Analysis

  • user interaction
    yes
  • max time kernel
    78s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    30/07/2026, 22:44

General

  • Target
    SuperbulletAI 0.3.90.exe
  • Size 302.3MB
  • Sample260730-2ntpma1zhy
  • SHA256 8f4f9a7aeb8c8ee554401861274a8b4bd735081da53e6fefa50de9dc5af07158
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Checks computer location settings 2 TTPs 6 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Executes dropped EXE 12 IoCs
  • Loads dropped DLL 17 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 2 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies registry class 12 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of WriteProcessMemory 18 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SuperbulletAI 0.3.90.exe
    "C:\Users\Admin\AppData\Local\Temp\SuperbulletAI 0.3.90.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:940
    • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
      "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:4856
      • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\Squirrel.exe
        "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\Squirrel.exe" --updateSelf=C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
        3⤵
        • Executes dropped EXE
        PID:5116
      • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe
        "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe" --squirrel-install 0.3.90
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Modifies registry class
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:3840
        • C:\Users\Admin\AppData\Local\SuperbulletAI\Update.exe
          C:\Users\Admin\AppData\Local\SuperbulletAI\Update.exe --createShortcut=SuperbulletAI.exe
          4⤵
          • Executes dropped EXE
          PID:3668
        • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe
          "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1968,i,9744777345679296186,5742458392177927087,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1964 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:624
        • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe
          "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --field-trial-handle=1968,i,9744777345679296186,5742458392177927087,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2356 /prefetch:3
          4⤵
          • Executes dropped EXE
          PID:3412
        • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe
          "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --app-user-model-id=com.squirrel.SuperbulletAI.SuperbulletAI --app-path="C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1968,i,9744777345679296186,5742458392177927087,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2804 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2256
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:3824
          • C:\Windows\System32\reg.exe
            C:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid
            5⤵
              PID:4412
        • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe
          "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe" --squirrel-firstrun
          3⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Modifies registry class
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:4888
          • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe
            "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1916,i,8391694142324067910,7264324667331573401,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1912 /prefetch:2
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:2428
          • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe
            "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --field-trial-handle=1916,i,8391694142324067910,7264324667331573401,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2220 /prefetch:3
            4⤵
            • Executes dropped EXE
            PID:1008
          • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe
            "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --app-user-model-id=com.squirrel.SuperbulletAI.SuperbulletAI --app-path="C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1785451067450579 --launch-time-ticks=577110517 --field-trial-handle=1916,i,8391694142324067910,7264324667331573401,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2732 /prefetch:1
            4⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            PID:4588
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"
            4⤵
            • Executes a command shell one-liner
            • Suspicious use of WriteProcessMemory
            PID:2456
            • C:\Windows\System32\reg.exe
              C:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid
              5⤵
                PID:1228
            • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe
              "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --app-user-model-id=com.squirrel.SuperbulletAI.SuperbulletAI --app-path="C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar" --no-sandbox --no-zygote --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1785451067450579 --launch-time-ticks=581219219 --field-trial-handle=1916,i,8391694142324067910,7264324667331573401,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3664 /prefetch:1
              4⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              PID:4068

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            Update.exe.log

            • Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\Update.exe.log
            • Size 1KB
            • SHA256 1f5a1b10b49c35bff02f63ebaf8cd3faf74b51bd131d3dcfb952590c8bcd5eea
            • MD5 SHA1 SHA512 TLSH

            RELEASES

            • Path C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES
            • Size 85B
            • SHA256 f0a30ef0f633189c2b5220fa8692af30ab222bfa6a9b5d6bf8e9380e25eb7437
            • MD5 SHA1 SHA512 TLSH

            Update.exe

            • Path C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
            • Size 1.8MB
            • SHA256 04d70aa5062c91e569ca579d12a8602b0231ab937635ca628dd1655f42199c12
            • MD5 SHA1 SHA512 SSDEEP TLSH

            background.gif

            • Path C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif
            • Size 43KB
            • SHA256 ce636d201ef86ffbf4ee8c8762b4d9dc255be9d5f490d0a22e36fe0c938f7244
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SuperbulletAI.exe

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\SuperbulletAI.exe
            • Size 666KB
            • SHA256 60839ce022366c09da99f28fa7163027528dc5ddd8076ee8fe45493b3ceb689e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            chrome_100_percent.pak

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\chrome_100_percent.pak
            • Size 112KB
            • SHA256 45d14a4278b1e152b363197401a5604aa5a3cee6512a6b52df978038fa521a0f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            chrome_200_percent.pak

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\chrome_200_percent.pak
            • Size 182KB
            • SHA256 aafc61b89748d17fcbc9fecd9844a77be2c584529a81714c98e0c4d453ea9496
            • MD5 SHA1 SHA512 SSDEEP TLSH

            d3dcompiler_47.dll

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\d3dcompiler_47.dll
            • Size 4.5MB
            • SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dxcompiler.dll

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\dxcompiler.dll
            • Size 24.9MB
            • SHA256 d59f53e6c8a0a02003c414ce3ca11f973b31809008f0c94cf3c2559687a5e6c7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dxil.dll

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\dxil.dll
            • Size 1.4MB
            • SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ffmpeg.dll

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\ffmpeg.dll
            • Size 2.9MB
            • SHA256 f3705d563d2d8f93a0d497233c01506d5e4ecc66476022588d422d7509694bca
            • MD5 SHA1 SHA512 SSDEEP TLSH

            icudtl.dat

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\icudtl.dat
            • Size 10.0MB
            • SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libEGL.dll

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\libEGL.dll
            • Size 492KB
            • SHA256 df2581628fdc5e9ce1a7faf61e1c685730802e31ef828f2e6eb6aecbfa00b02a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libGLESv2.dll

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\libGLESv2.dll
            • Size 8.0MB
            • SHA256 08888aafcffd55b349e528f9979c335276ad0fd8c6ce92448179f97557c03ea1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            en-US.pak

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\locales\en-US.pak
            • Size 524KB
            • SHA256 bfa782c9efae2c9cd2c0214dae1bbb3c259d4d4c38d920b06677b9c4cf4f813d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            resources.pak

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources.pak
            • Size 6.0MB
            • SHA256 40af4117b0bd35da141aa599255b879013bfda5968401feccb5c43cb372cdae6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            superbulletai-logo.ico

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\assets\superbullet-ai\superbulletai-logo.ico
            • Size 400KB
            • SHA256 003f9aa0828663260db84974db1e9ddb4da22266f1cf388b6d134ce8c5f4a1be
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Interfaces.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\client-s3\dist-es\pagination\Interfaces.js
            • Size 11B
            • SHA256 8e609bb71c20b858c77f0e9f90bb1319db8477b13f9f965f1a1e18524bf50881
            • MD5 SHA1 SHA512

            LICENSE

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\credential-provider-process\LICENSE
            • Size 11KB
            • SHA256 2ef1e48ea743d9c82313e6887858f7c1feaddd636f5a3f43926aab0143e67ebd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            httpAuthExtensionConfiguration.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\nested-clients\dist-es\submodules\sso\auth\httpAuthExtensionConfiguration.js
            • Size 1KB
            • SHA256 331902cc5df5060ac9644261de8711ff641d6b91e60b5fcf77d2facc441c8cf6
            • MD5 SHA1 SHA512 TLSH

            runtimeConfig.native.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\nested-clients\dist-es\submodules\sso\runtimeConfig.native.js
            • Size 297B
            • SHA256 c0c73f0322ae95adce92f60f138a0e54cc9d686a4ef04c27a0fae1902f47a969
            • MD5 SHA1 SHA512 TLSH

            runtimeExtensions.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\nested-clients\dist-es\submodules\sso\runtimeExtensions.js
            • Size 1KB
            • SHA256 91acbc1e819f62b25b16ae8d717eab8eb748fedc63a656ffcf6ae353cd0b5dbc
            • MD5 SHA1 SHA512 TLSH

            type-utils.cjs

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@langchain\core\dist\types\type-utils.cjs
            • Size 77B
            • SHA256 d43aa81f5bc89faa359e0f97c814ba25155591ff078fbb9bfd40f8c7c9683230
            • MD5 SHA1 SHA512 TLSH

            index.d.cts

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@langchain\textsplitters\index.d.cts
            • Size 31B
            • SHA256 c98517664512e9f8bc990db01c296a4d667a53cef785bd5cbc4c4298dbded589
            • MD5 SHA1 SHA512

            LICENSE

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@opentelemetry\api\LICENSE
            • Size 11KB
            • SHA256 c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@protobufjs\fetch\LICENSE
            • Size 1KB
            • SHA256 a67b34a24a5daddcce46aea68c5004e4442bbfb63690329fa607bf4de4269794
            • MD5 SHA1 SHA512 TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@smithy\core\LICENSE
            • Size 11KB
            • SHA256 07364a5f7d0177a59a05a0002187431f8f899320983c0dc049d72df015e8064c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@types\triple-beam\LICENSE
            • Size 1KB
            • SHA256 c2cfccb812fe482101a8f04597dfc5a9991a6b2748266c47ac91b6a5aae15383
            • MD5 SHA1 SHA512 TLSH

            license

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\cliui\node_modules\ansi-styles\license
            • Size 1KB
            • SHA256 48da2f39e100d4085767e94966b43f4fa95ff6a0698fba57ed460914e35f94a0
            • MD5 SHA1 SHA512 TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\es-object-atoms\LICENSE
            • Size 1KB
            • SHA256 5e325595b4ea8cfec3802f545b1def5d7b73e4a5b8e9ba63e32a320f67732292
            • MD5 SHA1 SHA512 TLSH

            .nycrc

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\get-intrinsic\.nycrc
            • Size 139B
            • SHA256 997785c50b0773e5e18bf15550fbf57823c634fefe623cd37b3c83696402ad0a
            • MD5 SHA1 SHA512 TLSH

            license

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\is-stream\license
            • Size 1KB
            • SHA256 5c932d88256b4ab958f64a856fa48e8bd1f55bc1d96b8149c65689e0c61789d3
            • MD5 SHA1 SHA512 TLSH

            package.json

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\long\umd\package.json
            • Size 25B
            • SHA256 8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a
            • MD5 SHA1 SHA512

            package.json

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\lru-cache\dist\mjs\package.json
            • Size 23B
            • SHA256 3ca9d4afd21425087cf31893b8f9f63c81b0b8408db5e343ca76e5f8aa26ab9a
            • MD5 SHA1 SHA512

            LICENSE

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\semver\LICENSE
            • Size 765B
            • SHA256 4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b
            • MD5 SHA1 SHA512 TLSH

            .nycrc

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\side-channel-list\.nycrc
            • Size 216B
            • SHA256 948366fea3b423a46366326d0bb2e54b08abd1cf0b243678ba6625740c40da5a
            • MD5 SHA1 SHA512 TLSH

            tsconfig.json

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\side-channel-weakmap\tsconfig.json
            • Size 116B
            • SHA256 6346ee4c020f341387588479dd83740a65ab902a462b8c6b3b8bf51f032c6795
            • MD5 SHA1 SHA512 TLSH

            alloc.h

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-go\src\tree_sitter\alloc.h
            • Size 958B
            • SHA256 253b44a7b4313a7afd0c505c2fc6e7ce4b8e78955ebf4be3ea000532ec060673
            • MD5 SHA1 SHA512 TLSH

            array.h

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-go\src\tree_sitter\array.h
            • Size 10KB
            • SHA256 4ff743903dc46f5db6aa54f31c6b4d160a8a9779e5b2ab1ee59ae7ebcd850ea1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-java\bindings\node\index.js
            • Size 201B
            • SHA256 609bdf22b8fd183025b3c24e8587f6211d50358e8f2e4c526b9217349ed9dbc0
            • MD5 SHA1 SHA512 TLSH

            parser.h

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-typescript\typescript\src\tree_sitter\parser.h
            • Size 6KB
            • SHA256 a3eb18ef034b3f4255b965a26caa276f9cfe13a79573b402f1a12dc5018052aa
            • MD5 SHA1 SHA512 SSDEEP TLSH

            EmbedResponse.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\voyageai\api\types\EmbedResponse.js
            • Size 150B
            • SHA256 b85b16b647b590d06a88c90d15257954cd8cad804092c506939fd451f71fcb86
            • MD5 SHA1 SHA512 TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\winston\node_modules\readable-stream\LICENSE
            • Size 2KB
            • SHA256 ec62dc96da0099b87f4511736c87309335527fb7031639493e06c95728dc8c54
            • MD5 SHA1 SHA512 TLSH

            LICENSE-MIT.txt

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\wrap-ansi-cjs\node_modules\emoji-regex\LICENSE-MIT.txt
            • Size 1KB
            • SHA256 483acb265f182907d1caf6cff9c16c96f31325ed23792832cc5d8b12d5f88c8a
            • MD5 SHA1 SHA512 TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\wrap-ansi-cjs\node_modules\emoji-regex\es2015\index.js
            • Size 10KB
            • SHA256 8718dea4d28647912918dba60545890dc10ae672bfb186b6ec0af3fc5e826137
            • MD5 SHA1 SHA512 SSDEEP TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\wrap-ansi-cjs\node_modules\emoji-regex\index.js
            • Size 10KB
            • SHA256 c56978800e47f095cfbfe96712b5e78d150d1f62e32bb4943675213fce481ef0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\ansi-regex\index.js
            • Size 350B
            • SHA256 c92312790eb1f246b7c4c1fe9c1247b15441bbca3c6cb64d167beefc45302753
            • MD5 SHA1 SHA512 TLSH

            package.json

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\ansi-regex\package.json
            • Size 470B
            • SHA256 93fcfd1b014b9bd7f31b3f35b24a5a479839b6f141c95f62b73a1829bf112ad2
            • MD5 SHA1 SHA512 TLSH

            readme.md

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\ansi-regex\readme.md
            • Size 2KB
            • SHA256 3ebc0f845b1bab50600f823716040fbec355d3c356a3a76b8eb9eb593b6c7a3a
            • MD5 SHA1 SHA512 TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\strip-ansi\index.js
            • Size 154B
            • SHA256 bf37cd692bf030c2ec270945bc26aa8b19ad379fa5916f12304758f709ab0978
            • MD5 SHA1 SHA512 TLSH

            package.json

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\strip-ansi\package.json
            • Size 511B
            • SHA256 4518dec682055621a82c1480a6c33479a7b6ae7d17019ccc4799b86e9be4d4d7
            • MD5 SHA1 SHA512 TLSH

            readme.md

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\strip-ansi\readme.md
            • Size 1KB
            • SHA256 cb384db30337ecec75919b4c69aab67358b4f4e384406956687894b6d777413b
            • MD5 SHA1 SHA512 TLSH

            cs.d.cts

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\zod\v4\locales\cs.d.cts
            • Size 122B
            • SHA256 b42d3651103a532f7492e719a828647af97306b2356ae757ebb7f17f4a8c41e5
            • MD5 SHA1 SHA512 TLSH

            p50k_edit.d.ts

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\node_modules\@dqbd\tiktoken\encoders\p50k_edit.d.ts
            • Size 133B
            • SHA256 7d0e8a9e6b76c79a97603d92f3934299a86b6c51c9e9a4fa4c6fb78a99bf596f
            • MD5 SHA1 SHA512 TLSH

            v8_context_snapshot.bin

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\v8_context_snapshot.bin
            • Size 758KB
            • SHA256 1fa1cdd08423809344fe15fac2d9d1ec604cc3ea5af4b944d89a51b1e98c8665
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vk_swiftshader.dll

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\vk_swiftshader.dll
            • Size 5.4MB
            • SHA256 597ca957c8aaa18911c719f7973dc1628c02e6a4319f1eda3a15134a403d1d68
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vk_swiftshader_icd.json

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\vk_swiftshader_icd.json
            • Size 106B
            • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
            • MD5 SHA1 SHA512 TLSH

            vulkan-1.dll

            • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\vulkan-1.dll
            • Size 922KB
            • SHA256 3500028f57bb570f75b6bef56b13fb788da0ffb8d0fe1ec61c058c839be19eb8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            default.dic

            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
            • Size 2B
            • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
            • MD5 SHA1 SHA512

            the-real-index

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Code Cache\js\index-dir\the-real-index
            • Size 48B
            • SHA256 3564ee6ba13368eefd752846c9f0d466a2af8be3eddc213bae55d2a1314bc6ad
            • MD5 SHA1 SHA512

            index

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Code Cache\wasm\index
            • Size 24B
            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
            • MD5 SHA1 SHA512

            the-real-index

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Code Cache\wasm\index-dir\the-real-index
            • Size 48B
            • SHA256 23603a1b5769e04cf1380c7bf82f50547746b0cd80d013051947e4338c907f05
            • MD5 SHA1 SHA512

            data_0

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_0
            • Size 8KB
            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
            • MD5 SHA1 SHA512 SSDEEP

            data_1

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_1
            • Size 264KB
            • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
            • MD5 SHA1 SHA512 SSDEEP

            data_2

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_2
            • Size 8KB
            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
            • MD5 SHA1 SHA512 SSDEEP

            data_3

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_3
            • Size 8KB
            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
            • MD5 SHA1 SHA512 SSDEEP

            index

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\index
            • Size 256KB
            • SHA256 a38a9058757b211d9fbf55bcd755df618957e87d2ef9b822d577647e05a6050c
            • MD5 SHA1 SHA512 SSDEEP

            Local State

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Local State
            • Size 434B
            • SHA256 a0f0ce0cb88eda97c13e4bcc6f5019c1b654902274b27208a9588d6683e7b580
            • MD5 SHA1 SHA512 TLSH

            LOG

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Local Storage\leveldb\LOG
            • Size 259B
            • SHA256 07ac24df287c6e040ec03d45cf513ba7a4c31ca5a39574c844bad81d4fbce500
            • MD5 SHA1 SHA512 TLSH

            Network Persistent State

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Network\Network Persistent State
            • Size 111B
            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
            • MD5 SHA1 SHA512 TLSH

            Preferences

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Preferences
            • Size 93B
            • SHA256 529b6595a4727a6b2d6cc154ae51f426216c01fc7fda02de2460abfb3de118a4
            • MD5 SHA1 SHA512 TLSH

            CURRENT

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Session Storage\CURRENT
            • Size 16B
            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
            • MD5 SHA1 SHA512

            MANIFEST-000001

            • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Session Storage\MANIFEST-000001
            • Size 41B
            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
            • MD5 SHA1 SHA512

            memory/3668-12332-0x0000000002430000-0x0000000002450000-memory.dmp

            memory/4856-7-0x0000000000DC0000-0x0000000000F96000-memory.dmp

            memory/4856-81-0x0000000021F50000-0x0000000021F88000-memory.dmp

            memory/4856-82-0x000000001CC50000-0x000000001CC5E000-memory.dmp