Analysis

  • user interaction
    yes
  • max time kernel
    111s
  • max time network
    95s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    30/07/2026, 22:44

General

  • Target
    SuperbulletAI 0.3.90.exe
  • Size 302.3MB
  • Sample260730-2ntpma1zhy
  • SHA256 8f4f9a7aeb8c8ee554401861274a8b4bd735081da53e6fefa50de9dc5af07158
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Executes dropped EXE 12 IoCs
  • Loads dropped DLL 17 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies registry class 12 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 16 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SuperbulletAI 0.3.90.exe
    "C:\Users\Admin\AppData\Local\Temp\SuperbulletAI 0.3.90.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4532
    • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
      "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:1456
      • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\Squirrel.exe
        "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\Squirrel.exe" --updateSelf=C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
        3⤵
        • Executes dropped EXE
        PID:7096
      • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe
        "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe" --squirrel-install 0.3.90
        3⤵
        • Executes dropped EXE
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:5012
        • C:\Users\Admin\AppData\Local\SuperbulletAI\Update.exe
          C:\Users\Admin\AppData\Local\SuperbulletAI\Update.exe --createShortcut=SuperbulletAI.exe
          4⤵
          • Executes dropped EXE
          PID:3160
        • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe
          "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --field-trial-handle=2200,i,13751394114343559785,4196111661835365026,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2228 /prefetch:11
          4⤵
          • Executes dropped EXE
          PID:1200
        • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe
          "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2200,i,13751394114343559785,4196111661835365026,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2196 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4868
        • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe
          "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --app-user-model-id=com.squirrel.SuperbulletAI.SuperbulletAI --app-path="C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=2200,i,13751394114343559785,4196111661835365026,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2884 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5144
      • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe
        "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe" --squirrel-firstrun
        3⤵
        • Executes dropped EXE
        • Modifies registry class
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:5604
        • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe
          "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1884,i,9466052612373692882,16159938323818758556,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1880 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3140
        • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe
          "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --field-trial-handle=1884,i,9466052612373692882,16159938323818758556,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2296 /prefetch:11
          4⤵
          • Executes dropped EXE
          PID:1588
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:3280
          • C:\Windows\System32\reg.exe
            C:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid
            5⤵
              PID:2828
          • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe
            "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --app-user-model-id=com.squirrel.SuperbulletAI.SuperbulletAI --app-path="C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1884,i,9466052612373692882,16159938323818758556,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3276 /prefetch:1
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:6136
          • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe
            "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\SuperbulletAI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --app-user-model-id=com.squirrel.SuperbulletAI.SuperbulletAI --app-path="C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar" --no-sandbox --no-zygote --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=1884,i,9466052612373692882,16159938323818758556,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3652 /prefetch:1
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            PID:3240

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          RELEASES

          • Path C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES
          • Size 85B
          • SHA256 f0a30ef0f633189c2b5220fa8692af30ab222bfa6a9b5d6bf8e9380e25eb7437
          • MD5 SHA1 SHA512 TLSH

          Update.exe

          • Path C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
          • Size 1.8MB
          • SHA256 04d70aa5062c91e569ca579d12a8602b0231ab937635ca628dd1655f42199c12
          • MD5 SHA1 SHA512 SSDEEP TLSH

          background.gif

          • Path C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif
          • Size 43KB
          • SHA256 ce636d201ef86ffbf4ee8c8762b4d9dc255be9d5f490d0a22e36fe0c938f7244
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SuperbulletAI.exe

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\SuperbulletAI.exe
          • Size 666KB
          • SHA256 60839ce022366c09da99f28fa7163027528dc5ddd8076ee8fe45493b3ceb689e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          chrome_100_percent.pak

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\chrome_100_percent.pak
          • Size 112KB
          • SHA256 45d14a4278b1e152b363197401a5604aa5a3cee6512a6b52df978038fa521a0f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          chrome_200_percent.pak

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\chrome_200_percent.pak
          • Size 182KB
          • SHA256 aafc61b89748d17fcbc9fecd9844a77be2c584529a81714c98e0c4d453ea9496
          • MD5 SHA1 SHA512 SSDEEP TLSH

          d3dcompiler_47.dll

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\d3dcompiler_47.dll
          • Size 4.5MB
          • SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          dxcompiler.dll

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\dxcompiler.dll
          • Size 24.9MB
          • SHA256 d59f53e6c8a0a02003c414ce3ca11f973b31809008f0c94cf3c2559687a5e6c7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          dxil.dll

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\dxil.dll
          • Size 1.4MB
          • SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ffmpeg.dll

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\ffmpeg.dll
          • Size 2.9MB
          • SHA256 f3705d563d2d8f93a0d497233c01506d5e4ecc66476022588d422d7509694bca
          • MD5 SHA1 SHA512 SSDEEP TLSH

          icudtl.dat

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\icudtl.dat
          • Size 10.0MB
          • SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libEGL.dll

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\libEGL.dll
          • Size 492KB
          • SHA256 df2581628fdc5e9ce1a7faf61e1c685730802e31ef828f2e6eb6aecbfa00b02a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libGLESv2.dll

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\libGLESv2.dll
          • Size 8.0MB
          • SHA256 08888aafcffd55b349e528f9979c335276ad0fd8c6ce92448179f97557c03ea1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          en-US.pak

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\locales\en-US.pak
          • Size 524KB
          • SHA256 bfa782c9efae2c9cd2c0214dae1bbb3c259d4d4c38d920b06677b9c4cf4f813d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          resources.pak

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources.pak
          • Size 6.0MB
          • SHA256 40af4117b0bd35da141aa599255b879013bfda5968401feccb5c43cb372cdae6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          superbulletai-logo.ico

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\assets\superbullet-ai\superbulletai-logo.ico
          • Size 400KB
          • SHA256 003f9aa0828663260db84974db1e9ddb4da22266f1cf388b6d134ce8c5f4a1be
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Interfaces.js

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\client-s3\dist-es\pagination\Interfaces.js
          • Size 11B
          • SHA256 8e609bb71c20b858c77f0e9f90bb1319db8477b13f9f965f1a1e18524bf50881
          • MD5 SHA1 SHA512

          LICENSE

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\credential-provider-process\LICENSE
          • Size 11KB
          • SHA256 2ef1e48ea743d9c82313e6887858f7c1feaddd636f5a3f43926aab0143e67ebd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          httpAuthExtensionConfiguration.js

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\nested-clients\dist-es\submodules\sso\auth\httpAuthExtensionConfiguration.js
          • Size 1KB
          • SHA256 331902cc5df5060ac9644261de8711ff641d6b91e60b5fcf77d2facc441c8cf6
          • MD5 SHA1 SHA512 TLSH

          runtimeConfig.native.js

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\nested-clients\dist-es\submodules\sso\runtimeConfig.native.js
          • Size 297B
          • SHA256 c0c73f0322ae95adce92f60f138a0e54cc9d686a4ef04c27a0fae1902f47a969
          • MD5 SHA1 SHA512 TLSH

          runtimeExtensions.js

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\nested-clients\dist-es\submodules\sso\runtimeExtensions.js
          • Size 1KB
          • SHA256 91acbc1e819f62b25b16ae8d717eab8eb748fedc63a656ffcf6ae353cd0b5dbc
          • MD5 SHA1 SHA512 TLSH

          type-utils.cjs

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@langchain\core\dist\types\type-utils.cjs
          • Size 77B
          • SHA256 d43aa81f5bc89faa359e0f97c814ba25155591ff078fbb9bfd40f8c7c9683230
          • MD5 SHA1 SHA512 TLSH

          index.d.cts

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@langchain\textsplitters\index.d.cts
          • Size 31B
          • SHA256 c98517664512e9f8bc990db01c296a4d667a53cef785bd5cbc4c4298dbded589
          • MD5 SHA1 SHA512

          LICENSE

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@opentelemetry\api\LICENSE
          • Size 11KB
          • SHA256 c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          LICENSE

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@protobufjs\fetch\LICENSE
          • Size 1KB
          • SHA256 a67b34a24a5daddcce46aea68c5004e4442bbfb63690329fa607bf4de4269794
          • MD5 SHA1 SHA512 TLSH

          LICENSE

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@smithy\core\LICENSE
          • Size 11KB
          • SHA256 07364a5f7d0177a59a05a0002187431f8f899320983c0dc049d72df015e8064c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          LICENSE

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\@types\triple-beam\LICENSE
          • Size 1KB
          • SHA256 c2cfccb812fe482101a8f04597dfc5a9991a6b2748266c47ac91b6a5aae15383
          • MD5 SHA1 SHA512 TLSH

          license

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\cliui\node_modules\ansi-styles\license
          • Size 1KB
          • SHA256 48da2f39e100d4085767e94966b43f4fa95ff6a0698fba57ed460914e35f94a0
          • MD5 SHA1 SHA512 TLSH

          LICENSE

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\es-object-atoms\LICENSE
          • Size 1KB
          • SHA256 5e325595b4ea8cfec3802f545b1def5d7b73e4a5b8e9ba63e32a320f67732292
          • MD5 SHA1 SHA512 TLSH

          .nycrc

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\get-intrinsic\.nycrc
          • Size 139B
          • SHA256 997785c50b0773e5e18bf15550fbf57823c634fefe623cd37b3c83696402ad0a
          • MD5 SHA1 SHA512 TLSH

          license

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\is-stream\license
          • Size 1KB
          • SHA256 5c932d88256b4ab958f64a856fa48e8bd1f55bc1d96b8149c65689e0c61789d3
          • MD5 SHA1 SHA512 TLSH

          package.json

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\long\umd\package.json
          • Size 25B
          • SHA256 8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a
          • MD5 SHA1 SHA512

          package.json

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\lru-cache\dist\mjs\package.json
          • Size 23B
          • SHA256 3ca9d4afd21425087cf31893b8f9f63c81b0b8408db5e343ca76e5f8aa26ab9a
          • MD5 SHA1 SHA512

          LICENSE

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\semver\LICENSE
          • Size 765B
          • SHA256 4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b
          • MD5 SHA1 SHA512 TLSH

          .nycrc

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\side-channel-list\.nycrc
          • Size 216B
          • SHA256 948366fea3b423a46366326d0bb2e54b08abd1cf0b243678ba6625740c40da5a
          • MD5 SHA1 SHA512 TLSH

          tsconfig.json

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\side-channel-weakmap\tsconfig.json
          • Size 116B
          • SHA256 6346ee4c020f341387588479dd83740a65ab902a462b8c6b3b8bf51f032c6795
          • MD5 SHA1 SHA512 TLSH

          alloc.h

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-go\src\tree_sitter\alloc.h
          • Size 958B
          • SHA256 253b44a7b4313a7afd0c505c2fc6e7ce4b8e78955ebf4be3ea000532ec060673
          • MD5 SHA1 SHA512 TLSH

          array.h

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-go\src\tree_sitter\array.h
          • Size 10KB
          • SHA256 4ff743903dc46f5db6aa54f31c6b4d160a8a9779e5b2ab1ee59ae7ebcd850ea1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          index.js

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-java\bindings\node\index.js
          • Size 201B
          • SHA256 609bdf22b8fd183025b3c24e8587f6211d50358e8f2e4c526b9217349ed9dbc0
          • MD5 SHA1 SHA512 TLSH

          parser.h

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-typescript\typescript\src\tree_sitter\parser.h
          • Size 6KB
          • SHA256 a3eb18ef034b3f4255b965a26caa276f9cfe13a79573b402f1a12dc5018052aa
          • MD5 SHA1 SHA512 SSDEEP TLSH

          EmbedResponse.js

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\voyageai\api\types\EmbedResponse.js
          • Size 150B
          • SHA256 b85b16b647b590d06a88c90d15257954cd8cad804092c506939fd451f71fcb86
          • MD5 SHA1 SHA512 TLSH

          LICENSE

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\winston\node_modules\readable-stream\LICENSE
          • Size 2KB
          • SHA256 ec62dc96da0099b87f4511736c87309335527fb7031639493e06c95728dc8c54
          • MD5 SHA1 SHA512 TLSH

          LICENSE-MIT.txt

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\wrap-ansi-cjs\node_modules\emoji-regex\LICENSE-MIT.txt
          • Size 1KB
          • SHA256 483acb265f182907d1caf6cff9c16c96f31325ed23792832cc5d8b12d5f88c8a
          • MD5 SHA1 SHA512 TLSH

          index.js

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\wrap-ansi-cjs\node_modules\emoji-regex\es2015\index.js
          • Size 10KB
          • SHA256 8718dea4d28647912918dba60545890dc10ae672bfb186b6ec0af3fc5e826137
          • MD5 SHA1 SHA512 SSDEEP TLSH

          index.js

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\wrap-ansi-cjs\node_modules\emoji-regex\index.js
          • Size 10KB
          • SHA256 c56978800e47f095cfbfe96712b5e78d150d1f62e32bb4943675213fce481ef0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          index.js

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\ansi-regex\index.js
          • Size 350B
          • SHA256 c92312790eb1f246b7c4c1fe9c1247b15441bbca3c6cb64d167beefc45302753
          • MD5 SHA1 SHA512 TLSH

          package.json

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\ansi-regex\package.json
          • Size 470B
          • SHA256 93fcfd1b014b9bd7f31b3f35b24a5a479839b6f141c95f62b73a1829bf112ad2
          • MD5 SHA1 SHA512 TLSH

          readme.md

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\ansi-regex\readme.md
          • Size 2KB
          • SHA256 3ebc0f845b1bab50600f823716040fbec355d3c356a3a76b8eb9eb593b6c7a3a
          • MD5 SHA1 SHA512 TLSH

          index.js

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\strip-ansi\index.js
          • Size 154B
          • SHA256 bf37cd692bf030c2ec270945bc26aa8b19ad379fa5916f12304758f709ab0978
          • MD5 SHA1 SHA512 TLSH

          package.json

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\strip-ansi\package.json
          • Size 511B
          • SHA256 4518dec682055621a82c1480a6c33479a7b6ae7d17019ccc4799b86e9be4d4d7
          • MD5 SHA1 SHA512 TLSH

          readme.md

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\strip-ansi\readme.md
          • Size 1KB
          • SHA256 cb384db30337ecec75919b4c69aab67358b4f4e384406956687894b6d777413b
          • MD5 SHA1 SHA512 TLSH

          cs.d.cts

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\code-context-subprocess\node_modules\zod\v4\locales\cs.d.cts
          • Size 122B
          • SHA256 b42d3651103a532f7492e719a828647af97306b2356ae757ebb7f17f4a8c41e5
          • MD5 SHA1 SHA512 TLSH

          p50k_edit.d.ts

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\resources\app.asar.unpacked\node_modules\@dqbd\tiktoken\encoders\p50k_edit.d.ts
          • Size 133B
          • SHA256 7d0e8a9e6b76c79a97603d92f3934299a86b6c51c9e9a4fa4c6fb78a99bf596f
          • MD5 SHA1 SHA512 TLSH

          v8_context_snapshot.bin

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\v8_context_snapshot.bin
          • Size 758KB
          • SHA256 1fa1cdd08423809344fe15fac2d9d1ec604cc3ea5af4b944d89a51b1e98c8665
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vk_swiftshader.dll

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\vk_swiftshader.dll
          • Size 5.4MB
          • SHA256 597ca957c8aaa18911c719f7973dc1628c02e6a4319f1eda3a15134a403d1d68
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vk_swiftshader_icd.json

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\vk_swiftshader_icd.json
          • Size 106B
          • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
          • MD5 SHA1 SHA512 TLSH

          vulkan-1.dll

          • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.90\vulkan-1.dll
          • Size 922KB
          • SHA256 3500028f57bb570f75b6bef56b13fb788da0ffb8d0fe1ec61c058c839be19eb8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          default.dic

          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
          • Size 2B
          • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
          • MD5 SHA1 SHA512

          the-real-index

          • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Code Cache\js\index-dir\the-real-index
          • Size 48B
          • SHA256 26a789a4f5126c726ef979d9033fa1c7f3135e1aa13c8d383cef08d9d35030a0
          • MD5 SHA1 SHA512

          index

          • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Code Cache\wasm\index
          • Size 24B
          • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
          • MD5 SHA1 SHA512

          the-real-index

          • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Code Cache\wasm\index-dir\the-real-index
          • Size 48B
          • SHA256 0a213ca4c0330143cc5125d7815f32b27a3c971a114c6a1c168e2644224124dd
          • MD5 SHA1 SHA512

          index

          • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\DawnGraphiteCache\index
          • Size 256KB
          • SHA256 d424ad53b678c8b140c425e4ba3454f64ce4049a1894b7913773d147d9cf19c4
          • MD5 SHA1 SHA512 SSDEEP

          index

          • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\DawnWebGPUCache\index
          • Size 256KB
          • SHA256 4cadf95376598f98c9a204829fd7febc890fa7abc63fe1f0cc59156f831694d9
          • MD5 SHA1 SHA512 SSDEEP

          data_0

          • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_0
          • Size 8KB
          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
          • MD5 SHA1 SHA512 SSDEEP

          data_1

          • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_1
          • Size 264KB
          • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
          • MD5 SHA1 SHA512 SSDEEP

          data_2

          • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_2
          • Size 8KB
          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
          • MD5 SHA1 SHA512 SSDEEP

          data_3

          • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_3
          • Size 8KB
          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
          • MD5 SHA1 SHA512 SSDEEP

          index

          • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\index
          • Size 256KB
          • SHA256 b17be80dac746bc0a92b95f9af61ab029120ef64522e920ed251392bb964cdfe
          • MD5 SHA1 SHA512 SSDEEP

          Local State

          • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Local State
          • Size 434B
          • SHA256 475c7a7992e5217ebef100ab7d3f4811df50563ab791d9b955f176fdf2fc0551
          • MD5 SHA1 SHA512 TLSH

          LOG

          • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Local Storage\leveldb\LOG
          • Size 259B
          • SHA256 e186d49f0ac1592d6ee88c0c8769e1bddb277fe1946c84db5ba40525b3d0edb7
          • MD5 SHA1 SHA512 TLSH

          Network Persistent State

          • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Network\Network Persistent State
          • Size 665B
          • SHA256 811f8107714ebae0d74bfb01e8cc8b2b5fe959c4a49793783ffe6ab0be9526ad
          • MD5 SHA1 SHA512 TLSH

          Network Persistent State

          • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Network\Network Persistent State
          • Size 111B
          • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
          • MD5 SHA1 SHA512 TLSH

          Preferences

          • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Preferences
          • Size 93B
          • SHA256 529b6595a4727a6b2d6cc154ae51f426216c01fc7fda02de2460abfb3de118a4
          • MD5 SHA1 SHA512 TLSH

          CURRENT

          • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Session Storage\CURRENT
          • Size 16B
          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
          • MD5 SHA1 SHA512

          MANIFEST-000001

          • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Session Storage\MANIFEST-000001
          • Size 41B
          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
          • MD5 SHA1 SHA512

          memory/1456-315-0x0000000022B20000-0x0000000022B58000-memory.dmp

          memory/1456-7-0x0000000000300000-0x00000000004D6000-memory.dmp

          memory/1456-317-0x0000000022AF0000-0x0000000022AFE000-memory.dmp

          memory/3160-12326-0x0000000002860000-0x0000000002880000-memory.dmp