Analysis
- user interaction
yes - max time kernel
143s - max time network
127s - platform
windows11-21h2_x64 - resource
win11-20260911-en - resource tags
arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
16/09/2026, 15:52
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://ai.superbulletstudios.com/faq
Resource
win11-20260911-en
General
- Target https://ai.superbulletstudios.com/faq
- Sample260916-ta2jbasemb
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
flow pid Process 64 3336 firefox.exe - Executes dropped EXE 13 IoCs
pid Process 5024 SuperbulletAI 0.3.98.exe 2092 Update.exe 2940 Squirrel.exe 236 SuperbulletAI.exe 4588 Update.exe 4016 SuperbulletAI.exe 4576 SuperbulletAI.exe 848 SuperbulletAI.exe 2864 SuperbulletAI.exe 1988 SuperbulletAI.exe 1252 SuperbulletAI.exe 4780 SuperbulletAI.exe 2456 SuperbulletAI.exe - Loads dropped DLL 17 IoCs
pid Process 4016 SuperbulletAI.exe 4016 SuperbulletAI.exe 4016 SuperbulletAI.exe 4016 SuperbulletAI.exe 4016 SuperbulletAI.exe 4016 SuperbulletAI.exe 4016 SuperbulletAI.exe 848 SuperbulletAI.exe 1252 SuperbulletAI.exe 4780 SuperbulletAI.exe 4780 SuperbulletAI.exe 4780 SuperbulletAI.exe 4780 SuperbulletAI.exe 4780 SuperbulletAI.exe 4780 SuperbulletAI.exe 4780 SuperbulletAI.exe 2456 SuperbulletAI.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 94 raw.githubusercontent.com 105 raw.githubusercontent.com 106 raw.githubusercontent.com - Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs
When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.
description ioc Process File created C:\Users\Admin\Downloads\SuperbulletAI 0.3.98.exe:Zone.Identifier firefox.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 1468 cmd.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SuperbulletAI 0.3.98.exe - Checks processor information in registry 2 TTPs 28 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz firefox.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 firefox.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 firefox.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision firefox.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz firefox.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 firefox.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz firefox.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString firefox.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz firefox.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier firefox.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz firefox.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz firefox.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 firefox.exe - Modifies registry class 19 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\superbullet\shell SuperbulletAI.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\superbullet SuperbulletAI.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\superbullet\URL Protocol SuperbulletAI.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\superbullet\shell\open SuperbulletAI.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\superbullet\URL Protocol SuperbulletAI.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096 firefox.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Moniker = "fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f" firefox.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\Children firefox.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage firefox.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f\Children firefox.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\superbullet\ = "URL:superbullet" SuperbulletAI.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\superbullet\shell\open\command SuperbulletAI.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\superbullet\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\SuperbulletAI\\app-0.3.98\\SuperbulletAI.exe\" \"%1\"" SuperbulletAI.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\fx.sb.cdmaead3483b5e3a557227b77554c4d4739fd53e90f firefox.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\superbullet\shell\open\command SuperbulletAI.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\superbullet\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\SuperbulletAI\\app-0.3.98\\SuperbulletAI.exe\" \"%1\"" SuperbulletAI.exe Key created \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\superbullet SuperbulletAI.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-790078335-998561069-2208156648-988539944-4021756109-3505228477-4058360096\DisplayName = "Chrome Sandbox" firefox.exe Set value (str) \REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\superbullet\ = "URL:superbullet" SuperbulletAI.exe - NTFS ADS 1 IoCs
description ioc Process File created C:\Users\Admin\Downloads\SuperbulletAI 0.3.98.exe:Zone.Identifier firefox.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2092 Update.exe 2092 Update.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 3336 firefox.exe Token: SeDebugPrivilege 3336 firefox.exe Token: SeDebugPrivilege 2092 Update.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe Token: SeCreatePagefilePrivilege 2864 SuperbulletAI.exe Token: SeShutdownPrivilege 2864 SuperbulletAI.exe - Suspicious use of FindShellTrayWindow 22 IoCs
pid Process 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 2092 Update.exe - Suspicious use of SetWindowsHookEx 13 IoCs
pid Process 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe 3336 firefox.exe - Suspicious use of WriteProcessMemory 63 IoCs
description pid Process procid_target PID 4760 wrote to memory of 3336 4760 firefox.exe 80 PID 4760 wrote to memory of 3336 4760 firefox.exe 80 PID 3336 wrote to memory of 1004 3336 firefox.exe 81 PID 3336 wrote to memory of 1004 3336 firefox.exe 81 PID 3336 wrote to memory of 1004 3336 firefox.exe 81 PID 3336 wrote to memory of 3080 3336 firefox.exe 82 PID 3336 wrote to memory of 3080 3336 firefox.exe 82 PID 3336 wrote to memory of 3080 3336 firefox.exe 82 PID 3336 wrote to memory of 3080 3336 firefox.exe 82 PID 3336 wrote to memory of 1252 3336 firefox.exe 83 PID 3336 wrote to memory of 1252 3336 firefox.exe 83 PID 3336 wrote to memory of 1252 3336 firefox.exe 83 PID 3336 wrote to memory of 1252 3336 firefox.exe 83 PID 3336 wrote to memory of 4916 3336 firefox.exe 84 PID 3336 wrote to memory of 4916 3336 firefox.exe 84 PID 3336 wrote to memory of 4916 3336 firefox.exe 84 PID 3336 wrote to memory of 480 3336 firefox.exe 85 PID 3336 wrote to memory of 480 3336 firefox.exe 85 PID 3336 wrote to memory of 480 3336 firefox.exe 85 PID 3336 wrote to memory of 480 3336 firefox.exe 85 PID 3336 wrote to memory of 3200 3336 firefox.exe 86 PID 3336 wrote to memory of 3200 3336 firefox.exe 86 PID 3336 wrote to memory of 3200 3336 firefox.exe 86 PID 3336 wrote to memory of 3200 3336 firefox.exe 86 PID 3336 wrote to memory of 4960 3336 firefox.exe 87 PID 3336 wrote to memory of 4960 3336 firefox.exe 87 PID 3336 wrote to memory of 4960 3336 firefox.exe 87 PID 3336 wrote to memory of 4960 3336 firefox.exe 87 PID 3336 wrote to memory of 2128 3336 firefox.exe 88 PID 3336 wrote to memory of 2128 3336 firefox.exe 88 PID 3336 wrote to memory of 2128 3336 firefox.exe 88 PID 3336 wrote to memory of 2128 3336 firefox.exe 88 PID 3336 wrote to memory of 4104 3336 firefox.exe 89 PID 3336 wrote to memory of 4104 3336 firefox.exe 89 PID 3336 wrote to memory of 4104 3336 firefox.exe 89 PID 3336 wrote to memory of 4104 3336 firefox.exe 89 PID 3336 wrote to memory of 3424 3336 firefox.exe 90 PID 3336 wrote to memory of 3424 3336 firefox.exe 90 PID 3336 wrote to memory of 3424 3336 firefox.exe 90 PID 3336 wrote to memory of 3424 3336 firefox.exe 90 PID 3336 wrote to memory of 3992 3336 firefox.exe 91 PID 3336 wrote to memory of 3992 3336 firefox.exe 91 PID 3336 wrote to memory of 3992 3336 firefox.exe 91 PID 3336 wrote to memory of 3992 3336 firefox.exe 91 PID 3336 wrote to memory of 1772 3336 firefox.exe 92 PID 3336 wrote to memory of 1772 3336 firefox.exe 92 PID 3336 wrote to memory of 1772 3336 firefox.exe 92 PID 5024 wrote to memory of 2092 5024 SuperbulletAI 0.3.98.exe 96 PID 2092 wrote to memory of 2940 2092 Update.exe 97 PID 2092 wrote to memory of 236 2092 Update.exe 98 PID 236 wrote to memory of 4588 236 SuperbulletAI.exe 99 PID 236 wrote to memory of 4016 236 SuperbulletAI.exe 100 PID 236 wrote to memory of 4576 236 SuperbulletAI.exe 101 PID 236 wrote to memory of 4016 236 SuperbulletAI.exe 100 PID 236 wrote to memory of 848 236 SuperbulletAI.exe 102 PID 2092 wrote to memory of 2864 2092 Update.exe 103 PID 2864 wrote to memory of 1988 2864 SuperbulletAI.exe 105 PID 2864 wrote to memory of 1252 2864 SuperbulletAI.exe 107 PID 2864 wrote to memory of 1468 2864 SuperbulletAI.exe 108 PID 2864 wrote to memory of 4780 2864 SuperbulletAI.exe 106 PID 2864 wrote to memory of 4780 2864 SuperbulletAI.exe 106 PID 1468 wrote to memory of 2840 1468 cmd.exe 110 PID 2864 wrote to memory of 2456 2864 SuperbulletAI.exe 111 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://ai.superbulletstudios.com/faq"1⤵
- Suspicious use of WriteProcessMemory
PID:4760 -
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://ai.superbulletstudios.com/faq2⤵
- Downloads MZ/PE file
- Subvert Trust Controls: Mark-of-the-Web Bypass
- Checks processor information in registry
- Modifies registry class
- NTFS ADS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3336 -
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1968 -prefsLen 27097 -prefMapHandle 1972 -prefMapSize 270279 -ipcHandle 2044 -initialChannelId {1aeec974-2e22-4f72-ab8b-069041d785df} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu3⤵PID:1004
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2444 -prefsLen 27133 -prefMapHandle 2448 -prefMapSize 270279 -ipcHandle 2136 -initialChannelId {ccbb4aaf-2848-4068-8c3e-58962827345f} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket3⤵
- Checks processor information in registry
PID:3080
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3888 -prefsLen 25213 -prefMapHandle 3892 -prefMapSize 270279 -jsInitHandle 3896 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3904 -initialChannelId {7c09dc09-1e43-4b0b-9cbf-a436d1940157} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab3⤵
- Checks processor information in registry
PID:1252
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4040 -prefsLen 27323 -prefMapHandle 4044 -prefMapSize 270279 -ipcHandle 4152 -initialChannelId {641adc63-b35a-4dee-a757-a85c4755d80e} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd3⤵PID:4916
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4448 -prefsLen 34822 -prefMapHandle 4452 -prefMapSize 270279 -jsInitHandle 4456 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4464 -initialChannelId {b2cd380c-22d2-43c4-bf5a-b8e6ea434c95} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab3⤵
- Checks processor information in registry
PID:480
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5032 -prefsLen 35010 -prefMapHandle 5036 -prefMapSize 270279 -ipcHandle 5044 -initialChannelId {31367ac2-d4ad-4d27-a051-8eae0a352f53} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility3⤵
- Checks processor information in registry
PID:3200
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5624 -prefsLen 32952 -prefMapHandle 5628 -prefMapSize 270279 -jsInitHandle 5632 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5640 -initialChannelId {e6fc2f5c-1772-4b0e-b6f0-7d411ee67fd6} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab3⤵
- Checks processor information in registry
PID:4960
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5812 -prefsLen 32952 -prefMapHandle 5816 -prefMapSize 270279 -jsInitHandle 5820 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5828 -initialChannelId {bbf065dd-e4a5-42d8-b267-645e1ff8caba} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab3⤵
- Checks processor information in registry
PID:2128
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6000 -prefsLen 32952 -prefMapHandle 6004 -prefMapSize 270279 -jsInitHandle 6008 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6016 -initialChannelId {9a2827c1-933f-455f-b911-4260fba58b7e} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab3⤵
- Checks processor information in registry
PID:4104
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6016 -prefsLen 32952 -prefMapHandle 6332 -prefMapSize 270279 -jsInitHandle 6456 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2796 -initialChannelId {f3ace380-eb6d-47e4-bfab-09792646279d} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab3⤵
- Checks processor information in registry
PID:3424
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 6268 -prefsLen 35079 -prefMapHandle 6384 -prefMapSize 270279 -ipcHandle 6504 -initialChannelId {4133e57f-69f8-4423-9d35-2fc83e7db4af} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 utility3⤵
- Checks processor information in registry
PID:3992
-
-
C:\Program Files\Mozilla Firefox\firefox.exe"C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 5656 -prefsLen 35119 -prefMapHandle 5668 -prefMapSize 270279 -ipcHandle 5628 -initialChannelId {061178e6-6ed1-4454-9614-278c869f1e04} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 utility3⤵
- Checks processor information in registry
PID:1772
-
-
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3280
-
C:\Users\Admin\Downloads\SuperbulletAI 0.3.98.exe"C:\Users\Admin\Downloads\SuperbulletAI 0.3.98.exe"1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5024 -
C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe"C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .2⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2092 -
C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\Squirrel.exe"C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\Squirrel.exe" --updateSelf=C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe3⤵
- Executes dropped EXE
PID:2940
-
-
C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe"C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe" --squirrel-install 0.3.983⤵
- Executes dropped EXE
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:236 -
C:\Users\Admin\AppData\Local\SuperbulletAI\Update.exeC:\Users\Admin\AppData\Local\SuperbulletAI\Update.exe --createShortcut=SuperbulletAI.exe4⤵
- Executes dropped EXE
PID:4588
-
-
C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe"C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1976,i,4334212383212583756,5726133740137066955,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1972 /prefetch:24⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4016
-
-
C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe"C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --field-trial-handle=1976,i,4334212383212583756,5726133740137066955,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2220 /prefetch:114⤵
- Executes dropped EXE
PID:4576
-
-
C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe"C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --app-user-model-id=com.squirrel.SuperbulletAI.SuperbulletAI --app-path="C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1976,i,4334212383212583756,5726133740137066955,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2708 /prefetch:14⤵
- Executes dropped EXE
- Loads dropped DLL
PID:848
-
-
-
C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe"C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe" --squirrel-firstrun3⤵
- Executes dropped EXE
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2864 -
C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe"C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --field-trial-handle=2248,i,5635482360979077646,8058158980202202085,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2280 /prefetch:114⤵
- Executes dropped EXE
PID:1988
-
-
C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe"C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2248,i,5635482360979077646,8058158980202202085,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2244 /prefetch:24⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4780
-
-
C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe"C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --app-user-model-id=com.squirrel.SuperbulletAI.SuperbulletAI --app-path="C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1789573391170871 --launch-time-ticks=654257904 --field-trial-handle=2248,i,5635482360979077646,8058158980202202085,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2620 /prefetch:14⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1252
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"4⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
PID:1468 -
C:\Windows\System32\reg.exeC:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid5⤵PID:2840
-
-
-
C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe"C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --app-user-model-id=com.squirrel.SuperbulletAI.SuperbulletAI --app-path="C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar" --no-sandbox --no-zygote --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1789573391170871 --launch-time-ticks=655184711 --field-trial-handle=2248,i,5635482360979077646,8058158980202202085,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2796 /prefetch:14⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2456
-
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0dqsscpq.default-release\cache2\entries\5E43012191E7B1F510ACD5BF039D8BF1B9A277B2
- Size 16KB
- SHA256 5f2117ec47d8c9e3f07f3e11f1b6d7ae6dbca8d283ebbe30940dbb156559d8e2
- MD5 809d3e95b40a201a2ff881e582bdccc4
- SHA1 f96f3229c88032cadf6b92f09ced0fedd79305ac
- SHA512 b2b090f15157d37f7479f6286299aa42a49a55e44e10bfc47281b40ac90a820e5671998ccdfa727968412c65488ee4cf3953639b0bdd6cd0f01c553e59564bdf
- SSDEEP 384:HkCjiO024YmDL84KKDL849B7SOEAd9KVRaAcP+AWRMAZ:EzZYmDL8lKDL8CB7S/AmVAf+hRMo
- TLSH T1AC729E3E5F013CBD15A7C0E8C5F9529A8D18B7A7CFE6806D21583D0DC698A6AB0F548F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0dqsscpq.default-release\cache2\entries\AABAB860D2646FDCEACF8AAC0CD412654CE5E4C0
- Size 16KB
- SHA256 e0250a9dd03714f6b3ff4688732f61349e410d5290bd17da548d434c9dd0eb38
- MD5 a09f27020f9ce67525039f187ae39c4c
- SHA1 cdfa91ff4b8ec31e2920b1f474cd4de1d09f31f5
- SHA512 e668247f01e924a063d6c4a10dcab46f28775e2d294c712cf1030d59fda9b57c6a4080b5280fcc062b62cf1caed31a0ff2a317cbde28a3a38032960e6e3a1c1c
- SSDEEP 384:HalwSiO024YzDL84KKDL849B7SOEAd9KVRaAcP+AWRMAFL+6S+E:6l8ZYzDL8lKDL8CB7S/AmVAf+hRMCLjk
- TLSH T167728E394F413CEC1597C0E8C4B982A98D18B7A7DFE6806D21683D0DCB98A6DB5F548F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES
- Size 85B
- SHA256 fe7132c61a84e736b0c76122ccf3058c2b87509cd1c1ce7239595ee52342697f
- MD5 1ac975320a94a15c3212631c7daa558d
- SHA1 e4a69af40e86ee4ba2f912755536f17c952f2dc6
- SHA512 d87b1a4e8d2da0d991b8c927c81bcc5f08b0846fab1ae31f43e68ce1bf0079e7043b02c1ec6f14a112d06780de27e846c613a87c9c80b0d85ddbf893734ccb53
- TLSH T1B0A0125C03021144A6E9116A7250A482D878C9202612A4935A1713912420006E908C84
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
- Size 1.8MB
- SHA256 c341ecdf8e029e8202ce342f28150a90e0fb809d5cbb2c5bcb030513499f496a
- MD5 5c5b9e4338146071fd0078d5e68c51b6
- SHA1 c63051d42bfa502cc629242a0e1778be558799db
- SHA512 bc16a8b6bb75747f04dd7e9fef5fb14131d146e774c19f295e5a26b1fa8e0ed85f94dd03845705bf0e9ae3fdc47177c84387c0f197c9f64d106dbb35d7835486
- SSDEEP 24576:5WltPu4nUCiag6CKMezCy9sQuOjj1VgfQ6jvXZ6AtkrCze/Ehxc4t9+tjmV:EtPUCiag6CKMezCyZuOjJapj2/EhEmV
- TLSH T13B957C01E7E89F2BE56F6B76E030055813F3E9867376F78B2A4871792A937504E053A3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif
- Size 43KB
- SHA256 ce636d201ef86ffbf4ee8c8762b4d9dc255be9d5f490d0a22e36fe0c938f7244
- MD5 b5a42ecde0b058b3c4e661e0ec84400b
- SHA1 7e2bfc653c5bc6997553c150a0823daae372cd99
- SHA512 b7f4a7bddb226066f7edf23dfb9bee658c30ae03dfe727ec739f51fd98c63831f732343c14a6ca080f31baed38bf9064cdd57c9d1daaf4c42c029fe83d846dc0
- SSDEEP 768:5XxIn344C+JtOb7Q+8Phv9YaZuJ+Hz7X9Dbzjy2CXdSksvlxkZPbM/zEffvTeq6e:5XxIn344C+Jty7Q+8Phv9YaZuJ+Hz7Xk
- TLSH T106136B3EC2949279B43716F72A1B4EE26B5667B4221152421BFC70D332BCAEE334641F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\SuperbulletAI.exe
- Size 666KB
- SHA256 062a4fee09727251ebe485ea01a6116dcc28bad29c667742c9cab5cdc00d3eaf
- MD5 3e106193f83cf6fe1ddf37a52d64fe4a
- SHA1 2fd458e767eec4904ab24b6189da09b7b6d64561
- SHA512 2dabfeafad190684b7437d126c96f2c238136f6a7e03cf5b115f0393cc8aeb466aae73640ee713dc93e3c0c0b89640ac8929e5b5ed3c2d1e8845aaf4dde3a36f
- SSDEEP 6144:EZDPqpGVj4n6k8A3brtVYAOfBqHPZZcjkHHoHe6yJ62LUOgDVaUamY:EZWG54ntBJVY5oPDcQHHqFInUBaUamY
- TLSH T122E49D21B4C2C4B3D433163089F8E7B0552DBDB21A618A6BB3C53F6F3E345C59A25A66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\D3DCompiler_47.dll
- Size 4.5MB
- SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
- MD5 6ac6cc720fb6bbe5c0ed4e84ad2b3337
- SHA1 8556531bd06691ce0f8b7d83814c867a420526a4
- SHA512 216084dc2a84ca818d68d603968acc978c0b60bdbe0a3152cbfc400ec11a2b96e81d1698a15dbb7738974f4365a8feb109f2bca5b641b42acedeaeff1e2a342c
- SSDEEP 49152:JSHvWaWTktEzfRriMsCL98dhdVhpHGC6GNCxJYrv9y5Eze+V7ZpdKMZzaWoUyxqJ:suktcrfNlTyj5byqSC
- TLSH T1FE268D5767E840E9C5BBD138D687831BEBB1B80413345BDF01508669AF73BE26A3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\chrome_100_percent.pak
- Size 112KB
- SHA256 45d14a4278b1e152b363197401a5604aa5a3cee6512a6b52df978038fa521a0f
- MD5 e7bbddff3081eeecf7f56e76ce1d48e4
- SHA1 eb83b418ad0e8f502f12a339cabc2fef8ec06cb4
- SHA512 2caaa851d095d1a641b959cf092a2ce02328298aafdfadafc773eb0a0054054ae54c41574328694f6a37928203509a0c7e38f3beff1f4fd2ded00b5ed5531d85
- SSDEEP 3072:z84PisCv+/P9NebGz8LI1TwuLjQBHe7YAP18RVC2I:zRYWFUbGz8LI1TnjQBQCrC
- TLSH T13AB3D0D7B7B0AD7DDA474BB783560170FCB30B2D0682120A5A99E479653AF88C8D93D3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\chrome_200_percent.pak
- Size 182KB
- SHA256 aafc61b89748d17fcbc9fecd9844a77be2c584529a81714c98e0c4d453ea9496
- MD5 1e1744b9410d29e7d1ed28c4f67d6317
- SHA1 4f3fcf3db1f8a1eeefd5a4c2f3f2d2b34c094a82
- SHA512 10fbcc89ae3251f4c163beea1dd3a53bca239486e1ed7a997e9b04d3a6193266cd96db4a1f8b753942429305ae9ee28b1e9d3fee7e2ddfee847a4db40c8cea93
- SSDEEP 3072:dl4J8LahaY7d6iN6uSwxohPQDQYaEjrvy/IwXJPoLjQBHe7YAP10uxR/TbIM0:tGQ+N6uSZQDQYakvyAkcjQBQNd4
- TLSH T13804F1D373B8AD3DDA570B73926610E0FD7A20291EB3110A5A9F98397925E8CD9CD343
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\dxcompiler.dll
- Size 24.9MB
- SHA256 d59f53e6c8a0a02003c414ce3ca11f973b31809008f0c94cf3c2559687a5e6c7
- MD5 ecc57b936cb9c9e85b03b51efbd36898
- SHA1 f785440acd292dfb72a6057eb84f9bafd452063b
- SHA512 00a9fecc54b57a16361fff5117e7f9057197a83077eefad72ab6cd026e0b2e30cb65a801fa9848f04d212b3d4122f0563418384807af57b7143a26a9df5ce23a
- SSDEEP 196608:T+kiCf+BWW8fUA4BejnQI180uNJSf4iIJwEMWRsKHvU:T+kNf+BWWyUA4Qjnw6+RsKHv
- TLSH T1594729122246D49CF059C878C3678626CA6C34E73FA779EBC0B461252B7BEBC5B39135
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\dxil.dll
- Size 1.4MB
- SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
- MD5 f8f3501026df30556c34a9af9cb7af9c
- SHA1 961d9012b6d79e2e3c28b310a80ba3ab36e2c559
- SHA512 3631f8a3d48e8eea25091b93147d88f0e8a7539f2f242fe287d37f82fc4344528901e4cc48c93ebcf8691d2e11227a9b50f2b5ad45f2475c0119ad8b2d3661fd
- SSDEEP 24576:zY+wATtbKYxy0y3ny6eBjNSGlVZyi27+V0IJNSD11J7R+j+v1acLUkJvS5Kao:8iTMYxy0Sy66Zh7Sh/cyvS5W
- TLSH T154657E1B229801B6D4BBD17CDA47CE0BE6B2B41503B09BCF12B406692F5BBF55A3E351
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\ffmpeg.dll
- Size 2.9MB
- SHA256 f3705d563d2d8f93a0d497233c01506d5e4ecc66476022588d422d7509694bca
- MD5 34ffa11360b885c0c0af62195b1401b1
- SHA1 2517c2f77c03238f70a27412c63f32f6a148d321
- SHA512 377aa1a5a14796db9ee8b6e2adcb0414e6102262bc5edb6e1a15094ef538a951beb97f517da113df3d0a72eb83854d86818402ea080f7c09352fc73ccb540af4
- SSDEEP 49152:UESTAZFzTxMIP29EeLfptJrj0vVJA8ANdZGNxcO6IhgiS9Nol7WtaRRqSorwIaGH:UDaTSEYht8OnZGNxcO6IhgiS9Nol7Wtu
- TLSH T135E5AE03F6D650D9D029C57197AB9313F631380A4F2056EF2A804A253FA7FD86E7E768
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\icudtl.dat
- Size 10.0MB
- SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
- MD5 4171402e385f07007de57f45ff540e9a
- SHA1 aab98edda310e6ddd3e4b71f95b6225c4defa7fc
- SHA512 53e303895fa80944f7b0e0f64ab657b79bfe0d7c462b853ed06b556e42d78c639021c4c337743f18174614a1f74c805198ae868c52dfd8a2e270e4ce4a2880ff
- SSDEEP 196608:rwPBhORiYAXHiXUxY/iJ53IWhlVjEeIu2YDU:rswkpHiXUxY/iJ53IWhlVjEeI0U
- TLSH T1CEB63807A2FB8DC6F9F76F30E8F452679567BD496E32805911042F3B1D332A08661BB6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\libEGL.dll
- Size 492KB
- SHA256 df2581628fdc5e9ce1a7faf61e1c685730802e31ef828f2e6eb6aecbfa00b02a
- MD5 995ba006ea8bbac389a3b24ce87cbad8
- SHA1 1966c885195901ac4004d029309863b6b37a8254
- SHA512 03b499a0c2aaf5f4a971d3dc1dc91733a1b7f1edff699646321c4cfb9c138a81dc7f4e644f1a3d7dbdad6cdaf890daa752bbe890530269c68d94dc5ca3351fe5
- SSDEEP 6144:itqwvC8uRreZw/ebZyu5sIAeoZPw1ODZ6R3/8cWqR/H2p5HoSyhg:EqwvC8SrZmNEIsPwa6R3/8cWqt0HoSZ
- TLSH T1DFB49D15F3E945A8E06AC4348B534603DA7278560B65FAEF03E092793F37BE45B3A325
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\libGLESv2.dll
- Size 8.0MB
- SHA256 08888aafcffd55b349e528f9979c335276ad0fd8c6ce92448179f97557c03ea1
- MD5 b3e0d85fece0bfa2068639e909da82fd
- SHA1 d23f86bace9f6b041df8ebcd16b1ddab6bc36f62
- SHA512 9c59f7128b94e5298a4a832508b08ff27b12f9cd2bb464f0fa78a9dc2d0f96258a745446e791306f3d8e47d5a07679f6b14dafca5dbdc77e58be8ed56fa6f3e2
- SSDEEP 49152:PBI3qD4nxsy+ODwZe37bJ2MBnibd9/HCqF4J/vsxXP/6BN+ey8+OjDthQDxkLvb8:bDqE9C0X8r1tjNqXyzXicliyUpLe6
- TLSH T116867C03F68581D8D05DE2B8875BA227FA31B8490734B6CF2B9413152F6BBE0A77E754
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\locales\en-US.pak
- Size 524KB
- SHA256 bfa782c9efae2c9cd2c0214dae1bbb3c259d4d4c38d920b06677b9c4cf4f813d
- MD5 bfbb69222dcc50ca860b6a80a3da4f4c
- SHA1 51200c9bd18b0999ba38033662c5e319485e7420
- SHA512 940a2855b5de5f1545abbfed5dad0cfe81e74e847a60f65b4a8df54860649502062ff8941c0fbb248c203fbe6b883ecae8b21e91215b07c1231129a914008a28
- SSDEEP 6144:njtGVh0jMRG0PTMP9QQo94faYQ6TFB+5P2jdnngP8/s1wf:jEVhmOTMCQo9+C5Ojawf
- TLSH T160B44C1FF744122A05A352627F0995A2FF32D06CA35112663CBD812C3376B6AD3B77E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources.pak
- Size 6.0MB
- SHA256 40af4117b0bd35da141aa599255b879013bfda5968401feccb5c43cb372cdae6
- MD5 bc041e16180d671ae720a4a799e106ce
- SHA1 b286bbcc059a31c8f44cca7443f88d60a4790737
- SHA512 da141f2e6c2ac36dc924f1c72616db08927fd6277c7d7b12ca97dcf43a1f6ce906d269d6b6d9cf9cd957c432f5374f9be126111e006d88644f5c98ca33309fb5
- SSDEEP 196608:ccLBR5ltjL+WkrYtJ/eGDi/F7MeZFFfD5CcowhJT:cOT5n1krI/7i/BZfD5N1b
- TLSH T19D5633B3F760243FC088477942D087755B3C594A2A41A0174AECF265CE6A24F6BC6BBF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\assets\superbullet-ai\superbulletai-logo.ico
- Size 400KB
- SHA256 003f9aa0828663260db84974db1e9ddb4da22266f1cf388b6d134ce8c5f4a1be
- MD5 c3ff4b028aa0e199d964430f7795a599
- SHA1 f5d1de1588b128e9768c046593c1d316c2ddce83
- SHA512 d4e6a93286c03c39ab3ccf1b3a6cf7fd1f7b16ebbfa495afae30e2b40349cc29711e4897a6beff96c15350ae88f6f5066c374fa152a33c9abac8c5835d8a6d34
- SSDEEP 3072:0VLDZZPbyjKK+tYQw7RXfZkHHoH/GyTbex/yj2bXUOgxN:cPZZcjkHHoHe6yJ62LUOgD
- TLSH T11394AD65E4089683D43BB7B6C2B9F7B00419BEF338119987F2C57EFB701989DA809616
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\client-s3\dist-es\pagination\Interfaces.js
- Size 11B
- SHA256 8e609bb71c20b858c77f0e9f90bb1319db8477b13f9f965f1a1e18524bf50881
- MD5 e2ebd7ddedcadeeadbf819c35985c768
- SHA1 b878c11a77128e74c3cf15c93ef2ceddf2aa0b38
- SHA512 4ee1c88f8c3f4e4cd34cb6c00339bf9d6d036ff4ade3af49e871cc8966b84c729d8b75492acc6413c9a664ac00a57958223ac13c4229da8c62ebe6a53e4f783f
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\credential-provider-process\LICENSE
- Size 11KB
- SHA256 2ef1e48ea743d9c82313e6887858f7c1feaddd636f5a3f43926aab0143e67ebd
- MD5 2a86f29e8da11f285118a5a2a25ff9a8
- SHA1 da9e6c7ab14f39367e61433676106d18581907f7
- SHA512 bc45d2444ee167c118bc302c94d0475baa48ffac2f6366d36308fe5b98ce26954e799a506495e89e7b08aa4b0259a1cdf8a9a1c3b0ce32d399c675f69f25e785
- SSDEEP 192:O6G5KXSD9VYUKhu1JVF9hFGvV/QiGkS594drFjuHYx5dvTrLh3kTSEUK37HbHZ:O9vlKM1zJlFvmNz5VrlkTSFK37Hd
- TLSH T16832613FBA48037706C20162BB9764CBF21E903F3B552568354CC1681F6BA6543FB6EA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\nested-clients\dist-es\submodules\sso\auth\httpAuthExtensionConfiguration.js
- Size 1KB
- SHA256 331902cc5df5060ac9644261de8711ff641d6b91e60b5fcf77d2facc441c8cf6
- MD5 2724ab2b48ffa88573a04805fa96d7a7
- SHA1 2b88792e4c2c51cda62c711ae414bff102d34434
- SHA512 412a8b3f35afa65cd1bbe798cc37fd62323052321bf6fb332f60bca8b1c57b2bda90cf6242833a2a45f48975614a0cf079e15255ff6a9fa42160a0c0d386185c
- TLSH T1D8214FDE34FA32418502A87EE51F9511F73A38576898BDC8F45D252CCF86428B9F13D0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\nested-clients\dist-es\submodules\sso\runtimeConfig.native.js
- Size 297B
- SHA256 c0c73f0322ae95adce92f60f138a0e54cc9d686a4ef04c27a0fae1902f47a969
- MD5 7af7a302684afda63c4a52710e6921ee
- SHA1 bc330bd438450223d5adde016fd5c73106ad23b5
- SHA512 b4f0697464e65431ed1d0c33f13fb9b7925acdcf66b93ac0b1a68442d47ddf1d5cb05705ed6122052e2d8a89209d66cc214993c4f2d6f25797ef230893ebe1bc
- TLSH T16EE012471CEA76131C214547D1B649B57F5587ABE94DA448399DB2105F0947C50343CC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\nested-clients\dist-es\submodules\sso\runtimeExtensions.js
- Size 1KB
- SHA256 91acbc1e819f62b25b16ae8d717eab8eb748fedc63a656ffcf6ae353cd0b5dbc
- MD5 e771d36b526f9ae85aa12f32944d60d4
- SHA1 fd80164aeb7fc817ab9b27526b774d5c71c885b7
- SHA512 a94c0b402e13b320b41a692d98d25ef0f1380268cb6185cd85905385747d7d4c6e5e3361f8b5d26030b3b470ec2ce8dcb9e50c17e7802ca8ab744d0090ffcb54
- TLSH T13721214379CE7A57153EE683CAD14090CF385F16B08A784CE8FF7664A56E3B82712395
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@langchain\core\dist\types\type-utils.cjs
- Size 77B
- SHA256 d43aa81f5bc89faa359e0f97c814ba25155591ff078fbb9bfd40f8c7c9683230
- MD5 8963201168a2449f79025884824955f2
- SHA1 b66edae489b6e4147ce7e1ec65a107e297219771
- SHA512 7f65c6403a23d93fb148e8259b012d6552ab3bff178f4a7d6a9d9cec0f60429fc1899e39b4bca8cc08afc75d9a7c7bfdb13fc372ca63c85eb22b0355eb4d6000
- TLSH T163A01201692185E003A000C84111E0C1A0C104320025286557EC4D65440084C5060201
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@langchain\textsplitters\index.d.cts
- Size 31B
- SHA256 c98517664512e9f8bc990db01c296a4d667a53cef785bd5cbc4c4298dbded589
- MD5 e08bae19de5b9b906a90e8c80b70ebdf
- SHA1 24cf9f1e2600ffc7026ed1b585841a5ed324f207
- SHA512 a3164081b359dfb0e592e687dcbc4984139940fc96def974829bd79b98f7de4621884e400f78e33ea3858f7abf0d64511ae920c334ef68e0360cfde27da48359
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@opentelemetry\api\LICENSE
- Size 11KB
- SHA256 c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4
- MD5 86d3f3a95c324c9479bd8986968f4327
- SHA1 7df059597099bb7dcf25d2a9aedfaf4465f72d8d
- SHA512 dc6b68d13b8cf959644b935f1192b02c71aa7a5cf653bd43b4480fa89eec8d4d3f16a2278ec8c3b40ab1fdb233b3173a78fd83590d6f739e0c9e8ff56c282557
- SSDEEP 192:fU6G5KXSD9VYUKhu1JVF9hFGvV/QiGkS594drFjuHYx5dvTrLh3kTSEn7HbHR:M9vlKM1zJlFvmNz5VrlkTS07Ht
- TLSH T12432623FBA48037706C20162BB9764CBF21E903F3B552568354CC1681F6BA6543FB6EA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@protobufjs\fetch\LICENSE
- Size 1KB
- SHA256 a67b34a24a5daddcce46aea68c5004e4442bbfb63690329fa607bf4de4269794
- MD5 532013e80f57c86a3d7176374afe6380
- SHA1 e40a5d2090efd5d2eae97987590d414d7b1389f8
- SHA512 db98bcc743122ae1ced03c2d7e4efc4cd090d61b75a2eeee0534cff58ef6ec9a313ad826d4bcf490378a8b13c8a360f20a026df83700c0244113988d7e35b7f5
- TLSH T12A31509752441BA315F256543666BAC4B08DD02C3F272A042C6AE288677B02ED577540
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@smithy\core\LICENSE
- Size 11KB
- SHA256 07364a5f7d0177a59a05a0002187431f8f899320983c0dc049d72df015e8064c
- MD5 fcf654f652254835c051d7b0b8635e86
- SHA1 b4bc018b33e4d52c8d91c7eece67b539ba93dd60
- SHA512 cfff3da5d1a47d63a2beb9cd50c1129200d7f3a26b5f61e20437f8527a52fba592e2985a9b5411fa442c8ca1bb17794dd68e5b7327da0bea3321854d508164cc
- SSDEEP 192:1U6G5KXSD9VYUKhu1JVF9hFGvV/QiGkS594drFjuHYx5dvTrLh3kTSEUK37HbHR:O9vlKM1zJlFvmNz5VrlkTSFK37Ht
- TLSH T1C432623FBA48037706C20162BB9764CBF21E903F3B552568354CC1681F6BA6543FB6EA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@types\triple-beam\LICENSE
- Size 1KB
- SHA256 c2cfccb812fe482101a8f04597dfc5a9991a6b2748266c47ac91b6a5aae15383
- MD5 d4a904ca135bb7bc912156fee12726f0
- SHA1 689ec0681815ecc32bee639c68e7740add7bd301
- SHA512 1d0688424f69c0e7322aeb720e4e28d9af3b5a7a2dc18b8b198156e377a61a6e05bc824528fca0f8e61ac39b137a028029ff82e5229ad400a3cc22e2bdb687ad
- TLSH T1EB21631E32140B66299713705966A8C4B13AB19B7E5B2A44346DF3451F2A07CC2FB840
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\cliui\node_modules\ansi-styles\license
- Size 1KB
- SHA256 48da2f39e100d4085767e94966b43f4fa95ff6a0698fba57ed460914e35f94a0
- MD5 915042b5df33c31a6db2b37eadaa00e3
- SHA1 5aaf48196ddd4d007a3067aa7f30303ca8e4b29c
- SHA512 9c8b2def76ae5ffe4d636166bf9635d7abd69cdac4bf819a2145f7969646d39ae95c96364bc117f9fa544b98518c294233455d4f665af430c75d70798dd4ab13
- TLSH T1EC11931D7254136318BA13A069696CC4B32BB11F79AF6B8418AEF244233B46CD4FB840
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\es-object-atoms\LICENSE
- Size 1KB
- SHA256 5e325595b4ea8cfec3802f545b1def5d7b73e4a5b8e9ba63e32a320f67732292
- MD5 8fe23ea421aaf9f9d687709f6a6a09b7
- SHA1 a47868ab90b532df82abe3e4f507bcb2ea441364
- SHA512 8acd3b84f3afa8c6ff9c1a58ab774ea33aec7701c022ba8f4d36218a8d1c03e80ef2ee1d692dbd43dbf5883153137c5e000f113b98da23d870dfab6f71b78afa
- TLSH T11111751EB25107B228AB13605578ACD5F23BB25F7A9F2A84246DF345633A06CC5FF844
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\get-intrinsic\.nycrc
- Size 139B
- SHA256 997785c50b0773e5e18bf15550fbf57823c634fefe623cd37b3c83696402ad0a
- MD5 d0104f79f0b4f03bbcd3b287fa04cf8c
- SHA1 54f9d7adf8943cb07f821435bb269eb4ba40ccc2
- SHA512 daf9b5445cfc02397f398adfa0258f2489b70699dfec6ca7e5b85afe5671fdcabe59edee332f718f5e5778feb1e301778dffe93bb28c1c0914f669659bad39c6
- TLSH T170C09B65E43F596B255D119CBD4CD5C7155415E1C1CD8F097D156661C31DB64004F541
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\is-stream\license
- Size 1KB
- SHA256 5c932d88256b4ab958f64a856fa48e8bd1f55bc1d96b8149c65689e0c61789d3
- MD5 d5f2a6dd0192dcc7c833e50bb9017337
- SHA1 80674912e3033be358331910ba27d5812369c2fc
- SHA512 d1f336ff272bc6b96dc9a04a7d0ef8f02936dd594f514060340478ee575fe01d55fc7a174df5814a4faf72c8462b012998eca7bb898e3f9a3e87205fb9135af2
- TLSH T18221931E7254136318BA13A0696A6CC4B32BB11F7DAF6B8418ADF244233B46CD4FB840
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\long\umd\package.json
- Size 25B
- SHA256 8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a
- MD5 df9ffc6aa3f78a5491736d441c4258a8
- SHA1 9d0d83ae5d399d96b36d228e614a575fc209d488
- SHA512 6c58939da58f9b716293a8328f7a3649b6e242bf235fae00055a0cc79fb2788e4a99dfaa422e0cfadbe84e0d5e33b836f68627e6a409654877edc443b94d04c4
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\lru-cache\dist\mjs\package.json
- Size 23B
- SHA256 3ca9d4afd21425087cf31893b8f9f63c81b0b8408db5e343ca76e5f8aa26ab9a
- MD5 d0707362e90f00edd12435e9d3b9d71c
- SHA1 50faeb965b15dfc6854cb1235b06dbb5e79148d2
- SHA512 9d323420cc63c6bee79dcc5db5f0f18f6b8e073daaf8ffa5459e11f2de59a9f5e8c178d77fa92afc9ddd352623dec362c62fff859c71a2fab93f1e2172c4987f
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\semver\LICENSE
- Size 765B
- SHA256 4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b
- MD5 82703a69f6d7411dde679954c2fd9dca
- SHA1 bb408e929caeb1731945b2ba54bc337edb87cc66
- SHA512 3fa748e59fb3af0c5293530844faa9606d9271836489d2c8013417779d10cc180187f5e670477f9ec77d341e0ef64eab7dcfb876c6390f027bc6f869a12d0f46
- TLSH T1E401FD9FB2E26BD458D09B603DA16DC962CAB03B7803AA152468E298DB7740FA47A400
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\side-channel-list\.nycrc
- Size 216B
- SHA256 948366fea3b423a46366326d0bb2e54b08abd1cf0b243678ba6625740c40da5a
- MD5 c2ab942102236f987048d0d84d73d960
- SHA1 95462172699187ac02eaec6074024b26e6d71cff
- SHA512 e36b20c16ceeb090750f3865efc8d7fd983ae4e8b41c30cc3865d2fd4925bf5902627e1f1ed46c0ff2453f076ef9de34be899ef57754b29cd158440071318479
- TLSH T12ED0A710F03A051561DD629C7D4DB057051404A2818A8625AC712260CB78A10104B941
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\side-channel-weakmap\tsconfig.json
- Size 116B
- SHA256 6346ee4c020f341387588479dd83740a65ab902a462b8c6b3b8bf51f032c6795
- MD5 52fad431b4493384deb61bca02e2ff01
- SHA1 a16472424f8c26184de557eff8d6824939d1fc8e
- SHA512 35b51bdea5bd3080b065d7aa72de5de16c5d839c6af8671f8325d35b69f7da5d9a5d53c53c38ccdbcf74847cc0bbf3d06e1eca01415a1546ffd5581747b1434a
- TLSH T19BB0922A960D0CB321D93E4C6D0FCACA969863C3C9C3655EADFAA162CB10A480027990
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-go\src\tree_sitter\alloc.h
- Size 958B
- SHA256 253b44a7b4313a7afd0c505c2fc6e7ce4b8e78955ebf4be3ea000532ec060673
- MD5 cca7466299f86870ba0a7a7ff977758e
- SHA1 ad91ded486dd75709f48f7987719d22f27e60c04
- SHA512 f67ff735a85b1f4feb2121e740e0f38b1f21fcec00d4179444bc910dfc2eeb91789907ecc84620664292542cdb7270feea0cc60f86fce2a8dbd477e5d38cd688
- TLSH T13D11D334564E51F0E812DA2AEC085139601BEF83FF41E06C12E6E68F194A108539F0EC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-go\src\tree_sitter\array.h
- Size 10KB
- SHA256 4ff743903dc46f5db6aa54f31c6b4d160a8a9779e5b2ab1ee59ae7ebcd850ea1
- MD5 88c948f993133f1ed04458cb273f90b4
- SHA1 cc8a07baa1cbee0ab270bc842dbd2ed94b2e17ce
- SHA512 be9d626ec64b9558f1e765372ea17cfbdda43903dab0781a2e8ed1eff97dbb14dda25e488c963f86475f0149ad9fa2bfe0d0f5e1bbe8ba5a22540bbbb27fab34
- SSDEEP 192:j8pn+rfMQx+jRvDYR+e34fG8UQp/QwLQ8U/T+SN/V8EViXF6Cyw0qR01KZB69KbZ:j8pn+7PElbYR+84fdUQp/QAQPT7/VDV+
- TLSH T1DB22501A36D54179A6C8706A270F685B530B8173822C5B40B87F5D4C2FF2CA876F9BED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-java\bindings\node\index.js
- Size 201B
- SHA256 609bdf22b8fd183025b3c24e8587f6211d50358e8f2e4c526b9217349ed9dbc0
- MD5 b99c8a4f8eb002a169e20af49966d427
- SHA1 c03253222b995d6fabe323cc558754a9111adb78
- SHA512 d4b33eed73194f85da36d61549924622aa7d86c196d533374cb88a2dfcb1db1f1fa5cba72400ee3246542092a22bcb0e2b7c11fe34f0e7f40b87a4c023b8d70b
- TLSH T1E7D022B30AF433120AA6C1C3F919012214C9C4F321409944902889F7A0C56C00793AA4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-typescript\typescript\src\tree_sitter\parser.h
- Size 6KB
- SHA256 a3eb18ef034b3f4255b965a26caa276f9cfe13a79573b402f1a12dc5018052aa
- MD5 fa206130c3a17d982ca90b10205414ee
- SHA1 8879f3fbe20d243e9dd5eb4b66a2c7a3e6001b8a
- SHA512 a5cc5b0914f12ba780f33604f0aa0fe1178924d7091cf9890517f64ed15d2eacb7c77faadb16385ff3f394afa5b7806b5b0fdd514e68f014b701dbe8961044b2
- SSDEEP 96:5jJ22hQpIIoVqrt6exXrqsMR19ujl2UzHgDUMsh7iA:TnypI/ezXbw0TKUMsh7/
- TLSH T17AE14FA13CA724435D0264B30CFE6870A96653B3A1CDCCA07ECC52682F66A78156F3EC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\voyageai\api\types\EmbedResponse.js
- Size 150B
- SHA256 b85b16b647b590d06a88c90d15257954cd8cad804092c506939fd451f71fcb86
- MD5 62c0e9ca62b07f9b216184cafa2c0517
- SHA1 30b4e1f4319b6315d6ae4c35d3c749502778c142
- SHA512 8c79c0893f0de483c591cdcdae5edda0c468ae1bd2e379771e9cf2f17db91814bfba49e83e2dacb64cc80171155dab2f2f0b3603adf50dd9200563c7023e2104
- TLSH T1C7C08C112C62CAE6066040C84320E0E2A0E68C22812968A26BAA8AEADD0896D2058EC1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\wrap-ansi-cjs\node_modules\emoji-regex\LICENSE-MIT.txt
- Size 1KB
- SHA256 483acb265f182907d1caf6cff9c16c96f31325ed23792832cc5d8b12d5f88c8a
- MD5 ee9bd8b835cfcd512dd644540dd96987
- SHA1 d7384cd3ed0c9614f87dde0f86568017f369814c
- SHA512 7d6b44bb658625281b48194e5a3d3a07452bea1f256506dd16f7a21941ef3f0d259e1bcd0cc6202642bf1fd129bc187e6a3921d382d568d312bd83f3023979a0
- TLSH T1E611465EB26053BA1C66136065786C89F26B725FB9AF2384246EF344232746CD5FB844
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\wrap-ansi-cjs\node_modules\emoji-regex\es2015\index.js
- Size 10KB
- SHA256 8718dea4d28647912918dba60545890dc10ae672bfb186b6ec0af3fc5e826137
- MD5 8f12b24a27ff5f2381a4a1568475eaba
- SHA1 975c292ad2c1f09c53d0c9f53db5e66fd26fbbfb
- SHA512 b70e68def6e8b15cdc9ef8bfa1326611c4bf83ad8ac461511c6af1ee2acdaa182ae9336e1f7f8c171c9931d36d5d9347542d364605d714c81a90032afedf52e5
- SSDEEP 192:40mtl1qCooeMLbJ7Ex9rtWhbY3X2HYnO/yVgmDwqbO70yHnDMotV6O:401riYGHqQyVghJ4MdV6O
- TLSH T13E32A2BC008846963D6DF0D4AF34E5D62A8D4B4A240CD3365F9BF83762CA4F4ED9A4E1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\wrap-ansi-cjs\node_modules\emoji-regex\index.js
- Size 10KB
- SHA256 c56978800e47f095cfbfe96712b5e78d150d1f62e32bb4943675213fce481ef0
- MD5 0438b0678667b951cf518a14560fa0b7
- SHA1 e678799abbf2035d94ab0114ae0783b36a3e5994
- SHA512 75924c24968e298b1496170a66624b97a76a77fb4ce5968e7c097ad227401256752d9d28c8a1f84d313ce4b06f9dc9b20e3f75d81398c8951b45375ccb013e3e
- SSDEEP 96:4eZyEVZKmkKDw4WrUtTk0BQj9zTFQldJQdi4+Ds7mCK2m0W1EojSVQdZ8w4kvP2e:4k3OxUwwZh0w8s
- TLSH T1B222AF7045217E5675B2000B6D845B1FF0AC998BE922EF37A7ACF19EB346131CAD26F4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\ansi-regex\index.js
- Size 350B
- SHA256 c92312790eb1f246b7c4c1fe9c1247b15441bbca3c6cb64d167beefc45302753
- MD5 7d1a59d7267eef993b9827ee185500ab
- SHA1 9305ae17262f6e11f8afd69835907716ba5c8ee0
- SHA512 d1bd977b33603f9d06d947bfe108c1945cc2cd4575cd39eb84a20f15876a7dffc59c3b52c92af3b6483c1bb426983bfcc0c00faffe32821a5bdb0bd7d38a0484
- TLSH T134E068094851165D94D1708B2D614C748B89BF142DB28202C234EE4D5B4908F13E862E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\ansi-regex\package.json
- Size 470B
- SHA256 93fcfd1b014b9bd7f31b3f35b24a5a479839b6f141c95f62b73a1829bf112ad2
- MD5 842a7424b2dda87e9e4a90838f5fab9b
- SHA1 0787e3ac5af8ba0341c5e65a771a1008a47d4ad6
- SHA512 b467038704d60b80f09d380df5fdb8fceaa46e77d1d29d4749dee81b0026b78a2688b8131f0eaa1f44a2cedc404037d7080fb73cf38b9b782606a66007d1f847
- TLSH T116F02720D82468634AEC91D03CB90183591A4C071948BD2C3B9B021C5FAE5BB31BE1F8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\ansi-regex\readme.md
- Size 2KB
- SHA256 3ebc0f845b1bab50600f823716040fbec355d3c356a3a76b8eb9eb593b6c7a3a
- MD5 a1594d617cebfdcc8c220f5413656169
- SHA1 99c5ef1349279584777834e1a7b068c228b6bd58
- SHA512 5acc78e6f7095e33411a4a184fbe10304f1d1b577197707d8d869c96dfd5cb5191f00b7b5627aacf3adec11b5ff494ec680270314d6e92d02aadb206b975a587
- TLSH T11651449BD10947640EA300C17E6A358F6F1ED52C64D386BD89AF46AC62034FBC27B4DB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\strip-ansi\index.js
- Size 154B
- SHA256 bf37cd692bf030c2ec270945bc26aa8b19ad379fa5916f12304758f709ab0978
- MD5 d2f059d0b9cfa91f1e899a4632d33da8
- SHA1 ac06aab8c4ef70f9d2c18bbd0b2eb5ef0bb7c900
- SHA512 0685ed108c20c84b3c0d4bf181318bf3f3ad6602de1b5bb71dc6a8d377575e974c42bcc14f5d72a244f06044bce8f81005c57ec2d246a513b6f196700a5010c2
- TLSH T119C08C6620B195462C5240C4F0D855409583C4B03AB9A2F5EECF4566A0994BE0670A69
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\strip-ansi\package.json
- Size 511B
- SHA256 4518dec682055621a82c1480a6c33479a7b6ae7d17019ccc4799b86e9be4d4d7
- MD5 a6de01ff36a45e09a3473336f1add9e8
- SHA1 d884d25def2c2ec06ed22f33761fa447abf6f058
- SHA512 74163a3d76c872174ca0c0574c5d08f6a0ff012301023df9f6ede39ff3f232c5df64321456a91715951c820cb7594310a5bfec566cb9f0c0f4a307a2c9f81a80
- TLSH T11BF0E220D871686349EC91D06CB90547692A9C031458FD2C3BD7021CAFAE9BF31BD7E9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\strip-ansi\readme.md
- Size 1KB
- SHA256 cb384db30337ecec75919b4c69aab67358b4f4e384406956687894b6d777413b
- MD5 ec70e70db32f0367fbd2bc25596fe4bc
- SHA1 439476da89058a651d25e40626d3fdb8261e692f
- SHA512 7cea37cb4960fa69c50442906f8ade1ea403361705472a8d223b06ea05dfd8c4f4ce2bd5a9c6dc1c68fe3cc4d6cca9e735e130a7685404c0e87148854609527c
- TLSH T1C73111F7C24055A5BF5300C99C5A258E6F363154F8D2C9AC6AF18064910B4EF927D94B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\zod\v4\locales\cs.d.cts
- Size 122B
- SHA256 b42d3651103a532f7492e719a828647af97306b2356ae757ebb7f17f4a8c41e5
- MD5 77006e07387a4b8a3394b223817dbe1b
- SHA1 1b46ccf8555eb7e2547bca24b5bb61c26cfe483a
- SHA512 2f9334fc2430169915de561eedeed11d2b60e7669c660021d667ca018833c9fdf0062d5a4d786aa5cacfb361e53ce4e0354e0e35f2e7c577ae54ec360997c444
- TLSH T17EB0920A3A86E1438D2410D01A0A4809932219753EBE2885266F5327DD6039C8C26A56
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\node_modules\@dqbd\tiktoken\encoders\p50k_edit.d.ts
- Size 133B
- SHA256 7d0e8a9e6b76c79a97603d92f3934299a86b6c51c9e9a4fa4c6fb78a99bf596f
- MD5 2cfb3d61a07d8f34c69af5d3d5228c3a
- SHA1 7236e512497561f4bb7da6c4bc7ffa52eb9f5ad8
- SHA512 08afe2fae19defeb260944604b9d484af4d59131fb06dcd084305e02852c152b3b2aa371d4e0e9dc9daf85b136df8eca8e3779cfeb36120a94d91fd3e92501c0
- TLSH T103C09280B58A56123DD046A3A0CBCA18929CB29C242AB5F8FEB012991E1A18D90AA169
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\v8_context_snapshot.bin
- Size 758KB
- SHA256 1fa1cdd08423809344fe15fac2d9d1ec604cc3ea5af4b944d89a51b1e98c8665
- MD5 00f69a4fa2169454a5601261a9c7245f
- SHA1 b6d3d33b615fe050b7b2d009695a2a6e4e7c12a6
- SHA512 abe8e379e1842d00c71a7c9cae3bd4d3a1d6ab4679f8c6d850dfee3f91affa23cbb4e0b35c035bf2832adb5f0cf5a8fe4fb21a7a377babf190fd6f11ce67e4c8
- SSDEEP 6144:tU0ckYOkGt+OcqCvpWoNyuZaVaBgJjdOSkvh8mQu/INZV/peyWBOI:y1RNvMoNyerT8mQuANZhcOI
- TLSH T10EF48565F74ECF2ACA4537B86DE547463835B04A6F8BD21BB518233E38B65B00E3652C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\vk_swiftshader.dll
- Size 5.4MB
- SHA256 597ca957c8aaa18911c719f7973dc1628c02e6a4319f1eda3a15134a403d1d68
- MD5 4f2ca3eb5a7c6753f22b7da6f6bf6410
- SHA1 17697b0652dc5098a143c070c05e03d191f0549c
- SHA512 f9b49c2b6be7bcd9f01395d07e6c8dee2c22d80e9e468a39bd9f728837cacc33097293d7677eb536c88cde96986460ae5706ea5b77bbe34fee5dd0282936a8c2
- SSDEEP 49152:MVlVRGSYZZaeYaOIHsu8n1o/n8fZ/sZSR0qCWUT8HeLig4SYLMRfXSlx1CB/wU/E:MlDYZZaeYwqqblXQ+9vWB
- TLSH T1DC462713F28681E9F06DD679875AA623F231F8844B2276DF16A01F192E77FE06739710
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\vk_swiftshader_icd.json
- Size 106B
- SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
- MD5 8642dd3a87e2de6e991fae08458e302b
- SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
- SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
- TLSH T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\vulkan-1.dll
- Size 922KB
- SHA256 3500028f57bb570f75b6bef56b13fb788da0ffb8d0fe1ec61c058c839be19eb8
- MD5 bcf11193f1c7cf4003dc75f7341da83c
- SHA1 95852c1f4e4c8cfb65ee20cd939248b505edf6e2
- SHA512 6aa16e7389245c5395eca7b8fe239936de3c32550b103ff99222fb84d64664acf2c409522bf19026b5f888e8ec7224b74ddd877f4760d6fe14148e67d0b40dc6
- SSDEEP 24576:/GVzDeAVM7N/L0H6tDVj3sF6Z5WGc4DYsHQDy6g3P0zAk79oOHAF:/GlDeAq7N/L0H6FVLsF6Z5WGc4DYsHQ6
- TLSH T142156D23965485A9D47AD034D9D28707C9B174822326B9CF42A81708BF6FFF47B3DB29
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
- Size 11KB
- SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
- MD5 25e8156b7f7ca8dad999ee2b93a32b71
- SHA1 db587e9e9559b433cee57435cb97a83963659430
- SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
- SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
- TLSH T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
- Size 502KB
- SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
- MD5 e690f995973164fe425f76589b1be2d9
- SHA1 e947c4dad203aab37a003194dddc7980c74fa712
- SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
- SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
- TLSH T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
- Size 2B
- SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
- MD5 f3b25701fe362ec84616a93a45ce9998
- SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
- SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\db\data.safe.tmp
- Size 6KB
- SHA256 bd3231a6eb1c8d13a9273149059ebcb18a3c067e9d4d3e55db24461e1a16c9b8
- MD5 61093996ddaebcf15839671f58fe2d44
- SHA1 47b220115bc8305ba048363446f317aed6f9cf5e
- SHA512 944623a9a00d562ece7372a70d7c1e23ef3497314ff2e455e03705437bff37c0e9a18d6e832c5a56df49fa5a0eb0f0de79bee6d25cb92fb4c4dce0714393bdbd
- SSDEEP 192:DW1d66Joz0dzgCl6mc0d29JZCOv5zboobSncUyj19AcN:Dwd66JozQzgC1jA9JZhboobSncUyj19P
- TLSH T194D12E74EA28463FC444533BCCA11B414F39394BA88E3F1935AD65192D5B2EE368D1BE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\db\data.safe.tmp
- Size 6KB
- SHA256 c755c5392826d32b820b6f7c9b7f1c175eef4e6998ca6333388c11d2ca21638b
- MD5 cb68ef817a5665c53138c287e5b35d75
- SHA1 cbfbd1a4b04ec66977cde65e4fadd596c95925ba
- SHA512 4bf1b3f706af5aed1b90ea4a5835b825128def30b5a7930efe541c7fa8d6e79908e2cb538983f4a966121a048deb910ee0d11b75f9c4382a878e14bfa42c8b41
- SSDEEP 192:c9JZCOv5zboobSncUyj190c8W1d66Joz0dzgCl6mc0dz:c9JZhboobSncUyj19Cwd66JozQzgC1jd
- TLSH T15CD10D34EA28463FC444533BCCA21F415F39394BA84E3F1935AC65192D6B2DE7A8D1BE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\db\data.safe.tmp
- Size 7KB
- SHA256 02c45729d1a52d5d88eab5c338bdadbed3fbe09a8cf292de27a3d54683683ddd
- MD5 697b94d200c9f861f5acd3e754c73bd9
- SHA1 c673295756f811a62d1cd72e2748bab250a3d0ed
- SHA512 80bcebbbe01d903f595447c01169d4f1f7c33f8090b43849714672756ab6beb963d8a845e46d3fbac86b186fdf2078f579af126cda8d6d9b0ae4cb231fb13db5
- SSDEEP 192:UW1d66Joz0dzgCl6mc0dR9JZCOv5zboHSZSncUyj19Ac:Uwd66JozQzgC1jD9JZhboyZSncUyj19
- TLSH T12DE12E68EA28863FC444427BCCA21B454F39398A984E3F1935AD711D2D572DE368E1BE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\db\data.safe.tmp
- Size 76KB
- SHA256 505fbf76d9ad791f6cd86770f446f56c6c6f1600ca16cd34f12ca05ccc0870a7
- MD5 ff917cb9e93e88356c05fd273c9445b3
- SHA1 f2d4e4477873ffbdd9dc25d6f519a63bab0ab5ea
- SHA512 0c4e1b62bb827b9a901a568f3c3bdd5a7be36bf969fd428bbbe9dbc84d921187fdae4824cade9c044865337d3065d7b430b7081f2cbf27936a90ebbf1114e52b
- SSDEEP 768:vP3MVukyo499fRWxsVSiHElGcmhuchXqCWMK1XxcWv7JICbUbObib9brbGbGJmzv:ayo499fUxsVSi3XqJMPeNrak6MFeWSM
- TLSH T1EC73DF90DB1B403FF81085BFB495673C2635F4614A599B1B3AAC04661DCB3FF2D0EA6A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\db\data.safe.tmp
- Size 49KB
- SHA256 ec27d38f3e1188fed5ca056b9a30e05d7bcef94a1b896395939d43c57bff200e
- MD5 e8d4c7382c671fc319607b7e29cdc39a
- SHA1 bd07e674633ef04942f7a20be577ae9c54a33f3f
- SHA512 8b8253b52bb5b6c1c59db45f4eb6950598c8faa07f8bd9b49c1b3d8ace5369682b7dd2576b5f4a6844156298f1991af3d28e47a29ec881ba1212d9c000771a34
- SSDEEP 768:VmCP3UVu6yo499fRWxsVSiHElGcmhuchXqCWMK1XxcWv7JICbUbObib9brbGbGJS:Myo499fUxsVSi3XqJMP4
- TLSH T178331F44EB1A513FD46802BADDD51B002F78F8895A1A2FAB3B5C55386D872DC3D8E06F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\events\events
- Size 1KB
- SHA256 b30d9730b0e0e862a981993a7a11cff9c56ba62230ee9895978daeee5ff8e279
- MD5 0a21b733a654473b0e0c0f5b409ce676
- SHA1 53a31f663a6183960884bb8f2969cbbce72c8d73
- SHA512 4b2020466b00f6cb0ba8cdacad26624251b9a76e3e6168a3ad0697f9046756be3e5b3952c62a4e3a807833c6fb54fd984b2df495ef7bfdc83e030a47b3793465
- TLSH T19211669C39B94D3A98C7E79C7891038EA3558E4A14872C430D12EF8CCE81BDD326A43D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\pending_pings\0423274b-a93f-4377-8931-372a39a17409
- Size 14KB
- SHA256 aa0f538d123ded2b70d1a36c5c2804a94df7483852f8f8fa4f041b035ce207a3
- MD5 e8f32ef8fdf83b3dff9494d04445a2b2
- SHA1 4a03535245323e1265c24d7d96b6d76387931d00
- SHA512 fd28c9b4ce94d381d418206b2bb23cf0055ed7f570db4566007223f958e0b68d6f9772e4b04d40e5cb32c9b363a7781d206aa4cda6fe9547c0d886be3ac4b65a
- SSDEEP 384:tuk79opE3h+Ze5WOID27KpasuX5S4z0jmByi:tuk79om3h+Q5BIa7Kpasi5S4z0jmByi
- TLSH T18A62CDFDDE12004B3D65E51EF1A6EDAB2057293209CCC79D6AFC483A26D6D7B1523318
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\pending_pings\0524358a-7cae-4b77-a6d5-a38c11367bab
- Size 886B
- SHA256 bf65b4a1cb482864bc70e9c33f0a08d0a5602e318d175296e08f3559ff9b3717
- MD5 06c1d02aa9104250101812666473d7e8
- SHA1 51b2e6972b45106b06566365d86deaf3ab0f58b1
- SHA512 546ff06dcdbb97c6940db1ab4dc96cde869afdccf60aeaef8489432e0fe84e5333d597639376a3697af82566de8f1da052f7bd317e2ff3c1eb06a51e0a4d7d88
- TLSH T1EB1100619661B9B2CCA8E387C4E07B4396F4712380CA5E187DA05A180DBA21E672670B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\pending_pings\1fb17db2-097e-48d5-a420-c0b10aca2dc6
- Size 2KB
- SHA256 8f8390e1a55dcbf86c9d24788b5b5ee1b301803b4be2b541d1e45e2bf5e879b1
- MD5 7eba190dc3658296bc529298a4175afd
- SHA1 27db2dc7f941e115ffd680cfc862013de6cc6a45
- SHA512 4b3111577e70b2ec9b772e629169c7cd3c159e83b2ebc7cf9c771875da6602bf726de474127e067efe94798223f3db1bc569fb5fd5d3c131eeb7862180e33be2
- TLSH T1B741112CB6B49DB69CC7F55DD492238E53748E03408238436E51EF0CCDA569E237E91B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\pending_pings\33eb6c68-1185-4eca-a8ae-7dd46980c9ab
- Size 235B
- SHA256 c2187c3b9260c1885400e89675dd829d2928447b34cb0f22c0e13659847def2f
- MD5 526ff3456071a2559c09b67b04d03bd2
- SHA1 52f7a78a34cb384b9bfb98e616760d30950f66a5
- SHA512 6489cf3f5930042853527a76848890452130ef91151f61c17f2f942d0963cb2e3a6bc69843a48ed38dedea9420fe523c5c0a14fb9848fad2da879c8489437948
- TLSH T140D097D09888672D8C184F02F0E0ABCA70588C3310719820CD6215B4AAFDEC80293926
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\pending_pings\4a984a6e-48bb-4278-90ab-5e659bee47bc
- Size 883B
- SHA256 846da3e656574ef8919451425593efdcb3c39ae9f0f1c8080e076b1c0d6a8a36
- MD5 d46b0d4bfe81793020b2d1420a52641c
- SHA1 62e59a486120f9c1cee49dbae15be7172f6363ce
- SHA512 c09a510091441d72a85e71e1595d8ab3ec9c4fadff8c83295a8bdd6fc5f33818ead13c5b5be1a737b30eb67c8e8ea29aa1c8cd2115910f8e12cd0ca2547e0c80
- TLSH T1CB112361A76175B2CCB8D34BC4917B4347F87A2380CA95083DB09A080D7E92E537A70B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\pending_pings\78bbde3f-050b-42a9-a0b0-75e2034dc33c
- Size 16KB
- SHA256 2a56d417299758b38546ea2fdd861c6b96da3ab4718606a4d0f83215c49ca5b4
- MD5 a72d65473922e72df65c03adcce08542
- SHA1 d174060ddb4749cfb63f49eccd8190f75854e5a1
- SHA512 c99d1f190389b9b88bba9729e34f08f7bb472206fd86080c7d1cd4f8ef49bfdb419053ff58dc904cee21742e5dd74c49e82783aa7a139329ce1b2ef28a322e41
- SSDEEP 192:YSpG2mgr0rUCL78qN6ZK1Ha8tfIVQZWBcVSwwbiBzim3u7hBoy9XZUt9vg1TBcBO:I2FjcVoBcVSwwbiB5u1Boy9XO/MeVbi
- TLSH T19172D91A282055BA8251E369D4F8BFC3E2F538CF4C419FCA9BE07D086DDE06E502794B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\pending_pings\eddb06f6-00d6-4729-93e7-aad04e4e3684
- Size 235B
- SHA256 c87ce8c94fa01b581152f9606c01eea4d86a1f92971b803457eda8584c899ab3
- MD5 b31876bbea0b195b7ac1321c3d46542b
- SHA1 c49f6f095d121498d850d9033f0c2a088aba70b5
- SHA512 2e4c9d3916401e71764b0e2cd4a3e59e44552def15db3378f4aadad57c9207619ace03d36f1cdd7e93786446f9950453a0ea68fefa3f074a29ee66bff9c19c1f
- TLSH T110D097C17898A71C08240F02F0F02DD631444C332471A820EBA242399AFEEC45251D0E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\extensions.json
- Size 16KB
- SHA256 7263b75106f94dec5d6fc5e505beb4c18cb35960b2c613b6c2f5d37aa1a4674e
- MD5 70bbfeb8c817710f305ce75fe584445a
- SHA1 c5fa58c0463e0cf5898a4bc77221eedfee6ed847
- SHA512 0187cca955ec3b26d6542741aa8ceb16c8757451d6ef7423804b8c77ca0685b8cc891ce44eeaa1d568cf929692902f6bacdfad54531a702064c494ecf8999786
- SSDEEP 384:wgkI4vbUmldvf8dhWq94zO96odL4HzL4P1L4HXXL4HHL4Hc+sm4hC:MI4jRfcXb4O6+4f4d43b4L4Ym4c
- TLSH T18172421545449EB8294FA78AAA367E02C37D473B60845C78F4DD8FC802FA5B902FB65B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
- Size 1.1MB
- SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
- MD5 626073e8dcf656ac4130e3283c51cbba
- SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
- SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
- SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
- TLSH T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
- Size 116B
- SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
- MD5 ae29912407dfadf0d683982d4fb57293
- SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
- SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
- TLSH T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
- Size 1002B
- SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
- MD5 dcffff15fa618a53834ee4ae8673bd23
- SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
- SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
- TLSH T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
- Size 21.6MB
- SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
- MD5 d14dd3f0107ff91c3e21f301d83f82b0
- SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
- SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
- SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
- TLSH T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\prefs-1.js
- Size 6KB
- SHA256 a8a73d02940adf4ed8dff8192504afe6252c91642aeb0ea54449954fdea3000f
- MD5 261718744bdcc45bb3acc4247b2d0fbe
- SHA1 fafed16b55db2943e26c7fb5117b74c44e388ae1
- SHA512 d374abed742b8e9c3291aefada30b2afb9201a72e86188f7be741ca508841fe047a046f1689ab3a3aa67b629bc11f93531e06ed35451b50454a20059a44cb259
- SSDEEP 96:xHIUTUPqGqgzfJKdObzS0SSlcdv9jtInfRHXYEyJbBw88H8L4cnrVzzpX:aSRmfJKduSSL9QbBw880NX
- TLSH T1EFE1107895088F7F64B677ACAC6489316AB2013BBBBF68C750B554C4051CF3842F96EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\prefs-1.js
- Size 6KB
- SHA256 8f0b5877a63bf3ed852feace114301c341ef6624cf6e0c3d264e075f057ec1a9
- MD5 58df4623963c60cccc83529ce8dedc54
- SHA1 3e77496de0b370623ff317a6cf7834adb8028eda
- SHA512 2e6e043d9b64a7fb4f004969c3820097ba554b5eb4d210fe34335392a78baa0002279e8843527c4f14b6268f3a8ff5423bc253832c1799d46c00071f31659c1b
- SSDEEP 96:xHIUTUCPqGqgzfJKdObzS0SSlcdv9jtInfRHXYEyJbBw88H8L4cnrVzzpX:ayCRmfJKduSSL9QbBw880NX
- TLSH T154E1107895088F7F64B6776CAC6889316AB2013BBBBF68C750B554C4051CF3842F96EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\prefs-1.js
- Size 7KB
- SHA256 887881984e0bd3259eb65a4582c7069c52a31d69824b08c1e0f907280f97553f
- MD5 195fbbe0d64d124090889f509ea510cf
- SHA1 14bacc3cd808dc6d4e096bffd975014f4197e9ec
- SHA512 5ff85806563549905b3d322170905d8352314341ab72373786f4310167daf3778a6d67435ab38addcb3c135979613ad96388e741396aa61369d4f2204b994c7e
- SSDEEP 96:xHIpTUCPqGqgzfTKdObzS0SSlcdv9jtInfRHXYEyJGBw88aF8L4cnrV+zpX:aDCRmfTKduSSL9QGBw88+NX
- TLSH T172F1FD7890048B7F64B67ABCBC6449315AB2023BB7BF6CC310B95485450CF3856F9AEB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\prefs-1.js
- Size 10KB
- SHA256 ee7026455efbba863204e162d3f5fee0a7589833eda18f246194f10e039cf378
- MD5 d3cea1a2c4692a80bb3a376f05686c71
- SHA1 e86705102346b6f61a48a8bc7e26595d7a303ea5
- SHA512 d5958b063c5931f0f9e985d9bd8b691711cede16f70a8c5ee3c22b373ff59b164715bffc8102c6daed6a0627d32079c741391e005d3b9de488562ad610b50969
- SSDEEP 96:xHIpTUCPqGq/zfTKdObzS0SSlcdv9jtInfRWRdFLYEyJpXBw88G2mQwX6Hr258Lg:aDCRbfTKduSSL8RdKpBw88GCwX6Hr+NX
- TLSH T18C32BC3C50008F7F20B2367D7C244A6199A50637B6BFBCD304B99481845CF6865FAAFB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\prefs-1.js
- Size 6KB
- SHA256 c004620070ccf78b2947f9ad9f869b44dee7b317fffdb37e039e08495f3b15e0
- MD5 6cbb8211c995a383aae3f60cfe4f75e6
- SHA1 c064f4d2894e4cce65702dfd9396b0d3ddaf80d4
- SHA512 f3ca1d736370728b2b40306f5e8d13fba277e8c6a161bfff12102a91dbc4df512538c55f4a40ffb75a0a3bc9f0c93bd12830ef12619fc70545f1dedaf6670cb0
- SSDEEP 96:xHIUTUPqGqgzfJKd1zS0SSlcdv9jtInfRHXYEyJbBw88H8L4cnrVzzpX:aSRmfJKdxSSL9QbBw880NX
- TLSH T1CBE1107895088F7F74B677ACAC6889316AB2013BB7BF68C750B55484050CF3842F96EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\prefs.js
- Size 6KB
- SHA256 2cb4dd09a749417ebf51c6b15e3404ac94cb48ec1c702c3445e898868375d949
- MD5 795b286ea61de3bb7070f0a2101f5572
- SHA1 03e0b924a17d4f7353b06d0c7f15ee6fe0cf20b3
- SHA512 7f2715d144214fd213df4eea7837c6d4198a7035fefab411f1b80371798cf2390cd8d7b429f212cd38622013e9ef6f47fd85a150df021c24f3ed31af22588722
- SSDEEP 96:xHIUTUPqGqgzfJlr1zSySSlcdv9j0xnfRHXYEyJbBw88H8L4cnrVzzpX:aSRmfJlrvSSFd9QbBw880NX
- TLSH T136E11F7895088F7F74B677ACAC6888316AB2013BB7BF68C750B55484051CF3842F96EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\prefs.js
- Size 7KB
- SHA256 78527e4bee87b769bc4621fcfa444f324674f02f80ae896294d4cb4be2fab7f2
- MD5 1cf74210589d263a91b8ef749e019a7d
- SHA1 daca91ab07377aaa566d14af46c1b8f9eb922d1b
- SHA512 33c443de616441ab1d3439b342a299d7a081ad6eb8bef419ca2f8474e60bbd6f484ba4f3700a90057e98031d270b4ccb8db8912413846c63d372c4a8deceed9c
- SSDEEP 96:xHIpTUCPqGqgzfJKdObzS0SSlcdv9jtInfRHXYEyJbBw88808L4cnrVzzpX:aDCRmfJKduSSL9QbBw88cNX
- TLSH T10DF10D789104CB7F64B677ACAC6449315AB2023BB7BF6CC710B95484450CF3856FA6EB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\sessionstore-backups\recovery.baklz4
- Size 211KB
- SHA256 77014eb0f2c04f12e835656eb14c3cc7aff4de55559c66559fca5ad3439bbe51
- MD5 2dfc9bf767d61b81b4c86eff753d9781
- SHA1 04bb24b4cd02448dc7e3700701ee8deeb649c61f
- SHA512 5f65188b9fafea6bd83fe73935d067c7236e086af44278f67d5085ce4cd4332940e030d6c1507c027344d15e9a4ebffbe5436b6628225853fafb773fd7e0ca03
- SSDEEP 6144:u57jbx6w8dnm1wExfeRP8e0rXbj1LsxxZR:EXF6wwm13YALb0xZR
- TLSH T1A724F1DD5973D8629697980160FF3384DD365C81DD1CB430980077A7AB73AE906BE8AF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\sessionstore-backups\recovery.baklz4
- Size 421KB
- SHA256 46dd3ffec29ee5c5ff7d67d96682b6d769fca7d5c564c573dd862ebdab114761
- MD5 00543e6671f1a9e0629a78849bcf01c6
- SHA1 33ecbe04f5032b0050bd13ffae90e1878fbdf582
- SHA512 1275871f65b510ea8547eb0a2495cd874c9e95a014c166f05f9c31e29fc4942e11a26eba25c027858a578632f53e2a9ecd0c92aa11b7f741c6df2b90c83197f4
- SSDEEP 12288:MXF6wwm13YALb0xZLXF6wwm13YALb0xZC:MXF6tw3YLtXF6tw3YL8
- TLSH T19294F1DD5973D8529697A80160FF33849D365C81ED1CB430D80077A7AB73AE906BE8AF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\storage\default\https+++ai.superbulletstudios.com\idb\3619099707vealluiddoamt-es-cbir.sqlite
- Size 48KB
- SHA256 942f25a850ae907ef22ae6e064d1c19839231b998c7d78f08bd5727886676c4a
- MD5 9e46d44dfbc2b9967e2d75ec9ae79fb6
- SHA1 cf2a8a8df9e963c1fa4520c40b7cfe87b7583c24
- SHA512 5748a7eb8b2751dc1a5f037c3f9d8dc8b9a1d423f3f75ae68d785339e1e20246f49acbfc311b991d9203c0407e3b665a8dbd63c3145b3c272e269f466b2fe013
- SSDEEP 48:TiaOA65g7LV6CM5znpgBlizb5pxVgnO9zxV+LU7mY2wzY5QcEVdyEkuA9CBeG:Oa16S6CKnqlizbxV+2xVeU7X2B0NdBt
- TLSH T1A4238E8E3F07F511C53AB0B178A08D51FC5E321D07222AD669D0DAE4C8F211AEE5F9B6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Code Cache\js\index
- Size 24B
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Code Cache\js\index-dir\the-real-index
- Size 48B
- SHA256 aa1e0ade25b17b5d22168d8c82790fdf03c5ca2ee2f9558a27bded96aab2d0f6
- MD5 4a57bc32444093fcdf4952494f6a3593
- SHA1 fea9d603cb92ecc143c3134167002c7e3d547801
- SHA512 54096a9e6d10499e4b2ec38c7e2801e162dd61fa3892ee35ccce8a4936d67a7c8a0fa30e82ff8eb33c3e69f826979536cc9321f9d374f9aae1d3440562f56d99
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Code Cache\wasm\index-dir\the-real-index
- Size 48B
- SHA256 68522ac8b46f5c865f77ec64130b560c3c7e1d34782c75ebd73fe594d1cd2dad
- MD5 4b13ad706f3cbbacd2fe263666688b05
- SHA1 c9478c16d93a20896780a2860c9ce3e3d329843a
- SHA512 cff17aa66f8768a0790f3dd5ccfd3bde12db9b8deee4fb531b390aa62c4bf395a454bc1337dffeafdde6ebbf5fd3ae15f9ad0cac3c2d38169bf9220106b61109
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\superbullet-ai\DawnWebGPUCache\index
- Size 256KB
- SHA256 a1bf032a1803021132adac11a41ba2c2f5366e9410890e56725158be85267af7
- MD5 0826c289e0ef63da9e6c8aa440dc4794
- SHA1 45e64dfbc6796d09429ccf165d97217b7c85253e
- SHA512 98eb6f657debb69d175d7c9d56d2bbd9b99256ad063427990bb320349cc704e1bf71a770e5f30e6c681eed1d5d2bb21f5896453374ec164a715e4b44af5e5050
- SSDEEP 3:LsOllllklkXl1QUil:LsUlP1Qn
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_1
- Size 264KB
- SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
- MD5 f50f89a0a91564d0b8a211f8921aa7de
- SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
- SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
- SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\index
- Size 256KB
- SHA256 a22287e7ec6c324de9596a98aa83386e3119df428199d235b60a831f202ef580
- MD5 262f034280a8c1d702aa6fe23c4bfd9c
- SHA1 0e657340710305c7bc589a71ea29fcd4d2d46c9a
- SHA512 1af4b2b1562eeb7625e6f362c43cc637ff987319dd9f829213fed7e42724dc84b4f2ff0872a493f783c099c861655c7a52aa2fb05557a7194c8b1f0b24027795
- SSDEEP 3:LsOllllklkXlSt:LsUlPS
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Local State
- Size 434B
- SHA256 129ca2fd8b20fd8eac8dd8700c679edee8d4fa86c3fb781f7b91087b2567468c
- MD5 9159f7b17494f36d20cbef6590b779d6
- SHA1 9e8f90e1329a0cf0895294109a88eaf9f42707df
- SHA512 d9eb376bc479fba55eec4e0e4f4df1cb1b9e40eb438c4476dc026218f8d2dd8d828e0acf3fc91d7b03edb0d5e1d211031e1eee81989d933993bf0c1f4b1904cd
- TLSH T11FE023F630D26C3AB5194995141370020D44117B49197B82F8980321C4E3CC1BA0CC51
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Local Storage\leveldb\LOG
- Size 259B
- SHA256 cff5c15525466458b31afcbefb5092521e2b142e3ac034ed4f43605794169a75
- MD5 d3589c3b32c12a40e3d4f3f5f5a374f3
- SHA1 21ac1cd8eb4d3958c2147ef2a43dec86dc366e66
- SHA512 da358bbcb3d6602ce38eb80551c8abcf6b587b832c51ee0ca253b977d1e5780d641cd60fa46263d1d840238abdb52c339c8347c744a427e50a9e7f8ec8f222d5
- TLSH T19CD02B2141EEC71C8355C1DF9A767BCCCF7436047ACC734D4E81E049305400C8A00882
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Network\Network Persistent State
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Preferences
- Size 93B
- SHA256 529b6595a4727a6b2d6cc154ae51f426216c01fc7fda02de2460abfb3de118a4
- MD5 322f01bb491180333c338526d93f115a
- SHA1 554d5e43d5e46774b8f2a6b3682243a289927754
- SHA512 69f8e980f44b1465cee8c0485598fa00be163db0fe88598e45ab2f817f9bea36a2b70dbb9d25d5214174ea9c198b9641bb3d5a86c18b1a4ea4493c00e2e95eb2
- TLSH T103B01253B810A0324B1B09E5000BC94F2CBE00340E475A0510D4F39D492DD4D088702B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Session Storage\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Session Storage\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\Downloads\SuperbulletAI 0.3.98.exe:Zone.Identifier
- Size 180B
- SHA256 0e0d135f88ddd98ba5249b40e764f938a607eb0d61a2b42d10accf9f8f354cf4
- MD5 7670d43091356601567eb9857dada3f5
- SHA1 666713bc9c8185f2dbe02d4bfbcb1faad67430f5
- SHA512 efe779272ecff75d99cc9e0ab5f092a6dc6b4f57e156a82847163f79a3f1bcd861fa0b0615c623a72365d8574365e2692e821af3b0e3988db1da91532a5a8545
- TLSH T1C0C08CBFB306C004B73011FE2A9BB6F8E97ABC8C4D49C3C4EDD164475A5086691DEE62
- MD5 SHA1 SHA512 TLSH