09e1d58002a6d74556d7aa0217c663e1f04608acd71155291363ea6df6ee4ce8

Analysis

user interaction
yes
max time kernel
89s
max time network
105s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 14:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SuperbulletAI 0.3.94.exe
Size 303.2MB
Sample260825-rhdfcaaq8x
SHA256 09e1d58002a6d74556d7aa0217c663e1f04608acd71155291363ea6df6ee4ce8
MD5 c23fde292d91aff1b847b9471a62a26d
SHA1 dd86ecfc2ade0556bf9617ecf1ae4bf498dc849f
SHA512 f0d78decac80a7ffd1536eb92c5de440a96ee5d1f0db725763be2ca08b2382e507852b4849b11362e888a89b8fef159867ed20e151493bebcd43ca239fde953f
SSDEEP 6291456:G8CsLOd82E6aaVxr1mB+FkQ6dAJljQFPOs7AU1ZniJPig2BYKVwM/qbVjt0npPP:5Rx2Epav8hdAQ68Zn8PfKX/qx6pPP
TLSH
T1E5E833F436D19E25D1A0B0731AE2AFFB797C10493C48D1252B206FDA8B095C7EB2A757
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery execution spyware stealer

Malware Config

Signatures

Reads ssh keys stored on the system 2 TTPs
Tries to access SSH used by SSH programs.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
37	raw.githubusercontent.com
93	raw.githubusercontent.com
94	raw.githubusercontent.com

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_metadata\verified_contents.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\ka\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\fil\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\ur\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\as\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\km\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\pl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\te\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\ar\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\da\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\sl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\th\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\zu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\el\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\eu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\uk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\en\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\mn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\lo\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\fr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\cs\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\si\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\de\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\service_worker_bin_prod.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\kk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\bg\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\en_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\ko\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\pa\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\sv\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\dasherSettingSchema.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\hi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\ta\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\tr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\page_embed_script.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\offscreendocument_main.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\nl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\no\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\is\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\cy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\en_GB\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\be\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_556354913\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\iw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\sr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\bn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\gu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\sw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\offscreendocument.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\or\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\es_419\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\et\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\fi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\hy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\ca\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\am\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\hr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\ru\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\ne\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5292_510719770\_locales\gl\messages.json	msedge.exe

Executes dropped EXE 12 IoCs

pid	Process
4592	Update.exe
1908	Squirrel.exe
5296	SuperbulletAI.exe
2588	Update.exe
6160	SuperbulletAI.exe
6200	SuperbulletAI.exe
6648	SuperbulletAI.exe
7136	SuperbulletAI.exe
6804	SuperbulletAI.exe
716	SuperbulletAI.exe
2004	SuperbulletAI.exe
2936	SuperbulletAI.exe

Loads dropped DLL 14 IoCs

pid	Process
6200	SuperbulletAI.exe
6648	SuperbulletAI.exe
6200	SuperbulletAI.exe
6200	SuperbulletAI.exe
6200	SuperbulletAI.exe
6804	SuperbulletAI.exe
6804	SuperbulletAI.exe
6804	SuperbulletAI.exe
6804	SuperbulletAI.exe
6804	SuperbulletAI.exe
2004	SuperbulletAI.exe
6804	SuperbulletAI.exe
6804	SuperbulletAI.exe
2936	SuperbulletAI.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
4496	cmd.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SuperbulletAI 0.3.94.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2348	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134321407630405941"	msedge.exe

Modifies registry class 13 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\superbullet	SuperbulletAI.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\superbullet\ = "URL:superbullet"	SuperbulletAI.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\superbullet\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\SuperbulletAI\\app-0.3.94\\SuperbulletAI.exe\" \"%1\""	SuperbulletAI.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{0209A32D-352D-48BB-BAD9-CE0F63DFF416}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\superbullet\URL Protocol	SuperbulletAI.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\superbullet\shell	SuperbulletAI.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\superbullet\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\SuperbulletAI\\app-0.3.94\\SuperbulletAI.exe\" \"%1\""	SuperbulletAI.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\superbullet\URL Protocol	SuperbulletAI.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\superbullet\shell\open\command	SuperbulletAI.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\superbullet	SuperbulletAI.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\superbullet\ = "URL:superbullet"	SuperbulletAI.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\superbullet\shell\open\command	SuperbulletAI.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\superbullet\shell\open	SuperbulletAI.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4592	Update.exe
4592	Update.exe
5292	msedge.exe
5292	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	4592	Update.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe
Token: SeCreatePagefilePrivilege	7136	SuperbulletAI.exe
Token: SeShutdownPrivilege	7136	SuperbulletAI.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4592	Update.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 5292 wrote to memory of 5488	5292	msedge.exe	102
PID 5292 wrote to memory of 5944	5292	msedge.exe	103
PID 5292 wrote to memory of 2348	5292	msedge.exe	105
PID 5292 wrote to memory of 5944	5292	msedge.exe	103
PID 5292 wrote to memory of 5944	5292	msedge.exe	103
PID 5292 wrote to memory of 4056	5292	msedge.exe	106
PID 5292 wrote to memory of 4056	5292	msedge.exe	106
PID 5292 wrote to memory of 3208	5292	msedge.exe	107
PID 5292 wrote to memory of 3208	5292	msedge.exe	107
PID 5292 wrote to memory of 5580	5292	msedge.exe	110
PID 5292 wrote to memory of 3552	5292	msedge.exe	111
PID 5292 wrote to memory of 3552	5292	msedge.exe	111
PID 1684 wrote to memory of 4592	1684	SuperbulletAI 0.3.94.exe	112
PID 5292 wrote to memory of 4496	5292	msedge.exe	113
PID 5292 wrote to memory of 4496	5292	msedge.exe	113
PID 5292 wrote to memory of 4840	5292	msedge.exe	114
PID 5292 wrote to memory of 4840	5292	msedge.exe	114
PID 5292 wrote to memory of 3864	5292	msedge.exe	115
PID 5292 wrote to memory of 3864	5292	msedge.exe	115
PID 5292 wrote to memory of 6440	5292	msedge.exe	117
PID 5292 wrote to memory of 3208	5292	msedge.exe	118
PID 5292 wrote to memory of 3296	5292	msedge.exe	119
PID 4592 wrote to memory of 1908	4592	Update.exe	120
PID 4592 wrote to memory of 5296	4592	Update.exe	121
PID 5296 wrote to memory of 2588	5296	SuperbulletAI.exe	122
PID 5296 wrote to memory of 6160	5296	SuperbulletAI.exe	123
PID 5296 wrote to memory of 6200	5296	SuperbulletAI.exe	124
PID 5296 wrote to memory of 6648	5296	SuperbulletAI.exe	125
PID 5296 wrote to memory of 6200	5296	SuperbulletAI.exe	124
PID 4592 wrote to memory of 7136	4592	Update.exe	127
PID 7136 wrote to memory of 6804	7136	SuperbulletAI.exe	128
PID 7136 wrote to memory of 6804	7136	SuperbulletAI.exe	128
PID 7136 wrote to memory of 716	7136	SuperbulletAI.exe	129
PID 7136 wrote to memory of 2004	7136	SuperbulletAI.exe	130
PID 7136 wrote to memory of 4496	7136	SuperbulletAI.exe	131
PID 4496 wrote to memory of 548	4496	cmd.exe	133
PID 7136 wrote to memory of 2936	7136	SuperbulletAI.exe	134
PID 5292 wrote to memory of 4664	5292	msedge.exe	137
PID 5292 wrote to memory of 4664	5292	msedge.exe	137

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3856,i,15332116037506570175,9562956768420408611,524288 --field-trial-handle=2188,i,1059565441664318734,8189295827706765466,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
1⤵
PID:824

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3812,i,2756216912880606842,7458717864869609975,524288 --field-trial-handle=2188,i,1059565441664318734,8189295827706765466,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:14
1⤵
PID:2064

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,16999305917924379154,4357490198476991932,524288 --field-trial-handle=2188,i,1059565441664318734,8189295827706765466,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
1⤵
PID:3704

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,16999305917924379154,4357490198476991932,524288 --field-trial-handle=2188,i,1059565441664318734,8189295827706765466,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
1⤵
PID:760

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:5292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffd1e07c188,0x7ffd1e07c194,0x7ffd1e07c1a0
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1532,i,17708348413539817857,4159768850626802136,262144 --field-trial-handle=2264,i,11222524817261468232,14185044785913930690,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,10724251339809460649,7591335358985705385,524288 --field-trial-handle=2264,i,11222524817261468232,14185044785913930690,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2408,i,3024870025149089775,4141799501731030792,524288 --field-trial-handle=2264,i,11222524817261468232,14185044785913930690,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:13
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,15873853293324992571,9261677898484205608,524288 --field-trial-handle=2264,i,11222524817261468232,14185044785913930690,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:14
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,218860513303835803,13585771457446101115,524288 --field-trial-handle=2264,i,11222524817261468232,14185044785913930690,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:14
  2⤵
  PID:5768
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,218860513303835803,13585771457446101115,524288 --field-trial-handle=2264,i,11222524817261468232,14185044785913930690,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:14
  2⤵
  PID:5580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,11509511261720277637,9365461058787833695,524288 --field-trial-handle=2264,i,11222524817261468232,14185044785913930690,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:14
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4984,i,11370632903615503431,16932617672630003505,524288 --field-trial-handle=2264,i,11222524817261468232,14185044785913930690,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:14
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,11487139914151182025,12381231143231527795,524288 --field-trial-handle=2264,i,11222524817261468232,14185044785913930690,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4948,i,3707515018261294873,16307683483742180079,524288 --field-trial-handle=2264,i,11222524817261468232,14185044785913930690,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:14
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4720,i,7303127434679467544,12026509880545899787,524288 --field-trial-handle=2264,i,11222524817261468232,14185044785913930690,262144 --variations-seed-version --mojo-platform-channel-handle=4708 /prefetch:14
  2⤵
  PID:6440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4724,i,6803334317174305707,11798578202551197918,524288 --field-trial-handle=2264,i,11222524817261468232,14185044785913930690,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4716,i,7481250016729809013,4339899206333447915,524288 --field-trial-handle=2264,i,11222524817261468232,14185044785913930690,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:14
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,16945179838558208751,17557708243888105409,524288 --field-trial-handle=2264,i,11222524817261468232,14185044785913930690,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:14
  2⤵
  PID:4664

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4496

C:\Users\Admin\AppData\Local\Temp\SuperbulletAI 0.3.94.exe
"C:\Users\Admin\AppData\Local\Temp\SuperbulletAI 0.3.94.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1684
- C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
  "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4592
- - C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\Squirrel.exe
    "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\Squirrel.exe" --updateSelf=C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
    3⤵
    - Executes dropped EXE
    PID:1908
- - C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\SuperbulletAI.exe
    "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\SuperbulletAI.exe" --squirrel-install 0.3.94
    3⤵
    - Executes dropped EXE
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:5296
  - - C:\Users\Admin\AppData\Local\SuperbulletAI\Update.exe
      C:\Users\Admin\AppData\Local\SuperbulletAI\Update.exe --createShortcut=SuperbulletAI.exe
      4⤵
      Executes dropped EXE
      PID:2588
  - - C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\SuperbulletAI.exe
      "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\SuperbulletAI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --field-trial-handle=2420,i,1323327078090086975,1892882837024045112,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2444 /prefetch:11
      4⤵
      Executes dropped EXE
      PID:6160
  - - C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\SuperbulletAI.exe
      "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\SuperbulletAI.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2420,i,1323327078090086975,1892882837024045112,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2404 /prefetch:2
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:6200
  - - C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\SuperbulletAI.exe
      "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\SuperbulletAI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --app-user-model-id=com.squirrel.SuperbulletAI.SuperbulletAI --app-path="C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1787666561958409 --launch-time-ticks=634341531 --field-trial-handle=2420,i,1323327078090086975,1892882837024045112,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2512 /prefetch:1
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:6648
- - C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\SuperbulletAI.exe
    "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\SuperbulletAI.exe" --squirrel-firstrun
    3⤵
    - Executes dropped EXE
    - Modifies registry class
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:7136
  - - C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\SuperbulletAI.exe
      "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\SuperbulletAI.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1852,i,18092693141989716577,484851264530480773,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1848 /prefetch:2
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:6804
  - - C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\SuperbulletAI.exe
      "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\SuperbulletAI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --field-trial-handle=1852,i,18092693141989716577,484851264530480773,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2072 /prefetch:11
      4⤵
      Executes dropped EXE
      PID:716
  - - C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\SuperbulletAI.exe
      "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\SuperbulletAI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --app-user-model-id=com.squirrel.SuperbulletAI.SuperbulletAI --app-path="C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1852,i,18092693141989716577,484851264530480773,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2888 /prefetch:1
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:2004
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"
      4⤵
      Executes a command shell one-liner
      Suspicious use of WriteProcessMemory
      PID:4496
    - - C:\Windows\System32\reg.exe
        
        C:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid
        5⤵
        
        PID:548
  - - C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\SuperbulletAI.exe
      "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\SuperbulletAI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --app-user-model-id=com.squirrel.SuperbulletAI.SuperbulletAI --app-path="C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar" --no-sandbox --no-zygote --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=1852,i,18092693141989716577,484851264530480773,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3588 /prefetch:1
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:2936

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 bfd2f434f48134a7acc370aab98df13e25dde2755b5ffc5e2d1ec992940c0a20
MD5 ba1bfff7b253fcc1b872de7798595c34
SHA1 dc31263862c1cd5da8977c8e57052576d3fe183c
SHA512 293a40dfdcd67941a83b7cab2fd88081716cd37dfceff046ac51aa1578be846621a564fc47febf45f7d67442fd0fe322767b1f64ee0fda12d03fc3d43f49fba2
TLSH
T116E02BA9C915AC3709FD071961545786E71013672741545F3B3ED308CFB563B079BC1C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 d153366508aa9c2f0a70b915baaa6c45a78c77691c607a14bd750735a6e98425
MD5 a4893e676ebc0d097354c25080222284
SHA1 816dd8a103b485532d19ce2d35acd228f0619bf5
SHA512 7ac3479439bd99ce615dc0278edd8f5afb07b783e4463f8be484bbf7c1b8e5661118dc8f476fc319494fd916411de60d8dacd47cb7a1c65d91fccfa373a696ec
TLSH
T194319BF7C3F4856E8A0196F0AA086E1FCE6D0915432C7D9BC5E0AE2B93E3471E14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 91435aacf5f2732d218c413dacfd85b34b68c6303194d99f949a263c62aab5e1
MD5 d15bd001610d4dd24cf3ce170d25e6ac
SHA1 42ec2251ee0c8113c1753be2be275e16f9adcfe6
SHA512 f8b52e56085b42bbc66aeb9302acfd9ddaed86c05072f1b1eba9cc8a8db1714350018953449d6f766c3f57fb792d67e1f55eb8f1dfb07f552ef3dc0c1ddcf438
SSDEEP 192:sxRcRhyM/jK1Ml8YCl/fzsyWpVB67ZRzoA8p4k/g6+WNIYHYph7GPIgVGu0jJ:sxRcnCl/fzsyWvB61MR/5ItjsaV
TLSH
T12762DA15AA38A97BCCCBD21DFA557F53D6F91523A2901E44AAFCCA1C00E76ED120381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 84a8fbef4b85c04d9ad9a14194f9e131f156224994739e75175995b0b00349cf
MD5 5d1a72d84389fc1c929dc3aeb511dcdb
SHA1 d09f76173c1344cdba89d25da77895cdc6832f14
SHA512 63a9a3ed5bbea555ea8946b216d271166322064201d844ce8a9723e43e7e9a66b4dad718923c73eab264156de1bd0ab599711419601d6da9bf4972d4d0bb08de
SSDEEP 192:sxRLRhyM/jK1Ml8YCl/fzszWpVB67ZRzoA8p4k/g6+WNIYHYph7GPIgVGu0jJ:sxRLnCl/fzszWvB61MR/5ItjsaV
TLSH
T14D62DB15AA38A97BCCCBD21DFA557F53D6F91523A1901E44AAFCCA1C00E76ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 e4b8ea3e6f0f9ce1ea0c96697c98208d0374750fec085619a5e8e443347016e3
MD5 2ff41ced08a52dd8e86f01b76be87959
SHA1 75b16befb91d7aff74ad33e78444a4881c05cf84
SHA512 d16dc80246399cc25ed929474cdbf12435c4b4e1c7f85eb5593542cd0f1fa8cd6ab753a2d7fef07e9553c9450eac6ed80a7fcd6d4774756fad8cf1346a84a248
SSDEEP 768:wGedmq7pLuLzF6WgoufDM8F1+UoAYDCx9Tuqh0VfUC9xbog/OVY9Ou4Y1roSNz8T:wGedmCEzF6WgoufDMu1jaz9OVYOkcj
TLSH
T1BAE2EB3B680CCB7E4F804EDDEC29BE9F6DA801CB9AD8895447EA840C03C57EB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 1d616be267a0854e9638dffca76861c1b14254d01f7e9246eb3a1138693465e7
MD5 563a5eac4f71533cfa5093088915e417
SHA1 9690e1a553b8fa3ed3fe84e570c4d19265407136
SHA512 7824d155516a140fa264f1bb913a390e983ec9980bf51bc65e6d20661a24da33453dcf0e9618efbcf222ec398340561620b78b06254addd4be60afb40d29a353
SSDEEP 96:KRwBUAyeSIWWLbgIIK4Ng6Icoob6AFHjsJ9rhhdW18qgjbK4igtbcx50HPoHpm3s:CwBUAyeSfWLkIMNg6noob6AFHjsJ9rho
TLSH
T1DA910755317E02403C7EAA0991F99C19A3C178E23554B42F77E902E64F66F038EFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a8ffd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a8ffd.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 5593bedb18beab9925580eaaca9d3d16483ba067544b97d1e54c5762744c9553
MD5 3ed981fbb49db91d9edcfae395cd6ad0
SHA1 7b73e06ae68b1fde461929ee06930acbd034eff6
SHA512 53b7542697ea952a255666c9aeec2409d11f82efdbcae83234ef9478e8b742c4930cc6359d6b7a9bda8ffa1f1ca44fb097b20c99e0cf59869ca0ce3e4eed3fcc
SSDEEP 384:njZcIW38N/ECojSgCJDZNfNoXOVSUUWXnFLXoabGETRzcoXfK86sfxEZxxsIj4li:7W3ivDZIO0WhTtNzc4ReyIsMVfAufN
TLSH
T1C1F2BF32EC38DC676CEAA385F6067513BEF4412782C96E8099DD9F1C05476EE032B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 56KB
SHA256 d18fc03e6e5e7efdb4f522e18a0a18ecc02549939c5818a4c89b831a15aefc22
MD5 9eb15c412fe476b44159c54cadd2294f
SHA1 f3119a80aedf55712a3350695a045d3963fa092a
SHA512 3a637262e720cad9c9d5cbaf37c96f7972bde640f5496f82d8ba902a4021e5d4e3cdf6d617fba52b3743571a02e2347585117c8e39d69bb0caa82a1ce501aee3
SSDEEP 768:PFNW3WwgpuZw/Nzc4ReyIsUKTOOGwhv9UOnPJ7n82HrKNwLg4Bb97OvAufN:vW3Etc44bsUKTbhv97PJ78Orl7N+ACN
TLSH
T15C43BF3ADC20DD7FACFA6782A70A7506ADF8413B81DCA8D4DAD86F0C50665DD530BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 e83072f1f1af16477bfa1843bf60438d03d07a6c94ca406184e55a90e2c55244
MD5 6e64363ba2e637f2376fe2da957b7da4
SHA1 57fffe80a07d17f4c95ea20390a48f93daac6f54
SHA512 d9d4167d7bd2b167539ddc65c63111a1174e81744157cdc47a637efbc7755e2a288cecc5a48bb77a3d0bab3188d4b032007d9b1fae799e95a125d46f05170a6b
SSDEEP 768:rW3ivDZSO0WwENzc4ReyIsM4Bb97fAufN:rW3DEtc44bsPNfACN
TLSH
T11D03AE39EC248D7B9CFDB381B60A75136DF4813BC1E96998C6DC5B0C85236ADA31B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 d2fc1cc3f2820867a2447eb1ef6cfb460c12168bd83e994665fc8717a8dbd4c2
MD5 0c3947dec1939ab3e92151487e887a6e
SHA1 780af39a1e0dbc0cf228cf0c5f741a2dffdeaa1c
SHA512 80519e74d371275bfd83a8613405c3036ec2fc07b4d0c5886ea95e3d738e0bcc2bd5bbf194a726501b6e74ef2fd152c77880bd840c130ab1566bb394feba478a
SSDEEP 768:8rv+4UNbdJ3uvDZIO0WhTtNzc4ReyIsMVR3Y:8bsbv3wttc44bs8S
TLSH
T1BC03AD32F8289A77ACFA6686F10775037EF4511B82C51A84DADD6F4C464B1EE132F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 116b785c7f03955bd2709a23a82dc5a9d85b382ea59350684d3d7023124c8b80
MD5 0036221ff7e825b74c24689dcf3b0d2e
SHA1 54c49d5a32c79b13996619161544d0955f0ca4f7
SHA512 b4660a296d090331a4d7a6f6765903664838f6fa6b34c713418fbbd599d2a821e5ecb3291941d9c7c71d5f1f0b59cc80279df37b5d25accf10339a068b4fc685
SSDEEP 768:grv+4UNbdJ3jvDZIO0WhTLNzc4ReyIsMVeVH1S5F:gbsbv3RLtc44bs8EH1W
TLSH
T10213BE32E878DD77ACEA6686B10775137EF8512B82881E94C9DD5F0C4A4B1EE031F927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json~RFe5ae7a2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json~RFe5ae7a2.TMP
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
Size 154KB
SHA256 e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
MD5 a922bd2071b7aa9f2154c991d41885c7
SHA1 c88b22d16c951cbb0bfdab367232cf830e0464d1
SHA512 d8ed2d6b1c3a421a9771e3a5109eaea839bf64be7b7e672ed7b8aa47590ff35c6e78aa79712ce37801cedc56db552fc6a7c3ca55004295a438219ce4a8f007a0
SSDEEP 3072:Aj0amyoD1f5NQQHyR5nYbGnkBEGsvsq5UBkUM4RIJ+37HVeCsKkwQuBp/Z:AoHBD15HEYbQkovswoM4RIIzvXkwtBpB
TLSH
T12BF3F11D7EDAC952C40B92BD3C1AB18BC94B8F0A431674CF264D90248EA578E07E5EFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 a0b1a35a86cbd2e671521525fc6903162d450e3b301948d913d05ef458794c20
MD5 22215f69c4a5231b8c568620e783d7fe
SHA1 c64663b6efe0023ca5978374d785f1202d924d1b
SHA512 9e38513132672de4a65c01a6eca3c8c3a878cc6e11e2c0d2235798b78e3338c9a13a15d261c4b4fc6c60657f42407b98c8435aa4352366d1809843ddda068e22
TLSH
T1A5C02B79481924CC2B00043C6004012B19B0560023C413F48C1B8D80007537CD30817F
MD5 SHA1 SHA512 TLSH

Submit Download

RELEASES

Path C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES
Size 85B
SHA256 7ac53266e1f685757b7f85eed1bbf06d2fe34e30b874fcb5707f48050074611c
MD5 8e45b5680b23c23508d986f3730d35db
SHA1 0da80b38c27840a4a7fe2a3e843eaad9527caa2b
SHA512 a0a606b6743a1c3dccb1ae76d70e28c8dcbd572b22b806a263857c6a4fe3ae963ccbe1cc7a0e36a42cab429059c54c1037f9623b5ca135560e15e2e7c454caeb
TLSH
T126A0125C959101A4C890103C490144A0E9235D7850848412174276260C5405C2144464
MD5 SHA1 SHA512 TLSH

Submit Download

Update.exe

Path C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
Size 1.8MB
SHA256 d112e073221d7d50919e0fe9b51c5250b2522d2c863fc0b02b8d8cefa549a558
MD5 ee32aadae0e6fbee020ad8db37eab24f
SHA1 c033acd3ba5dda5f1f43c7c19cd7a69b599927f2
SHA512 b1be84df78b76326b42106ed1f7620255359a90326fac9e0e141455be0a03bbc590a07af23313ab2ca7e2f2ae7f237c7a0562dc6274282e9f620919f078c1752
SSDEEP 24576:pWltPu4nUCiag6CKMezCy9sQuOjj1VgfQ6jvXZ6AtkrCze/Ehxc4t9+ts:0tPUCiag6CKMezCyZuOjJapj2/Ehn
TLSH
T1E8956C01E7E89F2BE56F6B76E030055813F3E9867376F78B2A4871792A937504E053A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.gif

Path C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif
Size 43KB
SHA256 ce636d201ef86ffbf4ee8c8762b4d9dc255be9d5f490d0a22e36fe0c938f7244
MD5 b5a42ecde0b058b3c4e661e0ec84400b
SHA1 7e2bfc653c5bc6997553c150a0823daae372cd99
SHA512 b7f4a7bddb226066f7edf23dfb9bee658c30ae03dfe727ec739f51fd98c63831f732343c14a6ca080f31baed38bf9064cdd57c9d1daaf4c42c029fe83d846dc0
SSDEEP 768:5XxIn344C+JtOb7Q+8Phv9YaZuJ+Hz7X9Dbzjy2CXdSksvlxkZPbM/zEffvTeq6e:5XxIn344C+Jty7Q+8Phv9YaZuJ+Hz7Xk
TLSH
T106136B3EC2949279B43716F72A1B4EE26B5667B4221152421BFC70D332BCAEE334641F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SuperbulletAI.exe

Path C:\Users\Admin\AppData\Local\SuperbulletAI\SuperbulletAI.exe
Size 666KB
SHA256 ebf1a8093e0db38baadad997f4608b91fa7104cfb6cad5187a032c14c1d8ec2c
MD5 bc505b96eb4bb912f3585fcab95b3f9c
SHA1 c01e7e32ba2a5770d81c719f93698c021343eafe
SHA512 41cb3104692c9401e4abf17376b6b7a7125e074de26ce66e18160814df1d8bfbd5a778a7ca5e8972a22469524f697e245d26a16dbf4bddec014088114d561739
SSDEEP 6144:VZDPqpGVj4n6k8A3brtVYAOfBqgPZZcjkHHoHe6yJ62LUOgDFaURP:VZWG54ntBJVY5nPDcQHHqFInUxaUd
TLSH
T1A5E48D21B4C2C4B3D433163089F8E7B1552DFEB21A518A67B3C53F6F3E345C29A25A66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D3DCompiler_47.dll

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\D3DCompiler_47.dll
Size 4.5MB
SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
MD5 6ac6cc720fb6bbe5c0ed4e84ad2b3337
SHA1 8556531bd06691ce0f8b7d83814c867a420526a4
SHA512 216084dc2a84ca818d68d603968acc978c0b60bdbe0a3152cbfc400ec11a2b96e81d1698a15dbb7738974f4365a8feb109f2bca5b641b42acedeaeff1e2a342c
SSDEEP 49152:JSHvWaWTktEzfRriMsCL98dhdVhpHGC6GNCxJYrv9y5Eze+V7ZpdKMZzaWoUyxqJ:suktcrfNlTyj5byqSC
TLSH
T1FE268D5767E840E9C5BBD138D687831BEBB1B80413345BDF01508669AF73BE26A3E724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\chrome_100_percent.pak
Size 112KB
SHA256 45d14a4278b1e152b363197401a5604aa5a3cee6512a6b52df978038fa521a0f
MD5 e7bbddff3081eeecf7f56e76ce1d48e4
SHA1 eb83b418ad0e8f502f12a339cabc2fef8ec06cb4
SHA512 2caaa851d095d1a641b959cf092a2ce02328298aafdfadafc773eb0a0054054ae54c41574328694f6a37928203509a0c7e38f3beff1f4fd2ded00b5ed5531d85
SSDEEP 3072:z84PisCv+/P9NebGz8LI1TwuLjQBHe7YAP18RVC2I:zRYWFUbGz8LI1TnjQBQCrC
TLSH
T13AB3D0D7B7B0AD7DDA474BB783560170FCB30B2D0682120A5A99E479653AF88C8D93D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\chrome_200_percent.pak
Size 182KB
SHA256 aafc61b89748d17fcbc9fecd9844a77be2c584529a81714c98e0c4d453ea9496
MD5 1e1744b9410d29e7d1ed28c4f67d6317
SHA1 4f3fcf3db1f8a1eeefd5a4c2f3f2d2b34c094a82
SHA512 10fbcc89ae3251f4c163beea1dd3a53bca239486e1ed7a997e9b04d3a6193266cd96db4a1f8b753942429305ae9ee28b1e9d3fee7e2ddfee847a4db40c8cea93
SSDEEP 3072:dl4J8LahaY7d6iN6uSwxohPQDQYaEjrvy/IwXJPoLjQBHe7YAP10uxR/TbIM0:tGQ+N6uSZQDQYakvyAkcjQBQNd4
TLSH
T13804F1D373B8AD3DDA570B73926610E0FD7A20291EB3110A5A9F98397925E8CD9CD343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\ffmpeg.dll
Size 2.9MB
SHA256 f3705d563d2d8f93a0d497233c01506d5e4ecc66476022588d422d7509694bca
MD5 34ffa11360b885c0c0af62195b1401b1
SHA1 2517c2f77c03238f70a27412c63f32f6a148d321
SHA512 377aa1a5a14796db9ee8b6e2adcb0414e6102262bc5edb6e1a15094ef538a951beb97f517da113df3d0a72eb83854d86818402ea080f7c09352fc73ccb540af4
SSDEEP 49152:UESTAZFzTxMIP29EeLfptJrj0vVJA8ANdZGNxcO6IhgiS9Nol7WtaRRqSorwIaGH:UDaTSEYht8OnZGNxcO6IhgiS9Nol7Wtu
TLSH
T135E5AE03F6D650D9D029C57197AB9313F631380A4F2056EF2A804A253FA7FD86E7E768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\icudtl.dat
Size 10.0MB
SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
MD5 4171402e385f07007de57f45ff540e9a
SHA1 aab98edda310e6ddd3e4b71f95b6225c4defa7fc
SHA512 53e303895fa80944f7b0e0f64ab657b79bfe0d7c462b853ed06b556e42d78c639021c4c337743f18174614a1f74c805198ae868c52dfd8a2e270e4ce4a2880ff
SSDEEP 196608:rwPBhORiYAXHiXUxY/iJ53IWhlVjEeIu2YDU:rswkpHiXUxY/iJ53IWhlVjEeI0U
TLSH
T1CEB63807A2FB8DC6F9F76F30E8F452679567BD496E32805911042F3B1D332A08661BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libegl.dll

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\libegl.dll
Size 492KB
SHA256 df2581628fdc5e9ce1a7faf61e1c685730802e31ef828f2e6eb6aecbfa00b02a
MD5 995ba006ea8bbac389a3b24ce87cbad8
SHA1 1966c885195901ac4004d029309863b6b37a8254
SHA512 03b499a0c2aaf5f4a971d3dc1dc91733a1b7f1edff699646321c4cfb9c138a81dc7f4e644f1a3d7dbdad6cdaf890daa752bbe890530269c68d94dc5ca3351fe5
SSDEEP 6144:itqwvC8uRreZw/ebZyu5sIAeoZPw1ODZ6R3/8cWqR/H2p5HoSyhg:EqwvC8SrZmNEIsPwa6R3/8cWqt0HoSZ
TLSH
T1DFB49D15F3E945A8E06AC4348B534603DA7278560B65FAEF03E092793F37BE45B3A325
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libglesv2.dll

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\libglesv2.dll
Size 8.0MB
SHA256 08888aafcffd55b349e528f9979c335276ad0fd8c6ce92448179f97557c03ea1
MD5 b3e0d85fece0bfa2068639e909da82fd
SHA1 d23f86bace9f6b041df8ebcd16b1ddab6bc36f62
SHA512 9c59f7128b94e5298a4a832508b08ff27b12f9cd2bb464f0fa78a9dc2d0f96258a745446e791306f3d8e47d5a07679f6b14dafca5dbdc77e58be8ed56fa6f3e2
SSDEEP 49152:PBI3qD4nxsy+ODwZe37bJ2MBnibd9/HCqF4J/vsxXP/6BN+ey8+OjDthQDxkLvb8:bDqE9C0X8r1tjNqXyzXicliyUpLe6
TLSH
T116867C03F68581D8D05DE2B8875BA227FA31B8490734B6CF2B9413152F6BBE0A77E754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\locales\en-US.pak
Size 524KB
SHA256 bfa782c9efae2c9cd2c0214dae1bbb3c259d4d4c38d920b06677b9c4cf4f813d
MD5 bfbb69222dcc50ca860b6a80a3da4f4c
SHA1 51200c9bd18b0999ba38033662c5e319485e7420
SHA512 940a2855b5de5f1545abbfed5dad0cfe81e74e847a60f65b4a8df54860649502062ff8941c0fbb248c203fbe6b883ecae8b21e91215b07c1231129a914008a28
SSDEEP 6144:njtGVh0jMRG0PTMP9QQo94faYQ6TFB+5P2jdnngP8/s1wf:jEVhmOTMCQo9+C5Ojawf
TLSH
T160B44C1FF744122A05A352627F0995A2FF32D06CA35112663CBD812C3376B6AD3B77E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources.pak
Size 6.0MB
SHA256 40af4117b0bd35da141aa599255b879013bfda5968401feccb5c43cb372cdae6
MD5 bc041e16180d671ae720a4a799e106ce
SHA1 b286bbcc059a31c8f44cca7443f88d60a4790737
SHA512 da141f2e6c2ac36dc924f1c72616db08927fd6277c7d7b12ca97dcf43a1f6ce906d269d6b6d9cf9cd957c432f5374f9be126111e006d88644f5c98ca33309fb5
SSDEEP 196608:ccLBR5ltjL+WkrYtJ/eGDi/F7MeZFFfD5CcowhJT:cOT5n1krI/7i/BZfD5N1b
TLSH
T19D5633B3F760243FC088477942D087755B3C594A2A41A0174AECF265CE6A24F6BC6BBF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

superbulletai-logo.ico

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\assets\superbullet-ai\superbulletai-logo.ico
Size 400KB
SHA256 003f9aa0828663260db84974db1e9ddb4da22266f1cf388b6d134ce8c5f4a1be
MD5 c3ff4b028aa0e199d964430f7795a599
SHA1 f5d1de1588b128e9768c046593c1d316c2ddce83
SHA512 d4e6a93286c03c39ab3ccf1b3a6cf7fd1f7b16ebbfa495afae30e2b40349cc29711e4897a6beff96c15350ae88f6f5066c374fa152a33c9abac8c5835d8a6d34
SSDEEP 3072:0VLDZZPbyjKK+tYQw7RXfZkHHoH/GyTbex/yj2bXUOgxN:cPZZcjkHHoHe6yJ62LUOgD
TLSH
T11394AD65E4089683D43BB7B6C2B9F7B00419BEF338119987F2C57EFB701989DA809616
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Interfaces.js

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\client-s3\dist-es\pagination\Interfaces.js
Size 11B
SHA256 8e609bb71c20b858c77f0e9f90bb1319db8477b13f9f965f1a1e18524bf50881
MD5 e2ebd7ddedcadeeadbf819c35985c768
SHA1 b878c11a77128e74c3cf15c93ef2ceddf2aa0b38
SHA512 4ee1c88f8c3f4e4cd34cb6c00339bf9d6d036ff4ade3af49e871cc8966b84c729d8b75492acc6413c9a664ac00a57958223ac13c4229da8c62ebe6a53e4f783f
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\credential-provider-process\LICENSE
Size 11KB
SHA256 2ef1e48ea743d9c82313e6887858f7c1feaddd636f5a3f43926aab0143e67ebd
MD5 2a86f29e8da11f285118a5a2a25ff9a8
SHA1 da9e6c7ab14f39367e61433676106d18581907f7
SHA512 bc45d2444ee167c118bc302c94d0475baa48ffac2f6366d36308fe5b98ce26954e799a506495e89e7b08aa4b0259a1cdf8a9a1c3b0ce32d399c675f69f25e785
SSDEEP 192:O6G5KXSD9VYUKhu1JVF9hFGvV/QiGkS594drFjuHYx5dvTrLh3kTSEUK37HbHZ:O9vlKM1zJlFvmNz5VrlkTSFK37Hd
TLSH
T16832613FBA48037706C20162BB9764CBF21E903F3B552568354CC1681F6BA6543FB6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

httpAuthExtensionConfiguration.js

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\nested-clients\dist-es\submodules\sso\auth\httpAuthExtensionConfiguration.js
Size 1KB
SHA256 331902cc5df5060ac9644261de8711ff641d6b91e60b5fcf77d2facc441c8cf6
MD5 2724ab2b48ffa88573a04805fa96d7a7
SHA1 2b88792e4c2c51cda62c711ae414bff102d34434
SHA512 412a8b3f35afa65cd1bbe798cc37fd62323052321bf6fb332f60bca8b1c57b2bda90cf6242833a2a45f48975614a0cf079e15255ff6a9fa42160a0c0d386185c
TLSH
T1D8214FDE34FA32418502A87EE51F9511F73A38576898BDC8F45D252CCF86428B9F13D0
MD5 SHA1 SHA512 TLSH

Submit Download

runtimeConfig.native.js

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\nested-clients\dist-es\submodules\sso\runtimeConfig.native.js
Size 297B
SHA256 c0c73f0322ae95adce92f60f138a0e54cc9d686a4ef04c27a0fae1902f47a969
MD5 7af7a302684afda63c4a52710e6921ee
SHA1 bc330bd438450223d5adde016fd5c73106ad23b5
SHA512 b4f0697464e65431ed1d0c33f13fb9b7925acdcf66b93ac0b1a68442d47ddf1d5cb05705ed6122052e2d8a89209d66cc214993c4f2d6f25797ef230893ebe1bc
TLSH
T16EE012471CEA76131C214547D1B649B57F5587ABE94DA448399DB2105F0947C50343CC
MD5 SHA1 SHA512 TLSH

Submit Download

runtimeExtensions.js

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\nested-clients\dist-es\submodules\sso\runtimeExtensions.js
Size 1KB
SHA256 91acbc1e819f62b25b16ae8d717eab8eb748fedc63a656ffcf6ae353cd0b5dbc
MD5 e771d36b526f9ae85aa12f32944d60d4
SHA1 fd80164aeb7fc817ab9b27526b774d5c71c885b7
SHA512 a94c0b402e13b320b41a692d98d25ef0f1380268cb6185cd85905385747d7d4c6e5e3361f8b5d26030b3b470ec2ce8dcb9e50c17e7802ca8ab744d0090ffcb54
TLSH
T13721214379CE7A57153EE683CAD14090CF385F16B08A784CE8FF7664A56E3B82712395
MD5 SHA1 SHA512 TLSH

Submit Download

type-utils.cjs

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\@langchain\core\dist\types\type-utils.cjs
Size 77B
SHA256 d43aa81f5bc89faa359e0f97c814ba25155591ff078fbb9bfd40f8c7c9683230
MD5 8963201168a2449f79025884824955f2
SHA1 b66edae489b6e4147ce7e1ec65a107e297219771
SHA512 7f65c6403a23d93fb148e8259b012d6552ab3bff178f4a7d6a9d9cec0f60429fc1899e39b4bca8cc08afc75d9a7c7bfdb13fc372ca63c85eb22b0355eb4d6000
TLSH
T163A01201692185E003A000C84111E0C1A0C104320025286557EC4D65440084C5060201
MD5 SHA1 SHA512 TLSH

Submit Download

index.d.cts

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\@langchain\textsplitters\index.d.cts
Size 31B
SHA256 c98517664512e9f8bc990db01c296a4d667a53cef785bd5cbc4c4298dbded589
MD5 e08bae19de5b9b906a90e8c80b70ebdf
SHA1 24cf9f1e2600ffc7026ed1b585841a5ed324f207
SHA512 a3164081b359dfb0e592e687dcbc4984139940fc96def974829bd79b98f7de4621884e400f78e33ea3858f7abf0d64511ae920c334ef68e0360cfde27da48359
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\@opentelemetry\api\LICENSE
Size 11KB
SHA256 c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4
MD5 86d3f3a95c324c9479bd8986968f4327
SHA1 7df059597099bb7dcf25d2a9aedfaf4465f72d8d
SHA512 dc6b68d13b8cf959644b935f1192b02c71aa7a5cf653bd43b4480fa89eec8d4d3f16a2278ec8c3b40ab1fdb233b3173a78fd83590d6f739e0c9e8ff56c282557
SSDEEP 192:fU6G5KXSD9VYUKhu1JVF9hFGvV/QiGkS594drFjuHYx5dvTrLh3kTSEn7HbHR:M9vlKM1zJlFvmNz5VrlkTS07Ht
TLSH
T12432623FBA48037706C20162BB9764CBF21E903F3B552568354CC1681F6BA6543FB6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\@protobufjs\fetch\LICENSE
Size 1KB
SHA256 a67b34a24a5daddcce46aea68c5004e4442bbfb63690329fa607bf4de4269794
MD5 532013e80f57c86a3d7176374afe6380
SHA1 e40a5d2090efd5d2eae97987590d414d7b1389f8
SHA512 db98bcc743122ae1ced03c2d7e4efc4cd090d61b75a2eeee0534cff58ef6ec9a313ad826d4bcf490378a8b13c8a360f20a026df83700c0244113988d7e35b7f5
TLSH
T12A31509752441BA315F256543666BAC4B08DD02C3F272A042C6AE288677B02ED577540
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\@smithy\core\LICENSE
Size 11KB
SHA256 07364a5f7d0177a59a05a0002187431f8f899320983c0dc049d72df015e8064c
MD5 fcf654f652254835c051d7b0b8635e86
SHA1 b4bc018b33e4d52c8d91c7eece67b539ba93dd60
SHA512 cfff3da5d1a47d63a2beb9cd50c1129200d7f3a26b5f61e20437f8527a52fba592e2985a9b5411fa442c8ca1bb17794dd68e5b7327da0bea3321854d508164cc
SSDEEP 192:1U6G5KXSD9VYUKhu1JVF9hFGvV/QiGkS594drFjuHYx5dvTrLh3kTSEUK37HbHR:O9vlKM1zJlFvmNz5VrlkTSFK37Ht
TLSH
T1C432623FBA48037706C20162BB9764CBF21E903F3B552568354CC1681F6BA6543FB6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\@types\triple-beam\LICENSE
Size 1KB
SHA256 c2cfccb812fe482101a8f04597dfc5a9991a6b2748266c47ac91b6a5aae15383
MD5 d4a904ca135bb7bc912156fee12726f0
SHA1 689ec0681815ecc32bee639c68e7740add7bd301
SHA512 1d0688424f69c0e7322aeb720e4e28d9af3b5a7a2dc18b8b198156e377a61a6e05bc824528fca0f8e61ac39b137a028029ff82e5229ad400a3cc22e2bdb687ad
TLSH
T1EB21631E32140B66299713705966A8C4B13AB19B7E5B2A44346DF3451F2A07CC2FB840
MD5 SHA1 SHA512 TLSH

Submit Download

license

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\cliui\node_modules\ansi-styles\license
Size 1KB
SHA256 48da2f39e100d4085767e94966b43f4fa95ff6a0698fba57ed460914e35f94a0
MD5 915042b5df33c31a6db2b37eadaa00e3
SHA1 5aaf48196ddd4d007a3067aa7f30303ca8e4b29c
SHA512 9c8b2def76ae5ffe4d636166bf9635d7abd69cdac4bf819a2145f7969646d39ae95c96364bc117f9fa544b98518c294233455d4f665af430c75d70798dd4ab13
TLSH
T1EC11931D7254136318BA13A069696CC4B32BB11F79AF6B8418AEF244233B46CD4FB840
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\es-object-atoms\LICENSE
Size 1KB
SHA256 5e325595b4ea8cfec3802f545b1def5d7b73e4a5b8e9ba63e32a320f67732292
MD5 8fe23ea421aaf9f9d687709f6a6a09b7
SHA1 a47868ab90b532df82abe3e4f507bcb2ea441364
SHA512 8acd3b84f3afa8c6ff9c1a58ab774ea33aec7701c022ba8f4d36218a8d1c03e80ef2ee1d692dbd43dbf5883153137c5e000f113b98da23d870dfab6f71b78afa
TLSH
T11111751EB25107B228AB13605578ACD5F23BB25F7A9F2A84246DF345633A06CC5FF844
MD5 SHA1 SHA512 TLSH

Submit Download

.nycrc

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\get-intrinsic\.nycrc
Size 139B
SHA256 997785c50b0773e5e18bf15550fbf57823c634fefe623cd37b3c83696402ad0a
MD5 d0104f79f0b4f03bbcd3b287fa04cf8c
SHA1 54f9d7adf8943cb07f821435bb269eb4ba40ccc2
SHA512 daf9b5445cfc02397f398adfa0258f2489b70699dfec6ca7e5b85afe5671fdcabe59edee332f718f5e5778feb1e301778dffe93bb28c1c0914f669659bad39c6
TLSH
T170C09B65E43F596B255D119CBD4CD5C7155415E1C1CD8F097D156661C31DB64004F541
MD5 SHA1 SHA512 TLSH

Submit Download

license

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\is-stream\license
Size 1KB
SHA256 5c932d88256b4ab958f64a856fa48e8bd1f55bc1d96b8149c65689e0c61789d3
MD5 d5f2a6dd0192dcc7c833e50bb9017337
SHA1 80674912e3033be358331910ba27d5812369c2fc
SHA512 d1f336ff272bc6b96dc9a04a7d0ef8f02936dd594f514060340478ee575fe01d55fc7a174df5814a4faf72c8462b012998eca7bb898e3f9a3e87205fb9135af2
TLSH
T18221931E7254136318BA13A0696A6CC4B32BB11F7DAF6B8418ADF244233B46CD4FB840
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\long\umd\package.json
Size 25B
SHA256 8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a
MD5 df9ffc6aa3f78a5491736d441c4258a8
SHA1 9d0d83ae5d399d96b36d228e614a575fc209d488
SHA512 6c58939da58f9b716293a8328f7a3649b6e242bf235fae00055a0cc79fb2788e4a99dfaa422e0cfadbe84e0d5e33b836f68627e6a409654877edc443b94d04c4
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\lru-cache\dist\mjs\package.json
Size 23B
SHA256 3ca9d4afd21425087cf31893b8f9f63c81b0b8408db5e343ca76e5f8aa26ab9a
MD5 d0707362e90f00edd12435e9d3b9d71c
SHA1 50faeb965b15dfc6854cb1235b06dbb5e79148d2
SHA512 9d323420cc63c6bee79dcc5db5f0f18f6b8e073daaf8ffa5459e11f2de59a9f5e8c178d77fa92afc9ddd352623dec362c62fff859c71a2fab93f1e2172c4987f
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\semver\LICENSE
Size 765B
SHA256 4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b
MD5 82703a69f6d7411dde679954c2fd9dca
SHA1 bb408e929caeb1731945b2ba54bc337edb87cc66
SHA512 3fa748e59fb3af0c5293530844faa9606d9271836489d2c8013417779d10cc180187f5e670477f9ec77d341e0ef64eab7dcfb876c6390f027bc6f869a12d0f46
TLSH
T1E401FD9FB2E26BD458D09B603DA16DC962CAB03B7803AA152468E298DB7740FA47A400
MD5 SHA1 SHA512 TLSH

Submit Download

.nycrc

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\side-channel-list\.nycrc
Size 216B
SHA256 948366fea3b423a46366326d0bb2e54b08abd1cf0b243678ba6625740c40da5a
MD5 c2ab942102236f987048d0d84d73d960
SHA1 95462172699187ac02eaec6074024b26e6d71cff
SHA512 e36b20c16ceeb090750f3865efc8d7fd983ae4e8b41c30cc3865d2fd4925bf5902627e1f1ed46c0ff2453f076ef9de34be899ef57754b29cd158440071318479
TLSH
T12ED0A710F03A051561DD629C7D4DB057051404A2818A8625AC712260CB78A10104B941
MD5 SHA1 SHA512 TLSH

Submit Download

tsconfig.json

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\side-channel-weakmap\tsconfig.json
Size 116B
SHA256 6346ee4c020f341387588479dd83740a65ab902a462b8c6b3b8bf51f032c6795
MD5 52fad431b4493384deb61bca02e2ff01
SHA1 a16472424f8c26184de557eff8d6824939d1fc8e
SHA512 35b51bdea5bd3080b065d7aa72de5de16c5d839c6af8671f8325d35b69f7da5d9a5d53c53c38ccdbcf74847cc0bbf3d06e1eca01415a1546ffd5581747b1434a
TLSH
T19BB0922A960D0CB321D93E4C6D0FCACA969863C3C9C3655EADFAA162CB10A480027990
MD5 SHA1 SHA512 TLSH

Submit Download

alloc.h

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-go\src\tree_sitter\alloc.h
Size 958B
SHA256 253b44a7b4313a7afd0c505c2fc6e7ce4b8e78955ebf4be3ea000532ec060673
MD5 cca7466299f86870ba0a7a7ff977758e
SHA1 ad91ded486dd75709f48f7987719d22f27e60c04
SHA512 f67ff735a85b1f4feb2121e740e0f38b1f21fcec00d4179444bc910dfc2eeb91789907ecc84620664292542cdb7270feea0cc60f86fce2a8dbd477e5d38cd688
TLSH
T13D11D334564E51F0E812DA2AEC085139601BEF83FF41E06C12E6E68F194A108539F0EC
MD5 SHA1 SHA512 TLSH

Submit Download

array.h

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-go\src\tree_sitter\array.h
Size 10KB
SHA256 4ff743903dc46f5db6aa54f31c6b4d160a8a9779e5b2ab1ee59ae7ebcd850ea1
MD5 88c948f993133f1ed04458cb273f90b4
SHA1 cc8a07baa1cbee0ab270bc842dbd2ed94b2e17ce
SHA512 be9d626ec64b9558f1e765372ea17cfbdda43903dab0781a2e8ed1eff97dbb14dda25e488c963f86475f0149ad9fa2bfe0d0f5e1bbe8ba5a22540bbbb27fab34
SSDEEP 192:j8pn+rfMQx+jRvDYR+e34fG8UQp/QwLQ8U/T+SN/V8EViXF6Cyw0qR01KZB69KbZ:j8pn+7PElbYR+84fdUQp/QAQPT7/VDV+
TLSH
T1DB22501A36D54179A6C8706A270F685B530B8173822C5B40B87F5D4C2FF2CA876F9BED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-java\bindings\node\index.js
Size 201B
SHA256 609bdf22b8fd183025b3c24e8587f6211d50358e8f2e4c526b9217349ed9dbc0
MD5 b99c8a4f8eb002a169e20af49966d427
SHA1 c03253222b995d6fabe323cc558754a9111adb78
SHA512 d4b33eed73194f85da36d61549924622aa7d86c196d533374cb88a2dfcb1db1f1fa5cba72400ee3246542092a22bcb0e2b7c11fe34f0e7f40b87a4c023b8d70b
TLSH
T1E7D022B30AF433120AA6C1C3F919012214C9C4F321409944902889F7A0C56C00793AA4
MD5 SHA1 SHA512 TLSH

Submit Download

parser.h

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-typescript\typescript\src\tree_sitter\parser.h
Size 6KB
SHA256 a3eb18ef034b3f4255b965a26caa276f9cfe13a79573b402f1a12dc5018052aa
MD5 fa206130c3a17d982ca90b10205414ee
SHA1 8879f3fbe20d243e9dd5eb4b66a2c7a3e6001b8a
SHA512 a5cc5b0914f12ba780f33604f0aa0fe1178924d7091cf9890517f64ed15d2eacb7c77faadb16385ff3f394afa5b7806b5b0fdd514e68f014b701dbe8961044b2
SSDEEP 96:5jJ22hQpIIoVqrt6exXrqsMR19ujl2UzHgDUMsh7iA:TnypI/ezXbw0TKUMsh7/
TLSH
T17AE14FA13CA724435D0264B30CFE6870A96653B3A1CDCCA07ECC52682F66A78156F3EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

EmbedResponse.js

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\voyageai\api\types\EmbedResponse.js
Size 150B
SHA256 b85b16b647b590d06a88c90d15257954cd8cad804092c506939fd451f71fcb86
MD5 62c0e9ca62b07f9b216184cafa2c0517
SHA1 30b4e1f4319b6315d6ae4c35d3c749502778c142
SHA512 8c79c0893f0de483c591cdcdae5edda0c468ae1bd2e379771e9cf2f17db91814bfba49e83e2dacb64cc80171155dab2f2f0b3603adf50dd9200563c7023e2104
TLSH
T1C7C08C112C62CAE6066040C84320E0E2A0E68C22812968A26BAA8AEADD0896D2058EC1
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\winston\node_modules\readable-stream\LICENSE
Size 2KB
SHA256 ec62dc96da0099b87f4511736c87309335527fb7031639493e06c95728dc8c54
MD5 a67a7926e54316d90c14f74f71080977
SHA1 d3622fac093fe1cbcb4d8e8d35801600b681fc45
SHA512 e61de704d5a76afd66b5d9b1c78f0a5afe9a846686ca2fb28c814a4a60dbe82a190ed4a6a2f31e09bf6d695b8ec178ebea9804593029c58c1b1bedd793324d13
TLSH
T18441D82E735417722C9313B19A76A888F12B714E7B6F168514BEF2C0232A07CC6FF800
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE-MIT.txt

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\wrap-ansi-cjs\node_modules\emoji-regex\LICENSE-MIT.txt
Size 1KB
SHA256 483acb265f182907d1caf6cff9c16c96f31325ed23792832cc5d8b12d5f88c8a
MD5 ee9bd8b835cfcd512dd644540dd96987
SHA1 d7384cd3ed0c9614f87dde0f86568017f369814c
SHA512 7d6b44bb658625281b48194e5a3d3a07452bea1f256506dd16f7a21941ef3f0d259e1bcd0cc6202642bf1fd129bc187e6a3921d382d568d312bd83f3023979a0
TLSH
T1E611465EB26053BA1C66136065786C89F26B725FB9AF2384246EF344232746CD5FB844
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\wrap-ansi-cjs\node_modules\emoji-regex\es2015\index.js
Size 10KB
SHA256 8718dea4d28647912918dba60545890dc10ae672bfb186b6ec0af3fc5e826137
MD5 8f12b24a27ff5f2381a4a1568475eaba
SHA1 975c292ad2c1f09c53d0c9f53db5e66fd26fbbfb
SHA512 b70e68def6e8b15cdc9ef8bfa1326611c4bf83ad8ac461511c6af1ee2acdaa182ae9336e1f7f8c171c9931d36d5d9347542d364605d714c81a90032afedf52e5
SSDEEP 192:40mtl1qCooeMLbJ7Ex9rtWhbY3X2HYnO/yVgmDwqbO70yHnDMotV6O:401riYGHqQyVghJ4MdV6O
TLSH
T13E32A2BC008846963D6DF0D4AF34E5D62A8D4B4A240CD3365F9BF83762CA4F4ED9A4E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\wrap-ansi-cjs\node_modules\emoji-regex\index.js
Size 10KB
SHA256 c56978800e47f095cfbfe96712b5e78d150d1f62e32bb4943675213fce481ef0
MD5 0438b0678667b951cf518a14560fa0b7
SHA1 e678799abbf2035d94ab0114ae0783b36a3e5994
SHA512 75924c24968e298b1496170a66624b97a76a77fb4ce5968e7c097ad227401256752d9d28c8a1f84d313ce4b06f9dc9b20e3f75d81398c8951b45375ccb013e3e
SSDEEP 96:4eZyEVZKmkKDw4WrUtTk0BQj9zTFQldJQdi4+Ds7mCK2m0W1EojSVQdZ8w4kvP2e:4k3OxUwwZh0w8s
TLSH
T1B222AF7045217E5675B2000B6D845B1FF0AC998BE922EF37A7ACF19EB346131CAD26F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\ansi-regex\index.js
Size 350B
SHA256 c92312790eb1f246b7c4c1fe9c1247b15441bbca3c6cb64d167beefc45302753
MD5 7d1a59d7267eef993b9827ee185500ab
SHA1 9305ae17262f6e11f8afd69835907716ba5c8ee0
SHA512 d1bd977b33603f9d06d947bfe108c1945cc2cd4575cd39eb84a20f15876a7dffc59c3b52c92af3b6483c1bb426983bfcc0c00faffe32821a5bdb0bd7d38a0484
TLSH
T134E068094851165D94D1708B2D614C748B89BF142DB28202C234EE4D5B4908F13E862E
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\ansi-regex\package.json
Size 470B
SHA256 93fcfd1b014b9bd7f31b3f35b24a5a479839b6f141c95f62b73a1829bf112ad2
MD5 842a7424b2dda87e9e4a90838f5fab9b
SHA1 0787e3ac5af8ba0341c5e65a771a1008a47d4ad6
SHA512 b467038704d60b80f09d380df5fdb8fceaa46e77d1d29d4749dee81b0026b78a2688b8131f0eaa1f44a2cedc404037d7080fb73cf38b9b782606a66007d1f847
TLSH
T116F02720D82468634AEC91D03CB90183591A4C071948BD2C3B9B021C5FAE5BB31BE1F8
MD5 SHA1 SHA512 TLSH

Submit Download

readme.md

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\ansi-regex\readme.md
Size 2KB
SHA256 3ebc0f845b1bab50600f823716040fbec355d3c356a3a76b8eb9eb593b6c7a3a
MD5 a1594d617cebfdcc8c220f5413656169
SHA1 99c5ef1349279584777834e1a7b068c228b6bd58
SHA512 5acc78e6f7095e33411a4a184fbe10304f1d1b577197707d8d869c96dfd5cb5191f00b7b5627aacf3adec11b5ff494ec680270314d6e92d02aadb206b975a587
TLSH
T11651449BD10947640EA300C17E6A358F6F1ED52C64D386BD89AF46AC62034FBC27B4DB
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\strip-ansi\index.js
Size 154B
SHA256 bf37cd692bf030c2ec270945bc26aa8b19ad379fa5916f12304758f709ab0978
MD5 d2f059d0b9cfa91f1e899a4632d33da8
SHA1 ac06aab8c4ef70f9d2c18bbd0b2eb5ef0bb7c900
SHA512 0685ed108c20c84b3c0d4bf181318bf3f3ad6602de1b5bb71dc6a8d377575e974c42bcc14f5d72a244f06044bce8f81005c57ec2d246a513b6f196700a5010c2
TLSH
T119C08C6620B195462C5240C4F0D855409583C4B03AB9A2F5EECF4566A0994BE0670A69
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\strip-ansi\package.json
Size 511B
SHA256 4518dec682055621a82c1480a6c33479a7b6ae7d17019ccc4799b86e9be4d4d7
MD5 a6de01ff36a45e09a3473336f1add9e8
SHA1 d884d25def2c2ec06ed22f33761fa447abf6f058
SHA512 74163a3d76c872174ca0c0574c5d08f6a0ff012301023df9f6ede39ff3f232c5df64321456a91715951c820cb7594310a5bfec566cb9f0c0f4a307a2c9f81a80
TLSH
T11BF0E220D871686349EC91D06CB90547692A9C031458FD2C3BD7021CAFAE9BF31BD7E9
MD5 SHA1 SHA512 TLSH

Submit Download

readme.md

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\strip-ansi\readme.md
Size 1KB
SHA256 cb384db30337ecec75919b4c69aab67358b4f4e384406956687894b6d777413b
MD5 ec70e70db32f0367fbd2bc25596fe4bc
SHA1 439476da89058a651d25e40626d3fdb8261e692f
SHA512 7cea37cb4960fa69c50442906f8ade1ea403361705472a8d223b06ea05dfd8c4f4ce2bd5a9c6dc1c68fe3cc4d6cca9e735e130a7685404c0e87148854609527c
TLSH
T1C73111F7C24055A5BF5300C99C5A258E6F363154F8D2C9AC6AF18064910B4EF927D94B
MD5 SHA1 SHA512 TLSH

Submit Download

cs.d.cts

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\code-context-subprocess\node_modules\zod\v4\locales\cs.d.cts
Size 122B
SHA256 b42d3651103a532f7492e719a828647af97306b2356ae757ebb7f17f4a8c41e5
MD5 77006e07387a4b8a3394b223817dbe1b
SHA1 1b46ccf8555eb7e2547bca24b5bb61c26cfe483a
SHA512 2f9334fc2430169915de561eedeed11d2b60e7669c660021d667ca018833c9fdf0062d5a4d786aa5cacfb361e53ce4e0354e0e35f2e7c577ae54ec360997c444
TLSH
T17EB0920A3A86E1438D2410D01A0A4809932219753EBE2885266F5327DD6039C8C26A56
MD5 SHA1 SHA512 TLSH

Submit Download

p50k_edit.d.ts

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\resources\app.asar.unpacked\node_modules\@dqbd\tiktoken\encoders\p50k_edit.d.ts
Size 133B
SHA256 7d0e8a9e6b76c79a97603d92f3934299a86b6c51c9e9a4fa4c6fb78a99bf596f
MD5 2cfb3d61a07d8f34c69af5d3d5228c3a
SHA1 7236e512497561f4bb7da6c4bc7ffa52eb9f5ad8
SHA512 08afe2fae19defeb260944604b9d484af4d59131fb06dcd084305e02852c152b3b2aa371d4e0e9dc9daf85b136df8eca8e3779cfeb36120a94d91fd3e92501c0
TLSH
T103C09280B58A56123DD046A3A0CBCA18929CB29C242AB5F8FEB012991E1A18D90AA169
MD5 SHA1 SHA512 TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\v8_context_snapshot.bin
Size 758KB
SHA256 1fa1cdd08423809344fe15fac2d9d1ec604cc3ea5af4b944d89a51b1e98c8665
MD5 00f69a4fa2169454a5601261a9c7245f
SHA1 b6d3d33b615fe050b7b2d009695a2a6e4e7c12a6
SHA512 abe8e379e1842d00c71a7c9cae3bd4d3a1d6ab4679f8c6d850dfee3f91affa23cbb4e0b35c035bf2832adb5f0cf5a8fe4fb21a7a377babf190fd6f11ce67e4c8
SSDEEP 6144:tU0ckYOkGt+OcqCvpWoNyuZaVaBgJjdOSkvh8mQu/INZV/peyWBOI:y1RNvMoNyerT8mQuANZhcOI
TLSH
T10EF48565F74ECF2ACA4537B86DE547463835B04A6F8BD21BB518233E38B65B00E3652C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\vk_swiftshader.dll
Size 5.4MB
SHA256 597ca957c8aaa18911c719f7973dc1628c02e6a4319f1eda3a15134a403d1d68
MD5 4f2ca3eb5a7c6753f22b7da6f6bf6410
SHA1 17697b0652dc5098a143c070c05e03d191f0549c
SHA512 f9b49c2b6be7bcd9f01395d07e6c8dee2c22d80e9e468a39bd9f728837cacc33097293d7677eb536c88cde96986460ae5706ea5b77bbe34fee5dd0282936a8c2
SSDEEP 49152:MVlVRGSYZZaeYaOIHsu8n1o/n8fZ/sZSR0qCWUT8HeLig4SYLMRfXSlx1CB/wU/E:MlDYZZaeYwqqblXQ+9vWB
TLSH
T1DC462713F28681E9F06DD679875AA623F231F8844B2276DF16A01F192E77FE06739710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.94\vulkan-1.dll
Size 922KB
SHA256 3500028f57bb570f75b6bef56b13fb788da0ffb8d0fe1ec61c058c839be19eb8
MD5 bcf11193f1c7cf4003dc75f7341da83c
SHA1 95852c1f4e4c8cfb65ee20cd939248b505edf6e2
SHA512 6aa16e7389245c5395eca7b8fe239936de3c32550b103ff99222fb84d64664acf2c409522bf19026b5f888e8ec7224b74ddd877f4760d6fe14148e67d0b40dc6
SSDEEP 24576:/GVzDeAVM7N/L0H6tDVj3sF6Z5WGc4DYsHQDy6g3P0zAk79oOHAF:/GlDeAq7N/L0H6FVLsF6Z5WGc4DYsHQ6
TLSH
T142156D23965485A9D47AD034D9D28707C9B174822326B9CF42A81708BF6FFF47B3DB29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e3affa27-a923-49a1-a6fd-b80a19e50f67.tmp

Path C:\Users\Admin\AppData\Local\Temp\e3affa27-a923-49a1-a6fd-b80a19e50f67.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5292_1548944628\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Code Cache\wasm\index-dir\the-real-index
Size 48B
SHA256 fb2a8da869396cbc13f20d2b28c9a6d4702540109bd9a045b63b6cc5df32a378
MD5 d828f651b1e8690bb1617877fb99fae6
SHA1 a287f71a9b017c51464406d69319be142cfcc330
SHA512 a1b1e0cf525965d11a63107fd97fcfb073c15effc504d8f451cfd50e4f391ee50e15e12adb5389381eaccd5c5bcc3e22a93b81c4396d55d2570276dbdeb44748
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Roaming\superbullet-ai\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\superbullet-ai\DawnWebGPUCache\index
Size 256KB
SHA256 e217c82200d685f37296a55178144b18a63bd66f2c039b958c61398625e7cea1
MD5 5cf7993d259c462161d6aeabf8f1b1dd
SHA1 3819cab3113b7d078b383e634182c7a018331f4d
SHA512 7a056836fc0980cb17c2f1831c37022e5170e48ee4ef3dccd9c7b388380ef67498b64a0d9c30f45cdf8cbe1c1feb0a69367131e3f6f64c0db15fa8cbf0e79f68
SSDEEP 3:LsOllllklkXlfZ3l/:LsUlPf5l
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\index
Size 256KB
SHA256 d1249c6f208682fc0bc69661a2032129836a45fa6e8c8fd22edda99a69bdfb6c
MD5 fbea8e0c2b3c3f6d1334b74a2ffe5c2c
SHA1 89921609ca6690e34062cdaa7503a3a642644958
SHA512 fee896070430a5779247266bb063b823b1a7fc187b59fdcb32d3e15a16536738f138ed08ba8a751fefbeba9a9665c709b7ef88943a85c097e2005b67d2872fc4
SSDEEP 3:LsOllllklkXlKdKt:LsUlP
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Local State
Size 434B
SHA256 ae18ed41b7fcfe8b225d442dcf8e94c27609ba60a62d35e49cc231bd7cea014f
MD5 8c41ee182ef31aa7b659e1b4fb7852c9
SHA1 3a50af221fbd6e5740ede1dea72f4cf119e5c597
SHA512 881b482a4b0bff451103b37b60e3f29761a8fe3df8879b3eccd5eaf40698352b077ebabefee92fe065b864bdedb934707f04133f558fd19aec97382bcea15ea1
TLSH
T116E0A3336ED17D561FABDB30A656720F3F2553370348015517840726229AFD7C705CB1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Local Storage\leveldb\LOG
Size 261B
SHA256 1420afb47bc2e1649da86309491ba1df645edeca50bbb8d9be0b91360cd3bbf4
MD5 c766939158ce22749a5ade22f76939d1
SHA1 3651758cbf0362333df6bd64a9b5ff341fd4c4a9
SHA512 730a5e9c5c827eb5566c092768c23f0ee1369058b3ad71a363c80275dd851602c66b42c8a6231a37a8a3f4fea42da4bd7671e342bf6dd78bcb7386c0f08b1723
TLSH
T181D02B3305DEC25D839580DFD6BA7349CF3435847A9C67098F80F14C304600CC980C83
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Preferences
Size 93B
SHA256 529b6595a4727a6b2d6cc154ae51f426216c01fc7fda02de2460abfb3de118a4
MD5 322f01bb491180333c338526d93f115a
SHA1 554d5e43d5e46774b8f2a6b3682243a289927754
SHA512 69f8e980f44b1465cee8c0485598fa00be163db0fe88598e45ab2f817f9bea36a2b70dbb9d25d5214174ea9c198b9641bb3d5a86c18b1a4ea4493c00e2e95eb2
TLSH
T103B01253B810A0324B1B09E5000BC94F2CBE00340E475A0510D4F39D492DD4D088702B
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Session Storage\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Session Storage\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

memory/2588-12630-0x0000000001090000-0x00000000010B0000-memory.dmp

Download

memory/4592-446-0x000000001B960000-0x000000001B96E000-memory.dmp

Download

memory/4592-445-0x0000000020FA0000-0x0000000020FDE000-memory.dmp

Download

memory/4592-166-0x0000000000980000-0x0000000000B56000-memory.dmp

Download