Analysis

  • user interaction
    yes
  • max time kernel
    143s
  • max time network
    127s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    16/09/2026, 15:52

General

  • Target
    https://ai.superbulletstudios.com/faq
  • Sample260916-ta2jbasemb

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Executes dropped EXE 13 IoCs
  • Loads dropped DLL 17 IoCs
  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 28 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 19 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 22 IoCs
  • Suspicious use of SetWindowsHookEx 13 IoCs
  • Suspicious use of WriteProcessMemory 63 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url "https://ai.superbulletstudios.com/faq"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4760
    • C:\Program Files\Mozilla Firefox\firefox.exe
      "C:\Program Files\Mozilla Firefox\firefox.exe" -osint -url https://ai.superbulletstudios.com/faq
      2⤵
      • Downloads MZ/PE file
      • Subvert Trust Controls: Mark-of-the-Web Bypass
      • Checks processor information in registry
      • Modifies registry class
      • NTFS ADS
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3336
      • C:\Program Files\Mozilla Firefox\firefox.exe
        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1968 -prefsLen 27097 -prefMapHandle 1972 -prefMapSize 270279 -ipcHandle 2044 -initialChannelId {1aeec974-2e22-4f72-ab8b-069041d785df} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
        3⤵
          PID:1004
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2444 -prefsLen 27133 -prefMapHandle 2448 -prefMapSize 270279 -ipcHandle 2136 -initialChannelId {ccbb4aaf-2848-4068-8c3e-58962827345f} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
          3⤵
          • Checks processor information in registry
          PID:3080
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3888 -prefsLen 25213 -prefMapHandle 3892 -prefMapSize 270279 -jsInitHandle 3896 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3904 -initialChannelId {7c09dc09-1e43-4b0b-9cbf-a436d1940157} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
          3⤵
          • Checks processor information in registry
          PID:1252
        • C:\Program Files\Mozilla Firefox\firefox.exe
          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 4040 -prefsLen 27323 -prefMapHandle 4044 -prefMapSize 270279 -ipcHandle 4152 -initialChannelId {641adc63-b35a-4dee-a757-a85c4755d80e} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
          3⤵
            PID:4916
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4448 -prefsLen 34822 -prefMapHandle 4452 -prefMapSize 270279 -jsInitHandle 4456 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4464 -initialChannelId {b2cd380c-22d2-43c4-bf5a-b8e6ea434c95} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
            3⤵
            • Checks processor information in registry
            PID:480
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 5032 -prefsLen 35010 -prefMapHandle 5036 -prefMapSize 270279 -ipcHandle 5044 -initialChannelId {31367ac2-d4ad-4d27-a051-8eae0a352f53} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
            3⤵
            • Checks processor information in registry
            PID:3200
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5624 -prefsLen 32952 -prefMapHandle 5628 -prefMapSize 270279 -jsInitHandle 5632 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5640 -initialChannelId {e6fc2f5c-1772-4b0e-b6f0-7d411ee67fd6} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
            3⤵
            • Checks processor information in registry
            PID:4960
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5812 -prefsLen 32952 -prefMapHandle 5816 -prefMapSize 270279 -jsInitHandle 5820 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5828 -initialChannelId {bbf065dd-e4a5-42d8-b267-645e1ff8caba} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
            3⤵
            • Checks processor information in registry
            PID:2128
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6000 -prefsLen 32952 -prefMapHandle 6004 -prefMapSize 270279 -jsInitHandle 6008 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6016 -initialChannelId {9a2827c1-933f-455f-b911-4260fba58b7e} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
            3⤵
            • Checks processor information in registry
            PID:4104
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6016 -prefsLen 32952 -prefMapHandle 6332 -prefMapSize 270279 -jsInitHandle 6456 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 2796 -initialChannelId {f3ace380-eb6d-47e4-bfab-09792646279d} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
            3⤵
            • Checks processor information in registry
            PID:3424
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 1 -prefsHandle 6268 -prefsLen 35079 -prefMapHandle 6384 -prefMapSize 270279 -ipcHandle 6504 -initialChannelId {4133e57f-69f8-4423-9d35-2fc83e7db4af} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 utility
            3⤵
            • Checks processor information in registry
            PID:3992
          • C:\Program Files\Mozilla Firefox\firefox.exe
            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 2 -prefsHandle 5656 -prefsLen 35119 -prefMapHandle 5668 -prefMapSize 270279 -ipcHandle 5628 -initialChannelId {061178e6-6ed1-4454-9614-278c869f1e04} -parentPid 3336 -crashReporter "\\.\pipe\gecko-crash-server-pipe.3336" -appDir "C:\Program Files\Mozilla Firefox\browser" - 12 utility
            3⤵
            • Checks processor information in registry
            PID:1772
      • C:\Windows\System32\rundll32.exe
        C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
        1⤵
          PID:3280
        • C:\Users\Admin\Downloads\SuperbulletAI 0.3.98.exe
          "C:\Users\Admin\Downloads\SuperbulletAI 0.3.98.exe"
          1⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:5024
          • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
            "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
            2⤵
            • Executes dropped EXE
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of WriteProcessMemory
            PID:2092
            • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\Squirrel.exe
              "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\Squirrel.exe" --updateSelf=C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
              3⤵
              • Executes dropped EXE
              PID:2940
            • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe
              "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe" --squirrel-install 0.3.98
              3⤵
              • Executes dropped EXE
              • Modifies registry class
              • Suspicious use of WriteProcessMemory
              PID:236
              • C:\Users\Admin\AppData\Local\SuperbulletAI\Update.exe
                C:\Users\Admin\AppData\Local\SuperbulletAI\Update.exe --createShortcut=SuperbulletAI.exe
                4⤵
                • Executes dropped EXE
                PID:4588
              • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe
                "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1976,i,4334212383212583756,5726133740137066955,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1972 /prefetch:2
                4⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:4016
              • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe
                "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --field-trial-handle=1976,i,4334212383212583756,5726133740137066955,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2220 /prefetch:11
                4⤵
                • Executes dropped EXE
                PID:4576
              • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe
                "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --app-user-model-id=com.squirrel.SuperbulletAI.SuperbulletAI --app-path="C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1976,i,4334212383212583756,5726133740137066955,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2708 /prefetch:1
                4⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:848
            • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe
              "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe" --squirrel-firstrun
              3⤵
              • Executes dropped EXE
              • Modifies registry class
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:2864
              • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe
                "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --field-trial-handle=2248,i,5635482360979077646,8058158980202202085,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2280 /prefetch:11
                4⤵
                • Executes dropped EXE
                PID:1988
              • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe
                "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2248,i,5635482360979077646,8058158980202202085,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2244 /prefetch:2
                4⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:4780
              • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe
                "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --app-user-model-id=com.squirrel.SuperbulletAI.SuperbulletAI --app-path="C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1789573391170871 --launch-time-ticks=654257904 --field-trial-handle=2248,i,5635482360979077646,8058158980202202085,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2620 /prefetch:1
                4⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:1252
              • C:\Windows\system32\cmd.exe
                C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"
                4⤵
                • Executes a command shell one-liner
                • Suspicious use of WriteProcessMemory
                PID:1468
                • C:\Windows\System32\reg.exe
                  C:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid
                  5⤵
                    PID:2840
                • C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe
                  "C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\SuperbulletAI.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\superbullet-ai" --app-user-model-id=com.squirrel.SuperbulletAI.SuperbulletAI --app-path="C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar" --no-sandbox --no-zygote --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1789573391170871 --launch-time-ticks=655184711 --field-trial-handle=2248,i,5635482360979077646,8058158980202202085,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2796 /prefetch:1
                  4⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:2456

          Network

                MITRE ATT&CK Enterprise v16

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                5E43012191E7B1F510ACD5BF039D8BF1B9A277B2

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0dqsscpq.default-release\cache2\entries\5E43012191E7B1F510ACD5BF039D8BF1B9A277B2
                • Size 16KB
                • SHA256 5f2117ec47d8c9e3f07f3e11f1b6d7ae6dbca8d283ebbe30940dbb156559d8e2
                • MD5 SHA1 SHA512 SSDEEP TLSH

                AABAB860D2646FDCEACF8AAC0CD412654CE5E4C0

                • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\0dqsscpq.default-release\cache2\entries\AABAB860D2646FDCEACF8AAC0CD412654CE5E4C0
                • Size 16KB
                • SHA256 e0250a9dd03714f6b3ff4688732f61349e410d5290bd17da548d434c9dd0eb38
                • MD5 SHA1 SHA512 SSDEEP TLSH

                RELEASES

                • Path C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES
                • Size 85B
                • SHA256 fe7132c61a84e736b0c76122ccf3058c2b87509cd1c1ce7239595ee52342697f
                • MD5 SHA1 SHA512 TLSH

                Update.exe

                • Path C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
                • Size 1.8MB
                • SHA256 c341ecdf8e029e8202ce342f28150a90e0fb809d5cbb2c5bcb030513499f496a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                background.gif

                • Path C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif
                • Size 43KB
                • SHA256 ce636d201ef86ffbf4ee8c8762b4d9dc255be9d5f490d0a22e36fe0c938f7244
                • MD5 SHA1 SHA512 SSDEEP TLSH

                SuperbulletAI.exe

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\SuperbulletAI.exe
                • Size 666KB
                • SHA256 062a4fee09727251ebe485ea01a6116dcc28bad29c667742c9cab5cdc00d3eaf
                • MD5 SHA1 SHA512 SSDEEP TLSH

                D3DCompiler_47.dll

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\D3DCompiler_47.dll
                • Size 4.5MB
                • SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
                • MD5 SHA1 SHA512 SSDEEP TLSH

                chrome_100_percent.pak

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\chrome_100_percent.pak
                • Size 112KB
                • SHA256 45d14a4278b1e152b363197401a5604aa5a3cee6512a6b52df978038fa521a0f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                chrome_200_percent.pak

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\chrome_200_percent.pak
                • Size 182KB
                • SHA256 aafc61b89748d17fcbc9fecd9844a77be2c584529a81714c98e0c4d453ea9496
                • MD5 SHA1 SHA512 SSDEEP TLSH

                dxcompiler.dll

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\dxcompiler.dll
                • Size 24.9MB
                • SHA256 d59f53e6c8a0a02003c414ce3ca11f973b31809008f0c94cf3c2559687a5e6c7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                dxil.dll

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\dxil.dll
                • Size 1.4MB
                • SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                ffmpeg.dll

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\ffmpeg.dll
                • Size 2.9MB
                • SHA256 f3705d563d2d8f93a0d497233c01506d5e4ecc66476022588d422d7509694bca
                • MD5 SHA1 SHA512 SSDEEP TLSH

                icudtl.dat

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\icudtl.dat
                • Size 10.0MB
                • SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
                • MD5 SHA1 SHA512 SSDEEP TLSH

                libEGL.dll

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\libEGL.dll
                • Size 492KB
                • SHA256 df2581628fdc5e9ce1a7faf61e1c685730802e31ef828f2e6eb6aecbfa00b02a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                libGLESv2.dll

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\libGLESv2.dll
                • Size 8.0MB
                • SHA256 08888aafcffd55b349e528f9979c335276ad0fd8c6ce92448179f97557c03ea1
                • MD5 SHA1 SHA512 SSDEEP TLSH

                en-US.pak

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\locales\en-US.pak
                • Size 524KB
                • SHA256 bfa782c9efae2c9cd2c0214dae1bbb3c259d4d4c38d920b06677b9c4cf4f813d
                • MD5 SHA1 SHA512 SSDEEP TLSH

                resources.pak

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources.pak
                • Size 6.0MB
                • SHA256 40af4117b0bd35da141aa599255b879013bfda5968401feccb5c43cb372cdae6
                • MD5 SHA1 SHA512 SSDEEP TLSH

                superbulletai-logo.ico

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\assets\superbullet-ai\superbulletai-logo.ico
                • Size 400KB
                • SHA256 003f9aa0828663260db84974db1e9ddb4da22266f1cf388b6d134ce8c5f4a1be
                • MD5 SHA1 SHA512 SSDEEP TLSH

                Interfaces.js

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\client-s3\dist-es\pagination\Interfaces.js
                • Size 11B
                • SHA256 8e609bb71c20b858c77f0e9f90bb1319db8477b13f9f965f1a1e18524bf50881
                • MD5 SHA1 SHA512

                LICENSE

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\credential-provider-process\LICENSE
                • Size 11KB
                • SHA256 2ef1e48ea743d9c82313e6887858f7c1feaddd636f5a3f43926aab0143e67ebd
                • MD5 SHA1 SHA512 SSDEEP TLSH

                httpAuthExtensionConfiguration.js

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\nested-clients\dist-es\submodules\sso\auth\httpAuthExtensionConfiguration.js
                • Size 1KB
                • SHA256 331902cc5df5060ac9644261de8711ff641d6b91e60b5fcf77d2facc441c8cf6
                • MD5 SHA1 SHA512 TLSH

                runtimeConfig.native.js

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\nested-clients\dist-es\submodules\sso\runtimeConfig.native.js
                • Size 297B
                • SHA256 c0c73f0322ae95adce92f60f138a0e54cc9d686a4ef04c27a0fae1902f47a969
                • MD5 SHA1 SHA512 TLSH

                runtimeExtensions.js

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@aws-sdk\nested-clients\dist-es\submodules\sso\runtimeExtensions.js
                • Size 1KB
                • SHA256 91acbc1e819f62b25b16ae8d717eab8eb748fedc63a656ffcf6ae353cd0b5dbc
                • MD5 SHA1 SHA512 TLSH

                type-utils.cjs

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@langchain\core\dist\types\type-utils.cjs
                • Size 77B
                • SHA256 d43aa81f5bc89faa359e0f97c814ba25155591ff078fbb9bfd40f8c7c9683230
                • MD5 SHA1 SHA512 TLSH

                index.d.cts

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@langchain\textsplitters\index.d.cts
                • Size 31B
                • SHA256 c98517664512e9f8bc990db01c296a4d667a53cef785bd5cbc4c4298dbded589
                • MD5 SHA1 SHA512

                LICENSE

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@opentelemetry\api\LICENSE
                • Size 11KB
                • SHA256 c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4
                • MD5 SHA1 SHA512 SSDEEP TLSH

                LICENSE

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@protobufjs\fetch\LICENSE
                • Size 1KB
                • SHA256 a67b34a24a5daddcce46aea68c5004e4442bbfb63690329fa607bf4de4269794
                • MD5 SHA1 SHA512 TLSH

                LICENSE

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@smithy\core\LICENSE
                • Size 11KB
                • SHA256 07364a5f7d0177a59a05a0002187431f8f899320983c0dc049d72df015e8064c
                • MD5 SHA1 SHA512 SSDEEP TLSH

                LICENSE

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\@types\triple-beam\LICENSE
                • Size 1KB
                • SHA256 c2cfccb812fe482101a8f04597dfc5a9991a6b2748266c47ac91b6a5aae15383
                • MD5 SHA1 SHA512 TLSH

                license

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\cliui\node_modules\ansi-styles\license
                • Size 1KB
                • SHA256 48da2f39e100d4085767e94966b43f4fa95ff6a0698fba57ed460914e35f94a0
                • MD5 SHA1 SHA512 TLSH

                LICENSE

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\es-object-atoms\LICENSE
                • Size 1KB
                • SHA256 5e325595b4ea8cfec3802f545b1def5d7b73e4a5b8e9ba63e32a320f67732292
                • MD5 SHA1 SHA512 TLSH

                .nycrc

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\get-intrinsic\.nycrc
                • Size 139B
                • SHA256 997785c50b0773e5e18bf15550fbf57823c634fefe623cd37b3c83696402ad0a
                • MD5 SHA1 SHA512 TLSH

                license

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\is-stream\license
                • Size 1KB
                • SHA256 5c932d88256b4ab958f64a856fa48e8bd1f55bc1d96b8149c65689e0c61789d3
                • MD5 SHA1 SHA512 TLSH

                package.json

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\long\umd\package.json
                • Size 25B
                • SHA256 8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a
                • MD5 SHA1 SHA512

                package.json

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\lru-cache\dist\mjs\package.json
                • Size 23B
                • SHA256 3ca9d4afd21425087cf31893b8f9f63c81b0b8408db5e343ca76e5f8aa26ab9a
                • MD5 SHA1 SHA512

                LICENSE

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\semver\LICENSE
                • Size 765B
                • SHA256 4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b
                • MD5 SHA1 SHA512 TLSH

                .nycrc

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\side-channel-list\.nycrc
                • Size 216B
                • SHA256 948366fea3b423a46366326d0bb2e54b08abd1cf0b243678ba6625740c40da5a
                • MD5 SHA1 SHA512 TLSH

                tsconfig.json

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\side-channel-weakmap\tsconfig.json
                • Size 116B
                • SHA256 6346ee4c020f341387588479dd83740a65ab902a462b8c6b3b8bf51f032c6795
                • MD5 SHA1 SHA512 TLSH

                alloc.h

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-go\src\tree_sitter\alloc.h
                • Size 958B
                • SHA256 253b44a7b4313a7afd0c505c2fc6e7ce4b8e78955ebf4be3ea000532ec060673
                • MD5 SHA1 SHA512 TLSH

                array.h

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-go\src\tree_sitter\array.h
                • Size 10KB
                • SHA256 4ff743903dc46f5db6aa54f31c6b4d160a8a9779e5b2ab1ee59ae7ebcd850ea1
                • MD5 SHA1 SHA512 SSDEEP TLSH

                index.js

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-java\bindings\node\index.js
                • Size 201B
                • SHA256 609bdf22b8fd183025b3c24e8587f6211d50358e8f2e4c526b9217349ed9dbc0
                • MD5 SHA1 SHA512 TLSH

                parser.h

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\tree-sitter-typescript\typescript\src\tree_sitter\parser.h
                • Size 6KB
                • SHA256 a3eb18ef034b3f4255b965a26caa276f9cfe13a79573b402f1a12dc5018052aa
                • MD5 SHA1 SHA512 SSDEEP TLSH

                EmbedResponse.js

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\voyageai\api\types\EmbedResponse.js
                • Size 150B
                • SHA256 b85b16b647b590d06a88c90d15257954cd8cad804092c506939fd451f71fcb86
                • MD5 SHA1 SHA512 TLSH

                LICENSE-MIT.txt

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\wrap-ansi-cjs\node_modules\emoji-regex\LICENSE-MIT.txt
                • Size 1KB
                • SHA256 483acb265f182907d1caf6cff9c16c96f31325ed23792832cc5d8b12d5f88c8a
                • MD5 SHA1 SHA512 TLSH

                index.js

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\wrap-ansi-cjs\node_modules\emoji-regex\es2015\index.js
                • Size 10KB
                • SHA256 8718dea4d28647912918dba60545890dc10ae672bfb186b6ec0af3fc5e826137
                • MD5 SHA1 SHA512 SSDEEP TLSH

                index.js

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\wrap-ansi-cjs\node_modules\emoji-regex\index.js
                • Size 10KB
                • SHA256 c56978800e47f095cfbfe96712b5e78d150d1f62e32bb4943675213fce481ef0
                • MD5 SHA1 SHA512 SSDEEP TLSH

                index.js

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\ansi-regex\index.js
                • Size 350B
                • SHA256 c92312790eb1f246b7c4c1fe9c1247b15441bbca3c6cb64d167beefc45302753
                • MD5 SHA1 SHA512 TLSH

                package.json

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\ansi-regex\package.json
                • Size 470B
                • SHA256 93fcfd1b014b9bd7f31b3f35b24a5a479839b6f141c95f62b73a1829bf112ad2
                • MD5 SHA1 SHA512 TLSH

                readme.md

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\ansi-regex\readme.md
                • Size 2KB
                • SHA256 3ebc0f845b1bab50600f823716040fbec355d3c356a3a76b8eb9eb593b6c7a3a
                • MD5 SHA1 SHA512 TLSH

                index.js

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\strip-ansi\index.js
                • Size 154B
                • SHA256 bf37cd692bf030c2ec270945bc26aa8b19ad379fa5916f12304758f709ab0978
                • MD5 SHA1 SHA512 TLSH

                package.json

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\strip-ansi\package.json
                • Size 511B
                • SHA256 4518dec682055621a82c1480a6c33479a7b6ae7d17019ccc4799b86e9be4d4d7
                • MD5 SHA1 SHA512 TLSH

                readme.md

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\yargs\node_modules\strip-ansi\readme.md
                • Size 1KB
                • SHA256 cb384db30337ecec75919b4c69aab67358b4f4e384406956687894b6d777413b
                • MD5 SHA1 SHA512 TLSH

                cs.d.cts

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\code-context-subprocess\node_modules\zod\v4\locales\cs.d.cts
                • Size 122B
                • SHA256 b42d3651103a532f7492e719a828647af97306b2356ae757ebb7f17f4a8c41e5
                • MD5 SHA1 SHA512 TLSH

                p50k_edit.d.ts

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\resources\app.asar.unpacked\node_modules\@dqbd\tiktoken\encoders\p50k_edit.d.ts
                • Size 133B
                • SHA256 7d0e8a9e6b76c79a97603d92f3934299a86b6c51c9e9a4fa4c6fb78a99bf596f
                • MD5 SHA1 SHA512 TLSH

                v8_context_snapshot.bin

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\v8_context_snapshot.bin
                • Size 758KB
                • SHA256 1fa1cdd08423809344fe15fac2d9d1ec604cc3ea5af4b944d89a51b1e98c8665
                • MD5 SHA1 SHA512 SSDEEP TLSH

                vk_swiftshader.dll

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\vk_swiftshader.dll
                • Size 5.4MB
                • SHA256 597ca957c8aaa18911c719f7973dc1628c02e6a4319f1eda3a15134a403d1d68
                • MD5 SHA1 SHA512 SSDEEP TLSH

                vk_swiftshader_icd.json

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\vk_swiftshader_icd.json
                • Size 106B
                • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                • MD5 SHA1 SHA512 TLSH

                vulkan-1.dll

                • Path C:\Users\Admin\AppData\Local\SuperbulletAI\app-0.3.98\vulkan-1.dll
                • Size 922KB
                • SHA256 3500028f57bb570f75b6bef56b13fb788da0ffb8d0fe1ec61c058c839be19eb8
                • MD5 SHA1 SHA512 SSDEEP TLSH

                tmpaddon

                • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                • Size 11KB
                • SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
                • MD5 SHA1 SHA512 SSDEEP TLSH

                tmpaddon

                • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                • Size 502KB
                • SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
                • MD5 SHA1 SHA512 SSDEEP TLSH

                default.dic

                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                • Size 2B
                • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                • MD5 SHA1 SHA512

                data.safe.tmp

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\db\data.safe.tmp
                • Size 6KB
                • SHA256 bd3231a6eb1c8d13a9273149059ebcb18a3c067e9d4d3e55db24461e1a16c9b8
                • MD5 SHA1 SHA512 SSDEEP TLSH

                data.safe.tmp

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\db\data.safe.tmp
                • Size 6KB
                • SHA256 c755c5392826d32b820b6f7c9b7f1c175eef4e6998ca6333388c11d2ca21638b
                • MD5 SHA1 SHA512 SSDEEP TLSH

                data.safe.tmp

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\db\data.safe.tmp
                • Size 7KB
                • SHA256 02c45729d1a52d5d88eab5c338bdadbed3fbe09a8cf292de27a3d54683683ddd
                • MD5 SHA1 SHA512 SSDEEP TLSH

                data.safe.tmp

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\db\data.safe.tmp
                • Size 76KB
                • SHA256 505fbf76d9ad791f6cd86770f446f56c6c6f1600ca16cd34f12ca05ccc0870a7
                • MD5 SHA1 SHA512 SSDEEP TLSH

                data.safe.tmp

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\db\data.safe.tmp
                • Size 49KB
                • SHA256 ec27d38f3e1188fed5ca056b9a30e05d7bcef94a1b896395939d43c57bff200e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                events

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\events\events
                • Size 1KB
                • SHA256 b30d9730b0e0e862a981993a7a11cff9c56ba62230ee9895978daeee5ff8e279
                • MD5 SHA1 SHA512 TLSH

                0423274b-a93f-4377-8931-372a39a17409

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\pending_pings\0423274b-a93f-4377-8931-372a39a17409
                • Size 14KB
                • SHA256 aa0f538d123ded2b70d1a36c5c2804a94df7483852f8f8fa4f041b035ce207a3
                • MD5 SHA1 SHA512 SSDEEP TLSH

                0524358a-7cae-4b77-a6d5-a38c11367bab

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\pending_pings\0524358a-7cae-4b77-a6d5-a38c11367bab
                • Size 886B
                • SHA256 bf65b4a1cb482864bc70e9c33f0a08d0a5602e318d175296e08f3559ff9b3717
                • MD5 SHA1 SHA512 TLSH

                1fb17db2-097e-48d5-a420-c0b10aca2dc6

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\pending_pings\1fb17db2-097e-48d5-a420-c0b10aca2dc6
                • Size 2KB
                • SHA256 8f8390e1a55dcbf86c9d24788b5b5ee1b301803b4be2b541d1e45e2bf5e879b1
                • MD5 SHA1 SHA512 TLSH

                33eb6c68-1185-4eca-a8ae-7dd46980c9ab

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\pending_pings\33eb6c68-1185-4eca-a8ae-7dd46980c9ab
                • Size 235B
                • SHA256 c2187c3b9260c1885400e89675dd829d2928447b34cb0f22c0e13659847def2f
                • MD5 SHA1 SHA512 TLSH

                4a984a6e-48bb-4278-90ab-5e659bee47bc

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\pending_pings\4a984a6e-48bb-4278-90ab-5e659bee47bc
                • Size 883B
                • SHA256 846da3e656574ef8919451425593efdcb3c39ae9f0f1c8080e076b1c0d6a8a36
                • MD5 SHA1 SHA512 TLSH

                78bbde3f-050b-42a9-a0b0-75e2034dc33c

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\pending_pings\78bbde3f-050b-42a9-a0b0-75e2034dc33c
                • Size 16KB
                • SHA256 2a56d417299758b38546ea2fdd861c6b96da3ab4718606a4d0f83215c49ca5b4
                • MD5 SHA1 SHA512 SSDEEP TLSH

                eddb06f6-00d6-4729-93e7-aad04e4e3684

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\datareporting\glean\pending_pings\eddb06f6-00d6-4729-93e7-aad04e4e3684
                • Size 235B
                • SHA256 c87ce8c94fa01b581152f9606c01eea4d86a1f92971b803457eda8584c899ab3
                • MD5 SHA1 SHA512 TLSH

                extensions.json

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\extensions.json
                • Size 16KB
                • SHA256 7263b75106f94dec5d6fc5e505beb4c18cb35960b2c613b6c2f5d37aa1a4674e
                • MD5 SHA1 SHA512 SSDEEP TLSH

                gmpopenh264.dll

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
                • Size 1.1MB
                • SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
                • MD5 SHA1 SHA512 SSDEEP TLSH

                gmpopenh264.info

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
                • Size 116B
                • SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
                • MD5 SHA1 SHA512 TLSH

                manifest.json

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
                • Size 1002B
                • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                • MD5 SHA1 SHA512 TLSH

                widevinecdm.dll

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
                • Size 21.6MB
                • SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
                • MD5 SHA1 SHA512 SSDEEP TLSH

                prefs-1.js

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\prefs-1.js
                • Size 6KB
                • SHA256 a8a73d02940adf4ed8dff8192504afe6252c91642aeb0ea54449954fdea3000f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                prefs-1.js

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\prefs-1.js
                • Size 6KB
                • SHA256 8f0b5877a63bf3ed852feace114301c341ef6624cf6e0c3d264e075f057ec1a9
                • MD5 SHA1 SHA512 SSDEEP TLSH

                prefs-1.js

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\prefs-1.js
                • Size 7KB
                • SHA256 887881984e0bd3259eb65a4582c7069c52a31d69824b08c1e0f907280f97553f
                • MD5 SHA1 SHA512 SSDEEP TLSH

                prefs-1.js

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\prefs-1.js
                • Size 10KB
                • SHA256 ee7026455efbba863204e162d3f5fee0a7589833eda18f246194f10e039cf378
                • MD5 SHA1 SHA512 SSDEEP TLSH

                prefs-1.js

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\prefs-1.js
                • Size 6KB
                • SHA256 c004620070ccf78b2947f9ad9f869b44dee7b317fffdb37e039e08495f3b15e0
                • MD5 SHA1 SHA512 SSDEEP TLSH

                prefs.js

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\prefs.js
                • Size 6KB
                • SHA256 2cb4dd09a749417ebf51c6b15e3404ac94cb48ec1c702c3445e898868375d949
                • MD5 SHA1 SHA512 SSDEEP TLSH

                prefs.js

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\prefs.js
                • Size 7KB
                • SHA256 78527e4bee87b769bc4621fcfa444f324674f02f80ae896294d4cb4be2fab7f2
                • MD5 SHA1 SHA512 SSDEEP TLSH

                recovery.baklz4

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\sessionstore-backups\recovery.baklz4
                • Size 211KB
                • SHA256 77014eb0f2c04f12e835656eb14c3cc7aff4de55559c66559fca5ad3439bbe51
                • MD5 SHA1 SHA512 SSDEEP TLSH

                recovery.baklz4

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\sessionstore-backups\recovery.baklz4
                • Size 421KB
                • SHA256 46dd3ffec29ee5c5ff7d67d96682b6d769fca7d5c564c573dd862ebdab114761
                • MD5 SHA1 SHA512 SSDEEP TLSH

                3619099707vealluiddoamt-es-cbir.sqlite

                • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\0dqsscpq.default-release\storage\default\https+++ai.superbulletstudios.com\idb\3619099707vealluiddoamt-es-cbir.sqlite
                • Size 48KB
                • SHA256 942f25a850ae907ef22ae6e064d1c19839231b998c7d78f08bd5727886676c4a
                • MD5 SHA1 SHA512 SSDEEP TLSH

                index

                • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Code Cache\js\index
                • Size 24B
                • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                • MD5 SHA1 SHA512

                the-real-index

                • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Code Cache\js\index-dir\the-real-index
                • Size 48B
                • SHA256 aa1e0ade25b17b5d22168d8c82790fdf03c5ca2ee2f9558a27bded96aab2d0f6
                • MD5 SHA1 SHA512

                the-real-index

                • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Code Cache\wasm\index-dir\the-real-index
                • Size 48B
                • SHA256 68522ac8b46f5c865f77ec64130b560c3c7e1d34782c75ebd73fe594d1cd2dad
                • MD5 SHA1 SHA512

                index

                • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\DawnWebGPUCache\index
                • Size 256KB
                • SHA256 a1bf032a1803021132adac11a41ba2c2f5366e9410890e56725158be85267af7
                • MD5 SHA1 SHA512 SSDEEP

                data_0

                • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_0
                • Size 8KB
                • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                • MD5 SHA1 SHA512 SSDEEP

                data_1

                • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_1
                • Size 264KB
                • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                • MD5 SHA1 SHA512 SSDEEP

                data_2

                • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_2
                • Size 8KB
                • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                • MD5 SHA1 SHA512 SSDEEP

                data_3

                • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\data_3
                • Size 8KB
                • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                • MD5 SHA1 SHA512 SSDEEP

                index

                • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\GPUCache\index
                • Size 256KB
                • SHA256 a22287e7ec6c324de9596a98aa83386e3119df428199d235b60a831f202ef580
                • MD5 SHA1 SHA512 SSDEEP

                Local State

                • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Local State
                • Size 434B
                • SHA256 129ca2fd8b20fd8eac8dd8700c679edee8d4fa86c3fb781f7b91087b2567468c
                • MD5 SHA1 SHA512 TLSH

                LOG

                • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Local Storage\leveldb\LOG
                • Size 259B
                • SHA256 cff5c15525466458b31afcbefb5092521e2b142e3ac034ed4f43605794169a75
                • MD5 SHA1 SHA512 TLSH

                Network Persistent State

                • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Network\Network Persistent State
                • Size 111B
                • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                • MD5 SHA1 SHA512 TLSH

                Preferences

                • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Preferences
                • Size 93B
                • SHA256 529b6595a4727a6b2d6cc154ae51f426216c01fc7fda02de2460abfb3de118a4
                • MD5 SHA1 SHA512 TLSH

                CURRENT

                • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Session Storage\CURRENT
                • Size 16B
                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                • MD5 SHA1 SHA512

                MANIFEST-000001

                • Path C:\Users\Admin\AppData\Roaming\superbullet-ai\Session Storage\MANIFEST-000001
                • Size 41B
                • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                • MD5 SHA1 SHA512

                SuperbulletAI 0.3.98.exe:Zone.Identifier

                • Path C:\Users\Admin\Downloads\SuperbulletAI 0.3.98.exe:Zone.Identifier
                • Size 180B
                • SHA256 0e0d135f88ddd98ba5249b40e764f938a607eb0d61a2b42d10accf9f8f354cf4
                • MD5 SHA1 SHA512 TLSH

                memory/2092-928-0x00000000006E0000-0x00000000008B6000-memory.dmp

                memory/2092-1358-0x0000000021D50000-0x0000000021D5E000-memory.dmp

                memory/2092-1354-0x0000000021D80000-0x0000000021DB8000-memory.dmp

                memory/4588-13179-0x0000000003170000-0x0000000003190000-memory.dmp