD5 SHA1 SHA512 TLSH

            Update.exe

            • Path C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
            • Size 1.8MB
            • SHA256 afdc168445b559b9c4102cbc1fe191c3b9c3fb0a23fe06f7f2bb1ff6266efccf
            • MD5 SHA1 SHA512 SSDEEP TLSH

            background.gif

            • Path C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif
            • Size 43KB
            • SHA256 ce636d201ef86ffbf4ee8c8762b4d9dc255be9d5f490d0a22e36fe0c938f7244
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SuperbulletAI.exe

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\SuperbulletAI.exe
            • Size 666KB
            • SHA256 3665ee48814478246a384fabc7f0ae8a197d54359a303a57bc4a30628797c42e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            D3DCompiler_47.dll

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\D3DCompiler_47.dll
            • Size 4.5MB
            • SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            chrome_100_percent.pak

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\chrome_100_percent.pak
            • Size 112KB
            • SHA256 45d14a4278b1e152b363197401a5604aa5a3cee6512a6b52df978038fa521a0f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            chrome_200_percent.pak

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\chrome_200_percent.pak
            • Size 182KB
            • SHA256 aafc61b89748d17fcbc9fecd9844a77be2c584529a81714c98e0c4d453ea9496
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dxcompiler.dll

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\dxcompiler.dll
            • Size 24.9MB
            • SHA256 d59f53e6c8a0a02003c414ce3ca11f973b31809008f0c94cf3c2559687a5e6c7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dxil.dll

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\dxil.dll
            • Size 1.4MB
            • SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ffmpeg.dll

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\ffmpeg.dll
            • Size 2.9MB
            • SHA256 f3705d563d2d8f93a0d497233c01506d5e4ecc66476022588d422d7509694bca
            • MD5 SHA1 SHA512 SSDEEP TLSH

            icudtl.dat

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\icudtl.dat
            • Size 10.0MB
            • SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libegl.dll

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\libegl.dll
            • Size 492KB
            • SHA256 df2581628fdc5e9ce1a7faf61e1c685730802e31ef828f2e6eb6aecbfa00b02a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libglesv2.dll

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\libglesv2.dll
            • Size 8.0MB
            • SHA256 08888aafcffd55b349e528f9979c335276ad0fd8c6ce92448179f97557c03ea1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            en-US.pak

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\locales\en-US.pak
            • Size 524KB
            • SHA256 bfa782c9efae2c9cd2c0214dae1bbb3c259d4d4c38d920b06677b9c4cf4f813d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            resources.pak

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources.pak
            • Size 6.0MB
            • SHA256 40af4117b0bd35da141aa599255b879013bfda5968401feccb5c43cb372cdae6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            superbulletai-logo.ico

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\assets\superbullet-ai\superbulletai-logo.ico
            • Size 400KB
            • SHA256 003f9aa0828663260db84974db1e9ddb4da22266f1cf388b6d134ce8c5f4a1be
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Interfaces.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\client-s3\dist-es\pagination\Interfaces.js
            • Size 11B
            • SHA256 8e609bb71c20b858c77f0e9f90bb1319db8477b13f9f965f1a1e18524bf50881
            • MD5 SHA1 SHA512

            LICENSE

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\credential-provider-process\LICENSE
            • Size 11KB
            • SHA256 2ef1e48ea743d9c82313e6887858f7c1feaddd636f5a3f43926aab0143e67ebd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            httpAuthExtensionConfiguration.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\nested-clients\dist-es\submodules\sso\auth\httpAuthExtensionConfiguration.js
            • Size 1KB
            • SHA256 331902cc5df5060ac9644261de8711ff641d6b91e60b5fcf77d2facc441c8cf6
            • MD5 SHA1 SHA512 TLSH

            runtimeConfig.native.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\nested-clients\dist-es\submodules\sso\runtimeConfig.native.js
            • Size 297B
            • SHA256 c0c73f0322ae95adce92f60f138a0e54cc9d686a4ef04c27a0fae1902f47a969
            • MD5 SHA1 SHA512 TLSH

            runtimeExtensions.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\nested-clients\dist-es\submodules\sso\runtimeExtensions.js
            • Size 1KB
            • SHA256 91acbc1e819f62b25b16ae8d717eab8eb748fedc63a656ffcf6ae353cd0b5dbc
            • MD5 SHA1 SHA512 TLSH

            type-utils.cjs

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\@langchain\core\dist\types\type-utils.cjs
            • Size 77B
            • SHA256 d43aa81f5bc89faa359e0f97c814ba25155591ff078fbb9bfd40f8c7c9683230
            • MD5 SHA1 SHA512 TLSH

            index.d.cts

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\@langchain\textsplitters\index.d.cts
            • Size 31B
            • SHA256 c98517664512e9f8bc990db01c296a4d667a53cef785bd5cbc4c4298dbded589
            • MD5 SHA1 SHA512

            LICENSE

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\@opentelemetry\api\LICENSE
            • Size 11KB
            • SHA256 c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\@protobufjs\fetch\LICENSE
            • Size 1KB
            • SHA256 a67b34a24a5daddcce46aea68c5004e4442bbfb63690329fa607bf4de4269794
            • MD5 SHA1 SHA512 TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\@smithy\core\LICENSE
            • Size 11KB
            • SHA256 07364a5f7d0177a59a05a0002187431f8f899320983c0dc049d72df015e8064c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\@types\triple-beam\LICENSE
            • Size 1KB
            • SHA256 c2cfccb812fe482101a8f04597dfc5a9991a6b2748266c47ac91b6a5aae15383
            • MD5 SHA1 SHA512 TLSH

            license

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\cliui\node_modules\ansi-styles\license
            • Size 1KB
            • SHA256 48da2f39e100d4085767e94966b43f4fa95ff6a0698fba57ed460914e35f94a0
            • MD5 SHA1 SHA512 TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\es-object-atoms\LICENSE
            • Size 1KB
            • SHA256 5e325595b4ea8cfec3802f545b1def5d7b73e4a5b8e9ba63e32a320f67732292
            • MD5 SHA1 SHA512 TLSH

            .nycrc

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\get-intrinsic\.nycrc
            • Size 139B
            • SHA256 997785c50b0773e5e18bf15550fbf57823c634fefe623cd37b3c83696402ad0a
            • MD5 SHA1 SHA512 TLSH

            license

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\is-stream\license
            • Size 1KB
            • SHA256 5c932d88256b4ab958f64a856fa48e8bd1f55bc1d96b8149c65689e0c61789d3
            • MD5 SHA1 SHA512 TLSH

            package.json

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\jackspeak\dist\commonjs\package.json
            • Size 25B
            • SHA256 8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a
            • MD5 SHA1 SHA512

            package.json

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\jackspeak\dist\esm\package.json
            • Size 23B
            • SHA256 3ca9d4afd21425087cf31893b8f9f63c81b0b8408db5e343ca76e5f8aa26ab9a
            • MD5 SHA1 SHA512

            LICENSE

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\semver\LICENSE
            • Size 765B
            • SHA256 4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b
            • MD5 SHA1 SHA512 TLSH

            .nycrc

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\side-channel-list\.nycrc
            • Size 216B
            • SHA256 948366fea3b423a46366326d0bb2e54b08abd1cf0b243678ba6625740c40da5a
            • MD5 SHA1 SHA512 TLSH

            tsconfig.json

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\side-channel-weakmap\tsconfig.json
            • Size 116B
            • SHA256 6346ee4c020f341387588479dd83740a65ab902a462b8c6b3b8bf51f032c6795
            • MD5 SHA1 SHA512 TLSH

            alloc.h

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-go\src\tree_sitter\alloc.h
            • Size 958B
            • SHA256 253b44a7b4313a7afd0c505c2fc6e7ce4b8e78955ebf4be3ea000532ec060673
            • MD5 SHA1 SHA512 TLSH

            array.h

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-go\src\tree_sitter\array.h
            • Size 10KB
            • SHA256 4ff743903dc46f5db6aa54f31c6b4d160a8a9779e5b2ab1ee59ae7ebcd850ea1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-java\bindings\node\index.js
            • Size 201B
            • SHA256 609bdf22b8fd183025b3c24e8587f6211d50358e8f2e4c526b9217349ed9dbc0
            • MD5 SHA1 SHA512 TLSH

            parser.h

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-typescript\typescript\src\tree_sitter\parser.h
            • Size 6KB
            • SHA256 a3eb18ef034b3f4255b965a26caa276f9cfe13a79573b402f1a12dc5018052aa
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EmbedResponse.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\voyageai\api\types\EmbedResponse.js
            • Size 150B
            • SHA256 b85b16b647b590d06a88c90d15257954cd8cad804092c506939fd451f71fcb86
            • MD5 SHA1 SHA512 TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\winston\node_modules\readable-stream\LICENSE
            • Size 2KB
            • SHA256 ec62dc96da0099b87f4511736c87309335527fb7031639493e06c95728dc8c54
            • MD5 SHA1 SHA512 TLSH

            LICENSE-MIT.txt

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\wrap-ansi-cjs\node_modules\emoji-regex\LICENSE-MIT.txt
            • Size 1KB
            • SHA256 483acb265f182907d1caf6cff9c16c96f31325ed23792832cc5d8b12d5f88c8a
            • MD5 SHA1 SHA512 TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\wrap-ansi-cjs\node_modules\emoji-regex\es2015\index.js
            • Size 10KB
            • SHA256 8718dea4d28647912918dba60545890dc10ae672bfb186b6ec0af3fc5e826137
            • MD5 SHA1 SHA512 SSDEEP TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\wrap-ansi-cjs\node_modules\emoji-regex\index.js
            • Size 10KB
            • SHA256 c56978800e47f095cfbfe96712b5e78d150d1f62e32bb4943675213fce481ef0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\ansi-regex\index.js
            • Size 350B
            • SHA256 c92312790eb1f246b7c4c1fe9c1247b15441bbca3c6cb64d167beefc45302753
            • MD5 SHA1 SHA512 TLSH

            package.json

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\ansi-regex\package.json
            • Size 470B
            • SHA256 93fcfd1b014b9bd7f31b3f35b24a5a479839b6f141c95f62b73a1829bf112ad2
            • MD5 SHA1 SHA512 TLSH

            readme.md

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\ansi-regex\readme.md
            • Size 2KB
            • SHA256 3ebc0f845b1bab50600f823716040fbec355d3c356a3a76b8eb9eb593b6c7a3a
            • MD5 SHA1 SHA512 TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\strip-ansi\index.js
            • Size 154B
            • SHA256 bf37cd692bf030c2ec270945bc26aa8b19ad379fa5916f12304758f709ab0978
            • MD5 SHA1 SHA512 TLSH

            package.json

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\strip-ansi\package.json
            • Size 511B
            • SHA256 4518dec682055621a82c1480a6c33479a7b6ae7d17019ccc4799b86e9be4d4d7
            • MD5 SHA1 SHA512 TLSH

            readme.md

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\strip-ansi\readme.md
            • Size 1KB
            • SHA256 cb384db30337ecec75919b4c69aab67358b4f4e384406956687894b6d777413b
            • MD5 SHA1 SHA512 TLSH

            cs.d.cts

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\code-context-subprocess\node_modules\zod\v4\locales\cs.d.cts
            • Size 122B
            • SHA256 b42d3651103a532f7492e719a828647af97306b2356ae757ebb7f17f4a8c41e5
            • MD5 SHA1 SHA512 TLSH

            p50k_edit.d.ts

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\resources\app.asar.unpacked\node_modules\@dqbd\tiktoken\encoders\p50k_edit.d.ts
            • Size 133B
            • SHA256 7d0e8a9e6b76c79a97603d92f3934299a86b6c51c9e9a4fa4c6fb78a99bf596f
            • MD5 SHA1 SHA512 TLSH

            v8_context_snapshot.bin

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\v8_context_snapshot.bin
            • Size 758KB
            • SHA256 1fa1cdd08423809344fe15fac2d9d1ec604cc3ea5af4b944d89a51b1e98c8665
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vk_swiftshader.dll

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\vk_swiftshader.dll
            • Size 5.4MB
            • SHA256 597ca957c8aaa18911c719f7973dc1628c02e6a4319f1eda3a15134a403d1d68
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vk_swiftshader_icd.json

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\vk_swiftshader_icd.json
            • Size 106B
            • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
            • MD5 SHA1 SHA512 TLSH

            vulkan-1.dll

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.80\vulkan-1.dll
            • Size 922KB
            • SHA256 3500028f57bb570f75b6bef56b13fb788da0ffb8d0fe1ec61c058c839be19eb8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            default.exc

            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
            • Size 2B
            • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
            • MD5 SHA1 SHA512

            the-real-index

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Code Cache\js\index-dir\the-real-index
            • Size 48B
            • SHA256 671fae11b179217a95410736d8825f33b9c3b02eaf06ef76bc873a1cb18e84f1
            • MD5 SHA1 SHA512

            index

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Code Cache\wasm\index
            • Size 24B
            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
            • MD5 SHA1 SHA512

            the-real-index

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Code Cache\wasm\index-dir\the-real-index
            • Size 48B
            • SHA256 7c9d13a7d0a5070191d02645607567ddb3d937bdf7faec20ebccf78c8fc70ca6
            • MD5 SHA1 SHA512

            index

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\DawnGraphiteCache\index
            • Size 256KB
            • SHA256 d94cc72fc5035aa34791dfb07be72b6da53bb1169dcea9f1912fd447f06111ce
            • MD5 SHA1 SHA512 SSDEEP

            index

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\DawnWebGPUCache\index
            • Size 256KB
            • SHA256 7dee7ec5e32a5b1b46ba0696a1d848ae204ad0b6b36d6cf4ba811aa49ec13142
            • MD5 SHA1 SHA512 SSDEEP

            data_0

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_0
            • Size 8KB
            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
            • MD5 SHA1 SHA512 SSDEEP

            data_1

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_1
            • Size 264KB
            • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
            • MD5 SHA1 SHA512 SSDEEP

            data_2

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_2
            • Size 8KB
            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
            • MD5 SHA1 SHA512 SSDEEP

            data_3

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_3
            • Size 8KB
            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
            • MD5 SHA1 SHA512 SSDEEP

            index

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\index
            • Size 256KB
            • SHA256 feb1aaf522ecf6ed1c9313fae4e3225e4650a8017860f634e373ce6c9e477a71
            • MD5 SHA1 SHA512 SSDEEP

            Local State

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Local State
            • Size 434B
            • SHA256 41bec59e837fcaf743125ab3f230638b11729f8e759b768c01779a8ff76bb1ef
            • MD5 SHA1 SHA512 TLSH

            LOG

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Local Storage\leveldb\LOG
            • Size 261B
            • SHA256 95cd8483a33dbab446790f0f0ed302c7b5d6256dfe432a58b422f3b92cb7e93c
            • MD5 SHA1 SHA512 TLSH

            Network Persistent State

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Network\Network Persistent State
            • Size 111B
            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
            • MD5 SHA1 SHA512 TLSH

            Network Persistent State

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Network\Network Persistent State
            • Size 665B
            • SHA256 df014e663d2ad3580a3e08782a25e39bc625e04be6d043dae0f85a7a8ff23e3e
            • MD5 SHA1 SHA512 TLSH

            Preferences

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Preferences
            • Size 93B
            • SHA256 529b6595a4727a6b2d6cc154ae51f426216c01fc7fda02de2460abfb3de118a4
            • MD5 SHA1 SHA512 TLSH

            CURRENT

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Session Storage\CURRENT
            • Size 16B
            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
            • MD5 SHA1 SHA512

            MANIFEST-000001

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Session Storage\MANIFEST-000001
            • Size 41B
            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
            • MD5 SHA1 SHA512

            memory/1440-12289-0x0000000002AC0000-0x0000000002AE0000-memory.dmp

            memory/2828-81-0x0000000021030000-0x000000002103E000-memory.dmp

            memory/2828-9-0x0000000000370000-0x0000000000546000-memory.dmp

            memory/2828-80-0x0000000021060000-0x000000002109E000-memory.dmp