e5aa5881a0174ffc08c39203925fe15a606544d342458c8fd3c064c4d000e815

Analysis

max time kernel
129s
max time network
139s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
16/06/2023, 01:39 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

SuperClubPenguin Setup 1.0.0.exe
Size

71.2MB
MD5

a4549724fa90a8a9ba2fc43640517d93
SHA1

0ce2e3ea452fb1773919ca31bdc978b2f4712442
SHA256

e5aa5881a0174ffc08c39203925fe15a606544d342458c8fd3c064c4d000e815
SHA512

7778b7decce0758b4cdad74dca3386b19fbd4ae22d82b36f6cbce7745b1b191bb2b6cceb06ddb26b80a97f326952b2886aa41d44004ef2f12b995804fe07c24e
SSDEEP

1572864:M3b4n3FvdADZl+z0tnt69z444NGzzAZNLvrvyAIC6Of6cG0:Ma3FvdKZEgtMd/GNLDHICp68

Score

7^/10

discovery

Malware Config

Signatures

Checks computer location settings 2 TTPs 4 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\Geo\Nation	SuperClubPenguin.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\Geo\Nation	SuperClubPenguin.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\Geo\Nation	SuperClubPenguin.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000\Control Panel\International\Geo\Nation	SuperClubPenguin.exe

Executes dropped EXE 13 IoCs

pid	Process
1756	SuperClubPenguin.exe
824	SuperClubPenguin.exe
540	SuperClubPenguin.exe
1736	SuperClubPenguin.exe
956	SuperClubPenguin.exe
2012	SuperClubPenguin.exe
1752	SuperClubPenguin.exe
1448	SuperClubPenguin.exe
568	SuperClubPenguin.exe
2320	SuperClubPenguin.exe
2328	SuperClubPenguin.exe
2336	SuperClubPenguin.exe
2344	SuperClubPenguin.exe

Loads dropped DLL 25 IoCs

pid	Process
2020	SuperClubPenguin Setup 1.0.0.exe
2020	SuperClubPenguin Setup 1.0.0.exe
2020	SuperClubPenguin Setup 1.0.0.exe
2020	SuperClubPenguin Setup 1.0.0.exe
2020	SuperClubPenguin Setup 1.0.0.exe
2020	SuperClubPenguin Setup 1.0.0.exe
2020	SuperClubPenguin Setup 1.0.0.exe
2020	SuperClubPenguin Setup 1.0.0.exe
2020	SuperClubPenguin Setup 1.0.0.exe
2020	SuperClubPenguin Setup 1.0.0.exe
2020	SuperClubPenguin Setup 1.0.0.exe
1756	SuperClubPenguin.exe
824	SuperClubPenguin.exe
540	SuperClubPenguin.exe
824	SuperClubPenguin.exe
824	SuperClubPenguin.exe
824	SuperClubPenguin.exe
1736	SuperClubPenguin.exe
956	SuperClubPenguin.exe
2012	SuperClubPenguin.exe
2012	SuperClubPenguin.exe
1752	SuperClubPenguin.exe
1448	SuperClubPenguin.exe
568	SuperClubPenguin.exe
2344	SuperClubPenguin.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000_CLASSES\discord-793827264135430154	SuperClubPenguin.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000_CLASSES\discord-793827264135430154\URL Protocol	SuperClubPenguin.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000_CLASSES\discord-793827264135430154\ = "URL:discord-793827264135430154"	SuperClubPenguin.exe
Key created	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000_CLASSES\discord-793827264135430154\shell\open\command	SuperClubPenguin.exe
Key created	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000_CLASSES\discord-793827264135430154\shell	SuperClubPenguin.exe
Key created	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000_CLASSES\discord-793827264135430154\shell\open	SuperClubPenguin.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1563773381-2037468142-1146002597-1000_CLASSES\discord-793827264135430154\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\superclubpenguin\\SuperClubPenguin.exe\" \"%1\""	SuperClubPenguin.exe

Modifies system certificate store 2 TTPs 5 IoCs

evasion spyware trojan

Install Root Certificate

T1130

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436	SuperClubPenguin.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436\Blob = 04000000010000001000000079e4a9840d7d3a96d7c04fe2434c892e0f0000000100000014000000b34ddd372ed92e8f2abfbb9e20a9d31f204f194b090000000100000034000000303206082b0601050507030106082b0601050507030206082b0601050507030406082b0601050507030306082b0601050507030814000000010000001400000003de503556d14cbb66f0a3e21b1bc397b23dd1550b00000001000000120000004400690067006900430065007200740000001d000000010000001000000059779e39e21a2e3dfced6857ed5c5fd9030000000100000014000000a8985d3a65e5e5c4b2d7d66d40c6dd2fb19c54361900000001000000100000000f3a0527d242de2dc98e5cfcb1e991ee2000000001000000b3030000308203af30820297a0030201020210083be056904246b1a1756ac95991c74a300d06092a864886f70d01010505003061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f74204341301e170d3036313131303030303030305a170d3331313131303030303030305a3061310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d3120301e06035504031317446967694365727420476c6f62616c20526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100e23be11172dea8a4d3a357aa50a28f0b7790c9a2a5ee12ce965b010920cc0193a74e30b753f743c46900579de28d22dd870640008109cece1b83bfdfcd3b7146e2d666c705b37627168f7b9e1e957deeb748a308dad6af7a0c3906657f4a5d1fbc17f8abbeee28d7747f7a78995985686e5c23324bbf4ec0e85a6de370bf7710bffc01f685d9a844105832a97518d5d1a2be47e2276af49a33f84908608bd45fb43a84bfa1aa4a4c7d3ecf4f5f6c765ea04b37919edc22e66dce141a8e6acbfecdb3146417c75b299e32bff2eefad30b42d4abb74132da0cd4eff881d5bb8d583fb51be84928a270da3104ddf7b216f24c0a4e07a8ed4a3d5eb57fa390c3af270203010001a3633061300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e0416041403de503556d14cbb66f0a3e21b1bc397b23dd155301f0603551d2304183016801403de503556d14cbb66f0a3e21b1bc397b23dd155300d06092a864886f70d01010505000382010100cb9c37aa4813120afadd449c4f52b0f4dfae04f5797908a32418fc4b2b84c02db9d5c7fef4c11f58cbb86d9c7a74e79829ab11b5e370a0a1cd4c8899938c9170e2ab0f1cbe93a9ff63d5e40760d3a3bf9d5b09f1d58ee353f48e63fa3fa7dbb466df6266d6d16e418df22db5ea774a9f9d58e22b59c04023ed2d2882453e7954922698e08048a837eff0d6796016deace80ecd6eac4417382f49dae1453e2ab93653cf3a5006f72ee8c457496c612118d504ad783c2c3a806ba7ebaf1514e9d889c1b9386ce2916c8aff64b977255730c01b24a3e1dce9df477cb5b424080530ec2dbd0bbf45bf50b9a9f3eb980112adc888c698345f8d0a3cc6e9d595956dde	SuperClubPenguin.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4	SuperClubPenguin.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob = 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	SuperClubPenguin.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob = 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	SuperClubPenguin.exe

Suspicious behavior: EnumeratesProcesses 9 IoCs

pid	Process
2020	SuperClubPenguin Setup 1.0.0.exe
2020	SuperClubPenguin Setup 1.0.0.exe
2020	SuperClubPenguin Setup 1.0.0.exe
540	SuperClubPenguin.exe
1736	SuperClubPenguin.exe
956	SuperClubPenguin.exe
1752	SuperClubPenguin.exe
1448	SuperClubPenguin.exe
2344	SuperClubPenguin.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeSecurityPrivilege	2020	SuperClubPenguin Setup 1.0.0.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 824	1756	SuperClubPenguin.exe	29
PID 1756 wrote to memory of 540	1756	SuperClubPenguin.exe	30
PID 1756 wrote to memory of 540	1756	SuperClubPenguin.exe	30
PID 1756 wrote to memory of 540	1756	SuperClubPenguin.exe	30
PID 1756 wrote to memory of 540	1756	SuperClubPenguin.exe	30
PID 1756 wrote to memory of 1736	1756	SuperClubPenguin.exe	31
PID 1756 wrote to memory of 1736	1756	SuperClubPenguin.exe	31
PID 1756 wrote to memory of 1736	1756	SuperClubPenguin.exe	31
PID 1756 wrote to memory of 1736	1756	SuperClubPenguin.exe	31
PID 1756 wrote to memory of 956	1756	SuperClubPenguin.exe	32
PID 1756 wrote to memory of 956	1756	SuperClubPenguin.exe	32
PID 1756 wrote to memory of 956	1756	SuperClubPenguin.exe	32
PID 1756 wrote to memory of 956	1756	SuperClubPenguin.exe	32
PID 1756 wrote to memory of 2012	1756	SuperClubPenguin.exe	33
PID 1756 wrote to memory of 2012	1756	SuperClubPenguin.exe	33
PID 1756 wrote to memory of 2012	1756	SuperClubPenguin.exe	33
PID 1756 wrote to memory of 2012	1756	SuperClubPenguin.exe	33
PID 1756 wrote to memory of 2012	1756	SuperClubPenguin.exe	33
PID 1756 wrote to memory of 2012	1756	SuperClubPenguin.exe	33
PID 1756 wrote to memory of 2012	1756	SuperClubPenguin.exe	33
PID 1756 wrote to memory of 2012	1756	SuperClubPenguin.exe	33
PID 1756 wrote to memory of 2012	1756	SuperClubPenguin.exe	33
PID 1756 wrote to memory of 2012	1756	SuperClubPenguin.exe	33

C:\Users\Admin\AppData\Local\Temp\SuperClubPenguin Setup 1.0.0.exe
"C:\Users\Admin\AppData\Local\Temp\SuperClubPenguin Setup 1.0.0.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2020

C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe
"C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
- Modifies system certificate store
- Suspicious use of WriteProcessMemory
PID:1756
- C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe
  "C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe" --type=gpu-process --field-trial-handle=1352,2884755407676986628,874020377606908443,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --gpu-preferences=IAAAAAAAAADgAAAgAAAAAAAAYAAAAAAACAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAABQAAABAAAAAAAAAAAAAAAAYAAAAQAAAAAAAAAAEAAAAFAAAAEAAAAAAAAAABAAAABgAAAA== --service-request-channel-token=4146170138158849590 --mojo-platform-channel-handle=1360 --ignored=" --type=renderer " /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:824
- C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe
  "C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe" --type=renderer --field-trial-handle=1352,2884755407676986628,874020377606908443,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app" --enable-plugins --no-sandbox --no-zygote --background-color=#fff --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=15490355921045809265 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1568 /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:540
- C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe
  "C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe" --type=gpu-process --field-trial-handle=1352,2884755407676986628,874020377606908443,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-sandbox --use-gl=disabled --gpu-preferences=IAAAAAAAAADgAAAgAAAAAAAAYAAAAAAACAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAABQAAABAAAAAAAAAAAAAAAAYAAAAQAAAAAAAAAAEAAAAFAAAAEAAAAAAAAAABAAAABgAAAA== --service-request-channel-token=2646057039977552833 --mojo-platform-channel-handle=2396 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:1736
- C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe
  "C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe" --type=renderer --field-trial-handle=1352,2884755407676986628,874020377606908443,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app" --enable-plugins --no-sandbox --no-zygote --background-color=#fff --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=8253479393824416341 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2404 /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:956
- C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe
  "C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe" --type=ppapi --field-trial-handle=1352,2884755407676986628,874020377606908443,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --ppapi-flash-args --lang=en-US --device-scale-factor=1 --ppapi-antialiased-text-enabled=1 --ppapi-subpixel-rendering-setting=1 --service-request-channel-token=9863207554335997059 --mojo-platform-channel-handle=2648 --ignored=" --type=renderer " /prefetch:3
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2012
- C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe
  "C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe" --type=utility --field-trial-handle=1352,2884755407676986628,874020377606908443,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --lang=en-US --no-sandbox --service-request-channel-token=16676879128497597305 --mojo-platform-channel-handle=2772 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:1752
- C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe
  "C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe" --type=renderer --field-trial-handle=1352,2884755407676986628,874020377606908443,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app" --enable-plugins --no-sandbox --no-zygote --background-color=#fff --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=5148604794889896267 --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2468 /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:1448
- C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe
  "C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe" --type=renderer --field-trial-handle=1352,2884755407676986628,874020377606908443,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app" --enable-plugins --no-sandbox --no-zygote --background-color=#fff --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=11077868015843790101 --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3108 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:568
- C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe
  "C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe" --type=renderer --field-trial-handle=1352,2884755407676986628,874020377606908443,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app" --enable-plugins --no-sandbox --no-zygote --background-color=#fff --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=9203899140290972204 --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  - Executes dropped EXE
  PID:2320
- C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe
  "C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe" --type=renderer --field-trial-handle=1352,2884755407676986628,874020377606908443,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app" --enable-plugins --no-sandbox --no-zygote --background-color=#fff --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=10531395029954333528 --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  - Executes dropped EXE
  PID:2328
- C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe
  "C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe" --type=renderer --field-trial-handle=1352,2884755407676986628,874020377606908443,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app" --enable-plugins --no-sandbox --no-zygote --background-color=#fff --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=8311629497650780161 --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  - Executes dropped EXE
  PID:2336
- C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe
  "C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe" --type=renderer --field-trial-handle=1352,2884755407676986628,874020377606908443,131072 --disable-features=LayoutNG,SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app" --enable-plugins --no-sandbox --no-zygote --background-color=#fff --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=8595684035497764762 --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:2344

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x520
1⤵
PID:2036

Network

DNS

jugar.supercpps.com

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

jugar.supercpps.com

IN A

Response

jugar.supercpps.com

IN A

172.67.176.250

jugar.supercpps.com

IN A

104.21.48.43
DNS

github.com

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

github.com

IN A

Response

github.com

IN A

20.207.73.82
DNS

googleads.g.doubleclick.net

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

googleads.g.doubleclick.net

IN A

Response

googleads.g.doubleclick.net

IN A

142.250.179.130
DNS

supercpps.com

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

supercpps.com

IN A

Response

supercpps.com

IN A

172.67.176.250

supercpps.com

IN A

104.21.48.43
DNS

data.supercpps.com

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

data.supercpps.com

IN A

Response

data.supercpps.com

IN A

172.67.176.250

data.supercpps.com

IN A

104.21.48.43
DNS

partner.googleadservices.com

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

partner.googleadservices.com

IN A

Response

partner.googleadservices.com

IN CNAME

partner46.googleadservices.com

partner46.googleadservices.com

IN A

142.251.36.2
DNS

tpc.googlesyndication.com

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

tpc.googlesyndication.com

IN A

Response

tpc.googlesyndication.com

IN A

142.250.179.193
DNS

www.googletagservices.com

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

www.googletagservices.com

IN A

Response

www.googletagservices.com

IN A

142.250.179.130
DNS

googleads4.g.doubleclick.net

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

googleads4.g.doubleclick.net

IN A

Response

googleads4.g.doubleclick.net

IN A

172.217.168.194
DNS

s0.2mdn.net

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

s0.2mdn.net

IN A

Response

s0.2mdn.net

IN A

142.250.179.134
DNS

cm.g.doubleclick.net

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

cm.g.doubleclick.net

IN A

Response

cm.g.doubleclick.net

IN A

142.250.179.194
DNS

dsum-sec.casalemedia.com

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

dsum-sec.casalemedia.com

IN A

Response

dsum-sec.casalemedia.com

IN CNAME

um.indexww.com.akadns.net

um.indexww.com.akadns.net

IN CNAME

u12.lb.indexww.com

u12.lb.indexww.com

IN CNAME

fr-xn.lb.indexww.com

fr-xn.lb.indexww.com

IN A

185.80.39.216
DNS

ib.adnxs.com

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

ib.adnxs.com

IN A

Response

ib.adnxs.com

IN CNAME

g.geogslb.com

g.geogslb.com

IN CNAME

ib.anycast.adnxs.com

ib.anycast.adnxs.com

IN A

185.89.210.141

ib.anycast.adnxs.com

IN A

185.89.211.12

ib.anycast.adnxs.com

IN A

185.89.210.20

ib.anycast.adnxs.com

IN A

185.89.211.116

ib.anycast.adnxs.com

IN A

185.83.142.19

ib.anycast.adnxs.com

IN A

185.89.210.212

ib.anycast.adnxs.com

IN A

185.89.210.180

ib.anycast.adnxs.com

IN A

185.89.211.132

ib.anycast.adnxs.com

IN A

185.89.210.82

ib.anycast.adnxs.com

IN A

185.89.210.46

ib.anycast.adnxs.com

IN A

185.89.210.244

ib.anycast.adnxs.com

IN A

185.89.210.101
DNS

fundingchoicesmessages.google.com

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

fundingchoicesmessages.google.com

IN A

Response

fundingchoicesmessages.google.com

IN CNAME

www3.l.google.com

www3.l.google.com

IN A

142.250.179.206
DNS

ajax.googleapis.com

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

ajax.googleapis.com

IN A

Response

ajax.googleapis.com

IN A

142.250.179.202
DNS

cms.quantserve.com

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

cms.quantserve.com

IN A

Response

cms.quantserve.com

IN CNAME

2kpixel.quantserve.com

2kpixel.quantserve.com

IN CNAME

global.px.quantserve.com

global.px.quantserve.com

IN A

103.229.10.211

global.px.quantserve.com

IN A

103.229.10.171

global.px.quantserve.com

IN A

103.229.10.247

global.px.quantserve.com

IN A

103.229.10.192

global.px.quantserve.com

IN A

103.229.10.180
DNS

a.tribalfusion.com

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

a.tribalfusion.com

IN A

Response

a.tribalfusion.com

IN A

104.18.24.173

a.tribalfusion.com

IN A

104.18.25.173
DNS

sync.mathtag.com

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

sync.mathtag.com

IN A

Response

sync.mathtag.com

IN CNAME

pixel-origin.mathtag.com

pixel-origin.mathtag.com

IN A

185.29.132.241

pixel-origin.mathtag.com

IN A

185.29.134.248

pixel-origin.mathtag.com

IN A

185.29.132.245

pixel-origin.mathtag.com

IN A

185.29.134.244
DNS

gcm.ctnsnet.com

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

gcm.ctnsnet.com

IN A

Response

gcm.ctnsnet.com

IN A

35.186.193.173
DNS

d5p.de17a.com

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

d5p.de17a.com

IN A

Response

d5p.de17a.com

IN A

213.155.156.184

d5p.de17a.com

IN A

213.155.156.182

d5p.de17a.com

IN A

213.155.156.166

d5p.de17a.com

IN A

213.155.156.168

d5p.de17a.com

IN A

213.155.156.180

d5p.de17a.com

IN A

213.155.156.183

d5p.de17a.com

IN A

213.155.156.164

d5p.de17a.com

IN A

213.155.156.181

d5p.de17a.com

IN A

213.155.156.167

d5p.de17a.com

IN A

213.155.156.165

d5p.de17a.com

IN A

213.155.156.169

d5p.de17a.com

IN A

213.155.156.185
DNS

onetag-sys.com

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

onetag-sys.com

IN A

Response

onetag-sys.com

IN A

51.75.86.98

onetag-sys.com

IN A

51.89.9.251

onetag-sys.com

IN A

51.89.9.252

onetag-sys.com

IN A

51.89.9.254

onetag-sys.com

IN A

51.89.9.253

onetag-sys.com

IN A

51.38.120.206
DNS

an.yandex.ru

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

an.yandex.ru

IN A

Response

an.yandex.ru

IN A

213.180.193.90

an.yandex.ru

IN A

77.88.21.90

an.yandex.ru

IN A

87.250.250.90

an.yandex.ru

IN A

93.158.134.90

an.yandex.ru

IN A

213.180.204.90
DNS

s.tribalfusion.com

SuperClubPenguin.exe

Remote address:

8.8.8.8:53

Request

s.tribalfusion.com

IN A

Response

s.tribalfusion.com

IN A

104.18.24.173

s.tribalfusion.com

IN A

104.18.25.173

20.207.73.82:443

github.com

tls

SuperClubPenguin.exe

1.4kB
4.9kB
12
12
172.67.176.250:443

jugar.supercpps.com

tls

SuperClubPenguin.exe

162.7kB
9.1MB
3454
6789
20.207.73.82:443

github.com

tls

SuperClubPenguin.exe

943 B
3.4kB
8
9
142.250.179.130:443

googleads.g.doubleclick.net

tls

SuperClubPenguin.exe

24.0kB
408.2kB
234
404
172.67.176.250:443

data.supercpps.com

tls

SuperClubPenguin.exe

1.8kB
7.0kB
16
16
142.251.36.2:443

partner.googleadservices.com

tls

SuperClubPenguin.exe

1.7kB
6.6kB
14
15
142.250.179.193:443

tpc.googlesyndication.com

tls

SuperClubPenguin.exe

989 B
5.3kB
9
8
142.250.179.193:443

tpc.googlesyndication.com

tls

SuperClubPenguin.exe

989 B
5.3kB
9
8
142.250.179.193:443

tpc.googlesyndication.com

tls

SuperClubPenguin.exe

28.8kB
618.6kB
385
613
142.250.179.193:443

tpc.googlesyndication.com

tls

SuperClubPenguin.exe

989 B
5.3kB
9
8
142.250.179.193:443

tpc.googlesyndication.com

tls

SuperClubPenguin.exe

989 B
5.3kB
9
8
172.217.168.194:443

googleads4.g.doubleclick.net

tls

SuperClubPenguin.exe

5.2kB
7.0kB
17
19
142.250.179.134:443

s0.2mdn.net

tls

SuperClubPenguin.exe

4.7kB
122.6kB
61
101
142.250.179.194:443

cm.g.doubleclick.net

tls

SuperClubPenguin.exe

4.2kB
10.6kB
39
54
142.250.179.194:443

cm.g.doubleclick.net

tls

SuperClubPenguin.exe

989 B
5.5kB
9
8
185.80.39.216:443

dsum-sec.casalemedia.com

tls

SuperClubPenguin.exe

2.7kB
9.2kB
15
16
185.89.210.141:443

ib.adnxs.com

tls

SuperClubPenguin.exe

2.6kB
6.9kB
11
15
185.80.39.216:443

dsum-sec.casalemedia.com

tls

SuperClubPenguin.exe

3.5kB
9.4kB
16
16
142.250.179.206:443

fundingchoicesmessages.google.com

tls

SuperClubPenguin.exe

6.4kB
80.0kB
68
110
142.250.179.202:443

ajax.googleapis.com

tls

SuperClubPenguin.exe

2.1kB
39.1kB
25
35
185.29.132.241:443

sync.mathtag.com

tls

SuperClubPenguin.exe

892 B
4.4kB
8
8
104.18.24.173:443

a.tribalfusion.com

tls

SuperClubPenguin.exe

2.4kB
4.6kB
13
13
103.229.10.211:443

cms.quantserve.com

tls

SuperClubPenguin.exe

1.9kB
5.1kB
14
15
35.186.193.173:443

gcm.ctnsnet.com

tls

SuperClubPenguin.exe

1.7kB
5.1kB
11
11
51.75.86.98:443

onetag-sys.com

tls

SuperClubPenguin.exe

1.7kB
4.5kB
12
12
213.155.156.184:443

d5p.de17a.com

tls

SuperClubPenguin.exe

1.8kB
6.3kB
15
17
213.180.193.90:443

an.yandex.ru

tls

SuperClubPenguin.exe

2.1kB
7.1kB
14
19
103.229.10.211:443

cms.quantserve.com

tls

SuperClubPenguin.exe

972 B
4.3kB
8
10
142.250.179.206:443

fundingchoicesmessages.google.com

tls

SuperClubPenguin.exe

5.3kB
12.9kB
42
57

8.8.8.8:53

jugar.supercpps.com

dns

SuperClubPenguin.exe

65 B
97 B
1
1

DNS Request

jugar.supercpps.com

DNS Response

172.67.176.250

104.21.48.43
8.8.8.8:53

github.com

dns

SuperClubPenguin.exe

56 B
72 B
1
1

DNS Request

github.com

DNS Response

20.207.73.82
8.8.8.8:53

googleads.g.doubleclick.net

dns

SuperClubPenguin.exe

73 B
89 B
1
1

DNS Request

googleads.g.doubleclick.net

DNS Response

142.250.179.130
8.8.8.8:53

supercpps.com

dns

SuperClubPenguin.exe

59 B
91 B
1
1

DNS Request

supercpps.com

DNS Response

172.67.176.250

104.21.48.43
8.8.8.8:53

data.supercpps.com

dns

SuperClubPenguin.exe

64 B
96 B
1
1

DNS Request

data.supercpps.com

DNS Response

172.67.176.250

104.21.48.43
8.8.8.8:53

partner.googleadservices.com

dns

SuperClubPenguin.exe

74 B
114 B
1
1

DNS Request

partner.googleadservices.com

DNS Response

142.251.36.2
8.8.8.8:53

tpc.googlesyndication.com

dns

SuperClubPenguin.exe

71 B
87 B
1
1

DNS Request

tpc.googlesyndication.com

DNS Response

142.250.179.193
8.8.8.8:53

www.googletagservices.com

dns

SuperClubPenguin.exe

71 B
87 B
1
1

DNS Request

www.googletagservices.com

DNS Response

142.250.179.130
8.8.8.8:53

googleads4.g.doubleclick.net

dns

SuperClubPenguin.exe

74 B
90 B
1
1

DNS Request

googleads4.g.doubleclick.net

DNS Response

172.217.168.194
8.8.8.8:53

s0.2mdn.net

dns

SuperClubPenguin.exe

57 B
73 B
1
1

DNS Request

s0.2mdn.net

DNS Response

142.250.179.134
8.8.8.8:53

cm.g.doubleclick.net

dns

SuperClubPenguin.exe

66 B
82 B
1
1

DNS Request

cm.g.doubleclick.net

DNS Response

142.250.179.194
8.8.8.8:53

dsum-sec.casalemedia.com

dns

SuperClubPenguin.exe

70 B
174 B
1
1

DNS Request

dsum-sec.casalemedia.com

DNS Response

185.80.39.216
8.8.8.8:53

ib.adnxs.com

dns

SuperClubPenguin.exe

58 B
299 B
1
1

DNS Request

ib.adnxs.com

DNS Response

185.89.210.141

185.89.211.12

185.89.210.20

185.89.211.116

185.83.142.19

185.89.210.212

185.89.210.180

185.89.211.132

185.89.210.82

185.89.210.46

185.89.210.244

185.89.210.101
8.8.8.8:53

fundingchoicesmessages.google.com

dns

SuperClubPenguin.exe

79 B
116 B
1
1

DNS Request

fundingchoicesmessages.google.com

DNS Response

142.250.179.206
8.8.8.8:53

ajax.googleapis.com

dns

SuperClubPenguin.exe

65 B
81 B
1
1

DNS Request

ajax.googleapis.com

DNS Response

142.250.179.202
8.8.8.8:53

cms.quantserve.com

dns

SuperClubPenguin.exe

64 B
190 B
1
1

DNS Request

cms.quantserve.com

DNS Response

103.229.10.211

103.229.10.171

103.229.10.247

103.229.10.192

103.229.10.180
8.8.8.8:53

a.tribalfusion.com

dns

SuperClubPenguin.exe

64 B
96 B
1
1

DNS Request

a.tribalfusion.com

DNS Response

104.18.24.173

104.18.25.173
8.8.8.8:53

sync.mathtag.com

dns

SuperClubPenguin.exe

62 B
153 B
1
1

DNS Request

sync.mathtag.com

DNS Response

185.29.132.241

185.29.134.248

185.29.132.245

185.29.134.244
8.8.8.8:53

gcm.ctnsnet.com

dns

SuperClubPenguin.exe

61 B
77 B
1
1

DNS Request

gcm.ctnsnet.com

DNS Response

35.186.193.173
8.8.8.8:53

d5p.de17a.com

dns

SuperClubPenguin.exe

59 B
251 B
1
1

DNS Request

d5p.de17a.com

DNS Response

213.155.156.184

213.155.156.182

213.155.156.166

213.155.156.168

213.155.156.180

213.155.156.183

213.155.156.164

213.155.156.181

213.155.156.167

213.155.156.165

213.155.156.169

213.155.156.185
8.8.8.8:53

onetag-sys.com

dns

SuperClubPenguin.exe

60 B
156 B
1
1

DNS Request

onetag-sys.com

DNS Response

51.75.86.98

51.89.9.251

51.89.9.252

51.89.9.254

51.89.9.253

51.38.120.206
8.8.8.8:53

an.yandex.ru

dns

SuperClubPenguin.exe

58 B
138 B
1
1

DNS Request

an.yandex.ru

DNS Response

213.180.193.90

77.88.21.90

87.250.250.90

93.158.134.90

213.180.204.90
8.8.8.8:53

s.tribalfusion.com

dns

SuperClubPenguin.exe

64 B
96 B
1
1

DNS Request

s.tribalfusion.com

DNS Response

104.18.24.173

104.18.25.173

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

T1130

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
62KB

MD5
3ac860860707baaf32469fa7cc7c0192

SHA1
c33c2acdaba0e6fa41fd2f00f186804722477639

SHA256
d015145d551ecd14916270efad773bbc9fd57fad2228d2c24559f696c961d904

SHA512
d62ad2408c969a95550fb87efda50f988770ba5e39972041bf85924275baf156b8bec309ecc6409e5acdd37ec175dea40eff921ab58933b5b5b5d35a6147567c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bd2aae5a7ab7e68029c8f957c6cf8663

SHA1
fb26d7b32bd5222a484c27cc44a2f0b87d81aa3f

SHA256
3b682f0155e42538b62f02416c62dbd53bb653ac97e74fa07e6317dbfe44e878

SHA512
b84904c46545b3a914a88ee9f57e06cd801833c3770fbb6a883d9d573fbd2804899e2cbcef94761922a7dee787a06afafc8a9ab50994d8c17d2f09a66fcb61f5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b81e01b7d45e6b985cfd52393fabc705

SHA1
271dd5407cb819770ce40db17649ce64a3cf4b24

SHA256
50d5c300b11d32dfdfe6fe2a6227ea996f1c2f2a12ecdc93dd2cfa585416b6ce

SHA512
0d5829363e5e9f572fd1884e2143799219784ca06cfe1a697fa864f890c6227963067276328100f6da3782d059a6d145d4a660c47a3a8602fc047417de5d106a

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe

Filesize
82.2MB

MD5
764264c9f6c17f8f04cfb0898bc93f5c

SHA1
8701d95d17e36d5d71f8f9acaf345a5eb05cb2b7

SHA256
a1b1149de247a8d14ccb711dfd39532c5d908a871a8f026757f5835211d575e8

SHA512
08a7f6a9cd90940771a213796ec6d34de057bcc8adaf88f943619a5a95dcecd1a62101934f6b7180f93e9a6c5b30b7e2f5cee6e1b3d7cd9385a3e7926e7b6eda

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe

Filesize
82.2MB

MD5
764264c9f6c17f8f04cfb0898bc93f5c

SHA1
8701d95d17e36d5d71f8f9acaf345a5eb05cb2b7

SHA256
a1b1149de247a8d14ccb711dfd39532c5d908a871a8f026757f5835211d575e8

SHA512
08a7f6a9cd90940771a213796ec6d34de057bcc8adaf88f943619a5a95dcecd1a62101934f6b7180f93e9a6c5b30b7e2f5cee6e1b3d7cd9385a3e7926e7b6eda

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe

Filesize
82.2MB

MD5
764264c9f6c17f8f04cfb0898bc93f5c

SHA1
8701d95d17e36d5d71f8f9acaf345a5eb05cb2b7

SHA256
a1b1149de247a8d14ccb711dfd39532c5d908a871a8f026757f5835211d575e8

SHA512
08a7f6a9cd90940771a213796ec6d34de057bcc8adaf88f943619a5a95dcecd1a62101934f6b7180f93e9a6c5b30b7e2f5cee6e1b3d7cd9385a3e7926e7b6eda

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\chrome_100_percent.pak

Filesize
142KB

MD5
8d56d44c318d122f7931d03ba435f00b

SHA1
387f530e06f79a2a9f7fbf4446c71c31db08e7e0

SHA256
fcb4faaa82d13d90c42dfa0669f67391b3124d30310d0f4c510f31412974cab2

SHA512
03bd2f56f73ad06fe22ebd94fb0de4e37d1771f8a9d82a47ea93002ba4696d906b59d0e25db63e98af10a169a8c3dc9d047cfcbca01030924bf93abe7bce1590

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\chrome_200_percent.pak

Filesize
204KB

MD5
879f88cafa5714994744bde20e7bd2c2

SHA1
d63b55f9f7c0e40f9585cac8a5cb28c0ea9f32ee

SHA256
76126341d0dc2b4b6ddccf30559709e6a856cd47148107808bd18ceb16ed1df3

SHA512
4d70ae16c2656cf3a8aaad00e2ce0ddcc030bf1ad29bbb1d0e90c03f866c413f893b273b8b03aa12c9ea5ae01537ad1d2d1b2c52b35bf7773278121a09a3af9c

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\ffmpeg.dll

Filesize
1.9MB

MD5
181e4e41784a8068c834adc7b243c448

SHA1
fe3e5e6b32a518b94c16904c8b1ce2a9a6b91f06

SHA256
fc344c8da10544dab87911fb2431929d760df1dc2537eb96c50aedb8a7ca6564

SHA512
6d25688d63a4bda8c618bdcef2b5c9c91c637decb4cbf00bb3862e965f0ae5bcf84f65085f1d7420cbc8f41a4b98892fbcc5d8dc9440697d7f761251b7f50aba

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\icudtl.dat

Filesize
9.9MB

MD5
4c8a9e9c260dc5a6fee2a3c37520f5bf

SHA1
5a9883dbeb5314a98e7ab5326f9868e78ba387dc

SHA256
8c2df1f6e2ea8df2e5fc5e4b016b0cddd64a7ce6985189ca45be3c0ec99472c2

SHA512
c0da0b08a0b0eaa898f96c6e6c6fb65bc7f773f5814fc0d612a40e2fcaea4049c67cd2812716a564dbc16d609677ee62eaa9f9747d2a7bc5c9bce43cd2208aa7

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\locales\en-US.pak

Filesize
69KB

MD5
15e8556f737d17bd4d645513ee190990

SHA1
a24844d68fe3e9f4c57d14e6091a06f5e6b5f327

SHA256
12e4fd083a49e038578ea2993e6c88239083c8d098231527eee861299a4e1c99

SHA512
4e5c423b2b14def0e6ebb9c7844bdc050198064c9db69d3a880c1444314211995b1f0dec6fcbb12c6d5e59f690c3ffc893c2265bf7168d1ecbc8d83dfa5e1465

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\natives_blob.bin

Filesize
81KB

MD5
f8ac49858ca8739658ff44c296f8aba6

SHA1
427b4da3bd619d85381c36d61daf2ce392e07909

SHA256
354ff502a0e1ed73df4e5c7b52970356b04777461f6e169f72a8567ab5f4c317

SHA512
52e875aedbdc5dad21e01a42e333ff5aefed9ae6468a00e80f2bb373b871196f9a82bc3f43a6c72c9dd6be0e4fbc591d3ede41ca47b23a806b788db5aa9bf313

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources.pak

Filesize
8.1MB

MD5
978e8122033961585e14c65949d15e11

SHA1
3097d04bbcdfc6ff9e0bb52c2d38f6395e4bb631

SHA256
a435fa0e07a9124b0d457811de5e2245aeb225ad55ab99186cb665c6ec6e30ef

SHA512
5f6706116b7eaec70213f7343cac44eea2dc735de6262524b5508a659b150d8a5ad7f449fec984b45a2e5c170e1cb4feb927a19530c94841f3e6429a2fcaa1c0

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\main.js

Filesize
2KB

MD5
218e41209bbd31f26c38cb66266a03a9

SHA1
ddf9206fdf376049fb41414fc12159fa4363a6d0

SHA256
17188a8e8e7ca999fdb975a75b7dbb44ade9cde2e6cb64ed89dd58330f328612

SHA512
40897004f95b3177b01ee543cfe77fdb6c1da40ad55784b69b0006cf22f3eb730c4c176eb70a7204aca42d37dd12f51401d9a3a942de719830b45e21d383612b

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\discord-rpc\package.json

Filesize
1KB

MD5
857084105656937a84d4cdcd06133c34

SHA1
9578a261b9c3310f3b68d9da7017348cd807e71c

SHA256
ab38c23eb7fa99722ad6032537c9a2e03383e9a23f8c7229d1f2282c26f767e5

SHA512
890e6b85afb9b83590211d20608a2c7cafeffa078ce8e449d6cdb0a9e7fe31aad46b4a60be2a1fe14a720cc84c5fc58a3caec98fa36f0ab21af1f9c58ec8847f

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\discord-rpc\src\client.js

Filesize
18KB

MD5
f1121cfee8c6ee4363b1d0143592bd40

SHA1
ba5392a7a6a38bb6234a1d69cca6ddeaf47a13f5

SHA256
d5e41c5cb150910f67429ecfbac448f5edb027f39b4db6eadc546291c23ed1ce

SHA512
d4af0f58d9aaef5964bbd1aef08ba31b4889cf6272fd0eaf300eec9c52ee9de2420cc330a5a35898519709ee84d0e6721c1478ee65199e377c7ae554ecc79532

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\discord-rpc\src\constants.js

Filesize
3KB

MD5
d8c53237370210cb540c816d2c3231ba

SHA1
0fc4c54864015e5f97ef5995f4128c7937bef0da

SHA256
174db6e530abb29e1d2705cfbf43569e35f1972176e8c4ed405f8ee6e63dfd0b

SHA512
e7314e17042b8a9d8e9a283ee40fd67711a718bd838780d66cac7e02250c2fd27151326a2ebc6a621cd1ee85be51f875c2a94c7eef1f5f17d7ed8e26ee556ca8

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\discord-rpc\src\index.js

Filesize
166B

MD5
79e518ef097f0dfdbf03a08a400bf0e7

SHA1
7785a8b24a9f18fc3185e7b72cbea11b1e4f8a2f

SHA256
807f3c2a7d1b380cb73d423f325978a7b33b0730efc7e0885813bef0bc032713

SHA512
c5a5121b54046495e6d6113d3a51090690eedd5f6d23fc7fe5d930e5af3d3413f77cb547f86e5374e32513e1f8d9bfbc25ba338f9181bf46fcb75632f2130111

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\discord-rpc\src\transports\index.js

Filesize
99B

MD5
2f7688f275a929f322478d9c7655d91b

SHA1
8613f4b6f7eec12cc5bdc0e646900ef795b35dc9

SHA256
293dd7ea565428ac11311683763713b0b7f76e6ad2d1adfe91fe1b410494b678

SHA512
0611ecceef0b76b47e16c8f0a330e8b4d98d6c1efc527f8cad3d51636f4aa17b370d3f181d414a22f5a6add78ee6bcf4ab10a9f523d1d0ea1d13e2e49d163e07

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\discord-rpc\src\transports\ipc.js

Filesize
3KB

MD5
5fc688dc2131db199dcaae57b635d333

SHA1
205b98ce7f78d98feb70ca7ac4c2e850c3bae75e

SHA256
ab04c4cbefa36a3ebe053636e37fbcf1a32760955e2ea9f4977699c78a79afdc

SHA512
92dfd7cd7deb48714cc6f2697080824ac7e9c5a9f5cb8539a15ee7022bf7ede60ca86e3d09f31c28a3d45c23c42cff5176515405137494053683e85a87410aba

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\discord-rpc\src\transports\websocket.js

Filesize
1KB

MD5
ba791860f793ff156afe1fb97fa1e1e1

SHA1
d58675fca3bc832b5261377d8fb3c642490fb828

SHA256
3f6f72f2ae4bf13c11f2cdac12953e9ae6f5c430b1c3bdbf0f24ae6ba87ab3f6

SHA512
406fb5318bd36635d9b2ef7b936061497223c275fd50e84276e4b23167870177e96691c5dab63995bbe76144807915c484e5eead1f2958d87fbbf4df2e4ee3b1

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\discord-rpc\src\util.js

Filesize
889B

MD5
e44af3edd2906a749be96eb568157084

SHA1
d9756726c78a396bdd8a3c837573e33b3bc904fb

SHA256
c52042a1ac2ab16f7e318673b85f195e85f078b3056d0993b97bc92748696719

SHA512
74f549d03737de277fa21f0f59e6cd6794ca909125af1122471213efcf6c01ea0400805a4f7d623c55927715e2d7e5668cb817ae79d50b1b2880664cebf76a4d

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\electron-is-dev\index.js

Filesize
281B

MD5
84402fab5f78e8252656ae68cb5a1616

SHA1
98fff1a8568fc3d1a3bca237609d9083c3f0135e

SHA256
4b04baa5ad869bdf03929616d60259976bebfc910e01bb086cec729ab6dcf694

SHA512
9c55142890367fc4e9578494437604a553af73cbe47752e49328820fb573320efa0686337c9f717a381cf730f7d28aeb3f6228232b6b70a6e16b071b3846e961

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\electron-is-dev\package.json

Filesize
557B

MD5
279bbba9029f432a655e953f3d8a4242

SHA1
82476bfe74b4b2bfa526bed6dc7edbc877b8f6e5

SHA256
ad79d71ad3c76f690432a99f408e97e4a1e04997943984939d2e12efe8b14b39

SHA512
6f6b366b4281b03995512ec81cfe8cc9bec251bb1ae0a7bfdc15f4f9ac297b4875276e59eb9a7ea67c95947176e72c07f9169cf71270cbe309b26a556cdb14c2

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\electron-updater\node_modules\builder-util-runtime\out\httpExecutor.js

Filesize
15KB

MD5
0feccbe2800f4be003b7ea6f766ee47e

SHA1
9cc6b298c599a7aceee6ba812d0cd9244591aff1

SHA256
8600fbabca7a114f9132f2395d10d73f45df9c66e50ca5a7d025231d15bb4f32

SHA512
a86527ad1e5363188cf12d124c88001e9829754fc10066b3648f3f6e3d5781aa2bd1ba72a0d8ff641f9bbd852d21c8be7a11bc29460da14de9348878531d062b

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\electron-updater\node_modules\builder-util-runtime\out\index.js

Filesize
4KB

MD5
212da5cd57a00151f3272bbd4e7beb64

SHA1
a6860e4d1eae689ef4b89af19df805175bde2cc5

SHA256
8bae3e6591d3abcf3eb404187da7a55a17d14d4f78a13bba57a84e8942c6062b

SHA512
19992db5fb379b2bcf70aa68526496dd09495e01c869f649ac1b04718f00ddace0a4229c9b02fc2eb7cc981640147b29f8173cdb296a199ac05a21229c22d662

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\electron-updater\node_modules\builder-util-runtime\package.json

Filesize
633B

MD5
e3f49d28bee0673177b3dfbb4c15d1ac

SHA1
f5cb76bf6a4b79298a6d1ed4b65a5eb7162d26b1

SHA256
6745dd9a249baadd6748eaa23e9bcc4353084a7a637eea2db91301ac63cfcfcd

SHA512
7be9d4b8ecd4c2be8945bcf90a6f1452721446b50e04968945c454e888b3f13129a33e6b2c2f0d85c136ce5ed051c34acd623a555e59c21569413904c481947b

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\electron-updater\node_modules\debug\package.json

Filesize
1KB

MD5
41d9734932b7d37133d1ded6b46c5a9d

SHA1
071cb8af7c3c0653587fac3727f050e438ee1570

SHA256
61e819b8fefab519cd0aaf72e8507b7ee93d382d7dc3139dc623f69d0784d5da

SHA512
6af177103736421dd6b533d66a62928b1bd2ee50658a22804822409e8f1bd01d182e04e589d11f9b0c4f504148c38150e9d77a6288e8e9b832436fcef1670280

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\electron-updater\node_modules\debug\src\common.js

Filesize
5KB

MD5
28cf1b65565c110e527238b9072dd100

SHA1
ce462ffa64f18fb0c0a85226df52deb95ccf1d7d

SHA256
eecaed82cfb4506f0cb2c140ea500d818603ba2b116f4043728b461de648160c

SHA512
f67d79d57c4f9ec99fca5f44e21a8ae6228486a87733894a223394c34be2776c76d838c0a6fafbaae10274e985093234ec2252ed69619c6a08779cc5b0e48abb

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\electron-updater\node_modules\debug\src\index.js

Filesize
314B

MD5
d6c53f5a0dd8f256d91210ad530a2f3e

SHA1
0f4ce3b10eff761f099ac75593f7e05b149ae695

SHA256
aa127ff1752b7d9c7415c5c7bb6994d9aa722b81bcbcab4bd48316b013d23bf3

SHA512
4faa874d9d862ffc921528742c4f1fe8a9b22a358760f6e93fcef138523575329a801ce9659ed8e96b02b73e581b3e99d91973e22981b358ffb5e43103a536c2

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\electron-updater\node_modules\debug\src\node.js

Filesize
4KB

MD5
022881df4a2d137c0f0fb83e84592155

SHA1
659316f1d1ef8539fa6023fb9cf5e8160b6159ea

SHA256
325ef853b9b77da990ee685a6cf915a03c8db652eb863e777f273654bd5e56d5

SHA512
834074b374733233f8818e8789fb3e1fb2758fc2202afab914cd913e22c5802a1aece2558227bae0dfd72b502cc231ae0c88bcd5d82c9ea2a1df6c4844d814ee

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\electron-updater\node_modules\semver\package.json

Filesize
505B

MD5
bf7b4835d418262a6f2e77cbd33b73ef

SHA1
c3b8fa2b8281d85736cef0bd2f5c21ae3522be87

SHA256
04f3ebc03156129ba824992a3f3be787f1c145c4e43b643b0fb891eb55a97a2d

SHA512
ac40503a545cdf81d95a5e119ae859c91a42a022574688ce75a373d130c49bfd5a34b440782befefdd39950646d0fc7ce973f223dcf6ea64c1ef4389cebafa50

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\electron-updater\node_modules\semver\semver.js

Filesize
41KB

MD5
f2b931cdc91f14b2f7fd0ec204d2ad44

SHA1
06e82a822515f98b740553b8d8b268af7ea4abf5

SHA256
acfcb006e8cbfa5ec841829d60ecc5adb9c1012e39df0b7d2d29e44116001850

SHA512
3c139fc63478190949f26c4e82968c0ac7896f0c5025302999e16d7e57bd9aea71ad6b1508d63ad4505de5c54bfa5d5b7d24a9bf05dab72a3a26e1f828f60e72

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\electron-updater\out\AppUpdater.js

Filesize
22KB

MD5
ab1ca6c06cf896a6589db871dae69479

SHA1
405d4dfdcfacdd0658c798e85a46754529cd3abd

SHA256
b663ca6a3cd7f5f7c3c631af63fd0be119832f260a2ac5004bca23c2740766ec

SHA512
283f61a0a55f1d792602a0076ec3015108b9c3728005de1f946a42f04b183ce89160476a8344d2045ea4b5b16be9e3b2150df27030a1152be7613ddb0f7aaac4

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\electron-updater\out\BaseUpdater.js

Filesize
2KB

MD5
4d407589c37f951b8f895c026b0edefc

SHA1
7aa93482e136d02db069325d4a7ae72da66756ca

SHA256
780a734a53dc22bc795f24c005a1a8d41ed7908e595257eee03d440d64d669d2

SHA512
5cb4ab12b0247ba007ce2777967bdb1a21afd470284fa3fc203e5c72b37a8e48ab234d94781906ca4c7a25278e9069c6c77772a904dc8f9e24233430d26f4dc3

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\electron-updater\out\ElectronAppAdapter.js

Filesize
2KB

MD5
ece01de9c5b060509a534e3a9b738f7e

SHA1
17fab21be27906aac2129928e85e69b686dda3b0

SHA256
72c247cd2f86748cbe6a2c7237495ab1364493f5dc964e7070ad556e56466aa6

SHA512
0438291587a3e2f9221e053ff07aac47f0863af8afc0060d447244b7407472b830c0a00e149f576527bb4812074b5d67e4f687b7476fb2badcf3ee3b9599f211

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\electron-updater\out\NsisUpdater.js

Filesize
10KB

MD5
1a61199802ab9bf5044f4d4878b6343d

SHA1
99eac3180c5766f6e7c66904739c2a946b462ee6

SHA256
1e401479dd62a4957eebba56c325ec778d712545bd4ad873b862a26ad6e920b2

SHA512
1150f437b7dceec4ef1137a6bb89d5640a82c09bb935e8a1bf106bc31f3d307031c785f69deb8d7323e89b925fd81a808a00d0350436b2fbebe6407ae039d0e1

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\electron-updater\out\electronHttpExecutor.js

Filesize
2KB

MD5
5b194c22d99fd5503103ad881a1c41b7

SHA1
164215684187f53355962bae2dd84d742932fa7d

SHA256
18d756fbf91b8efd09a82725769d94232f0dc36124046cbf611343e5228ca528

SHA512
3b55080f82bd9a41f0af40090558efa143915ec9e4522e8bfde76baab297c580b2b82c6dcade7629266fe78bfd9e5201759652c0ddc897edcc01519ba1d4b808

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\electron-updater\out\main.js

Filesize
4KB

MD5
7fd2ec1ec399dcaf69ebc11f25baf575

SHA1
10e3a183d08538ff2ac666feaabdf1a9aa6e370d

SHA256
d39428463ae8ee5d819ef0ca212a1ab5aec80281c77d0d1373de4e11eb03b32a

SHA512
3991909ec04dd490c48bc34918c6c2ff53fcc87c3e44387137fa604b6a0c5bf8f46cb5cf71601b4cfebb193f48714a09ae0a2f9708eb4a3044321f95d2293bc9

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\electron-updater\package.json

Filesize
762B

MD5
f29eea5419d793d362a5c09b2bd1a822

SHA1
aa204c30f5238178389f6d85c6487c102f8c8424

SHA256
407f3d074e5ebeee2a528de88d20251d3dcab6c49c577b9fd00d277a26628dc6

SHA512
983e828ec6a3b628dc944be15cfe252a3c9369eef666b0208e6f3114c94a0ceb62aa218df0899afc0de611c9214720e1209a6d1c986d9601a8f18b9d325527d1

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\lazy-val\out\main.js

Filesize
572B

MD5
5c541dbf5fbc763a5637342ee1cd5166

SHA1
9c93e9b54d940473ac5caf76bdcd5e69f13d5df5

SHA256
b90a6539596f756ae2e885fd7d629e15a69cf092244b155e93c054faac53bc80

SHA512
08bfbb83b5e4b37a1a03874183182e27f34d14e8f6de32e698d93c97bd82b1398e10afa728b3d772f8fa88f4101a655347dc7885906856888e48b4130f0273b2

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\lazy-val\package.json

Filesize
600B

MD5
2e73d4bf14f31028eb9bb930ffbed5a7

SHA1
4b8970036f0856f0f3d9c474611627306d594fce

SHA256
850c45c2386d1a2d0eb62404a72b1a86ee728c0d18754b0d18de72157111a14c

SHA512
3dcc6c4ebe69a779b6b5d3b545ae89879fa03faea16e44bf179fb0ddb3417bb065faf157fe661012ec9f7b6fb837030d2c9edf856c88652bd98c62e1dd0cb61e

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\ms\index.js

Filesize
2KB

MD5
fddcc2097091479666d0865c176d6615

SHA1
55f9b3a7d4cfbf68b19ccd0d698aa86483dd4694

SHA256
55986972f5f3c9446f876c576e1cd30fd4f04cd26527efbb5ad834637c740e4c

SHA512
252644169a9398527927b69a2f19c6578bd62dcd180b94984d991939f53bf4e77ca687e840db42f7dba3b37124a5e3f3eda83535e75491bbe6ca440a7149913f

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\ms\package.json

Filesize
584B

MD5
6d1a91e3b4481b49526691670eb03134

SHA1
19a1e8bba588bbfdd3fe6ac332e3c7757d67b043

SHA256
7facc3283b9bdc72541307299a20e163cbbb60a27d573de8287c1257d5e847f5

SHA512
966a0c42bd36094d2a7fb357e284f9bb7409639a57b9fee9ddd8f460aaaf543f5d0dba83dfa840f81a7c2a0f230244fd1629a93fc25cc53f871d8ee06ff3e5a1

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\node-fetch\lib\index.js

Filesize
40KB

MD5
23da82c6959488bc6d7eec8373b08f13

SHA1
571e64c9f82606b8f6c164663b134b75b47c9844

SHA256
11310792474b815ffb31e8890eee0fbb0670a42484d05cef76970d9ca7e52958

SHA512
7bbdc2d1974fdb181e7e504cba9540a61ac066119a753946c95a07f9a4aefb08f314e47af2199306bec747d058092c55e16d774fd2d9eb4c8e4718a77e90574e

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\node-fetch\package.json

Filesize
1KB

MD5
fa0a86e785f49e377d91780c6e223da2

SHA1
59ab481d0dea6aafca80b272226efec391f0ea7e

SHA256
1f048934dad9cdd27bbdcf155c9c0436160b3189986888b56c22b1451e493cc5

SHA512
54dc73c553c59d5e9a105dfc4bd96b0afc3f077127a19ac24f61b09e99677e527fe2fc3d6d8e682d271c51d88bcbbf20b25b6cfdcc02de06ca7c0283e7c290fb

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\ws\index.js

Filesize
296B

MD5
c4496645a3cadf59790b9a7749e5ad21

SHA1
b5b573008ba06d39aaaf7cdc32fa8cde43e82cd2

SHA256
c2b0c9905540a51acb276523bb024ef3c11bd118b03a90d92962080ebd07fec9

SHA512
7905cf7ad79ae3db830a0a249fd43c6a359b24e1295e1ce3b0e0999172183e28ca208f877bf38049411918d431f2277c6f1f1458f538884cc03ba2b4093e4277

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\ws\lib\buffer-util.js

Filesize
2KB

MD5
2ed1f17240b5ae668e59ae1c309a3a1e

SHA1
e76c66ba76f2f3a59bdcd25cbe41df4d9d15e8cc

SHA256
da2088dcfa847be2b26a0c4fd46480e2a787b3120bcaceb98555654bbba53631

SHA512
0e43c223d75f542d1b7114a65c2e14fb2a169561cf544558581ec1afcfc38703fbf5a0295201bb2dc5127386d3a8c7ca046227888e27ef404e38f7e7ef3042bf

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\ws\lib\constants.js

Filesize
268B

MD5
9f6cd33d0d1d7945e8b34b4a9d18ad46

SHA1
2a8c95ea6c7c81be85ca73a079c4aa5956f22c89

SHA256
2c2e8f6abbb7c2314d5736ef0a8d11f04ddc3cf4faf1c710df5d75c4170e937e

SHA512
218188388e9770b4525c25e43d71cbe35f8d0f255c27473a5d4c0b0722a2e765135b54818db3652b1a9447f490624e1d9c57dd13cf467349beca4a17c90c3c76

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\ws\lib\limiter.js

Filesize
981B

MD5
2bb8ac4bbf921d99860c80a315e0a1e7

SHA1
fd732e1a0872ef911a59c9ffde5e1ae21a97caee

SHA256
9abca092a7c8d0e02e1c51b82415e06131e9cb79a2321bed8adab11b66c9ff9b

SHA512
a2a91b05b13b84f3d0b308bb80d172d0d8f3decc05c1e39e64b799b9fc5a3c58cfb1b03a5456c5122cfbb8e827e17dd1ca3cf520d37b9ff1dd2aa778a2945865

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\ws\lib\permessage-deflate.js

Filesize
13KB

MD5
d56d3a290cd0074663353c966e509cad

SHA1
ec74da43e15dcf3a1ee2caf08a35f13ebe0ad52c

SHA256
f97cbf85113e16e3b51bc2ab75c15bdf51c87c99c4dd45b699fb2eb3d6e49510

SHA512
a80b27ebcb37280bb4be84406eb941011e7d635f9d67ded33c611a4d9fbc0c2cbdda09b38104dcc948e5b0af337989f27a2b02a10dabd3ece9b32d7414fa176d

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\ws\lib\websocket.js

Filesize
23KB

MD5
a25dcc21bdae188f31a1eb02df872838

SHA1
93532f2ae0d5798e8dc3b265bd4fd3e8174111ab

SHA256
fa4264766237ee2092688d8bbb3e0c04ee2467b3f303a661df64a14865c61866

SHA512
a0abd2528a7029ecf3cc568226c1d6c1c7f2b32a285457f81e6668824805c4742a1edd394e8065a610557249438f5fe3d9157029262ff40ca4d50be23261b224

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\node_modules\ws\package.json

Filesize
1KB

MD5
c34df2ed56cc13c235a47a25f96c867a

SHA1
62a0593d2c76c716f5fc12d846ca38810de281f8

SHA256
d36570b254067d8cc994127883187e359b95607c129f2c1fc020d182b48abf09

SHA512
1a5a741bdd716c9e4623443fb1d8a22bfd401658583848ef5c8be380544cc89ca9256993d9772ed765f0a3960112651ecc191fbfb717fddd80daf14a9959d55e

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\package.json

Filesize
509B

MD5
0c744e01c7758eac1afc320518439b7d

SHA1
d685c69b4875dd1896534f9dbd9ac583aacae144

SHA256
6e48b595aceaf68b68f7364e9b51cf99cdcd78933d6749346cd335953054b752

SHA512
9bc6fcb10b7b6870696748fb5b8ec2e4051268253bec000b5cb04f41a3b4a28947360fbe643f5bca911d08adf1440a038fce5955f506c1e5a4ed2e95ce213178

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\app\rpc\favicon_256.png

Filesize
65KB

MD5
efa0ae04326f4d7bb0271a779be9bbb7

SHA1
cf992d8197a6a3ee91544e75347fa9b1fb49440d

SHA256
21d804f736ac7e8c80005866b83189284932a8af3ac155ae2f022ae26c897b32

SHA512
bbfe61456f621787bb4403401e58a899c1490d3636ea218e44a6b3d4dabf4790b192c8a9d000007b7adfa5f9de65a40399b47d3212855b27ef025c6607aea240

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\resources\electron.asar

Filesize
346KB

MD5
e7403d0eef4fca74b51d6797ff5a8fdc

SHA1
4567783342b20f19e69c56d2eb6a18d30793af39

SHA256
b272d41372e571d4131642f2824fe8581b9132feefdf98dd6e7cd5d2c58728af

SHA512
9460158981cd84846b170612950963b8157126e7129da0e819ae1648aae8be577583250f110ba24aac8bb6a735cdae71a6d458a2be261caff3e472262639e8a4

Download Submit
C:\Users\Admin\AppData\Local\Programs\superclubpenguin\v8_context_snapshot.bin

Filesize
596KB

MD5
4453a66a6e810591ea9f5122514d7cb7

SHA1
d005ab8967c98338f381af090f68206c31dfdeef

SHA256
71a3723be4d336849ad93174116a1d8566a07fd3fe0a3bed781ea386589fb441

SHA512
e88fc5a4adfe34ac81668df1703b675a2ee36f0e0bc583b367be6a9c009a79b80b223432dfdc52a2dc76eaefceb577e8f0bf9a9722a08b61f268c994f3bfe928

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar1F9A.tmp

Filesize
164KB

MD5
4ff65ad929cd9a367680e0e5b1c08166

SHA1
c0af0d4396bd1f15c45f39d3b849ba444233b3a2

SHA256
c8733c93cc5aaf5ca206d06af22ee8dbdec764fb5085019a6a9181feb9dfdee6

SHA512
f530dc0d024a5a3b8903ffaaa41b608a5ccdd6da4ba1949f2c2e55a9fca475fec5c8d2119b5763cabe7ef1c3788fb9dcac621869db51d65b1d83cfe404fb4c27

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd369C.tmp\SpiderBanner.dll

Filesize
9KB

MD5
17309e33b596ba3a5693b4d3e85cf8d7

SHA1
7d361836cf53df42021c7f2b148aec9458818c01

SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd369C.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd369C.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd369C.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd369C.tmp\nsProcess.dll

Filesize
4KB

MD5
f0438a894f3a7e01a4aae8d1b5dd0289

SHA1
b058e3fcfb7b550041da16bf10d8837024c38bf6

SHA256
30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

SHA512
f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsd369C.tmp\nsis7z.dll

Filesize
424KB

MD5
80e44ce4895304c6a3a831310fbf8cd0

SHA1
36bd49ae21c460be5753a904b4501f1abca53508

SHA256
b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

SHA512
c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

Download Submit
C:\Users\Admin\AppData\Roaming\superclubpenguin\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
29ac7c51313774320c960254fab6e3a1

SHA1
1f6e651d9d8de668a8152e585025490bdfde61c1

SHA256
e2299d891bc66b307b577201369e29c6c1713da05c4bbb89f82a4829181c15db

SHA512
8d354aa938733b1424bdd5a8b40974aa0e10c35f10e586a34296c53c987a17982f6c54c81757f8ae94aa2c45a6c40081b45024c32a13229d138db2119a6ba11c

Download Submit
C:\Users\Admin\AppData\Roaming\superclubpenguin\GPUCache\data_0

Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Roaming\superclubpenguin\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Roaming\superclubpenguin\GPUCache\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Roaming\superclubpenguin\GPUCache\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Roaming\superclubpenguin\Network Persistent State

Filesize
1KB

MD5
05f075674410f438dc3b89a5142230a4

SHA1
bfaa5f83565939459fa4747e3cd13b018adb0775

SHA256
dd225fbace91b87d36eb846637ae40a6c7b9e033e85475d742274ea0206bf187

SHA512
1525aaaece9a80fa2da75dd85b77a6f75ecdc5d8dad07759c7b9ff024a67da0dee6283aa8fac5d47f7a5e1f4ff74883dd511ba36b66caa4878275d32c1f08147

Download Submit
C:\Users\Admin\AppData\Roaming\superclubpenguin\Session Storage\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Roaming\superclubpenguin\Session Storage\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe

Filesize
82.2MB

MD5
764264c9f6c17f8f04cfb0898bc93f5c

SHA1
8701d95d17e36d5d71f8f9acaf345a5eb05cb2b7

SHA256
a1b1149de247a8d14ccb711dfd39532c5d908a871a8f026757f5835211d575e8

SHA512
08a7f6a9cd90940771a213796ec6d34de057bcc8adaf88f943619a5a95dcecd1a62101934f6b7180f93e9a6c5b30b7e2f5cee6e1b3d7cd9385a3e7926e7b6eda

Download Submit
\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe

Filesize
82.2MB

MD5
764264c9f6c17f8f04cfb0898bc93f5c

SHA1
8701d95d17e36d5d71f8f9acaf345a5eb05cb2b7

SHA256
a1b1149de247a8d14ccb711dfd39532c5d908a871a8f026757f5835211d575e8

SHA512
08a7f6a9cd90940771a213796ec6d34de057bcc8adaf88f943619a5a95dcecd1a62101934f6b7180f93e9a6c5b30b7e2f5cee6e1b3d7cd9385a3e7926e7b6eda

Download Submit
\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe

Filesize
82.2MB

MD5
764264c9f6c17f8f04cfb0898bc93f5c

SHA1
8701d95d17e36d5d71f8f9acaf345a5eb05cb2b7

SHA256
a1b1149de247a8d14ccb711dfd39532c5d908a871a8f026757f5835211d575e8

SHA512
08a7f6a9cd90940771a213796ec6d34de057bcc8adaf88f943619a5a95dcecd1a62101934f6b7180f93e9a6c5b30b7e2f5cee6e1b3d7cd9385a3e7926e7b6eda

Download Submit
\Users\Admin\AppData\Local\Programs\superclubpenguin\SuperClubPenguin.exe

Filesize
82.2MB

MD5
764264c9f6c17f8f04cfb0898bc93f5c

SHA1
8701d95d17e36d5d71f8f9acaf345a5eb05cb2b7

SHA256
a1b1149de247a8d14ccb711dfd39532c5d908a871a8f026757f5835211d575e8

SHA512
08a7f6a9cd90940771a213796ec6d34de057bcc8adaf88f943619a5a95dcecd1a62101934f6b7180f93e9a6c5b30b7e2f5cee6e1b3d7cd9385a3e7926e7b6eda

Download Submit
\Users\Admin\AppData\Local\Programs\superclubpenguin\ffmpeg.dll

Filesize
1.9MB

MD5
181e4e41784a8068c834adc7b243c448

SHA1
fe3e5e6b32a518b94c16904c8b1ce2a9a6b91f06

SHA256
fc344c8da10544dab87911fb2431929d760df1dc2537eb96c50aedb8a7ca6564

SHA512
6d25688d63a4bda8c618bdcef2b5c9c91c637decb4cbf00bb3862e965f0ae5bcf84f65085f1d7420cbc8f41a4b98892fbcc5d8dc9440697d7f761251b7f50aba

Download Submit
\Users\Admin\AppData\Local\Temp\nsd369C.tmp\SpiderBanner.dll

Filesize
9KB

MD5
17309e33b596ba3a5693b4d3e85cf8d7

SHA1
7d361836cf53df42021c7f2b148aec9458818c01

SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

Download Submit
\Users\Admin\AppData\Local\Temp\nsd369C.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
\Users\Admin\AppData\Local\Temp\nsd369C.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
\Users\Admin\AppData\Local\Temp\nsd369C.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
\Users\Admin\AppData\Local\Temp\nsd369C.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
\Users\Admin\AppData\Local\Temp\nsd369C.tmp\nsProcess.dll

Filesize
4KB

MD5
f0438a894f3a7e01a4aae8d1b5dd0289

SHA1
b058e3fcfb7b550041da16bf10d8837024c38bf6

SHA256
30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

SHA512
f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

Download Submit
\Users\Admin\AppData\Local\Temp\nsd369C.tmp\nsis7z.dll

Filesize
424KB

MD5
80e44ce4895304c6a3a831310fbf8cd0

SHA1
36bd49ae21c460be5753a904b4501f1abca53508

SHA256
b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

SHA512
c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

Download Submit
memory/824-916-0x00000000055F0000-0x00000000055F1000-memory.dmp

Filesize
4KB

Download
memory/1756-978-0x00000000081C0000-0x00000000081C1000-memory.dmp

Filesize
4KB

Download
memory/2020-847-0x0000000003A70000-0x0000000003A72000-memory.dmp

Filesize
8KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

DNS Request

DNS Response

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.