Analysis
- user interaction
yes - max time kernel
357s - max time network
326s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
09/08/2026, 17:24
Static task
static1
Behavioral task
behavioral1
Sample
Ogulniega.Minecraft_0.0.9_x64_en-US.msi
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Ogulniega.Minecraft_0.0.9_x64_en-US.msi
Resource
win10ltsc2021-20260513-en
Behavioral task
behavioral3
Sample
Ogulniega.Minecraft_0.0.9_x64_en-US.msi
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
Ogulniega.Minecraft_0.0.9_x64_en-US.msi
Resource
win11ltsc2024-20260709-en
General
- Target Ogulniega.Minecraft_0.0.9_x64_en-US.msi
- Size 7.0MB
- Sample260809-vy135asfke
- SHA256 2e0fd7ff399228525e2441ea451ecda7ba371c39eecf22a62868df6be9abd5aa
- MD5 5af938b1b960db3ef39c4e99de13b4dd
- SHA1 62f566c367361f9129d907ed15b14580e2170f64
- SHA512 1f3d7a8be0bc43295f6348df825531e08b5d87b1134f036eb31d07ce1f84f1a8f6caa527fe85a0829a248b2e47917b9ef37fed5756357401caecddf78487f129
- SSDEEP 196608:g0DH4jiqzsiMb2PU8HQ0uGMWLVA0YERdFksuO:ghi4sidHGGMkADetb
- TLSH T15976334AF6C84372D84B64341A52DBB56B71EC748FB19B4713B83B641EB0BD0C63A653
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks computer location settings 2 TTPs 3 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation javaw.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation javaw.exe Key value queried \REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000\Control Panel\International\Geo\Nation javaw.exe - Executes dropped EXE 6 IoCs
pid Process 2152 Ogulniega Minecraft.exe 5456 javaw.exe 9260 javaw.exe 9872 javaw.exe 10216 javaw.exe 3760 javaw.exe - Loads dropped DLL 64 IoCs
pid Process 3992 MsiExec.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 9260 javaw.exe 9260 javaw.exe 9260 javaw.exe 9260 javaw.exe 9260 javaw.exe 9260 javaw.exe 9260 javaw.exe 9260 javaw.exe 9260 javaw.exe 9260 javaw.exe 9260 javaw.exe 9260 javaw.exe 9260 javaw.exe 9872 javaw.exe 9872 javaw.exe 9872 javaw.exe 9872 javaw.exe 9872 javaw.exe 9872 javaw.exe 9872 javaw.exe 9872 javaw.exe 9872 javaw.exe 9872 javaw.exe 9872 javaw.exe 9872 javaw.exe 9872 javaw.exe 9872 javaw.exe 10216 javaw.exe 10216 javaw.exe 10216 javaw.exe 10216 javaw.exe 10216 javaw.exe 10216 javaw.exe 10216 javaw.exe 10216 javaw.exe 10216 javaw.exe 10216 javaw.exe 10216 javaw.exe 10216 javaw.exe 10216 javaw.exe 10216 javaw.exe 10216 javaw.exe 10216 javaw.exe 10216 javaw.exe 10216 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe - Checks whether UAC is enabled 1 TTPs 1 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA Ogulniega Minecraft.exe - Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 207 raw.githubusercontent.com 208 raw.githubusercontent.com 209 raw.githubusercontent.com 213 raw.githubusercontent.com - Enumerates connected drives 3 TTPs 46 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\B: msiexec.exe File opened (read-only) \??\H: msiexec.exe File opened (read-only) \??\M: msiexec.exe File opened (read-only) \??\S: msiexec.exe File opened (read-only) \??\Y: msiexec.exe File opened (read-only) \??\G: msiexec.exe File opened (read-only) \??\U: msiexec.exe File opened (read-only) \??\E: msiexec.exe File opened (read-only) \??\G: msiexec.exe File opened (read-only) \??\I: msiexec.exe File opened (read-only) \??\R: msiexec.exe File opened (read-only) \??\U: msiexec.exe File opened (read-only) \??\A: msiexec.exe File opened (read-only) \??\L: msiexec.exe File opened (read-only) \??\N: msiexec.exe File opened (read-only) \??\J: msiexec.exe File opened (read-only) \??\T: msiexec.exe File opened (read-only) \??\Y: msiexec.exe File opened (read-only) \??\Z: msiexec.exe File opened (read-only) \??\I: msiexec.exe File opened (read-only) \??\Q: msiexec.exe File opened (read-only) \??\A: msiexec.exe File opened (read-only) \??\N: msiexec.exe File opened (read-only) \??\S: msiexec.exe File opened (read-only) \??\H: msiexec.exe File opened (read-only) \??\J: msiexec.exe File opened (read-only) \??\K: msiexec.exe File opened (read-only) \??\W: msiexec.exe File opened (read-only) \??\X: msiexec.exe File opened (read-only) \??\M: msiexec.exe File opened (read-only) \??\V: msiexec.exe File opened (read-only) \??\W: msiexec.exe File opened (read-only) \??\P: msiexec.exe File opened (read-only) \??\R: msiexec.exe File opened (read-only) \??\K: msiexec.exe File opened (read-only) \??\O: msiexec.exe File opened (read-only) \??\P: msiexec.exe File opened (read-only) \??\X: msiexec.exe File opened (read-only) \??\O: msiexec.exe File opened (read-only) \??\T: msiexec.exe File opened (read-only) \??\V: msiexec.exe File opened (read-only) \??\Z: msiexec.exe File opened (read-only) \??\B: msiexec.exe File opened (read-only) \??\E: msiexec.exe File opened (read-only) \??\L: msiexec.exe File opened (read-only) \??\Q: msiexec.exe -
pid Process 8100 GameBarPresenceWriter.exe 13940 GameBarPresenceWriter.exe - Drops file in Program Files directory 63 IoCs
description ioc Process File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-hu.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-ta.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-te.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-cu.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-hr.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-sq.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-uk.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-hi.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-mn-cyrl.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-or.hyb msedgewebview2.exe File created C:\Program Files\Ogulniega Minecraft\Ogulniega Minecraft.exe msiexec.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_1761554107\protocols.json msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-cs.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-en-gb.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-en-us.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-et.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-pa.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-sv.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-eu.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-und-ethi.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_122957575\manifest.json msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_122957575\Microsoft.CognitiveServices.Speech.core.dll msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-da.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-hy.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-sl.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\manifest.json msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_122957575\manifest.fingerprint msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-el.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-ga.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-lv.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-bg.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-ml.hyb msedgewebview2.exe File created C:\Program Files\Ogulniega Minecraft\Uninstall Ogulniega Minecraft.lnk msiexec.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-af.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-be.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-kn.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\manifest.fingerprint msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-la.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-pt.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\_metadata\verified_contents.json msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-de-1901.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-fr.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-it.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-lt.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-nn.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-tk.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-as.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-ka.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-mul-ethi.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-sk.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-gl.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_1761554107\manifest.json msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-cy.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-de-1996.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-es.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-mr.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-bn.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-de-ch-1901.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-gu.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-nb.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-nl.hyb msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_1761554107\manifest.fingerprint msedgewebview2.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-ru.hyb msedgewebview2.exe - Drops file in Windows directory 10 IoCs
description ioc Process File opened for modification C:\Windows\Installer\e586de8.msi msiexec.exe File opened for modification C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log msiexec.exe File created C:\Windows\Installer\inprogressinstallinfo.ipi msiexec.exe File created C:\Windows\Installer\{7D97F083-887F-444A-B58F-14F87375D25B}\ProductIcon msiexec.exe File created C:\Windows\Installer\e586de8.msi msiexec.exe File opened for modification C:\Windows\Installer\ msiexec.exe File created C:\Windows\Installer\SourceHash{7D97F083-887F-444A-B58F-14F87375D25B} msiexec.exe File opened for modification C:\Windows\Installer\MSI6F20.tmp msiexec.exe File opened for modification C:\Windows\Installer\{7D97F083-887F-444A-B58F-14F87375D25B}\ProductIcon msiexec.exe File created C:\Windows\Installer\e586dea.msi msiexec.exe - Event Triggered Execution: Installer Packages 2 TTPs 1 IoCs
pid Process 4448 msiexec.exe - Modifies trusted root certificate store through registry 1 TTPs 2 IoCs
A root certificate was added, modified, or removed in the trusted certificate store registry paths.
description ioc Process Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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 Ogulniega Minecraft.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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 Ogulniega Minecraft.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MsiExec.exe - Checks SCSI registry key(s) 3 TTPs 8 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr vssvc.exe Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 0000000004000000ee28096e8f31db0b0000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c01200000000ffffffff000000002701010000080000ee28096e0000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d01200000000000020ed35000000ffffffff000000000700010000680900ee28096e000000000000d012000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff350000000000000005000000ffffffff000000000700010000f8ff1aee28096e000000000000f0ff350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff3a0000000000000005000000ffffffff000000000700010000f87f1dee28096e000000000000f0ff3a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 vssvc.exe Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 vssvc.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A taskmgr.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters vssvc.exe Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters vssvc.exe - Checks processor information in registry 2 TTPs 19 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key enumerated \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision javaw.exe Key opened \REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0 svchost.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\ javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier javaw.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 javaw.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString svchost.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedgewebview2.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedgewebview2.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedgewebview2.exe - Modifies data under HKEY_USERS 5 IoCs
description ioc Process Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27 msiexec.exe Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28 msiexec.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry msedgewebview2.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307699395211197" msedgewebview2.exe Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E msiexec.exe - Modifies registry class 27 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\ProductIcon = "C:\\Windows\\Installer\\{7D97F083-887F-444A-B58F-14F87375D25B}\\ProductIcon" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList\Net msiexec.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\Clients = 3a0000000000 msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\380F79D7F788A4445BF8418F37572DB5\External msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\PackageCode = "5F5EFE0DABB8848419FED8F366884AF9" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\Assignment = "1" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\1EE3A6EAA1F1CFD50857396B4ACB2C7F\380F79D7F788A4445BF8418F37572DB5 msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList\Media\1 = ";" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\380F79D7F788A4445BF8418F37572DB5\ShortcutsFeature = "MainProgram" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5 msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\ProductName = "Ogulniega Minecraft" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\Version = "9" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\DeploymentFlags = "3" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList\PackageName = "Ogulniega.Minecraft_0.0.9_x64_en-US.msi" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList\Net\1 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList\Media msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\380F79D7F788A4445BF8418F37572DB5 msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\Language = "0" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\AuthorizedLUAApp = "0" msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\1EE3A6EAA1F1CFD50857396B4ACB2C7F msiexec.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Local\\Temp\\" msiexec.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{960BD0BD-5AC5-420F-969B-4410E75B3D1D} svchost.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\InstanceType = "0" msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\380F79D7F788A4445BF8418F37572DB5\MainProgram msiexec.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\380F79D7F788A4445BF8418F37572DB5\Environment = "MainProgram" msiexec.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\AdvertiseFlags = "388" msiexec.exe - Modifies system certificate store 2 TTPs 6 IoCs
description ioc Process Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 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 Ogulniega Minecraft.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8 Ogulniega Minecraft.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 19000000010000001000000076935b5c5a037216daaf8aac76df42c1030000000100000014000000d1cbca5db2d52a7f693b674de5f05a1d0c957df01d0000000100000010000000280cf6042c30a2646644ba7286a3aa971400000001000000140000003ae10986d4cf19c29676744976dce035c663639a0b00000001000000180000005300650063007400690067006f00200045004300430000006200000001000000200000004ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a53000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b060105050703080f00000001000000300000000b043572c899dec43efd590cfce610cf443a6315925ebfe589f7506907e44824608489581c7ca0e041458514cf1576142000000001000000930200003082028f30820215a00302010202105c8b99c55a94c5d27156decd8980cc26300a06082a8648ce3d040303308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374204543432043657274696669636174696f6e20417574686f72697479301e170d3130303230313030303030305a170d3338303131383233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374204543432043657274696669636174696f6e20417574686f726974793076301006072a8648ce3d020106052b81040022036200041aac545aa9f96823e77ad5246f53c65ad84babc6d5b6d1e67371aedd9cd60c61fddba08903b80514ec57ceee5d3fe221b3cef7d48a79e0a3837e2d97d061c4f199dc259163ab7f30a3b470e2c7a1339cf3bf2e5c53b15fb37d327f8a34e37979a3423040301d0603551d0e041604143ae10986d4cf19c29676744976dce035c663639a300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff300a06082a8648ce3d040303036800306502303667a11608dce49700411d4ebee16301cf3baa421164a09d94390211795c7b1dfa64b9ee1642b3bf8ac209c4ece4b14d023100e92a61478c524a4b4e1870f6d644d66ef583ba6d58bd24d95648eaefc4a24681886a3a46d1a99b4dc961dad15d576a18 Ogulniega Minecraft.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 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 Ogulniega Minecraft.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 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 Ogulniega Minecraft.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0 Ogulniega Minecraft.exe - Suspicious behavior: EnumeratesProcesses 30 IoCs
pid Process 4672 msiexec.exe 4672 msiexec.exe 1464 taskmgr.exe 1464 taskmgr.exe 2152 Ogulniega Minecraft.exe 2152 Ogulniega Minecraft.exe 2152 Ogulniega Minecraft.exe 2152 Ogulniega Minecraft.exe 1464 taskmgr.exe 2152 Ogulniega Minecraft.exe 2152 Ogulniega Minecraft.exe 2152 Ogulniega Minecraft.exe 2152 Ogulniega Minecraft.exe 2152 Ogulniega Minecraft.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1744 msedgewebview2.exe 1744 msedgewebview2.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe 5456 javaw.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
pid Process 1820 msedgewebview2.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 4448 msiexec.exe Token: SeIncreaseQuotaPrivilege 4448 msiexec.exe Token: SeSecurityPrivilege 4672 msiexec.exe Token: SeCreateTokenPrivilege 4448 msiexec.exe Token: SeAssignPrimaryTokenPrivilege 4448 msiexec.exe Token: SeLockMemoryPrivilege 4448 msiexec.exe Token: SeIncreaseQuotaPrivilege 4448 msiexec.exe Token: SeMachineAccountPrivilege 4448 msiexec.exe Token: SeTcbPrivilege 4448 msiexec.exe Token: SeSecurityPrivilege 4448 msiexec.exe Token: SeTakeOwnershipPrivilege 4448 msiexec.exe Token: SeLoadDriverPrivilege 4448 msiexec.exe Token: SeSystemProfilePrivilege 4448 msiexec.exe Token: SeSystemtimePrivilege 4448 msiexec.exe Token: SeProfSingleProcessPrivilege 4448 msiexec.exe Token: SeIncBasePriorityPrivilege 4448 msiexec.exe Token: SeCreatePagefilePrivilege 4448 msiexec.exe Token: SeCreatePermanentPrivilege 4448 msiexec.exe Token: SeBackupPrivilege 4448 msiexec.exe Token: SeRestorePrivilege 4448 msiexec.exe Token: SeShutdownPrivilege 4448 msiexec.exe Token: SeDebugPrivilege 4448 msiexec.exe Token: SeAuditPrivilege 4448 msiexec.exe Token: SeSystemEnvironmentPrivilege 4448 msiexec.exe Token: SeChangeNotifyPrivilege 4448 msiexec.exe Token: SeRemoteShutdownPrivilege 4448 msiexec.exe Token: SeUndockPrivilege 4448 msiexec.exe Token: SeSyncAgentPrivilege 4448 msiexec.exe Token: SeEnableDelegationPrivilege 4448 msiexec.exe Token: SeManageVolumePrivilege 4448 msiexec.exe Token: SeImpersonatePrivilege 4448 msiexec.exe Token: SeCreateGlobalPrivilege 4448 msiexec.exe Token: SeCreateTokenPrivilege 4448 msiexec.exe Token: SeAssignPrimaryTokenPrivilege 4448 msiexec.exe Token: SeLockMemoryPrivilege 4448 msiexec.exe Token: SeIncreaseQuotaPrivilege 4448 msiexec.exe Token: SeMachineAccountPrivilege 4448 msiexec.exe Token: SeTcbPrivilege 4448 msiexec.exe Token: SeSecurityPrivilege 4448 msiexec.exe Token: SeTakeOwnershipPrivilege 4448 msiexec.exe Token: SeLoadDriverPrivilege 4448 msiexec.exe Token: SeSystemProfilePrivilege 4448 msiexec.exe Token: SeSystemtimePrivilege 4448 msiexec.exe Token: SeProfSingleProcessPrivilege 4448 msiexec.exe Token: SeIncBasePriorityPrivilege 4448 msiexec.exe Token: SeCreatePagefilePrivilege 4448 msiexec.exe Token: SeCreatePermanentPrivilege 4448 msiexec.exe Token: SeBackupPrivilege 4448 msiexec.exe Token: SeRestorePrivilege 4448 msiexec.exe Token: SeShutdownPrivilege 4448 msiexec.exe Token: SeDebugPrivilege 4448 msiexec.exe Token: SeAuditPrivilege 4448 msiexec.exe Token: SeSystemEnvironmentPrivilege 4448 msiexec.exe Token: SeChangeNotifyPrivilege 4448 msiexec.exe Token: SeRemoteShutdownPrivilege 4448 msiexec.exe Token: SeUndockPrivilege 4448 msiexec.exe Token: SeSyncAgentPrivilege 4448 msiexec.exe Token: SeEnableDelegationPrivilege 4448 msiexec.exe Token: SeManageVolumePrivilege 4448 msiexec.exe Token: SeImpersonatePrivilege 4448 msiexec.exe Token: SeCreateGlobalPrivilege 4448 msiexec.exe Token: SeCreateTokenPrivilege 4448 msiexec.exe Token: SeAssignPrimaryTokenPrivilege 4448 msiexec.exe Token: SeLockMemoryPrivilege 4448 msiexec.exe - Suspicious use of FindShellTrayWindow 35 IoCs
pid Process 4448 msiexec.exe 2152 Ogulniega Minecraft.exe 4448 msiexec.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe - Suspicious use of SendNotifyMessage 32 IoCs
pid Process 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe 1464 taskmgr.exe - Suspicious use of SetWindowsHookEx 7 IoCs
pid Process 10216 javaw.exe 10216 javaw.exe 10216 javaw.exe 10216 javaw.exe 2100 OpenWith.exe 5456 javaw.exe 13976 OpenWith.exe - Suspicious use of WriteProcessMemory 26 IoCs
description pid Process procid_target PID 4672 wrote to memory of 3992 4672 msiexec.exe 87 PID 4672 wrote to memory of 4360 4672 msiexec.exe 91 PID 4448 wrote to memory of 2152 4448 msiexec.exe 101 PID 2152 wrote to memory of 1820 2152 Ogulniega Minecraft.exe 104 PID 1820 wrote to memory of 548 1820 msedgewebview2.exe 105 PID 1820 wrote to memory of 4108 1820 msedgewebview2.exe 106 PID 1820 wrote to memory of 4108 1820 msedgewebview2.exe 106 PID 1820 wrote to memory of 4108 1820 msedgewebview2.exe 106 PID 1820 wrote to memory of 1964 1820 msedgewebview2.exe 107 PID 1820 wrote to memory of 2752 1820 msedgewebview2.exe 108 PID 1820 wrote to memory of 2752 1820 msedgewebview2.exe 108 PID 1820 wrote to memory of 220 1820 msedgewebview2.exe 109 PID 1820 wrote to memory of 220 1820 msedgewebview2.exe 109 PID 1820 wrote to memory of 220 1820 msedgewebview2.exe 109 PID 1820 wrote to memory of 6084 1820 msedgewebview2.exe 116 PID 1820 wrote to memory of 6084 1820 msedgewebview2.exe 116 PID 1820 wrote to memory of 1744 1820 msedgewebview2.exe 117 PID 1820 wrote to memory of 2900 1820 msedgewebview2.exe 118 PID 1820 wrote to memory of 2900 1820 msedgewebview2.exe 118 PID 1820 wrote to memory of 4120 1820 msedgewebview2.exe 119 PID 1820 wrote to memory of 4120 1820 msedgewebview2.exe 119 PID 2152 wrote to memory of 5456 2152 Ogulniega Minecraft.exe 120 PID 5456 wrote to memory of 9260 5456 javaw.exe 122 PID 9260 wrote to memory of 9872 9260 javaw.exe 123 PID 9260 wrote to memory of 10216 9260 javaw.exe 124 PID 9260 wrote to memory of 3760 9260 javaw.exe 131 - Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Windows\system32\msiexec.exemsiexec.exe /I C:\Users\Admin\AppData\Local\Temp\Ogulniega.Minecraft_0.0.9_x64_en-US.msi1⤵
- Enumerates connected drives
- Event Triggered Execution: Installer Packages
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4448 -
C:\Program Files\Ogulniega Minecraft\Ogulniega Minecraft.exe"C:\Program Files\Ogulniega Minecraft\Ogulniega Minecraft.exe"2⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- Modifies trusted root certificate store through registry
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2152 -
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=2152.3712.123457409458566292693⤵
- Drops file in Program Files directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of WriteProcessMemory
PID:1820 -
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffb709bb078,0x7ffb709bb084,0x7ffb709bb0904⤵PID:548
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1700,i,15171140639676218047,5480229717297606866,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1724 /prefetch:24⤵PID:4108
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1376,i,15171140639676218047,5480229717297606866,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1724 /prefetch:34⤵PID:1964
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1728,i,15171140639676218047,5480229717297606866,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:84⤵PID:2752
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3608,i,15171140639676218047,5480229717297606866,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:14⤵PID:220
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=3796,i,15171140639676218047,5480229717297606866,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:84⤵PID:6084
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4556,i,15171140639676218047,5480229717297606866,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:84⤵
- Suspicious behavior: EnumeratesProcesses
PID:1744
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4324,i,15171140639676218047,5480229717297606866,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:84⤵PID:2900
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=932,i,15171140639676218047,5480229717297606866,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3868 /prefetch:84⤵PID:4120
-
-
-
C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exe"C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exe" -Dfabric.addMods=mods\1.20.1-vulkan -Dorg.lwjgl.system.stackSize=256 -Djava.library.path=C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\fabric-1.20.1-0.19.3-natives -Djna.tmpdir=C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\fabric-1.20.1-0.19.3-natives -Dorg.lwjgl.system.SharedLibraryExtractPath=C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\fabric-1.20.1-0.19.3-natives -Dio.netty.native.workdir=C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\fabric-1.20.1-0.19.3-natives -cp C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport-native-unix-common\4.1.82.Final\netty-transport-native-unix-common-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-handler\4.1.82.Final\netty-handler-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\code\gson\gson\2.10\gson-2.10.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-codec\4.1.82.Final\netty-codec-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\ca\weblite\java-objc-bridge\1.1\java-objc-bridge-1.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\commons\commons-compress\1.21\commons-compress-1.21.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\brigadier\1.1.8\brigadier-1.1.8.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport-classes-epoll\4.1.82.Final\netty-transport-classes-epoll-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-slf4j2-impl\2.19.0\log4j-slf4j2-impl-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\github\oshi\oshi-core\6.2.2\oshi-core-6.2.2.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\ow2\asm\asm\9.10.1\asm-9.10.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\fabricmc\intermediary\1.20.1\intermediary-1.20.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\httpcomponents\httpclient\4.5.13\httpclient-4.5.13.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\ibm\icu\icu4j\71.1\icu4j-71.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna\5.12.1\jna-5.12.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\patchy\2.2.10\patchy-2.2.10.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\httpcomponents\httpcore\4.4.15\httpcore-4.4.15.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-api\2.19.0\log4j-api-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\guava\guava\31.1-jre\guava-31.1-jre.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna-platform\5.12.1\jna-platform-5.12.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\text2speech\1.17.9\text2speech-1.17.9.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\it\unimi\dsi\fastutil\8.5.9\fastutil-8.5.9.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-core\2.19.0\log4j-core-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\sf\jopt-simple\jopt-simple\5.0.4\jopt-simple-5.0.4.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\authlib\4.0.43\authlib-4.0.43.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-common\4.1.82.Final\netty-common-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\commons\commons-lang3\3.12.0\commons-lang3-3.12.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\commons-io\commons-io\2.11.0\commons-io-2.11.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-buffer\4.1.82.Final\netty-buffer-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\fabricmc\fabric-loader\0.19.3\fabric-loader-0.19.3.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\guava\failureaccess\1.0.1\failureaccess-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\datafixerupper\6.0.8\datafixerupper-6.0.8.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\ow2\asm\asm-tree\9.10.1\asm-tree-9.10.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport-native-epoll\4.1.82.Final\netty-transport-native-epoll-4.1.82.Final-linux-x86_64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\blocklist\1.0.10\blocklist-1.0.10.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\joml\joml\1.10.5\joml-1.10.5.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\ow2\asm\asm-commons\9.10.1\asm-commons-9.10.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\logging\1.1.1\logging-1.1.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport\4.1.82.Final\netty-transport-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\slf4j\slf4j-api\2.0.1\slf4j-api-2.0.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport-native-epoll\4.1.82.Final\netty-transport-native-epoll-4.1.82.Final-linux-aarch_64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\commons-logging\commons-logging\1.2\commons-logging-1.2.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\ow2\asm\asm-util\9.10.1\asm-util-9.10.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\fabricmc\sponge-mixin\0.17.3+mixin.0.8.7\sponge-mixin-0.17.3+mixin.0.8.7.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\commons-codec\commons-codec\1.15\commons-codec-1.15.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-resolver\4.1.82.Final\netty-resolver-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\ow2\asm\asm-analysis\9.10.1\asm-analysis-9.10.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\fabric-1.20.1-0.19.3.jar -Xmx6144M -XX:+UnlockExperimentalVMOptions -XX:+UseG1GC -XX:G1NewSizePercent=20 -XX:G1ReservePercent=20 -XX:MaxGCPauseMillis=50 -XX:G1HeapRegionSize=32M -Dlog4j.configurationFile=C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\log_configs\client-1.12.xml net.fabricmc.loader.impl.launch.knot.KnotClient --version fabric-loader-0.19.3-1.20.1 --gameDir C:\Users\Admin\AppData\Roaming\.ogulniega\profile --assetsDir C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets --assetIndex 5 --versionType release --width 1280 --height 7203⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:5456 -
C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exeC:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exe -XX:+UseSerialGC -XX:MaxHeapFreeRatio=30 -XX:MinHeapFreeRatio=10 -XX:MaxGCPauseMillis=10000 -Xms8m -Xmx512m -cp local\crash_assistant\5456_1786296526826_app.jar;local\crash_assistant\5456_1786296526826_mod.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\code\gson\gson\2.10\gson-2.10.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\github\oshi\oshi-core\6.2.2\oshi-core-6.2.2.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna\5.12.1\jna-5.12.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-api\2.19.0\log4j-api-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna-platform\5.12.1\jna-platform-5.12.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-core\2.19.0\log4j-core-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\commons-io\commons-io\2.11.0\commons-io-2.11.0.jar dev.kostromdan.mods.crash_assistant.app.class_loading.Boot --args-file local\crash_assistant\5456_1786296526826_args.info4⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Suspicious use of WriteProcessMemory
PID:9260 -
C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exeC:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exe -XX:+UseSerialGC -XX:MaxHeapFreeRatio=30 -XX:MinHeapFreeRatio=10 -XX:MaxGCPauseMillis=10000 -Xms8m -Xmx512m -cp local\crash_assistant\5456_1786296526826_app.jar;local\crash_assistant\5456_1786296526826_mod.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\code\gson\gson\2.10\gson-2.10.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\github\oshi\oshi-core\6.2.2\oshi-core-6.2.2.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna\5.12.1\jna-5.12.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-api\2.19.0\log4j-api-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna-platform\5.12.1\jna-platform-5.12.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-core\2.19.0\log4j-core-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\commons-io\commons-io\2.11.0\commons-io-2.11.0.jar dev.kostromdan.mods.crash_assistant.app.class_loading.Boot --args-file local\crash_assistant\5456_1786296526826_args.info -gpuDetect5⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
PID:9872
-
-
C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exeC:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exe -Dlog4j2.configurationFile=log4j2-console.xml -XX:+UseSerialGC -XX:MaxHeapFreeRatio=30 -XX:MinHeapFreeRatio=10 -XX:MaxGCPauseMillis=10000 -Xms8m -Xmx512m -cp local\crash_assistant\5456_1786296526826_app.jar;local\crash_assistant\5456_1786296526826_mod.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\code\gson\gson\2.10\gson-2.10.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\github\oshi\oshi-core\6.2.2\oshi-core-6.2.2.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna\5.12.1\jna-5.12.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-api\2.19.0\log4j-api-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna-platform\5.12.1\jna-platform-5.12.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-core\2.19.0\log4j-core-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\commons-io\commons-io\2.11.0\commons-io-2.11.0.jar dev.kostromdan.mods.crash_assistant.app.class_loading.Boot --args-file local\crash_assistant\5456_1786296526826_args.info -bootWarningsVisible5⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
PID:10216
-
-
C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exeC:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exe -XX:+UseSerialGC -XX:MaxHeapFreeRatio=30 -XX:MinHeapFreeRatio=10 -XX:MaxGCPauseMillis=10000 -Xms8m -Xmx512m -cp local\crash_assistant\5456_1786296526826_app.jar;local\crash_assistant\5456_1786296526826_mod.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\code\gson\gson\2.10\gson-2.10.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\github\oshi\oshi-core\6.2.2\oshi-core-6.2.2.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna\5.12.1\jna-5.12.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-api\2.19.0\log4j-api-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna-platform\5.12.1\jna-platform-5.12.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-core\2.19.0\log4j-core-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\commons-io\commons-io\2.11.0\commons-io-2.11.0.jar dev.kostromdan.mods.crash_assistant.app.class_loading.Boot --args-file local\crash_assistant\5456_1786296526826_args.info -recursiveStart5⤵
- Checks computer location settings
- Executes dropped EXE
- Checks processor information in registry
PID:3760
-
-
-
-
-
C:\Windows\system32\msiexec.exeC:\Windows\system32\msiexec.exe /V1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4672 -
C:\Windows\syswow64\MsiExec.exeC:\Windows\syswow64\MsiExec.exe -Embedding 70451FE323DABE8B557E5E0309FC742A C2⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:3992
-
-
C:\Windows\system32\srtasks.exeC:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:22⤵PID:4360
-
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Checks SCSI registry key(s)
PID:2004
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /41⤵
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1464
-
C:\Windows\System32\GameBarPresenceWriter.exe"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer1⤵
- Network Service Discovery
PID:8100
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:2100
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵PID:6240
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService1⤵
- Checks processor information in registry
- Modifies registry class
PID:13160
-
C:\Windows\System32\GameBarPresenceWriter.exe"C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer1⤵
- Network Service Discovery
PID:13940
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:13976
Network
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2System Binary Proxy Execution
1Msiexec
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Config.Msi\e586de9.rbs
- Size 10KB
- SHA256 ecfeb0bb49d9b8a55dee0a7ee72021b262ece7e090dae5420aee48a77ab4488e
- MD5 e1751e0986ed6148cc2b240eb3358a45
- SHA1 e479c85f4caeab7424376e31d9637b1b5c4061b2
- SHA512 fa32bc66c5e1ded23d0191896ebb1acb8064baa640bf0542a6b87cb2eca8977c64fe989cf25f2cfa49baf827f3491cecaece9677e006a762ed83d2c1af2fd806
- SSDEEP 96:jmCP8qmw5q849CyMe2xzRUDlgCOTlSUDlgCgj5+qxTlQt45bB155VQ+55QutW55t:6CIw5q849+ewKpHGjpHG/VPnW9i5Lptg
- TLSH T1B32222067A30D1E3FDA75B38CB5317513B63D2EA8334578B05CD99605F523885FAA18B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Ogulniega Minecraft\Ogulniega Minecraft.exe
- Size 19.0MB
- SHA256 77a40b6eb759bac578bb1be29e380b5cd46543f2d5b5c56e2986e5d73f300239
- MD5 cbba43f12e0f3fd68078e51aa0c7b7dc
- SHA1 32946bb1c1123da97fe3311b09affa9a4c1e237d
- SHA512 0769121a61dd06806149453f784323289d25c078d466d2639fcf1dd38f7f03f11fb212b3744ee8869583222dbb529f08f32ca0a081543b819c17bb8726f82fb2
- SSDEEP 196608:Zqbp5AxAI0U44lH5rHSm/2rLVsmiQa/dyz5f:Ap5AxAI0U44lH9Sm/2rxVi5Ve
- TLSH T1441717217B5A99ACD09AC474834B8A724A7130DB0B35B9FF448496383F6DBF46F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping1820_122957575\manifest.json
- Size 76B
- SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
- MD5 ba25fcf816a017558d3434583e9746b8
- SHA1 be05c87f7adf6b21273a4e94b3592618b6a4a624
- SHA512 3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f
- TLSH T170A022833A0EC03B008283B0202383C08BBCAA28380E080E082338C0CAC2BB80000B28
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping1820_1761554107\manifest.fingerprint
- Size 66B
- SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
- MD5 06d2b48de0edcb3e022ed639f0fb0085
- SHA1 32f93d5a76998c407087269794026d1ea028828f
- SHA512 3c883d4c342f95f28e4a76c73ce7151e8a76d6f5b2c86f90a9ee7f9976ae7e1be94c963489b326d2ff5f7c6423b29552d9aa09b65c17396c2f66ce271fe19506
- TLSH T1F3A022E32CE8880EACEC0AAB020A0AFA0ECC8000020280C80008080220028F0008CA8C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping1820_1761554107\manifest.json
- Size 135B
- SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
- MD5 616eb6b585f16811dc5db5063e088cd7
- SHA1 fc50aa7b747f9367d2b177eab7ab12cdafdeea85
- SHA512 cdaf55640f0279c1cee06338912a07bc8bc8cb3780f70202363e25b327eb94a524c0acdd25cc2b22fbb1895d32af888857b17b3f0d7a2064f51ccdf1bab57f79
- TLSH T1BFC04C668D41DEAB00A647A56B295315E23B4B4B5044400A7AB5429C1A285964271844
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-as.hyb
- Size 703B
- SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
- MD5 8961fdd3db036dd43002659a4e4a7365
- SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
- SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
- TLSH T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-hi.hyb
- Size 687B
- SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
- MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
- SHA1 d0914fb069469d47a36d339ca70164253fccf022
- SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
- TLSH T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\hyph-nb.hyb
- Size 141KB
- SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
- MD5 677edd1a17d50f0bd11783f58725d0e7
- SHA1 98fedc5862c78f3b03daed1ff9efbe5e31c205ee
- SHA512 c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
- SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgk:p73HEUP8dsiinTThjy90VKk
- TLSH T1CCE319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\chrome_Unpacker_BeginUnzipping1820_926000579\manifest.json
- Size 82B
- SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
- MD5 2617c38bed67a4190fc499142b6f2867
- SHA1 a37f0251cd6be0a6983d9a04193b773f86d31da1
- SHA512 b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
- TLSH T137A022A0BC0880333E8803A8023E83E3C3BE3E0A20003C0002A33C8022EC33B3038E2C
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ogulniega Minecraft\Ogulniega Minecraft.lnk
- Size 2KB
- SHA256 92e16d88f6b30809207cb660166a1d3e562af06a7e3310ad1226d3da6f1b2e97
- MD5 d531357ff1f1434495e6a6d64c50ddf4
- SHA1 48532aa7a7c886b90c65eb58b13731e377220c2f
- SHA512 e03836805b689af3e35ab1b562350e414f2eec7ed183fe2d4e917636a7ae5bf034a040e28efb96fccbb88bfce3444086ebae2175d3b06c75a47c1a5136e541b1
- TLSH T11741112097F82759F3B3933B5EB11210AE73FC129A384FAF01A142C90976501997AF3E
- MD5 SHA1 SHA512 TLSH
- Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ogulniega Minecraft\Ogulniega Minecraft.lnk~RFe587088.TMP
- Size 2KB
- SHA256 8a75df1be1706ea5e3c5f733b6fb62da0fb287643a23f91bef08edb19f79ad33
- MD5 e92c48a475df7da7334482e44e3e9867
- SHA1 a3489bf4b51dc822cf5ad5584600965c2a4b750a
- SHA512 3afa193f1fab43df5470a4a31269fa614fa0314d374b3cb574a3205507863de7cce0e9cd7d2e2ff6ebc86d3c06402b5a7862dc7b77c68c8b962b535f1114c305
- TLSH T15341E15057F82759F3B3933A5E711610AE73FC129A745FAF01A142C905725019976F3D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\MSI1A59.tmp
- Size 132KB
- SHA256 7f47d98ab25cfea9b3a2e898c3376cc9ba1cd893b4948b0c27caa530fd0e34cc
- MD5 cfbb8568bd3711a97e6124c56fcfa8d9
- SHA1 d7a098ae58bdd5e93a3c1b04b3d69a14234d5e57
- SHA512 860cbf3286ac4915580cefaf56a9c3d48938eb08e3f31b7f024c4339c037d7c8bdf16e766d08106505ba535be4922a87dc46bd029aae99a64ea2fc02cf3aec04
- SSDEEP 3072:Kx2YbpcgwmiTPJDnCO+DATkURBnrskNwPj2:XXgwmY1CPx2XG2
- TLSH T1DBD39D02B5D0C473D9BE09390870DB229F7EB930DF909EDB636856699E702C19E35A37
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
- Size 3KB
- SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
- MD5 5e2067a92dcfcb05537479c384a89725
- SHA1 eeed29b07d865ac4d46629fddadad629d0ad4e2b
- SHA512 c96c5f9cb7a169ad91b070b567cf9fa8f35951ccc5aa930e97dbeccbeac27f7e9dde1379138c9ba6b0d10339f9cb053ef21f19f06d7560f97d5d23a27c8ed4f6
- TLSH T17D7184B7862088194E360AB4AA0DF10DF93702DF2AF598D3B27D455F1F712BB3946249
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Crashpad\settings.dat
- Size 280B
- SHA256 14980744bc1e97be80020d27eeb7ce133c456ffe0e50d528088099f4be4a2d04
- MD5 3b07498915c6e6db913d7e5246cfe263
- SHA1 ea3845712b43fd0f140b39c93955de019ca2f124
- SHA512 6a137807c159fef579068ad0406727f15d1123d33fb01ef3aa4e02c37c014b3947dcc05590cc29e27d8479e66cc9a15b0e0f891cd9f0882d750ce9c1dc45e713
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Crashpad\throttle_store.dat
- Size 20B
- SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
- MD5 9e4e94633b73f4a7680240a0ffd6cd2c
- SHA1 e68e02453ce22736169a56fdb59043d33668368f
- SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Code Cache\js\index-dir\the-real-index
- Size 432B
- SHA256 800829f56fb2106611eb33f2f87f297e9b58cfa27e1212d8f24b76f875fb9b67
- MD5 60c36f71930c8318c8c0256dab084c5a
- SHA1 2884b9676d612fca34f2c20851c285dfe4e54814
- SHA512 182a10051be743fd52ecfd69291bf743569f40da2d010ef8763237a390e9ad22cf53c2a1fdc770590314a28374164dca3dc7ac96497e658ec7a861247546d226
- TLSH T100E02B0B8055911BEF043BFCC0C83441BBB024D4ED534C25C7802FBD500D32E6800678
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe590cf6.TMP
- Size 48B
- SHA256 5d72917740f71e83cf0f83cee1a593b6f04c791424a4804feaa2137f3658b1b2
- MD5 ac2159524883796dac3f71d0c95682d5
- SHA1 19cfeea707afe850c473b37e37b6ad22e48150fa
- SHA512 c0f9524d9b9aed95ccc57cf8585641f31b5331382a2ed10d4d341aedaa1ec0123e4e62160f324839f9d93ea5e29255ac43c4d8df08ee920f6a8935139a10071d
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\DawnWebGPUCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\DawnWebGPUCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\DawnWebGPUCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\DawnWebGPUCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Network\Network Persistent State
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Network\Network Persistent State~RFe59c73e.TMP
- Size 59B
- SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
- MD5 2800881c775077e1c4b6e06bf4676de4
- SHA1 2873631068c8b3b9495638c865915be822442c8b
- SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
- TLSH T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Preferences
- Size 6KB
- SHA256 f35770f02ad57542e6f4697b48b8627fd76bb9c95ea089cb0bb7a499c6e9ff14
- MD5 7f1739494722cb64874f73b2eb262b5a
- SHA1 f9a74d9bb371d6b007ea78907fa61d2eac68cfdd
- SHA512 fe58337d8ceb4b66343e1c2f42c50f735b2a4c7067da48becf467d796c94ce5d49b98e0f91a1d1985a7f85ea1b33a84cf5c1de31df8124340f7fbd0fbd867bd2
- SSDEEP 96:sta05i++lq0Xb9Zff4Z8i0vhE4ktNm/7qx+WVHMSm+uecJh31idQjRP+gfBMOB:sta0UbrfAZ8paDw/S+WiTh3wdCPlBMC
- TLSH T1A1D1A7025E286D779CC7F619BA35BB17E2F6206365C40E58EBFC961C04E66CD230790B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Preferences
- Size 7KB
- SHA256 cdd79908d990f6842fc6719d63ac6195f753231c888aec88b5b624f33c01e52e
- MD5 30577e3d4a3642b2755a329152859453
- SHA1 c0ce777cf029b613f44c40310fc3af60813bf514
- SHA512 2b21a0137e87b831b503469aea0bdb9113afff1400eb9b9dddbb9b9fd93e6a980419f44ad4423acf25025b80f49b30328929561472fc7a7b93bb8e4b46f94f95
- SSDEEP 192:sta0UbrfsZ8paDw/S+WiTNIpodCP065KC:stvQrr3/VQobC
- TLSH T118E1B8025E286D775CC7F619BA35BF53E2F6206361C41E58EBFC851C05E66DD220790B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Preferences~RFe59404b.TMP
- Size 6KB
- SHA256 69604820d3b35206c5bd6eda67a2342ab25c10fd33bef021b7f6b7967b1ff07c
- MD5 7b122321e42dcb34bd8e2cbf0d0ca5e6
- SHA1 fecfe788550e39b70c39f8d01949362e1f0e4f44
- SHA512 955b8f146af93815a0d337687a172d356b83069ea147b6d3b82360c6fa4b578a76585e9f592ffcb94246c41235f1728f303afb060816c1130442799e936c4fc8
- SSDEEP 96:sta05i++lq0Xb94ff4Z8i0vhE4ktNm/7qx+WVHMSm+uecJh31idQjRP+gbBMEB:sta0UbmfAZ8paDw/S+WiTh3wdCPJBM8
- TLSH T196D1A7025E287D774CC7F619BA35BB47E2FA206265D40E58EBFC952C08E66DD230790B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Site Characteristics Database\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State
- Size 1KB
- SHA256 8cb8a398d51319e3e52ca589a9a7d2012dde9f67f5b467678f4a02bde79500c9
- MD5 cbfef0cbe96533fed4ccc75f8c2ab073
- SHA1 867996d517a1c81d3b387c6c5b0a54424cec3f17
- SHA512 a419b3d33d7ce1f3ddfcc465755279dd335cd5f9ce9bcb203ac8d6403b07a7664b0ef16714e47357bd72df5707cb441ce60ef79d4c5c5a185595270452695849
- TLSH T1FD316776E4A47F33AD926946B252BB5B3D212037C1159F04E1EE1B1C02EB6DDCA29C37
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State
- Size 2KB
- SHA256 7ed63a2699c528d3dc96c543e794ee921b7bbc5f3d5c3071d7ca42fe536adb4d
- MD5 16205e024eba6c9bda35252ce8e6dc40
- SHA1 6e84ef691537709d43a5d976521a058a78a3d713
- SHA512 920f8681ed22f852c3c77d61bb52fd2db68314732706523e842047a79634632bc62d86dedc75f69ce76fb0db2d0583132e82b523a5044e1b4da842c3bf4e6775
- TLSH T10B51B633A814AB3799E36944BA467F17AD356066C6623F60D5EE1B1C01DF2AD1302C37
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State
- Size 3KB
- SHA256 2ac73ad47dd3f01865b4dd6f43e6d53ac9b4387ce9ae9b797e8c4f0e5c224697
- MD5 197ef82a748ad52edd3a0b5f52ad512f
- SHA1 ac54511f8b5f622a2c5078036cafcb3e2c5c0d56
- SHA512 ead7da6e9fb58876b808f98c1454207fb041b451b3170ef4c0975ab4fcec47fc759d584b024eaa0b0f3088576043b570da999bf4af78cd79618746763e281c3a
- TLSH T1B471C526A864EA378EE3AD00B9863B1BBAA51037D5913FA4D5ED1F1C01DB3A81342C17
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State
- Size 16KB
- SHA256 c6456c9980c7db3ac9d974b1af39e41ac507862769948660f8c60cf9291dd210
- MD5 dd1cf471eaa63b74bd2f3411aa0eb85b
- SHA1 20caea450b52c891c1dd6883c33ff996a8fefcc6
- SHA512 78d3ff22fc5f397e98824fa399024c505b16918c89e1f3d810c1ce328e2f00f84208ea0e0c91be27c25ada68c5ec98212584ae25e298e3989a873addd147eb8a
- SSDEEP 192:z27DFOKH/2/aQWjYhwZ00i+z/kNWIU6ZwNj1Jfo/iVQ45hgj4k8NbNsooDUhGZqu:zm+aQikB+z/xvxjg/qhEANbMpGa2p9zm
- TLSH T120728E2B55797E33A5F3F9057A48574FDAB498B290C16EB849FD6F0906DB3E80302D06
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State
- Size 18KB
- SHA256 8f5bd8725f3f0901697a72e5af176bc2da53c1a809b6994c5d5ddadbd9d579eb
- MD5 c297f398f27b4796cee7116a773e2a0b
- SHA1 28988dc868018d1a1ddb63e61144ca863c21b2a0
- SHA512 532b951191e03e3ae76e174d452066839a111f28ff967ba5b52443351e65b2496b2baf8e7f89450ca35b257f47bab244e69b48d2cd4d6b54de0e4990795c0983
- SSDEEP 384:zx+aQikB+z/xvxjg/qhEANglpGMgmN6O2p9zm:A/UxvxjgC+D9N6O2pFm
- TLSH T1AA828E3A9479AE33A8F3A9457609678FDAF4546250C56EE88DED2F0C06CB3DD0707C06
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State
- Size 18KB
- SHA256 3bd566a966da6c00065d8855abfed7aed5cecdcc708a4d3c449589bc7cff2cb3
- MD5 56be40bbd1b602d036e650351bc96e7c
- SHA1 0d783926d4a068309bba57201998035224155570
- SHA512 299916bfee6e77742f3bf0d6669527367a84610c8af1dcfb399b5d6a8b6d5dc9f764391f4ac7f08533581bc75d3e2dfef22a215c167e4d214dabf1742940ef25
- SSDEEP 384:z0+aQikB+z/xvxjg/qhEQ3NgSPGMgmN6Oyp9zm:f/UxvxjgC+QB9N6OypFm
- TLSH T150828E3B9479AE33A8F3A9457609678FDAB4556250C56EE88DED2F0C06CB3ED0707C06
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State
- Size 18KB
- SHA256 29c6510e760cc5eef8e83b37a1658e08f528d28fff5be4a53cbb2d2758437d07
- MD5 bad6da39e7c84a50c8a6afa25c95117e
- SHA1 362325054959129d479d529c0e850ac80aa8f861
- SHA512 f569d0717f2790209c6224b25b2cc3f78440b59192a8af2e45158358661c21b4363d127afc615b17840515891e763165e75e7acf035094e2194882b46ee0e5c9
- SSDEEP 384:z7+aQikB+z/xvxjg/qhEANgSpGMgmN6O2p9zm:W/UxvxjgC+G9N6O2pFm
- TLSH T125828E3A9479BE33A8F3A9457609678FDAB4546250C56EE88DED2F0C06CB3DD0707C06
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State~RFe58a071.TMP
- Size 1KB
- SHA256 d1e330ff477b1f27ab43d60ba99ff667fbabf2238845d542348697faa3b63e9b
- MD5 501c4573ef5188a68f4b3cd3c3243f9d
- SHA1 e060d0e32e47eaf21eda5fd005cba8c33f06f911
- SHA512 9591f18c94ac8cff69a7fa7de87221d8078ad5c068c1c13d62aa764e7c96b4ed54706dc41c0f94ebd2aa5ae41c0307d462ef84ce9f1f1a99cb1f273fb5153ab6
- TLSH T179211236D8A46B76AD525846B252BB4B3D10607AC2149F05E0EE171C02DB5DDCA7AC37
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\java.dll
- Size 144KB
- SHA256 18b105254c16e1d83614ff4e32cd62ce402fbe6339bdd1b24ccc7d999fed7f5f
- MD5 59c9bb7a3cb27b3a94b721283788fbf5
- SHA1 8d97d4f0694e3b8851f92c2efb2f1538be9553f7
- SHA512 12ecb29b55181b729cc24e2484d78857df68f80d3dbc89ceb75c13d0bffbfec6ea5ab8113b4c33f8e25296c97791ee311d886b8b9f9b6c653238a90a27d350e1
- SSDEEP 3072:CYID3sxlejDPQL8HDIHsHtk1tI9SZLuV9c0FqL8LrbS/1qCn+vqX:CbDcjs+3I0LbLYFqX
- TLSH T1DBE33A0BB24240A2F85AB6BC701A910BD37A7461012CD3FA47E58A9F9F5F7313E97791
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exe
- Size 49KB
- SHA256 767e6219738867eaa40cb6d80edb6f17090558b67ce101a00e27b99cdaac2277
- MD5 37fad9adeb9799c904e763a6321c40dd
- SHA1 1d5354b9d006545ef8bf3c9bdb92dddd9d8bcf69
- SHA512 1b67c29e4f6f1ab81544f0eaa809a8487a8fb01f8200a6d81bb8ec26825507d459f2d8444faed75efd8fc6776023c36211b7124ff110e694b11df7af3616edde
- SSDEEP 1536:EmBEBM5RdJ5R3sozkt5RA3EH5J7VIvPh:Hb7k/IEZJ+v
- TLSH T110337D57AA082C81F42FC4F198A7752645B4BD032FD1A3EB7DC6B21E0871391A9276DF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\jimage.dll
- Size 33KB
- SHA256 f01c057da0222bc70a7f904c3104dedfc6f268446ee797c6dd70f9651a52265f
- MD5 d035982c15591784dce2ec90e5d6d34c
- SHA1 959f8800aafeac4b08ad3a0f83565429e2a47269
- SHA512 83735427b6a5c8e5337aae60820b54bc614d24403707f2172381511453e3012a7780aa7c605eb9bd3beb1b9653e780601a8cbd95869806e1405b075462958f05
- SSDEEP 384:mXEYMr5gSz7lVypm4PcySd9a0oDGkyvRs1NyEIYi2mL4/y8RFvIIvZ2pPkkOC:m0bjypFG7a0oDGHvRsqYiDLk5kIvkPk
- TLSH T133F26D56EA445C59DD27E63CC4AA9A1FE6B2F8525F51C3CB1B20825F0F233803B6C7A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\jli.dll
- Size 87KB
- SHA256 5d6a3581649cf281a2a4db2aeff53ccb1134b45cb04fa282efa7eb9a58cf5b79
- MD5 3c7cce26a5adff02441a5a3ce6a22bcb
- SHA1 d19a1524e42740e77d63cca73d939f49087f8b02
- SHA512 369696704ff4b3a729d4357d990d4c2dad2a2beae99b3b94e193a44e206321d387e2eb29affc0b1879164342dbf1422ce21bae84c991ef7a1d04d604a8c39d0e
- SSDEEP 1536:FDwJp5pu6D8oAy3htz7KmkquoWT0fdxIO6RYXtGIfm7VIv4r9Q:FD6p5pr8oAyv/TuJT0lb6RYXgIfm+vCy
- TLSH T1A0938E9B53E021E0DEB785B8D9B05A0BD3F1F0562761838F136885AA0F637527E1CBD9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\jsvml.dll
- Size 849KB
- SHA256 d0971a028ff3e94ec749e5ab62abfc4d883b1c85550521ac120b622982fb8114
- MD5 8b7560d16ee886e9d5a0df632769a570
- SHA1 850b2f271af7c8a62caa8980ede9de0411054868
- SHA512 1d01f505673e341ff0154ddff0fd351b9f3a1a4988aff482a9fc75ccfe2556f7a76cbb73eb0a4931794886e43c867e3e97248126ba84ea789b13b28059ba4298
- SSDEEP 12288:WRybOUKnvJNeCs5wHuRpj/V71AVNV+Ssc3:WobO7JN3qwHgpjN7wj+9O
- TLSH T19005AF82F81284CDC03534B024FFBD95A91A1CE941BC0EB32772AE9D2AFD7467957A74
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\msvcp140.dll
- Size 561KB
- SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
- MD5 72f3d84384e888bf0d38852eb863026b
- SHA1 8e6a0257591eb913ae7d0e975c56306b3f680b3f
- SHA512 6d53634bc51bd383358e0d55988d70aee6ed3897bc6ae5e0d2413bed27ecff4c8092020682cd089859023b02d9a1858ac42e64d59c38ba90fbaf89b656c539a6
- SSDEEP 12288:rSTTigI46Bb3SUPvRgrKtzL4oaQEKZm+jWodEEVPLwtQB:rUStZaQEKZm+jWodEE9CQB
- TLSH T1B9C41A23B74905A0E195E3B8A1878316D7F1BC4A8312A3C792FBD66D2F673D1673B250
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\net.dll
- Size 96KB
- SHA256 aa178fbeb19980dfbb6827b3b2532cd110d585192041883032bf2dbb20e4785d
- MD5 898fd821991d994b18a28e93a1156e06
- SHA1 3824baa8c162c5f07abaeb32fb9531efe26f56a4
- SHA512 fb80c5354cbf8dbe6c4edfc0a13a669ecfd36d4a57738c88ebfa530738950c5798579e60fdb6ae59b2e229a213eb704b2239cea95c082037e6f061b1bfb3e43e
- SSDEEP 3072:gPSfwd6sn+hIcB/lRXsm+xd3MXf9EZC19AD+v1:g9dnni/lRXspJMv9T9z1
- TLSH T1C1A35B05635824D5FC77D2BC8696821BD7B3B0B02610839F13A6C66EAFEB7713E19781
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\nio.dll
- Size 78KB
- SHA256 1d3f193e94d404a18caa24440e61af652ec705258f5fa5a3cb90bc790e9b98ba
- MD5 15587b4f8fc7619f749bf9e8fb6909d2
- SHA1 6eccfad899dd4c9352851a56e20980f708c86e0b
- SHA512 ffdd9c02347d83e64cc3d5e04e9f2ee00aa72db880688d2675cae6c5bd218fdd480c9c762f298737df8a9499c561dc8b0426c9db651cf92648aa3de7552004a1
- SSDEEP 1536:w0p78LdqTFVd44arFkE4WdZJI3L4W2supMTlYG7VIv8:w0pqIFz4rtDZK3L0pMT+G+v8
- TLSH T124733AA25364849BE82AB53C429A5747E333FC514510A35F5368CB659F2F2B33E3E782
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\server\classes.jsa
- Size 10.6MB
- SHA256 8347a88483e44b9acd4ad1edf78d0b5519c999f15d5548add755b551d12ce2bc
- MD5 812cbb9991bcaf72c90082bfcdc107ba
- SHA1 ea3b67387fcbf55deb978ae455f394b5c846b6ba
- SHA512 29b1cbb6738d5bd8e6753a5a0b9346b0fc777952559d865bdb0ccdc1a75f7d55f0588036c02e69180ffb7cebeaaac6238872cb340c148eb3f17987a1c9218ede
- SSDEEP 49152:hh6zkayA+JlVh2fOSl0uc2l/lSRTH3Z8Dut7:hh6z5ih2fOSl0Al/WHI
- TLSH T1E7B6E45BF550B653D53887758AA783A0A334B862AB4387C73784E37E9DC32D44E42BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\server\jvm.dll
- Size 12.1MB
- SHA256 5539382b75556a9873fafa2d8b7d0b36b169ac436a3608467da4f74c2600cbce
- MD5 edfea9605fcc209be410d46a7697f795
- SHA1 7737eef09bf637d485838eecf9fc696b787120ee
- SHA512 c6de3f9120f057b366e00937dbb346fdfec8922216826dd67f04e196e8b6e18d8aa63c959a7e0787d9052994c9567ce17d9866bcf30fae623f6e0cb88c329301
- SSDEEP 393216:svBYrTJNjaUoY6kaNNyDAQdtzz9m8RQ/n2uecNvB8Mt4FDQnheN0HDYRnLapyxZi:gh4Vw
- TLSH T105D67C1BA27480D5C82BE178C62F5A0BD7F2B4644374DBDF11A8465D2F63BE59A3E320
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\vcruntime140.dll
- Size 117KB
- SHA256 02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a
- MD5 caf9edded91c1f6c0022b278c16679aa
- SHA1 4812da5eb86a93fb0adc5bb60a4980ee8b0ad33a
- SHA512 32ac84642a9656609c45a6b649b222829be572b5fdeb6d5d93acea203e02816cf6c06063334470e8106871bdc9f2f3c7f0d1d3e554da1832ba1490f644e18362
- SSDEEP 1536:dI2v39UXigCBs29DdxfggO6vMMKZsY2ofRjoecbdhUwdJTzmZhTzC:diwskD8B6vMMEs5oGecbd2wHT0Te
- TLSH T1FBC38C4672A042FBD16AC274C1E35E17FB75B84487A0A7CF03A58A690F53BE09E3D385
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\vcruntime140_1.dll
- Size 48KB
- SHA256 7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637
- MD5 2bd576cbc5cb712935eb1b10e4d312f5
- SHA1 dfa7a46012483837f47d8c870973a2dea786d9ff
- SHA512 abbd3eb628d5b7809f49ae08e2436af3d1b69f8a38de71ede3d0cb6e771c7758e35986a0dc0743b763ad91fd8190084ee5a5fbe1ac6159eb03690ccc14c64542
- SSDEEP 768:IzzO6ujT3MbR3vXCz6S5Mq83yJ9d3+DuO9zUgElq9z6m:Fq/XuA3o9dgzUZWz5
- TLSH T17C235C9457784086D59F95B0C1D6EE537E7CFA964B00928F0BA1E1882F637D0EB3D22B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\zip.dll
- Size 87KB
- SHA256 2cc26c530a65b8a839e40ce820565e531fefcc5a207822e09f7a073fb8676b70
- MD5 9977d24ae02799a76ce20f94cceea1cb
- SHA1 4c6de3098f832d2e143e0e2cc377616980fb8808
- SHA512 7fc85260d07ea4246ff22aad1f22b16c8a76c963cbfbccc97ffe6ddfc8ba5eaea3ad8ce013928c690ba315e0c41fb2cbabedbd6190a6ee26428d12fb4069086e
- SSDEEP 1536:ygM3+is9MZS35tDMqiCH353CUKfltXIOQIOhG6rFK7VIv:DM3+isaY3jMqirUeL5GhG6rFK+v
- TLSH T1CF939C5589A05295DABB85B0C9F20A3FD3BAB01117D0578BA35C879A2F533613F483FE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\legal\java.logging\ADDITIONAL_LICENSE_INFO
- Size 49B
- SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
- MD5 19c9d1d2aad61ce9cb8fb7f20ef1ca98
- SHA1 2db86ab706d9b73feeb51a904be03b63bee92baf
- SHA512 7ec63b59d8f87a42689f544c2e8e7700da5d8720b37b41216cbd1372c47b1bc3b892020f0dd3a44a05f2a7c07471ff484e4165427f1a9cad0d2393840cd94e5b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\legal\java.logging\ASSEMBLY_EXCEPTION
- Size 44B
- SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
- MD5 7caf4cdbb99569deb047c20f1aad47c4
- SHA1 24e7497426d27fe3c17774242883ccbed8f54b4d
- SHA512 a1435e6f1e4e9285476a0e7bc3b4f645bbafb01b41798a2450390e16b18b242531f346373e01d568f6cc052932a3256e491a65e8b94b118069853f2b0c8cd619
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\legal\java.logging\LICENSE
- Size 33B
- SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
- MD5 16989bab922811e28b64ac30449a5d05
- SHA1 51ab20e8c19ee570bf6c496ec7346b7cf17bd04a
- SHA512 86571f127a6755a7339a9ed06e458c8dc5898e528de89e369a13c183711831af0646474986bae6573bc5155058d5f38348d6bfdeb3fd9318e98e0bf7916e6608
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\lib\jvm.cfg
- Size 29B
- SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
- MD5 7ce21bdcfa333c231d74a77394206302
- SHA1 c5a940d2dee8e7bfc01a87d585ddca420d37e226
- SHA512 8b37a1a5600e0a4e5832021c4db50569e33f1ddc8ac4fc2f38d5439272b955b0e3028ea10dec0743b197aa0def32d9e185066d2bac451f81b99539d34006074b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\03\0350aeae0132a9a0b08532250861fbe2208d9f78
- Size 14KB
- SHA256 1cc999aeaa9f92549332a50ca319c04eae9be57246f489a7fd107e6acb0ff921
- MD5 29de7ae2d41c5046b361545d116d85ed
- SHA1 0350aeae0132a9a0b08532250861fbe2208d9f78
- SHA512 c18d89e1f77bb1050ab551c1ac37a62862a24747998f987e01c5aff51f09158150063a5233b23a98871ae2d5c1ff511c9de78e70dca40e093623c4b9c2768615
- SSDEEP 384:StD7dm9TT6qgkbXDlkZAJln+OjxSJKQwOSXTCFdi:SaTWqgGBkmJlnXNPQwOgz
- TLSH T17962C066C5266006F036317BB87469314BD49E346FE0A9C71F3A24BF9A3B224769C4E9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\14\14b3534e2622470a71dbe69474c15e6a233cc1c6
- Size 21KB
- SHA256 73e971f5d04a9d412575178c0514cea591a2a78a9df0c72567ba297643c33e8f
- MD5 a479c50c69cfcfe6c02346a4d3ee4bc7
- SHA1 14b3534e2622470a71dbe69474c15e6a233cc1c6
- SHA512 ac369fd5412026b623e1a99dc908944da38bde19caf3e4c6ca14cc966d718a4261124b648af7846b62fe9c4d7fa838dfd3dcd55f52659ee3f71dec991f50a5c8
- SSDEEP 384:2ktDwaHsNaeaQaqdzb8QvaxEFQpUnOxwA1mlRDKQJ0ZQ2yheO+2mVg7vsmBDQkA1:2kVsFavS8kah+n0wA1mnDQ/vCbl5A1
- TLSH T179A2C0E9DA788981FE133739B03117F77E81398096D411DEF7E9B1E91A29D21A440E8E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\1b\1b5871a3af4dc425f20f9c1e06297f5fff2f3545
- Size 11KB
- SHA256 0cf5bf9d988f2a675554c0976b1672024ccc38620a07154682b6183b374df0f1
- MD5 c64eb35403e015079de6b09c9d62e3de
- SHA1 1b5871a3af4dc425f20f9c1e06297f5fff2f3545
- SHA512 8d85963e0a439d5571a6f272dd186496da666d9649496a3a9ca07d6e8db8ea6045c7663cf249971008bb452edef5e9118722968448a2b24621ccc76eb43553c4
- SSDEEP 192:EMttxOqdm9TTYlqg12M3FCu13v0Pdk2CGtvw7yn3LAUk5S2tQw8Pxb:rtD7dm9TT6qg12M3Frpv2utGN3LAUk5E
- TLSH T1B442BFD76C39B86FD22360B63AB891010FF0F974339005DBE27597B68BF2B817255689
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\55\55da1856e77cfd31a7e8c3d358e1f856c5583198
- Size 4KB
- SHA256 09d5879722c54c86d39d83df919f7f712ed92044ffb5b0a6757b9fc2e02281a3
- MD5 db6deee4c221859885a69a10fb062467
- SHA1 55da1856e77cfd31a7e8c3d358e1f856c5583198
- SHA512 146a3189403c9437b6e74ed754ddd8d6694f6cd375c7c687ba77f0a97e7037df31df7c5123eeda260e3bdc163e637bcdff418e6a468a43188c9a72736b552fd2
- SSDEEP 96:gaBVAfY5gK6f9bJdnieRgdaUjuweDbAPPPPPtPPPPPPPwPPPPPPPPPPPPPPPPPP8:gajAg5oV9dnrgXjuvAqFikDtAae1ag
- TLSH T178A129E5DCB0B1C7FC4B307B725803E82AA33E84A56ED6D6BB1409851DBBDE106B4589
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\56\56c1d0ac0de2265018b2c41cb571cc6631101484
- Size 4KB
- SHA256 139fc234e51f7825fcdedf10c93d8d60c59df9b4955334f409a624e4b3e6bfbb
- MD5 04136fa704ddf7b6a0d5101adb0de640
- SHA1 56c1d0ac0de2265018b2c41cb571cc6631101484
- SHA512 d0acce8422bee523dac86ca130bfab55e2e0e50906b47ae599d4f5ec0d0627e5c4ef263c77c708586ab4b32786f8aca72f3d39c49926a09a2d5277e7652e4373
- SSDEEP 96:SVAfY5gK6f9bJdnieRgdaUjuweDbAPPPPPtPPPPPPPwPPPPPPPPPPPPPPPPPPPPs:cAg5oV9dnrgXjuvAqFiwotx5RGW83s
- TLSH T123A15CD9DCF091E5FC0730F3B1260BD03AA17E84AA96E6E5BF4106895C67DB12374126
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\58\5887d10234c4f244ec5468080412f3e6ef9522f3
- Size 6KB
- SHA256 a0d603f69ad58662e688d74b9ca2f345eebc0938b4af954f16840adf436fe8d9
- MD5 1545455944217e6467c30bc9cf0ba0f6
- SHA1 5887d10234c4f244ec5468080412f3e6ef9522f3
- SHA512 f27e519c219c4d3053c698ac641dc6e252cc208e83b004e0db7fb3015cb9fe5f99bb7739d0b16337f03379dd5775c29456c7ae4f37b15c74b1c851b620df56d3
- SSDEEP 192:rDJomrimXOct5g6kf8npoBhieO0y6AIEVG:/imzp26zn6hDOPIgG
- TLSH T149D17CEADE30E4D6EC0531B25A6C0E68BF96BA600234E2EADF54531F08B7D532DF1158
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\5f\5fd568d724ba7d53911b6cccf5636f859d2662e8
- Size 4KB
- SHA256 8a716f2a3cbfb5d330d3aa9999ff56f0636cf388991caa06d866576989c9f36e
- MD5 1dcad8cfe89774102ad3dd284a2f6d6d
- SHA1 5fd568d724ba7d53911b6cccf5636f859d2662e8
- SHA512 09b45d02b1af69500c616386867a9cc9a0a925007c7bc4419ab90463316511b3083400cd176b8b0d0ee3d6e31cc837ba10a31128d22bccc5e2a8cc556666ae8f
- SSDEEP 96:2VAfY5gK6f9bJdnieRgdaUjuweDbAPPPPPtPPPPPPPwPPPPPPPPPPPPPPPPPPPPx:4Ag5oV9dnrgXjuvAqFiZIjoUaI1
- TLSH T16CA12ACADC7099C6FC4B32B775591BD43BE13F48A566E7D6FB4021980827DA0437461E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\6a\6a908e7c7d61e01bc4223b4991820bfc56f84c5e
- Size 7KB
- SHA256 bdf31938067bc0e93acbc4ea0c122e6811d6192ac783505f8a28154f97811949
- MD5 2417fd4837472466b995c85a7907878d
- SHA1 6a908e7c7d61e01bc4223b4991820bfc56f84c5e
- SHA512 36d6df94e71df90cafc56f236fb5e24f7ab5351195b2b00eee394440c5ac79abbb3f9c8a2430dc61a9b6f07246d38afb0bba680271411e31141317f97fceb1e7
- SSDEEP 192:iXDJomrimXOct5g6k3FFCN07DQwYYfQONDrCSuAHB:Aimzp26mFUCYavxh
- TLSH T1BFF19DE2CF40E444CD9AB23983A107D52FA377A88828B3E5EBDD163F09B1DC659D0514
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\6e\6ea4e448fbc2a079acb0cf3564273083dadae165
- Size 9KB
- SHA256 7e1199a39e8c088612dffc5b4ab172bbc6cdb6213c6912cbd61bece1c688c9b5
- MD5 a1768252e718e04da8be080972afab61
- SHA1 6ea4e448fbc2a079acb0cf3564273083dadae165
- SHA512 fd57b105413aad4f34dca5f4011d4d23e5a8d0bb62f4bc0a5ae64eee6f60b8a57406e3ab9ad1df3bded4336736b02b84c3222f4ba724569cbff5348ce7bb701a
- SSDEEP 192:OXDJomrimXOct5g6kzaPhOZhZ6elQHifvoq2QdeqylOLLAXY5:8imzp26bhOHZ6elQHifTDslqAXS
- TLSH T11012AFF7DAD1EB07E513727096C50954EF732B810530EADAB62C06261C77DCD581953D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\82\827d71834e69954e0a7fd7748998332e0b619d29
- Size 9KB
- SHA256 0cb98a5f26379959daf5710f40adee69aa6f6bd0d607267ca43f9677ad31cffc
- MD5 d11fbfbe2bab53a8db38ca1e08182613
- SHA1 827d71834e69954e0a7fd7748998332e0b619d29
- SHA512 e8c8935a74d3fb5a29095d677684405fd9199cc2b1130612d41715f1ceb9b74c59043073c38d23f3701120edeaf4d0b5362596d1da89cc9a7957f4cefff57d2d
- SSDEEP 192:5XDJomrimXOct5g6koPiKn2eGqf9MQjubFx2jPyVm19mjcqd7AB:timzp26dF/GW2nbFQjPidEB
- TLSH T1D912AFF28E11E0C4EC4735F922750DA8AF821B748475E6DA975C173C18E7F99DAC118D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\8e\8e3b07adf3b09ea60e82062277fe301205d03421
- Size 15KB
- SHA256 a582b6441d740b826b362943f3a9cde320aa78dab5fd9261e2e33da9883e3404
- MD5 7f0cfe36c692c0014b60327027c46120
- SHA1 8e3b07adf3b09ea60e82062277fe301205d03421
- SHA512 abb3bab0d93d89cedf83a6cf73aac05356f6c0a823080fba800b3ffced3712cc4d4513d86dcafee71c999f3e983733e0dceab4741fe85c582038fa1753ebaf2b
- SSDEEP 384:7iJKXg1/E6cIOFz1q6jTOzleczdohgCoFllpuHTuDnnViNF2:E/E62pqYOlZGK4uDn4G
- TLSH T1AA72CFC4CEF0A499EC67347BCA700A22BA7BC92415904BD2E4A46233C52697D9D591BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\95\954f82c6da9670f1383b4d0002061ebc1536c35a
- Size 11KB
- SHA256 2ac0d1f1564ea3ed904d6923156fea3153147b3f16b733416760ae86e384a549
- MD5 d0ae5985e40c4fa69cfceebad3e2c4aa
- SHA1 954f82c6da9670f1383b4d0002061ebc1536c35a
- SHA512 61a8f84d6d73fcbaf46ecc9d81c9ac439591e776fe50e261156e14e71ad7ad093e944ff79ec48057ecbf0f271f3da9dc8c257ebd41ad8dbc98c89282a5212842
- SSDEEP 192:w9DJopTxIXg1fnEObzcoIA7hH/Zje9OrZQ93gzmfhpQd3XKQPJDap+UsH1V:KiJKXg1/E6c6VH/Z6OW9XfPCHXBute
- TLSH T1C0329EB4CBF5E1BDDD18B4B4E59406B83FD6A2659D9C92F0BE1C1B350C02741A5AD0E8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\9c\9c137787095596d770aa3e4f0fe4f9de1ed0b635
- Size 11KB
- SHA256 f568609506abf8c07cbd95164eac24c8bdf9a73161864f84fdb50877a8734b06
- MD5 f961d3890ff93584572d3ec328d4de8d
- SHA1 9c137787095596d770aa3e4f0fe4f9de1ed0b635
- SHA512 06b65efaec64294896108026ba855cf40c93a1bac6d2e44f56ac4bc85b02ccd658e1119e6f3f1cc909917d8826ed6e76657c1c7ad9551c3f5d65e2b096e9c0e7
- SSDEEP 192:1MttxOqdm9TTYlqgCdmT4RM6IjFiehKIsbfK3qjWjdoHXxgo:StD7dm9TT6qgCdnnKFB4y3aUdoh7
- TLSH T13932B0B6D815F2CBDD912170E26F7B245AD5A831F3A05ACA4F3512770BE7671B008558
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\9c\9c63f2a3681832dc32d206f6830360bfe94b5bfc
- Size 4KB
- SHA256 ac49293ab32aa3154eb5c1251e3175a55d28f9e6866bf74fa76c2cefdf6cc40e
- MD5 62459d5e2818252fc2ecdf2c18dcdcbc
- SHA1 9c63f2a3681832dc32d206f6830360bfe94b5bfc
- SHA512 429897cde2e4f4307fb042eed6b987046e420aecdbd5d78acf3736b9a0284bc8429eab5109c96b39bd604f2a59390d69772dd42921c173ecc4fbbbd9b33a55f2
- SSDEEP 96:9VAfY5gK6f9bJdnieRgdaUjuweDbAPPPPPtPPPPPPPwPPPPPPPPPPPPPPPPPPPPY:XAg5oV9dnrgXjuvAqFiKI/3hsJV9mf
- TLSH T152A13DDACC71A1C1FC0734B7B1B517C43AB63ED49A7BD6DABB080564242BDD153B444A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\a4\a4bc069321a96236fde04a3820664cc23b2ea619
- Size 6KB
- SHA256 ae97513c5bcac9d08f5c8bcbaf55b7a3112134603c141b5de70e15a06c77e325
- MD5 02a9f2786ae1487a583495db000551a8
- SHA1 a4bc069321a96236fde04a3820664cc23b2ea619
- SHA512 18605d797527b44234a6f2b6a99b2915e7fc30c8c88192252fa3dd02e0b801b78a3f509c44beedc887ef9a38556758279c576d922c8558b2d7b44d795ef25192
- SSDEEP 192:HCDJomrimXOct5g6keBoDzD+Bd40dDuKR/qwz:HEimzp26XoDSxpRz
- TLSH T163D15DD6CFA0F485D82573B099541DA47F6273A80539BBF5AF50237D8CD290B6BD019C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\ae\ae5309997bb45581abda6f80b78c77648cef9313
- Size 13KB
- SHA256 cd05b445dea7b595a696ce16e84710821acd493a79fe85bcd1bf8ec6c9a62edd
- MD5 664578b2dc3a8e06e8b3f12e064f87c7
- SHA1 ae5309997bb45581abda6f80b78c77648cef9313
- SHA512 a9543cc31fb948d00bd9efd72801272753ce7ce2c5e344d606dad24fcbe2571555d3a404c6be240e6d6d2a7ee14e049b41c9e8a6e2eee54e7c61ab30ce9997d0
- SSDEEP 384:rtD7dm9TT6qgmF+fPJ99H4Oe8QSV2cIz2AjnnQHF3KUQJGhS:raTWqgLN4OeWXaQHdKU5S
- TLSH T1EA52B0B6F9003C2FC5592472F031D8760FD4F8742AA0AAC6D72E647A462A360FAC24C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\b5\b5f9075a8bf6977e7dfd3d316a673eaaa5834a99
- Size 9KB
- SHA256 a3e41dc0e455cd84ce622aa658dfd69db3e0c6b9a40e1047db8be93ebce5887e
- MD5 e84223b7ff2941548c568732dcde353d
- SHA1 b5f9075a8bf6977e7dfd3d316a673eaaa5834a99
- SHA512 01d967475af32985c7a359e5cfef292cf335d661d88b92a28c279c1a3e8c1c4b7dc82c45b32366be6f6f295dfea3e4ead6a3bab245c59b8d325efd116657c2d1
- SSDEEP 192:QXDJomrimXOct5g6kRujnCRwId7ZF8H0rPsOphH3+ZzzCu9JF+xd:eimzp26njnCRlrCHMphXC9JF+j
- TLSH T1E2129EFA4E54B46DC4127B35019B0F752FA33F6542F08BE789FC212A8D3B5955AC2288
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\cb\cba537acd887eb709d3fb44ff11dd2a370f64dc6
- Size 12KB
- SHA256 3003e277b3775f7067a2e899eb047ef509e5953475fbf9eaec947b1ab38963bd
- MD5 445c7410933689d74bcf8b88a8d9f3ef
- SHA1 cba537acd887eb709d3fb44ff11dd2a370f64dc6
- SHA512 f0fe8029b4a27745fd24dc19f6627412989c5093a2847db5cec33aa246286a1288479a42d9935d41335ca886af7604bfd4379fb613bb6c8e06b267989ef59d83
- SSDEEP 384:StD7dm9TT6qgjoF43+fF2ii7c5tn92fAX9glszIezU:SaTWqgjoF43+fF2ii7cThIew
- TLSH T138429DABD824FC56D85E51B3F82245114AD9B0B55DF818CFCB06E9FE4BB1F10EA0249E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\cd\cd39ba3ef95ea55ccf82a164485fecab65f3cb69
- Size 9KB
- SHA256 59efe9756a0d4e207adf79a33022698b05ea9fa2c2f7083aa732d021e8625e95
- MD5 eaa36c0bee73527e8ec7e8df54429b58
- SHA1 cd39ba3ef95ea55ccf82a164485fecab65f3cb69
- SHA512 86eab3d880a2b93221bc8d28d5aa1603bb14b8c85b1b2c42b1941595f54522a57f7adfbe94dd8632316bd9c2a07f8c72fc2427f417145e8cf64c59d8006ce39c
- SSDEEP 192:1MttxOqdm9TTYlqgq8dJJIwvYQPQe/5/i1HFg:StD7dm9TT6qgqOJJIbQPWhC
- TLSH T17D228CFB8D11AA23D82610B59AB919210FD8F8782B51D4DDFF3A54EED6A3710F24118E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\db\db682892da4e2e4214ff3233bf719c7609d95477
- Size 18KB
- SHA256 e64e9dfb183cdf3d11333e2c04b52cebd94adbc668e1a7732277fffa473b6547
- MD5 cee920e6bc3ddb85ec5f487df603282f
- SHA1 db682892da4e2e4214ff3233bf719c7609d95477
- SHA512 cc37b6b7ab4497f90b414a069de5ece462e23c10d3a173fab84a6c4b8c7aeefbf84113c4d3204c77012f1cfabba2e4a74331ecabe0b33c11d5bd04fcfa451ef6
- SSDEEP 384:0iJKXg1/E6cGg2WnsVmx7VwvmWUObmdtY8thh6H80j3yg:H/E602WnsUxVwvfUObAth6c0L3
- TLSH T17882D0DF96BBE507E5163A77452246B23B6376156534C7DBB38203AF089232CECA026C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\e2\e26fa3036cdab4c2264ceb19e1cd197a2a510227
- Size 6KB
- SHA256 c7918a0b58c45a6f0d29fa990bbd31a7b482ef61387c83a02eb7f70b672e4761
- MD5 8db68cc6dce4b8e01fc10385f2eac7bd
- SHA1 e26fa3036cdab4c2264ceb19e1cd197a2a510227
- SHA512 150be040bbf4d7d8dcb35aaea7b21908964b4cb86a9f33c4a3126b523b6ba964f36384b0c7dbe3f9dc49a3fa10ed04f355832e9ee5dfa8a53f799b2761ad297f
- SSDEEP 96:ncczOrVko1BJoQhri4BXOYwgucPaMN+BPPPPPnQYyMXkM940n8Kp24wVjN5nyD0/:wDJomrimXOct5g6kXa0/24wVjrQ8Oq
- TLSH T13ED14BE6D9E0E988EC2B327156450A166EE277B84134C3C79FB8621F48F7A6F9C65044
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\e9\e9833a1512b57bcf88ac4fdcc8df4e5a7e9d701d
- Size 6KB
- SHA256 5998bf8ee2eecc2779ef896f04a540f9d48d4e96cc9227aae4646f4d9b817749
- MD5 26a15393379cd7d6072f09f196027786
- SHA1 e9833a1512b57bcf88ac4fdcc8df4e5a7e9d701d
- SHA512 73f6fa5e911fd64a3e45037876cc9edd8606c4590d0db5488de2169fddc6d5f80649c0108631e37af2fb52618b477d1a9086c734f8ac901a6b64cb06f64ef0e1
- SSDEEP 192:dXDJomrimXOct5g6k2fFttQfWohWydus2KUHSd:Rimzp26FfFrQ+ofus2KUHSd
- TLSH T1F4E17DFECD31E2CCCD5931305A271FA43F5B2AA50634EAD58E94132D09E2A199685998
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\e9\e9bab7d3d15541f0aaa93fad31ad37fd07e03a6c
- Size 6KB
- SHA256 f7e03bb5bcc487cea313bfd72ded4cfd4e215b82228cf9744760f61da4c496bb
- MD5 246bb0ace989af2b492c055b1d55cf26
- SHA1 e9bab7d3d15541f0aaa93fad31ad37fd07e03a6c
- SHA512 5f6128d4645a2e3ea9acf81a6ac55f00776995d5d1b7d72c4539e8fad65db2e32bbb75c195c9b7c96a7189408fd402992f506feffb3728ce8d28002bf9fad1b8
- SSDEEP 192:kDJomrimXOct5g6ked/w5s+DqL4IqCTuY:uimzp26hYy+DOKY
- TLSH T1FDD17DEADF90A1C6FC36B23445054EB1BFB62B784875A6C7CB54036D0CA2D9F558108E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\fd\fd2d8033225ffd30e6d719b33ec44ca146757d19
- Size 533KB
- SHA256 2222b522b3ed5a6c88c2725a443cee6eeeb85806b1e60bce76552b15b4e4570a
- MD5 f55b47d8bfdf90963015706682c127fa
- SHA1 fd2d8033225ffd30e6d719b33ec44ca146757d19
- SHA512 f62b2863f11e536ffd13e7f92157dd0771d4dfabb689cd0fc3c86e389ba2dd4360763fc3dab5fafd0aa0bc3218d68d5d4743a5de78fa9dcf9e758036ecf38655
- SSDEEP 12288:OC2CzCW0Hx6c4LoAIWKswXXpNmCf+w0K22UieaTDgAq4hlJ:OCTCW0Hx6c4LoAIWKswXuCYK22UieaTj
- TLSH T114C43E25C5672FE705CA92A27CA40542F23582678E0439EDB724D65D3FEE8DF20B325E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\github\oshi\oshi-core\6.2.2\oshi-core-6.2.2.jar
- Size 925KB
- SHA256 efbca93df18f3eb16964a92d8342f0674dd5d90da575ef8e04ef2e4eabec6910
- MD5 29b5d8d14f4dfc3f84731247a58927bf
- SHA1 54f5efc19bca95d709d9a37d19ffcbba3d21c1a6
- SHA512 7df3fc6cd92340be1d921e0f044aab27d271833503d372cc8876d2e31408f347e1a1ad7099d05274eafc9ed3b5a99ef2e37bf50d8c55928bc0ef97e8b3798741
- SSDEEP 24576:MG2GbnZHW71v908JEB8Bo1fcAKKM+cn79H:MYwzNEB92AKz+cn79H
- TLSH T10D15E035B29E88A5D2B34E33F4C279232A9E41CCEA77B12D31E0B54DDA354BA5306717
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\code\gson\gson\2.10\gson-2.10.jar
- Size 279KB
- SHA256 0cdd163ce3598a20fc04eee71b140b24f6f2a3b35f0a499dbbdd9852e83fbfaf
- MD5 76644f361fe16dc8026486635d157b39
- SHA1 dd9b193aef96e973d5a11ab13cd17430c2e4306b
- SHA512 40698190ad95798f2cf8af21643cf4e50443117ddc6a7751a8c0217eb4f7b0c374871574df02060e7a2c7827888653ace5365d22f65c956056c85b1d6981c00b
- SSDEEP 6144:8dPmAshKqt0HyNAdq24OK4IKmuWde2idVnDj7iqT/mEZ:8VrshBt0HyNAdqUzdode3Z7X/mEZ
- TLSH T19754BFB3A1994E9BF85FCC3A500E540334A8A4EEC44E760F25B591874973A8CAF597FC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\guava\guava\31.1-jre\guava-31.1-jre.jar
- Size 2.8MB
- SHA256 a42edc9cab792e39fe39bb94f3fca655ed157ff87a8af78e1d6ba5b07c4a00ab
- MD5 e37782d974104aa3b0a7bee9927c8042
- SHA1 60458f877d055d0c9114d9e1a2efb737b4bc282c
- SHA512 532664e3dd33699bdfb296e355bc58fde77edc019c10f464ae49fe2494a68fd25d1623a9c86bc72830ca9f1354226366ac6f3c09d77be952641e971386a4ebbb
- SSDEEP 49152:X+GWMKp96fG5vlDOZCAz9iKJfWYNl/AWWNrgwYjTW82yp1jQq7oWo0ugz61zT:HWFzwGiZCPCDYW6rufDw
- TLSH T174D5D0977DDCD43EFBCBDA335024926E3C180B69D009A55711A42DAD28A6C4D0F26BFE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\ibm\icu\icu4j\71.1\icu4j-71.1.jar
- Size 13.3MB
- SHA256 91c4f8ebf0ceb489547098fe9d5c09a65eb419caea6ed714867f5280800bcf1a
- MD5 f59e87e2ed829e3d136a9184e147c50d
- SHA1 9e7d3304c23f9ba5cb71915f7cce23231a57a445
- SHA512 0864e4785148fd5a7b9056056316f9ddec14b138fd6b64d15d09fcb7bde5a1240a084f38f1aa96ae6e0b09b1fd7f61f3812297aa8e4407a596e7db6d64036b68
- SSDEEP 393216:1J/bVXXdjlwZpL7ElA7cFGP1sTLuw2HTLWrx/vH:11RNjanElBFGrg5
- TLSH T1F0E602BBB0CE2428CD7FB5F719589566E41ABEFC8C2F1329295468C57C2392C3762706
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\brigadier\1.1.8\brigadier-1.1.8.jar
- Size 75KB
- SHA256 cf65afa612fffbe4dc976115dac0312f48b9c84b3ddaf58bec8018a9454440d7
- MD5 34f54dae241296b633655353219f8e06
- SHA1 5244ce82c3337bba4a196a3ce858bfaecc74404a
- SHA512 74434e25ccfd59eea62a731d68dd4dddbab0b7ade42fc4cf53f6f8fae7d35b26a063455995885db260c3f2d6a8f7419535af11db1f79bf9f1614311cd546b321
- SSDEEP 1536:f6k6oSiJWa+KPXFo+5m6nPfkDiy983P8Y3xn:ykhCa+gaR6nPfkDFGUYJ
- TLSH T14573BF31FC8CE2CAF723227941A1ADB669B90E5CF04A341215A87FC157BAC654E93379
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\patchy\2.2.10\patchy-2.2.10.jar
- Size 4KB
- SHA256 16d70e7968b45caffc81576268eb000f473fb60bf257182d3447dea8ec919d5a
- MD5 ff905bf0aacf501149a13880a2d6742d
- SHA1 da05971b07cbb379d002cf7eaec6a2048211fefc
- SHA512 5d66d948fc5e4be401ce6800f36ae896b9315abbb63cc0c0d489ac10651392522c9e52d2a42bdeba095b713917f41ff04121d34675c504da716bafa55355e171
- SSDEEP 96:bINFoFvv/G/mg5oPPKKJrNLBkL4uLzjXYFLDm6S3e154:ENavHG/6PKgz2zUbs
- TLSH T17F913B3558EC892ADF64923A8742EBAB1527057936BF26006356FD092C3C9B60FA0327
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-codec\4.1.82.Final\netty-codec-4.1.82.Final.jar
- Size 331KB
- SHA256 170c0ce091c2e1cc1d952d87a6a30deb773922507bbc609b962b539f03f53407
- MD5 1159d0cdba19ca29a21c90f1409accb8
- SHA1 b77200379acb345a9ffdece1c605e591ac3e4e0a
- SHA512 4314ede39e2b94bbd88a88bc63785ed4883d05662b318f163e7da5292b8e69f41e00bd315fa812bc4707e7ff44d40a3e1415a54f115dd8eb3748ef9bccd7c012
- SSDEEP 6144:KObNJEqaftaAQ3N3NwUhYEaHKln0ocuuAEhMBmK3pkf5q/dkW:Ha3QtYhqlnzuAMemK3pkRa
- TLSH T12074CF2879858172D653A1308601DC3BB91CDD98FA2BFDD2A9EC178325BCC444FAA7DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-handler\4.1.82.Final\netty-handler-4.1.82.Final.jar
- Size 525KB
- SHA256 31015505983dc57eec491ad4873411ba51f0f3beb24d22d509336c72511019cb
- MD5 a6c1b7878a9e90a365c572a9fd2f15cc
- SHA1 644041d1fa96a5d3130a29e8978630d716d76e38
- SHA512 e27c984dcff5bfd048daaf47b01d3fb69b31cbbec4dc3b76c398b0d9c7c57580c0c2b867e00660b390f64ceaec08cfdbf600d4f1be3e6845445afda5e11aeb12
- SSDEEP 12288:w6RdnsQzLS26z2Qr82SIxfNbS9bHbW82X:zdskB6z2QrZjf5m2
- TLSH T165B4D02DA58EC0A2DB5326319241E063A42DED88FEB7F8E314D0265324F68845FBDFD5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport-classes-epoll\4.1.82.Final\netty-transport-classes-epoll-4.1.82.Final.jar
- Size 138KB
- SHA256 73f827fca18870959b9581c6875130576e5de684cfb4e6f346f8c1c266840ba3
- MD5 ffaf8f9be348cef0be51cdb9fd715afa
- SHA1 e7c7dd18deac93105797f30057c912651ea76521
- SHA512 3f00bf901dee34db7991377650dea94378e993fc7f9f6158773af35d54041f6a1ac29b5bfd13080bb710a054bc9c4e5ae522f7b7261a38b000bdc39ee8d2ee77
- SSDEEP 3072:sWtsNYoIQPKxGxQOZikDdPgNigEEQrcwgigNWEHRJybo+7O:szJNPQGdZi8PgNi+Q4wgDEU9v
- TLSH T1F4D3E0A4EBA1D433F0D3E070C2D071866B1D7AC6FE17984716E86909E5FB9CE5B61AC0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport-native-unix-common\4.1.82.Final\netty-transport-native-unix-common-4.1.82.Final.jar
- Size 42KB
- SHA256 1096f16527a51dd5f44ced90636110a429cc7359a9a8a91db25000b747793429
- MD5 8184757d93ca61b6a47c739798b6e249
- SHA1 3e895b35ca1b8a0eca56cacff4c2dde5d2c6abce
- SHA512 321d42e684bb73513b18ce7a0b44beb71b4914be44b1646d6e394f5487af5eb8e9b186e78e4e23d3526f47acb9a26c2faa2909b4ffdfd2a0dc755fbe19dfac85
- SSDEEP 768:r9lgR1CFRMaLl9dZowNVfPM6tZjd3ewXFyfgDfq0/A1gfhavIqj5avMI:pORAFRMa3Aw9HjowVyfoqyA1wq+
- TLSH T15F13AEB4E565C029E107F13196C4D992B60CE65EFF46980320D8298AE6BBDC0CF79FC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\fabricmc\intermediary\1.20.1\intermediary-1.20.1.jar
- Size 559KB
- SHA256 caa3fd87dd353fc826a109a2d16f886d6519b47422e3a77cfa0ba8be5829a21e
- MD5 3f4768ac751cac3418266d1d7aa15f55
- SHA1 97d0bff94981e37bd7a4362deee53c9a84e3fb21
- SHA512 c538df7911e479bf96efc17dc97eae7775e2a73817df9dd8b299b8404a3ff380175a705e9cc344ace48953821aca64520d3c555523e7436d1c2b1305cd66a7bc
- SSDEEP 12288:GfycOJnbsZj1DfumVov/Pyd4L4VKqR+trmEyL4egqAi/3D:Gac0yjEmZG4VKN/yl3/T
- TLSH T1F3C423B4332C6668FC009E767DCE820615B42AB0ADC84EE740CE8E593C36B17BD65669
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna\5.12.1\jna-5.12.1.jar
- Size 1.8MB
- SHA256 91a814ac4f40d60dee91d842e1a8ad874c62197984403d0e3c30d39e55cf53b3
- MD5 3bab13d7f5ca715013fcac64ceb4108d
- SHA1 b1e93a735caea94f503e95e6fe79bf9cdc1e985d
- SHA512 5403e494985a53475d9c9268baf1758e37103817bd54865847d67e1adf3dc45287175a12b08a9525837921e7783a55e934a1031cf76d02e55fd4ce6cb2626837
- SSDEEP 49152:5EmVSNOTAvOLoCxCrpD5g9xmnf1q0G8HoNBcLgUe6JJ7:5EmVeaAGLoLIaNPG8H8BcLg76JV
- TLSH T1B9852323814D95FAEC61B2F322F31BC6342F547CB11D71AA5AC7ADD82264E6F0394DA1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\commons\commons-compress\1.21\commons-compress-1.21.jar
- Size 994KB
- SHA256 6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a
- MD5 2a713d10331bc4e13459a3dc0463f16f
- SHA1 4ec95b60d4e86b5c95a0e919cb172a0af98011ef
- SHA512 c92d9a12547aab475e057955ad815fdfe92ff44c78383fa5af54b089f1bff5525126ef6aef93334f3bfc22e2fef4ad0d969f69384e978a83a55f011a53e7e471
- SSDEEP 24576:mPwNPO6rAjFdeOn7WdYj4G5g31ru5EOLeEw:mYN2BjeOn7WBG5g8yWw
- TLSH T1AC25D030FD860851F93312395A76BC9F747A8F88E74B32D9B6EC760383A5C855A936C1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\httpcomponents\httpclient\4.5.13\httpclient-4.5.13.jar
- Size 762KB
- SHA256 6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743
- MD5 40d6b9075fbd28fa10292a45a0db9457
- SHA1 e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada
- SHA512 3567739186e551f84cad3e4b6b270c5b8b19aba297675a96bcdff3663ff7d20d188611d21f675fe5ff1bfd7d8ca31362070910d7b92ab1b699872a120aa6f089
- SSDEEP 12288:NmjM46szuytdXV3UaftwJEAV4+bcYroWxk11cg+p9OB3p:NUM4hHdF37VdA6qrookUBEp
- TLSH T15CF4C0ADF5A4B069E6178131C94255ABF47E8488E0879057B8BC1E3EC8F0DC56F06BED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\httpcomponents\httpcore\4.4.15\httpcore-4.4.15.jar
- Size 320KB
- SHA256 3cbaed088c499a10f96dde58f39dc0e7985171abd88138ca1655a872011bb142
- MD5 be7c67929df007fcac6c8eff5322d3a0
- SHA1 7f2e0c573eaa7a74bac2e89b359e1f73d92a0a1d
- SHA512 f0605e4d521c6e9c7e645905687c519239fa9e2128403a515e6118b0406b503b0865a8ead197f8532186b0c9aaa4189ff5bb301d5b0cf84bd54fa2258d17551d
- SSDEEP 6144:hgzgAHvaOAVKF/dB+bzfYMX/gmAjBBSF0Eo5FzepwR26cV3/5jtg:h87v5zFqbzQu/PA9Bc0EojepwR26Qm
- TLSH T1F564BFADF8A060ADE74364B1FB42959BF43E80C9E447515B34FC0A56C8F4A857F03BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-api\2.19.0\log4j-api-2.19.0.jar
- Size 310KB
- SHA256 5ccb24ad9f92e768d0bc456d3061a737951262df803e004d2cad096b75a88d60
- MD5 a7f8fc9751cdaa237a1e18059b4887da
- SHA1 ea1b37f38c327596b216542bc636cfdc0b8036fa
- SHA512 f7cf3647ed90de7fdef377e4321aa9b9ea2512a46d99109b359f7fc5dcfe6d3ae9f879c212707ea4fd16d358d10d21c56d5178ec4803504745de6fe48c66c3f7
- SSDEEP 6144:2PtlX2DwtInh3m2mobY0y9EL4Zmy1DVHoFg2r6bCu1VOWarmXLR9SfaLqsSDNb8c:OlX23fmobp4ZfRighDO+LR9sNxIE5q2
- TLSH T19D64C026F6EFC816E112013D51827B12347A90C89087E5BF525C276B8DF587B8BD3BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-slf4j2-impl\2.19.0\log4j-slf4j2-impl-2.19.0.jar
- Size 27KB
- SHA256 825605eacb2d5605b105c53d4108c18125e0f82f62960d0be583278b9c524f3c
- MD5 da5fdc7ca6095583542ddecd0edfdcb8
- SHA1 5c04bfdd63ce9dceb2e284b81e96b6a70010ee10
- SHA512 ef2ae40f602ca3e0df0e159b6a77656ddc548fcd676d944daa68d1e0b48ebbb9f777649c61f172ccf3f554798584455ccf9a62f3aa6ce1ab31e59ead92d809df
- SSDEEP 768:wtwaWrOL+AHEfNvwm+jlRPxYoirgh4q1CM:n7ydWyzjzSRPq1CM
- TLSH T174C2BF32E599CC48E16D303A8BB6AF0B773E948DC139D157156E21DB48B07388E83A9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-windows-arm64.jar
- Size 111KB
- SHA256 c186df9b20a4dfa5cf853215ef519399f55ce374f682fc2c35d26249a2c7a363
- MD5 66ab668d3cebec421492fb1e5fc47bfd
- SHA1 cae85c4edb219c88b6a0c26a87955ad98dc9519d
- SHA512 fed68338e472770ccef8ab2a864d2139c399fd4ae96167b911e70a933d1fefab38575c320dc5a3161cdc29d8b113bbda201800042f05197a977d14b1ce7398c0
- SSDEEP 1536:0Vy++fIOUmH9Py03YI0YswmfZemmuhEAaYe4dxsY2tCtn+DFgqncNW4wuX:0w++fIOUmH96Ucex2jaP7Y2tCEgqj4hX
- TLSH T1C0B302350276D59FE138AE3F4ACFA14A13389DC05CADF44648A09FA61DDDACDCB592B0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-windows-arm64.jar
- Size 80KB
- SHA256 ce0463d1557baf3a7c19fc1a7b4b633c5d4d6df30252a35aaa50294dde063562
- MD5 9ed724ab79f60dbef272c458f3c5f536
- SHA1 527d78f1e9056aff3ed02ce93019c73c5e8f1721
- SHA512 3c6aa81a453a6976fe7c58c6503290b40aff22a4b2d36a5d0fc96a9fd997210e3cd6742967db61df7e341cc0aa0e09e2c9bbffb76019803cb63eeb7639ac0f7c
- SSDEEP 1536:luMWdcjrU/EMPSXXfNBVc4P0kOvkWZeOs3Q+R/6H4KemdaExToX102iO0CYSC4+f:AviU/jPSXxckO/eOs3QEKhn0KSo4RG
- TLSH T1C28302FB4C9A7AAFD63F5D314D4810A6EAECA914095414FC4EC842C57D85FF4BE68C90
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1.jar
- Size 899KB
- SHA256 e436d2144f3a36fff772fd64233316809b795f390defd4d55660fc686e7c2834
- MD5 198c85e7eb29ade7804513dd4733b53d
- SHA1 831a5533a21a5f4f81bbc51bb13e9899319b5411
- SHA512 0de8e35621e5b20a0224f6e5dca2aaca6f0bb09c9d1960476d611eb56563b20f44cb9c5009bda6ac46f15fcdc8b972f502867d87aa9b38ac900def60b6fee1dd
- SSDEEP 12288:0tPGDH2LlhY6sXikjAhuJgTW10vje/tTYmTc++XDY6qA9nrvG7wdZr6D3B3MUglM:0kDH2RcrjATTBje/ZTKJPa7a6N3Yjo
- TLSH T1FD15E162EDAF512BEE23123990535971246D73C8DEC6AAB3165E13D2F422819FF23731
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1.jar
- Size 109KB
- SHA256 64e5ccce2fc7cbcf0c834a5be8642d9e2498ce3fe31c14ff1df741878a3f8121
- MD5 5fc0ee72e31794f1075416c9985d5d54
- SHA1 b119297cf8ed01f247abe8685857f8e7fcf5980f
- SHA512 b54517393b10d5eac38e32ab12fc3f5f97f520c29bc40533d13e417f78da456c8574cc63e40a1b40525369b7a6952252db0420017cd20d103cfac631a67a18af
- SSDEEP 3072:Jprlc4u89EcFAdYI6hY9mVLsg6kK+RiaTg6QljrkQF:JVlr90+Y0p67tl/f
- TLSH T1BAB3E024ECA6A01AE9359F3EDBE36713340C1FCDDD8BE8B92B711151A4218724FE6360
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-windows-x86.jar
- Size 131KB
- SHA256 e90c1f9cf5701aeef2982ebf0905a2b991f4622b8a7f8250eaf0873b5a0a0223
- MD5 0f0bfa91e563448711e9b7b54710ba53
- SHA1 3b14f4beae9dd39791ec9e12190a9380cd8a3ce6
- SHA512 46e0acecb2bb8922384c006c044ce6d323781881ea18480a712a5d6adfd1d96387351875af8eb005a10b4ae3ddaff0a70a4cc0a1620f8f75cf257f9cbc8ffa08
- SSDEEP 3072:YOA1O4Y45exf3G74TSml0Yg7T84chz//5qL3TL0BXHxRQ+eF150h:PI5t74TSmuTd8zJg3TL01/Qza
- TLSH T17CD31279D9E1163EFABD817813F39B7B63BB39D6680680BD14364187EEB90188D152B0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\ow2\asm\asm\9.10.1\asm-9.10.1.jar
- Size 123KB
- SHA256 ed825d10ab1399c8c0cb669e688cf0c8c82629b4c8399b58352b68e92ca10fcb
- MD5 9cb72080438acf27f2607002e1444a7b
- SHA1 ada2141c0cc52ee8f5c48cd5fa4ce0e794f22236
- SHA512 8db6efa37d4d569bf2b95d90931b8064f87ed928d20bbf8d8e7fa6182e9a11d32e6a2cc034a3d173a38ee70ce2ea9f20f52f9d8730d9401d2bc6060674c18928
- SSDEEP 3072:pCay/O07+gBkNqTcILhAk8FdRB2JCJkBG9S:kN/EOXTLG1jn224G9S
- TLSH T14DC30124B3D6E0E3F27B717E91A04903F15D8E6DD09EB6375890DBE3D5E008896823E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\fabric-1.20.1-0.19.3-natives\glfw.dll
- Size 357KB
- SHA256 f61949c469c54a5f4e5a8e1668255b919ee1237f1e568acf4127dda0abcdc9a8
- MD5 dad976fafd111ceedc7a473932e9da8f
- SHA1 3c0e8e7fcbc854a87219fbbfd181c2cc76018144
- SHA512 64801d4d34f130b5ee33d2df3a266e2aed981265d13c6552ab73418471398c49cab9a617647b64298c1de432d078f1a7b830d4330980e7ef10dd15a1d18bda11
- SSDEEP 6144:T0AJZkW+P2H68GNlqUF6dFpXKy1oO6OgbCoRbH:T0AJyWo2H6JxFibN1oO
- TLSH T123741918E7B1045ACA2B4433C5DFFA229577744C3BEBA5DF7A5409983E22FE18079B24
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\fabric-1.20.1-0.19.3.jar
- Size 22.0MB
- SHA256 56b71336d2b4fdffd197f56595b0da93e32a946f78f382a299b8f4b92758bb0f
- MD5 95f0c064ec0fa739613b993c92a68db4
- SHA1 0c3ec587af28e5a785c0b4a7b8a30f9a8f78f838
- SHA512 42274bb1d2857b84c81f4a9e99bd043fd2f17610b5f43c3cb8bed625442a131f33b6e3469cfe4d9130f6fb3366378b66292d912c5e9f5dc2282ca5bec8bf2617
- SSDEEP 393216:D9MyEPJBuZV/1zOvJQxaX1VEi63Mv0ECnAkW4gcCpVW/CSCgdV:DcTuZVZCJJlD63NCLp2pdV
- TLSH T17A37CF1CBFB7A998E50FC03A41798053E42C9BFAD808E9DF667484493DA9CC51743DEA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\advanced_runtime_resource_pack-0.6.7-9cb5df3ad7ce5a17.jar
- Size 155KB
- SHA256 8b5dc560e3f2c8a8565df04a95eaacadf9e21811bccc008b1d4cfa65bfa63cfc
- MD5 2785545a4b01559301b4b0b8ac386751
- SHA1 a97a0a7696149bea8d2f868c9025f7c8eb78a7d6
- SHA512 76249fe7bf53f56365f19056bdda0d1bc455a4b3839233782f9637ca5bbbaf9343ebb38d4178ed8ac26422d3f1086429a7e28ca2c74b91ce6348a92793032145
- SSDEEP 3072:b1sqRsQbIf2ji/gCYkiJDeDMRF4rMOWSF625ZFiA1dSNbE:beqRnbIQiGeDyKCSF6A7iWdSdE
- TLSH T1BFF3AD187E4FACE4DE0B1A346495C392FC72864C841205B77DE3192BECDC9981BD7BA9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\blue_endless_jankson-1.2.2-934b784fa753b28e.jar
- Size 73KB
- SHA256 d12f3f45edb3aa0e13a822856b95d36a7f9f297a4886551f92933063c757a054
- MD5 07a105bac340ab628057ed22deee9f55
- SHA1 907d929e2f77e3045bce594bdcc671e6f00419c9
- SHA512 725110a5e2d6402438b5ee738849a61d990afd65aaf34286ea5725e886f7f8c680976c57f8d7eb9c0f02f31c4160187b9b93ffe43dfc897d1652f004fc650021
- SSDEEP 1536:7WMHAcFB4Xni52twmCd9nhNzrTUQoLqB935kgge84GeU:7WMHj43mzhNz0QoLqB1a084Gp
- TLSH T1A373B07D80813516D27F7D7BD11009A6F33052CAC284DADB04DAA625FAE5727CFA2B78
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\cicada-0.4.0-7af04027209f5e21.jar
- Size 145KB
- SHA256 a2d8c0620ff50018cbf8c8594e85adf14b0360722b8849213067a67a457f184b
- MD5 32160bce4a72ce3c1c8cef3412743630
- SHA1 3b544176ec58e8ac4a76cfd1843a24654f27cb2e
- SHA512 6d95b5886deef8ec0288914f8df94514122cd456588e0902461879bd665cda1d07165ff87649ad570acd16423a5c1ff74a00850b5e69fbe822bf5672fdc1ecad
- SSDEEP 3072:QqpM5Sm8cZee7W/w+O93u98EEwQMjVqfu5Iy8zt6dwslvIaT8o:Qqpmn5WJf9iwNsumNQNlvIaT8o
- TLSH T19FE3F1552F8A8DF2EECBDABD0598C9467874909A8B04D8BF3812241E1E150D21F5BF7B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\citresewn-defaults-1.2.2+1.20.1-5c6bd819e958c6c5.jar
- Size 218KB
- SHA256 c24e3485cb76b6a62978f06859c560c8a3bccc0465315f650e0f4bf4b235fe02
- MD5 71355de7a7c1afabd62ede5b0ebd5290
- SHA1 2a6879e880c58a05431cc5d4d51725d0e76317e2
- SHA512 4d66fdd57592ebf65068720c58f51501dc931909193f2587ea48318fc206705d24004b65323e4c85e47d9b82d0a42e3be71de3db6e0326f24c718fc736816a67
- SSDEEP 6144:uHeTy5+pQuJPcbm0Ck7au6nAtGxz7ffke:2Wy6QkSkTu6nEGx3fke
- TLSH T17824E052B769C81EC20795355C60D9E364375A2E3A4AFC1F0DA404AD0BFEC3B5B06BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\cloth-basic-math-0.6.1-17ea6dce277cc3b8.jar
- Size 10KB
- SHA256 2527eb04394e7a13fa5b8884baa9319f60b07ad6229d759f9451563cd113c059
- MD5 1445462108bd5d14484e817e5aa793f8
- SHA1 2ddd64b22126332794a5754ff9b942e17fb44c39
- SHA512 4a06ad636a80bbe1315e3b756dbc49fa6a911de9a945d5faabc89f925a310300ebdc14c325faee825e7a25cc1e2da2653350d1188859619c7d0912ed6abf1e45
- SSDEEP 192:mPuR7hf/tOar3f9E20UbMtBb2+gr7zDKir24tFKi5Iol1L:SuRFIaxEY6K+grzNr24fKi5Ic
- TLSH T120229FB96927701CD71DD5B824C627B77F71D4CAFAA6107450921B234E5381B1C2DF1E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\com_akuleshov7_ktoml-core-jvm-0.7.1-6270194b594dd61f.jar
- Size 251KB
- SHA256 7e255729c096dc0cb3e1051a24755ab5ca6b978e89abd85250ec6a92f04eef03
- MD5 94794311f95b4d12e8d4ebcc00050c1f
- SHA1 38078ae18f5f9e289dedc14bf71240a3edb2892f
- SHA512 bac9aa2b39509b06b1e32c6590365baf1d3017ffca381ef109a00edf25ffe1404439af81cbda4080c6cf67b5d3d9d7215d371568f29b1e7db99f55bf4a343748
- SSDEEP 6144:4/esNjhUFjF2OCNqVxZDE2Buey6hEglvuYaAZJ:7sNNUG5Nq1DE2Y1ETlmYaA3
- TLSH T19144D05B79C9C4B9CC6F3434F108F0F6AF5E8D989781052B15A4AA470BEDC0DA605BFA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\com_twelvemonkeys_common_common-io-3.12.0-86b1ac244fa6455c.jar
- Size 90KB
- SHA256 e5401be7ad9fdc80da321b2399480d0105c27ac82352f95364db93fed6058809
- MD5 dcb5fdea86c51b99677d5862ae173c06
- SHA1 8407fa8b9dda5c2796e6eb7b2c26d979bbace94d
- SHA512 035e596962bc1845e3c7d9c7ce0702820b7d6c920656f09b22120254f525ffc9e7438365504f32d54f5ac84d1077465e2c1cb013e264e46311fa3227c355b5a9
- SSDEEP 1536:8Gb5xwwkHVQLgwKSNhRIoXa7kpHtklRZjsnNoTni8WpKP9kFYqzQmP:R9xwwO+JKSikOaARCiLi8W0P9w1Qk
- TLSH T1C393BF63FEC9851FFC07AE71F0F6E017704818A5D8E59D17289826A1C823D858F67ADE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\com_twelvemonkeys_common_common-lang-3.12.0-6be701ca605fcfc7.jar
- Size 119KB
- SHA256 eadaa83fb9906d3e9d01ba43f06ed0875d7f404afbdaa70f0b98ce7fdeda7ab4
- MD5 23103c196d28e5dad2e4f5d8b9a16aab
- SHA1 a39056f0bb31b8125c7cc743dd140a21afdbed9e
- SHA512 fa6126775117925ab781fb7203926554a13c31fd48598db2b2093aba366e56ed450aca7fdcdd537f3ca03e5f20ae77e3307ea2b7840c8be534bb333c880798a3
- SSDEEP 1536:RtlN2zDp74GvyMw1AcW0nDOhDy4Q7qhx31QHHso7DN+uY63etO/5oyTYav8hVZwW:7l0plTKAV08Q7qn1QH7ouN3ZnTv8hDeK
- TLSH T12FC3AE16F986897BEE077930C0B2E103341854A9DCB6991715AC26A6C6E7CC7CF3768F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\com_twelvemonkeys_common_common-mage-3.12.0-deb3b1501a6070e5.jar
- Size 78KB
- SHA256 eb5095e196b84a3c2d17c2a11ec0bb2aa9a7a2e48c68eebabe54438b65a77332
- MD5 0eb17e5f8641ad77402962a05c0b269b
- SHA1 90cad0a90d17581fa064ae05f1060851ffa109ae
- SHA512 1b4929ae23ad0c0478dfe2a1252247e9b89257bfad3f13acff02a1cf97f2b30b6e3fdc71160d791929a422fec16d8e98be4b2c0a9fefdb700cecdc3105be76dd
- SSDEEP 1536:70Pjw/MHZBUZSKlyBdAYCvTjKXYNHqK6M6u2sJ/BjFIzwfWLg/y9stf6n:or9ZU5jKXYNHqg6udbFIbey9sd6n
- TLSH T1CF73CF13F99A809FEC03BA71F5F2D267FA539828C4E1DA871558DAE4C053E94C633A4D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\com_twelvemonkeys_imageio_imageiadata-3.12.0-d4e6b5ecedfe42c.jar
- Size 81KB
- SHA256 fd5eac600bde93a1469caedfa00d3efc7b46a91385a0850fccc34e0f41ed47fd
- MD5 9361a448afd12689669a8b1dad9ee595
- SHA1 8dab15a3950c7a38283162e657d1dbc48d76a0f0
- SHA512 c0befb6d6ba7bc3a2244da73586eaf88abf3019be11ed0cfb0e04f1393cdbafe2b5a8164c54a184fdf58be4b85d3ad14091d8a9c555a35a3313d58bdd2951d89
- SSDEEP 1536:pfGIaEA6dr8uqfS68ZAirhxd0w0OoCpLFzgYDR0r+Q:pfJHdrBqfSMSOw0EppzrDbQ
- TLSH T1C5838D49B95594E7E80736F0E4F7D61274453CECE885ABA70A085AB68CB3C807B335CE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\com_twelvemonkeys_imageio_imageicore-3.12.0-3b260d8299c9b513.jar
- Size 117KB
- SHA256 264c6b9476d950f93ddf83527685282ab03274013a790d2af3907dcee11fb26b
- MD5 0c91ce9ec443304a09a84eefe6de2607
- SHA1 975f8ac59c197bc53027d541c9b4b39acc0f5a98
- SHA512 17abbf69c398888ae8a6b6157795f8c8767ab36909ea09262eba2e2d76ae231276dc388f3179a24d90c46892e09ceded5149ad0682660598ad85c7fa167e1316
- SSDEEP 3072:4rj05NQPmlT6iK1zLJeZkiG+O7CrJ0LHXS:4E5NdleigLJeqsOerJ0L3S
- TLSH T1E8C39D0AFC99805BF80376B0F8F7D153F1446828D4F6CB5B2568A666C467D828B3368E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\com_twelvemonkeys_imageio_imageiwebp-3.12.0-16e1ec7310cf986c.jar
- Size 78KB
- SHA256 eefc795a63c12aa2b64df751eb993f2fc1aa31a5eff6e24ccea075cc67bf8886
- MD5 dde00b1cf602b1ffc081adc4f6aacfe8
- SHA1 13bf579b6052a8404c43c139824b514590f33656
- SHA512 76c80b4ec1a0912a42db46835525312660831f10b2af82dc8186c17dc01530cc6b519ef2191ff2e6d5df490b9ebf3aa910658fa96fb1b0ad146e7fdc46e33b6b
- SSDEEP 1536:/hd3g6go37mJ4vTmdQrcqegmoAhC2qSYlm6j0RzEN/cRugpnS:DJ3p7mmwLhCjlARzEN/wnZS
- TLSH T11973B03FB88D5C6BE8233575EDE69152A1C828ADD5C3C76B3024A56E8887C444E732DF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\com_velocitypowered_velocity-nat.0-SNAPSHOT-fd53111d5c9ac8d8.jar
- Size 128KB
- SHA256 56fc7f842e8c6e58f1f435c67dd98f251ed047f4af22bf3b24fa621d60afae5b
- MD5 0b84dc7beda04ae18651a2e00cfdaf96
- SHA1 f4d812ad1f333ee470739440c0410f6e92c2c822
- SHA512 035617fcd72f5d89af29fa0b72eb03f5044181af0fa8bad7dffc66f3c553388226e87c9092ecefda1b50f95cac2e8da9f47038699978a558b8fb47e794ebd2e9
- SSDEEP 3072:1FDhwXniAdtfv1LJBlEDHoBbun5ofmYatuPhxXk5ISLmYI:1NeXnjH99u5wJtBSLmf
- TLSH T1F9D3E17D52C8D214DCA3F4369DB1C88B6BF9149BE1460E6299DB52318C39CAC7F70236
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\conditional-mixin-0.3.2-dd37a05905f35dea.jar
- Size 22KB
- SHA256 0e1ba35412f3266efa16907dddd58fc70e46fd9b5ae0c723620546c641c37d39
- MD5 a5ab6cf1276ade6bba44da56ab90f2ad
- SHA1 f4f43519b400bf2743d5b951302485bc30b3c5d7
- SHA512 3886faa85a594113e0cb8529da4c902f2879ecc091e72cb9132fbd4c4c148d4f92503b6f5bc65fc0cb8c9e966187929df27103912dfc53a6ab6cec3bebbb9070
- SSDEEP 384:LCxvUI97GtSI3Zm1dH0YW+tCDHK0bEOU+tkUKWJntwKDHzTVuzZzV1GEajt66TDq:LZIZikdUOt+dIWk+naGHXszVGEaeN
- TLSH T1EEA25C3BB58D9496C24BDB34010D902AE434029C466DF56708A357BEDB379887E4BFBE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\crowdin-translate-1.4+1.19.3-e7c940f69cf2d19e.jar
- Size 25KB
- SHA256 9a36eae2896e006b1bd279826c65ee11b85ea473d7ee938aefe3c4c18bf8b225
- MD5 0b9f264b0d17cae49fbeee8c453c7045
- SHA1 e8b80d96d9d6cdfd936373a1ecdff9ea7dd474bb
- SHA512 d1b94c0970ffc7a0dc4783f34e38b8d7eaa4ce9d7f8c97cf47f716cf9d5b4e85622fb7d4a98cf84500da9923e8515e9068d750a95c4ae3964f66b5ea97b8ed7c
- SSDEEP 384:uQQao2eU2ljaz06VV07Ah8vlge97u0akyDiXPG3iKKe10zS+WMsJmGH9E2I4IZ+g:DQaHKjSXVV78XbeDiXPG3iKJ03EW4ID
- TLSH T196C2A0595DF7CB49F39E81768B488057215D9BA0D22EBF03F92E05173EBBAC8171CA84
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-api-base-0.4.32+1802ada577-23d60b6040e025e4.jar
- Size 30KB
- SHA256 ea64ac4b8b60b31ac98953d24544f55253b5fe54ccb316df941e9339ccccfb95
- MD5 a3f7fc51deaa11b06025fd4f87223070
- SHA1 3f85dca67cd656bf4105a05d9b18448350370cae
- SHA512 0783cf0cd582cdec93ea1f72c2376bd9b186412fec566d6dca2c17fe08907e8808a906fb3d0387c0f4bb1dfb8cba05636d42fb520ccd98e050a6f01ea56c7f77
- SSDEEP 768:dtITt+PC+pEwjKmgwtqJvhIuT7URyYM/tEt7VwZsvlNW:LUt+argdmvGun4y9EtWZsvlNW
- TLSH T18EE27B667B4CA84FD08381320AA08076E539D5CB9F0989CF516A151C5F97DAFEB43BCE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-api-lookup-api-v1-1.6.37+1802ada577-f3ac5430f67942d8.jar
- Size 52KB
- SHA256 410aec16b500f6a23412f4879c90da3e9734d15fead04887053390d5cff4a4cf
- MD5 669651cd2229b8e1bede0cd972f3ca42
- SHA1 3a84c8c58f8467d605e75fd265010744767b1511
- SHA512 a7f453779fd0b0da2971f1afdafa245108598461317a17a86985cd4824ee33258c5c35917ea2af65e50777596222adad5d39d0f82f8abe6e7bab467630fc7ebb
- SSDEEP 768:crm1C0VC+p7awjX/7cBHT747MDyK1FNEDoGbgAWXcCSRzji0yNE/i7Q:crm1NwOa2OX4QHFIo5AufSVjixE/cQ
- TLSH T1DF337C123F99A467C003817B0D5281B2D2399AC79F4A9DCF1525608D8D9BE6F8787BCF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-biome-api-v1-13.0.15+93aa238b77-37e9b753a30afe0.jar
- Size 80KB
- SHA256 f0e6b7811ec5f30fb4ad1178da75615269c841daccf6fd2d3520d82e2ebde90b
- MD5 aa248d6af32c21406ca419c8f6d881e9
- SHA1 0d5ca3d8c716b983a2a95f0ce7bccbd6a1352856
- SHA512 9e14efc109e2af069c25e313e181fcd36590aaa3b803b2d569f9d6e3f02db4d283ed52539734f7d764d1b2dd0346ad38366730d17bde71190a37d1da5214f123
- SSDEEP 1536:avYsRjqEkr83kcX0yItruvm92ZJRyJ705q7YXOn6AV5vAF5ruXf6:WYsR8psluYZJRyJ4JOLvA
- TLSH T1B183AE653B48A596D08785730851C2B6FA25E9CB5F0149EF11B91B1DCEC692FC306BCF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-block-api-v1-1.0.12+1802ada577-2e3448011f08f7a9.jar
- Size 14KB
- SHA256 a40cfb4707628635fed47c34debab35496afe5c9dc11cca2b748e50ffaa441a6
- MD5 861793252946756ba0ef2724c14a9284
- SHA1 d9ba5df18161e3905b9eb810692e1a88b8b3193f
- SHA512 586cc205b4b26fc378fce3a2aec4c25bfe801137dcce48517db382a93d7b4ca4de569189f9889499499bfb0a05ddd425bfaa0fd7bc23bbdf72187eed9b6c341b
- SSDEEP 384:iZyFM+pCQASaMPrcCffepF+wjXQbhXEfhrztK:8yFM+pCQA5C+pEwjAdXEfhrztK
- TLSH T15F624C297794B48AC00383310DA1C673D264E5CF9F05DBEF100AA15D9E9AD6B6B43ADF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-block-view-api-v2-1.0.3+924f046a77-242c146e8e33234e.jar
- Size 23KB
- SHA256 72bd942643d6d751bddf10baa6db1538df1737eaab5c5215bc4d1197ea1df2d1
- MD5 a34643d6948206cb2d6947603cc25cfe
- SHA1 97b3472ffbfc0044a824f70c69975a452e920120
- SHA512 925b98cccb5b83add37eb0a116b27adebd8aeb9455edcd00217d3f976d7df00f22206b0e13b3b23d1689d32c857f744e1b0b6e057840a22b44b1b2ed3f22aaa4
- SSDEEP 384:jTGIXRTNQ9phB4RrcCffep7x+wjbHwlG4YU+xPEmLcg1Uxkcy/0SH:e+UpUCC+p7QwjbQvkEa1UxCh
- TLSH T1E6B24B243B85A49BC44342324D60C037D125DDCF5F46AAEF7425906C8E9BEABA701BDF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-blockrenderlayer-v1-1.1.4+1802ada577-670f216635c0cffd.jar
- Size 17KB
- SHA256 9533d890e893bb5a3758d05af9fde39d3937c26995e32a097eac3b8e3e992c38
- MD5 fab1346335baa51c35e3ad008973e8b3
- SHA1 adff73376530e328dc9ba4c65657d9e81c4f9c04
- SHA512 c4ebe916bf56e00d89648a8a3bcbf9255d6efda4cfb796d5a90218d9be2b36cc22714b1702dc902d30f8a282ff12b383e62c72c10895e525049fc8ed324c7e71
- SSDEEP 384:kxx+vtfm2FZkJrcCffep/+wj6SDRcmtxeJMq7xygHU:ix+v1lBC+pWwjOBxlU
- TLSH T11C824AA27F44688AC04342338D558832E17995CA5E0CABDF6119711F0D9FE2EA709BFF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-client-tags-api-v1-1.2.0+238242b777-9d099907bcec6f7c.jar
- Size 23KB
- SHA256 ba9eba55a728c5b9df8478ea79b920c3b06cc1dde704a8f1e329e323de3c68dd
- MD5 25c7143221007b0f4865a883132ab1da
- SHA1 870c95d32ba44545d0c502961bb7b381990f10de
- SHA512 9373e7324ecc09ad45e0cfb458972e1e2b73e4444c3a378a60d3f1397efd4823e391f4c55315c3f49afc050f83a052c59fae35f856b04a83e6e5da309ad578c4
- SSDEEP 384:42nb2KTrcCffept+wjuZE5ZwNU73YZiBqFYYdHHNCZ3CYklv:F6C+pswjOkZUzimY0tCN0lv
- TLSH T100B27D607B8CA967C00382364E90C075D239A8D7DF07D9CF2625105C8DAAE5B974ABDF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-command-api-v1-1.2.35+f71b366f77-ad6525c396b89f0d.jar
- Size 13KB
- SHA256 39492683a0c9beac6cf44200d408c117414400af4a411e032736014a58dda491
- MD5 a08ce7411f1cec33d4c6d2a55e135ffc
- SHA1 5e3f062da093ea87983a40224ca699a360b6e6be
- SHA512 2f45a0878f0c0ea39fa5e80f94049cf063111b02416f4b892c95b94f771ba9c664019200d13c49b56a774af44479ed3211d1c9e794ebf8daa59c628fa2277132
- SSDEEP 192:Zsi4eX4CiysCPqr2NA4C8o23fS7NxdRcNl8icVO77ewjM3VcatSHeCx4awSk:Zsix8SqrcCffepcE+wjM3Vcaor6aW
- TLSH T188523A627BC8A48BC04782310A80C57BE134ABCE5F4A89DF1159356C4E87D9F9706BFE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-command-api-v2-2.2.14+1802ada577-2e3cf91d720a5c45.jar
- Size 37KB
- SHA256 9f04feff432521fd3151773f88dfbf4959d8262569553b9909481a3e97524c8d
- MD5 9700da2f452819ab8bf64f887d21e227
- SHA1 84c428034286e62380b3af64dc8bb89be08a11e6
- SHA512 10fcb5afb43c2bb68eabd48fa199d463f17b50a72e20264a4a2405f08da214f605ca25dcaf6ba98f6edf5f522b1f756e135145609e6bf7e19810fbddfc928bd3
- SSDEEP 768:u68+C+pcfwjCdepHRkcWAFQAJNKi1pWdaj8+E5v3S1KcC:u6I3ddepHRkNKQcKi0/Xv2KT
- TLSH T184036B127BCC781BC48392320A61C171E4649BC75F0A99CF2179398D8EA7D5B9346BEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-commands-v0-0.2.52+df3654b377-a4a4ebca1b683dce.jar
- Size 11KB
- SHA256 6ccb5ac88fa85745724c4d69aa89477f89b4cd8e789fed7078b96fc64d28cfa9
- MD5 d788e875aaa1d857452f92c6f8a0d814
- SHA1 71e6b3c6661588c1c45e34f8d3b6534291d9be04
- SHA512 240830cb241ba75c9ed0f3cb125d399211c79598521da8b8020dc56f4f6d64cfdf786a2e8ebd5bb1158b59336c6b83315330a02c97f5deb1af105c308f5bad22
- SSDEEP 192:HGjsKly/4T5gr2NA4C8o23fS7NxdRcNl8iyO77ewjNJM5nhnO:gsT/4T5grcCffep1+wjELO
- TLSH T15F326D317FC8E44ED08342300B619562D5249BCD0F168EEF616972280D6AE9FCB06FEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-containers-v0-0.1.68+df3654b377-9fdf5cc271f757e1.jar
- Size 24KB
- SHA256 9fc6e0452625e6cdd0c658842722d83a8aa0bb29e23af6932ede8c76fce74598
- MD5 fae5dccf784959554251cfa1a9e631c4
- SHA1 68401939d37e93f45a8a73312370f62df090df0c
- SHA512 4c044288c1212f1606886fbc59d0b69873267c6ab4a5a31da562fe5e854bc580342732fb00b06e8a9505b54b8d287ac976f00b18191d7827f6e6ca5ed46909b6
- SSDEEP 384:iFsaF2n9xr0BrcCffepB+wjG+D4Sy8rW78gTF7cuducBJlB1WN/:Jx9xrzC+pAwjG+USy8NioupB/B1WN/
- TLSH T189B22B557F48645BD08346390D10C072EA28EAC78F06ADCF21296159DEEBE4B9706BEF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-content-registries-v0-4.0+1802ada577-165f533012b13644.jar
- Size 56KB
- SHA256 8400250eed838e76c04e587e2a39559dc49d0e6f95dbb64acc0144ad51b9d857
- MD5 d502883390d0fa3d35e308afc5eed888
- SHA1 c9483d98b1de73a96d5a79cc1bc6428688ee95da
- SHA512 917d4a16f1fb3278d2b1664c14ae77e309ee6e84f4056c75d7fc1671dc51cf6bdb985dce3a0d60551a3bae2aad224c7a51c718f4571a85f3350e42e5dfcd6997
- SSDEEP 768:a5ZkTY2C+pOwjAIW5F3CLWFgWtSxG5rpiowpY7r19xdBaZ/Jtz5bNUpSl:dTYvpGW5RCLWFPGGJUU19xdBaZRVM4
- TLSH T122439D66BF4DE55BC1C3833A0D108072D528EDCB5E054DCB126512AE8EDAEA783527EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-convention-tags-v1-1.5.6+1802ada577-c98f0599d42f4c81.jar
- Size 81KB
- SHA256 161d0fb87ee496e4794e613b5d2a1b4a2ae0a508bf22e84d1d7be73ac58b6f3c
- MD5 f0318b304bf9bae7b1d56a0f39ce60c3
- SHA1 191bbc81c3b368d3faba737e4149b40c10aea224
- SHA512 6581c5d6fc49bd501afd9dacea34c7c16701a5ae3c0c2ec769ad33576c6c65101e0248115ce6bfaa3d40e9e794f3066e3f7fae4e0a3f924d2f3649740a8b9923
- SSDEEP 1536:cJTXul2js2ENPjebYMvV8n01aYGfs+YhRMDNCVNtp1LLgn8:kTQGsZXpmSehRM+Tg8
- TLSH T1C783D6457C7FF46DC04B103A09B84A23C515BEEA5A55AF0F3604EA44BCE1C1FAB527AE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-crash-report-info-v1-0.2.+1802ada577-dbae137cba2b0328.jar
- Size 13KB
- SHA256 d6d0b4a5ec0eb3f3bffebb9b79dcda92bf3b4290bb40160b76d90badf431f7e9
- MD5 2d163f9fcdda15559309268b8f80fe76
- SHA1 22b2fa27499e1c8c8e7359e8e9f2c5252c3d100a
- SHA512 cdd10649af8f87a6f6df81e807df772912ca87adc4f02cfb6f10e8cf0dd536613d347d9e3ed44a5b2b7d5c484a18228edf2e7b3b55462ae8d806b391119de5b6
- SSDEEP 192:7nPIgPhbEk3gRIr2NA4C8o23fS7NxdRcNl8iGO77ewjBurEN+9j/A3syrNB96/d:zPIIhbEktrcCffeph+wjTN+NA3DNi/d
- TLSH T184525C353F489C0BD047D6320621C1A2D63CD7CB6B09DDCF1629236C9D96D5B5B0AAEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-data-attachment-api-v1-1.+de0fd6d177-6bcd6a6635e101fc.jar
- Size 44KB
- SHA256 40ce4a34dabf1003b4a37266227e04495942b0325a930b4c46440d97d7dcb3d9
- MD5 0a5757d2d85ab0b5ee08f199ef70a729
- SHA1 3c8d9f698a1a5d62713d5fc01b761ebde707749c
- SHA512 9ea09f2da1fa7251f2a708cc2b73df55b95837a30662e05bf2f27a883a25b315bb80bc1ad15319a1c907cc84ea88e8d6b276741ab57558dfe64aa10fb52ba8bd
- SSDEEP 768:Cb1wtcmzLJC+pswj19BpTXDJUYW5v4NA67mOWddzG7ijVeiRpy+bShF:OwlvkDe9vTXDJW5v4i6MVeijy+Q
- TLSH T147137C793B8D681AC44782320A9180B3D429CACB9B0A6DCF1065515DCD9BE3FE746BDF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-data-generation-api-v1-12+238242b777-ed078194de86955e.jar
- Size 95KB
- SHA256 382aa3e6ba9ab31f28b24a0b1e11e0d7e485108e3714255b4775e156963891d0
- MD5 b1b4b86f078aebc116279bf54c541c12
- SHA1 12a686d8b2a4b964c0fc0bad6dd068d095df06e7
- SHA512 6ac789900589d2a436143600c8c7fdb8600bd8e5379dcf995e7c9b07b83fa1336891c8fad570bc9339086605cfbda5b5002070cf6809ff4c4bdcb858ce293e27
- SSDEEP 1536:0tdxo+8+zPckupYGqaierPK8NQuMJMRq5torPMHwMzyi7D2PljfP:0tdxo+8+z1M9ierC8GeCtowQs37yP5
- TLSH T1EF93AE297B46643BC04391321C54C473D118A9C79F8959DF002A216ECFDBE5BAB867EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-dimensions-v1-2.1.55+1802ada577-bc9700021130ea9d.jar
- Size 26KB
- SHA256 d811b62f60e7b96f69026df2f22054d2df517f26a9b8ef45a773cad7f96c6dfb
- MD5 041254f35d9bbde615e84fd81779935e
- SHA1 0be0f88b4d286c0357ae9bd26d4007b61cb764e7
- SHA512 9db277a263b68dbfd7e32c888fc33013da4cca1bd421ce65d0f353767d6fe234887e00b7d82b49ebae8355af92a8026fee238d15af1c25ef7f7e42084172eee2
- SSDEEP 768:Mv2GSC+pswjG+4p+u/odfOQyZqUm7zPz0m/NfnlfIPl0l:MuQ7n+4UueUm7zPzb5lfWg
- TLSH T156C27D213F49B42BC04787328D50C17FD6389BCB2B018AEF655511089F9AD2B9746BDF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-entity-events-v1-1.6.1+1c78457f77-5d40cdb43547b72f.jar
- Size 67KB
- SHA256 1b76e566cbb9ae0ec9ce243d1f5f0d3834789a7f1c4c7a37efa8557924904af1
- MD5 2849e1049e2c78b35e6660ecd9db2f06
- SHA1 26e0b8d23219459e7a4162f257cddf34ed77260e
- SHA512 dd26db39ef8bf479954d02a1e1a67ea4578155df8f8f841941b65d1edcd4da4d231674f56bb741dfa519985c809ae3f015285967f929a8240abc746b0924f15a
- SSDEEP 1536:Yp9tax0n3huupOhgZnr3/krSqWhRIfLvivKQYsKoqU:YpLL3hbKgZnbaQREWKYeU
- TLSH T144636D233BCCA4ABC04782354B348073C62896C7AE0459DF659A1D1E9EA7D6BD701BDF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-events-interaction-v0-0.6+13a40c6677-59c17f0d1a1ad76e.jar
- Size 59KB
- SHA256 4f96fa5a913295d1094e86ad73044391ed006b5edfef70c51823f452f7cfe619
- MD5 86960c8ef463468349c704d7a0db7759
- SHA1 857ef2134380fd0cc06abb5d3a4b14e66db7df50
- SHA512 6e95adea1d687f93a06d98963e37751b30ef37ac63a16e1f1bde37923a38dac8b82cd7692e1b85bf08df1c80d8ce81ba9a74a75059d1f879dfbfc26b6805b2e9
- SSDEEP 1536:pN0V0j2cN0T2WKqJpKoKFym/J+bv27VhjVoU6435:0V0CcN22203Am/oOBJn1p
- TLSH T15D537D25378E6917E007823A0B60C072E53896C75F0A5DCF7429690D8EEB99BC74A7DF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-events-lifecycle-v0-0.2.6+df3654b377-f2765b90fe5042eb.jar
- Size 22KB
- SHA256 dbb9fd99944a9a1d93f0e90dc7be05a6b0eb5c8fe44eefa94c4b7251757b067d
- MD5 a2fefa47af8c45a1b3306401b59b38c0
- SHA1 ac478f17647a4bdefa818bcfa78211c99200321e
- SHA512 aea95b79ae31f7ec0f78824313aca28e55fd78ad6694e7ee8628f5ad40338264c9d56555b6c3efd5bbb4ab14c06c86c0ef3015f64625df70dfae91f34d4b76cf
- SSDEEP 384:jJV+iuPqRrcCffepl+wjPoiv2AkpMeSndscSIEQUMBTof:jninC+pkwjQjAkq9dNWQUMBTof
- TLSH T154B24A253B4D984FD147823606A0C276D638A9CB4B1A9ACF5128288C4DE7D9FC746FDF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-game-rule-api-v1-1.0.41+1802ada577-952cc503e286e377.jar
- Size 53KB
- SHA256 8d9794b9fe04ee88615040333d268a5b8eaae14f17628c9c170cee98ddc55249
- MD5 016b6ce8076d1a02673adc399c1e4c1c
- SHA1 574ece10448b1b0ca7aa08b7a3b7e4bf2afc8ef8
- SHA512 f79253eb44541877ae5dce2a14234430d628a1ec40daa6e559f1fe7712dc02c57a2996581bb1f6241445e55b5a5a416050af109dd4b6296d7de1c952bfbd2b9d
- SSDEEP 1536:Mz6CDv207rl53Y3XJwM9tWAo0Ea8F5MINg5+:K6e43H9tWAliDZ
- TLSH T14E337D177B48D40BC09742334991D0F6D064DACBAF0AD9CF20A8224D6EA7D779306BEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-item-api-v1-2.1.29+1802ada577-25443cc2acd1fe8d.jar
- Size 40KB
- SHA256 01a5828fd2427c24df5e846c37740457c8fccd574bfeea016cf27a325a509404
- MD5 73609df71d73b581ef94e6e737974309
- SHA1 0c815f6b9c8abca2bd7ba6be635d605b05e16a12
- SHA512 fac1b6fb348346fb003b589ff2eb8ada6cc1e9ce510d645777200ac477edfddff9e9c07493f966204444046233731456cc4ab58b0bb3dc31df576db04008fa49
- SSDEEP 768:WUAoLpI6ckCeC+pGwjokzIaqOa4/IdcRqgAv7xjWmusWflGtKN:HLLcJJGzIJOj/IdcRqgAv7xiwClrN
- TLSH T1E5035C617B88651BC05BB2310D508132D22CE5CBAF4699CF2165124E8EA7E6FD327BDF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-item-group-api-v1-4.0.14+1802ada577-65f7306139dbb27d.jar
- Size 55KB
- SHA256 fddfcd06c7a1f356c64f1a2e027b1a06fcc788740f98bae7167bc5e9574f20a9
- MD5 9b72b3d4719e47b1173ff678ecfb17b9
- SHA1 51e6d9fbc4c4bdc705b8beef81f12621e6dc31d3
- SHA512 1579d126522ec6981e8ab00ef7f6ef42d6af2cfce6c5c41b062b066bd22eb0f213edf00273238b408cec5ed4a6b84450b1b87e7e5f6cac84bd2346a662f26592
- SSDEEP 768:5Ge6ktC+p7awjRfXucJN0244+lly+BkUpD6LzftQwkMyYzwL7WOg/a7bYR397BDF:ekYOa+1EWHdBDeSfmu9J/frH
- TLSH T1D5435C663B48681FC04B913104A1C4B3D118E7CB9F4AEDCF2525228D5EA6E179726FEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-key-binding-api-v1-1.0.38+1802ada577-f49797e6f0f400a.jar
- Size 18KB
- SHA256 e477523df1564db371bd288ca41fcc635a6bd1d10a9ba32ad046ed06de7ae4ce
- MD5 cde2fd8d12c62553dabbe95566ee3bf8
- SHA1 dbfae8088d5c04586f5f60738c269e516902bbc0
- SHA512 2b5e2204898a1e05dd8bbea069ff68176bf6705c6b297102535d0321f17db9bde590b03b77d9d934a6e8023367881a9d67923d887b01ff6a57a69de731798abb
- SSDEEP 384:Kwa3omKUfrcCffep1+wj49FOl3fvqoYQ22ODs7zG:KqmKUAC+pUwj49aPvWvZ6zG
- TLSH T179822A703B48B84BC087C6320A51D137D528A6E76F079DCF3159225C5EA6E1B670BBDE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-keybindings-v0-0.2.36+df3654b377-556e548bdd3961de.jar
- Size 13KB
- SHA256 cbede02975655e8475db619186742e6832491755e19c60951bc74794d8b28deb
- MD5 d7915f344aa975195944d072bb4895a9
- SHA1 354c2fef68b912ffe7dd4eb439855fd279c49450
- SHA512 3e69dcf1e047aa033b5ecbf39030690eed44a03201afb785988f4eec8fa8e537ef642d3bec4f685f5ede1a9ec082ee85fc8a0326a1d6860d5cfcba3104c6efb2
- SSDEEP 384:TugHpBJES0GrcCffepcI+wjf2ePb0Ox0k5MF:TX01C+pcrwjf7P7dMF
- TLSH T18C524C357B4CA45FC48382310A10C577D266B9EF5F098ACF2229619C1E62D4FE706BEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-lifecycle-events-v1-2.2.2+1802ada577-b3f23b2ebb7eacc7.jar
- Size 89KB
- SHA256 180cf253a3f8ca3b38c7b32f4471b70936a5252f35cd03af01f118c32f6215ec
- MD5 8a389cec2d9afe6b51491f930c4faa15
- SHA1 96505e4ecb0488f186da54d693938f23a976ae14
- SHA512 fde5578db66c3403709ed6ef647a98c549ad046d49265d381b60a15d9b8d4a50a46ae3507e80b0333a004f246929640fecef8f4f0f6bbef0427152cf744f7646
- SSDEEP 1536:OrL5NJCVWgjqtaxK96M8dI1xP6HxcBGFcqbiyGWpkdZ3PWUrudpP:OpP3gjqLx6HccodZ3uCO
- TLSH T114935B1A3B5C64A7D143863B5A74C032E17894CF6E121ACF9875184E4EA3B6BD709BCF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-loot-api-v2-1.2.3+1802ada577-642694b49b7023d5.jar
- Size 28KB
- SHA256 1f117b1a8c3f39730be4ee2b0b2c625a552c55865c8314a339cb98cc4ce6632f
- MD5 256d70850e0ed86dae3b87fa217550b8
- SHA1 95cd87d64ae17ec80a2e49c3a567206db37d490f
- SHA512 7a246b0e19c3d3294ddadb9ef565a2aee33e04dc8752c61adfa92a837a34c23d9a7a4643dacd3f72511c9d8f89f864d57f80b9be69db9a6f26bfe4e48ebbad29
- SSDEEP 384:1hwx2SnvpE2rcCffepX+wjmRYF/6Bks0M5jLnt4Ee1zIIp7CDQejrnqvgp4Ok7nO:1WxL6FC+pOwjZFLEH4ismBfiy49nd5C
- TLSH T1A6D27D653749B407C00356330EB1C076E029EAC75F0A9DDF1469229D8F8AE6F9785BEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-loot-tables-v1-1.1.47+9e7660c677-26302d8860a10642.jar
- Size 29KB
- SHA256 ed417a127976412c5594b5cc607c018881159b8ff1a061dc98eb276a2ebc9d38
- MD5 033f1cdae1517f460bb698b13b5ded3e
- SHA1 6c237687cba44fa16b9073ee2225a33a995e9fcf
- SHA512 9fb69a394e1fa48a1f4df89c7cd98f16c2c1d596c00c1ae98f9341759bb70036f5650858dda44a85399465a6aacf9fd95d504c457e34ed42bee4d70dbe7f2f4b
- SSDEEP 384:nxSswVySrcCffepco+wjZAzUFPERwAP1dngpJncGCKAsq/qOrktE:xSs35C+pcLwjmUFPuPspJnchKAZLktE
- TLSH T1B6D27D253B46744BC043D1330A61C073D0299ACB5F06CDDF115925988EABEAF9786BFE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-message-api-v1-5.1.10+1802ada577-73f748c4cec1aec4.jar
- Size 47KB
- SHA256 28db164a2afd9f40d4c3687de97225ba7829f541563e74c289d89ca538087b3a
- MD5 b9e978d71f0cb5773d3bc1f576de8d1e
- SHA1 4c8e1e2a0c5a3ac378764473a78f8fd2b23b77a9
- SHA512 452df96ffccc7476713eebc26e640057e7fb749ba665494da9994fa1bdca2c0e8535b7a3177a3306e719673ec16f542361569f184a801486ec5e8cffc614e3d0
- SSDEEP 768:ixibNOwwXC+pc7wjUOHAS8TRGFPu40TOoq7rTphOVoan0VtY0qk1j4NFK0y3FgsL:ixCNLzrZODTs0TD4NF3DI3y899EsP
- TLSH T1BB235C653BC92C6FC00382332650A072E429ADCB5F1669CB617D114E4FD6AD7930A7EE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-mining-level-api-v1-2.1.5+1802ada577-efde39f5a9894ead.jar
- Size 21KB
- SHA256 cf11a9241963d6ee98ebb11cc95c3aea0f782efd7eb3a5d82cd47e851a13f167
- MD5 88018523e5f7620a26cf40e5f23a8bbf
- SHA1 1e83e81e75a29114f58c1295c4f1e092be639cef
- SHA512 171fd36bc26a263c167697b5b14e7a690f9ccef951ae76ae3549f0ebb6749833a253bfdb28343ab7290b01941430e5a72fb01ec4abec5bcf28891b24cc7e611a
- SSDEEP 384:4AgkqYJecGibrcCffepv+wjOJ5rd/90olaPGTPVcz9K:4bdZC+pmwjOzrd/90oAsVcz9K
- TLSH T10DA27B313B85668BC04395320995C127C524DBCB2F45EECF2075125E8EE6EAB9F07ADE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-model-loading-api-v1-1.0.+1802ada577-f415600517ac4cdd.jar
- Size 61KB
- SHA256 ff76dce5cc5727f1af050abe9c31b4e5eb4c5939f4db697405df49a0d53065b3
- MD5 35d6d49feb420b837d0c1b0297047163
- SHA1 4ee1e06697ab3fdff5c8f0b8acb0d85a88fd15b4
- SHA512 ba1d05f039537be1482c5a7835926ced8d56271fbf3b91f844fb5017da8058a52bed3efb9c28d2adc95298a530364f2d1e6b73a04c603c0c80e17843a3c1fd0f
- SSDEEP 1536:rHT2B49//QX8ou1M0iVyVOJpxJN+6cVC4CkpdlehPuT:rHT2B49QMou1MEVO7TN5qC+pdleFuT
- TLSH T14C537C213B6DB99FD44783314A10C072D939A8D78F06A9DF2A691009CEEEE5AD3447DF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-models-v0-0.4.3+9386d8a777-189b924a9532ccab.jar
- Size 20KB
- SHA256 b26e9bd2eb4e591aa46e8504a94455c7996f169bc53d39c9c75ab10757260bfe
- MD5 2a1b1bb30a24ffb15e9d85c9780bdab7
- SHA1 3b86c4eac7b8987269c3d48bb8133b10fce5d75b
- SHA512 c1549dfd7e73992ecff21239d694fab7cf35551a8bc005c1488b7286fa172fffacfdeb4fd537eb8ac5961820b29daac0303c6172e728662a951b17fcedc57ba7
- SSDEEP 384:fgkepE+IHjrcCffepfl+wjDYhM9//vdQsI2L4qwprcD:4kCOcC+pfkwjDYm9//FQsORcD
- TLSH T196924B213F586C9FC04787321A50C472C425A9CB5F46A9CF2669201E5F9FE5BD30A7EE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-networking-api-v1-1.3.15+0caff8d077-ba455c2ad96a3ec5.jar
- Size 130KB
- SHA256 c03bdeb2482622f9f330c3e0589d619f95b66a371ebffe08213b29fa07a1bab3
- MD5 4f0491252d80f91c77f68ff91b2094f2
- SHA1 7c01718b48c8061a4d4d943e432dfa2435398e1e
- SHA512 5fab11a084bb55cbb2eb5fbf529c55ddbcc7e0d53f0d480d802c2bb89013394bb060c44882c566c041ac5a87ac0befef6e443e4caaa8892118c42010579e17bb
- SSDEEP 3072:N/NQ/d61DNScK2RzA/3h374rGXf2ac9XtAst:smDNScKk2h3UrGXf3st
- TLSH T1DCD37D623BA8683FC48342320D40DDB2D16998CB6F035DDF1135124E8EDBA5B97697EE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-networking-v0-0.3.55+df3654b377-dcc6bde80b03eeb5.jar
- Size 30KB
- SHA256 140fec5ad91a8ca8753e137f062362bf43b84e533cc4f75c25cfaf3234c147a8
- MD5 0fe6b8036946cd8056d37c667d1ebefc
- SHA1 2b79bb84134af524ed00e08cb726da4c656c8ed4
- SHA512 74213b1af48b64f036a3d736fdc70c0eb8bad79ed7f2bd36b7aca3bcfb1c95fc100583837d21f1e9616d5a7460b8db5d3de494a213d9e1be3ca999ab2628741a
- SSDEEP 768:k+RTrhLdJC+pEwjK5iiJKmonvsc4N67TNggKoFLy:PRXV6rVmm8Uc4QTNZFLy
- TLSH T191D25C637B5A656BD00782310990E9B2E138D8CB9F035DCF2565224C8EDBE4B9705BEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-object-builder-api-v1-11.+e35120df77-c89f0d078635543b.jar
- Size 69KB
- SHA256 54f3830dac266f0df4a19a995643c6fefd2c6d58b6ba8a4a2b19697e86994f74
- MD5 e554f71ddb1eb2d1e23ba942c73ead8a
- SHA1 fc64aea13f40fcae5a6d1bfdeb05f94ae0455979
- SHA512 c2cc4e3d68d6b9cf04af31eb9f577cc929375869b0b912e33230c48d2eb4e6beeefe1fcf4ea9cda7bf06ad259a38f5c14d344c7245e4049e3695aa35564d6795
- SSDEEP 1536:lGqMAltedMF20MS/r8u0bmStKvX9rmafJAGnai:bFpMVtFaKGnz
- TLSH T14F637C217B8DA88FE047C13209248536D02999D74F5AF9EF1056A15DCEDBA4B8703BEF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-particles-v1-1.1.3+1802ada577-f4621d59241956c5.jar
- Size 31KB
- SHA256 1b52d612998aa8b02e86bb376b62099e8cc5aae7f1fbbff4a4760084762bcd16
- MD5 d744ee989d2949040e9f37baedca4a4e
- SHA1 7dd931fd541e225e80c48b3ccd18146791cdc75e
- SHA512 93f703da7070ec4f41d3e97a7919f45ea1f5023ebf041380a446e9832681a0c0896bb663b800c173f51687ca4a43522da60bccf6b8c1d026e26c2d443cd51e26
- SSDEEP 768:b4GtKXFv+C+p8wj+N+DzQXgRtJxBBaUsL5:b4GQHLp+oGtPXzsV
- TLSH T1D4E23A563B8E6AABC04782334CD0C472D038AAC75F8789CF6421211D4F97E9B8745BDE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-permissions-api-v0-0.1-SNAPSHOT-ac80c3433dc7a09f.jar
- Size 4KB
- SHA256 eafed55e6d2ee49c7be89bdc7378433521f65c3ca3100d43aaf50cfecd48ec77
- MD5 1b8c2e834d5488eb35ec4476de5c0d9d
- SHA1 07b7722490de316f7af875189df0a38ded4c3730
- SHA512 b8db76429a6a0a3bc5a9c8707595952355fbfdce6facf4d561443feb9c2c60d288f756f6a0ca05c8916962d00b928bbfb577aefc32b1533b6e981ab8bcf8d143
- SSDEEP 96:a1WqGppq/hMNpKH+xn1xsWypAgbC1GYsxt8duBUdo+KUqi1G:a1WqHaP1xsWyigbCkYtdvdo/Uqi1G
- TLSH T16FA1C60FDEECA173C28AECB13EE18947F33012A503C424BA6E505A266E5B0D19F067D7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-recipe-api-v1-1.0.25+1802ada577-ef4a6fb42053c95c.jar
- Size 49KB
- SHA256 7bbdbe8374d162926f532b3705f65035cf39f93e176d5506b5082674a583ff9c
- MD5 3851941a88062ceefe61bd07547093cd
- SHA1 c8429a0c415f479554f058bd88e99267d01b9d34
- SHA512 a6959e61850598f955985d95361c9038ae31f0decc556f3569b17103945663674a80ed2a63f390810e892f5eb836c6829efcf6bc1e282797e855a6a83f5bd56c
- SSDEEP 1536:g0KSdXnowVHGLzOuzyJFq0HmoW/u8RE+7:tF4ImXGq0HpWFh
- TLSH T190337C563B5DB84ED003C2728D91C07ED528968F7E035ECFA644250C9EEAA5B930B6DF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-registry-sync-v0-2.4.1+4c0a70e677-8e5b8dadae7a629b.jar
- Size 115KB
- SHA256 d03582c28c50ecb1232e44d924538851dbbb54cf2dacd590aaeef53d9e528c1f
- MD5 88a79411969144d27c78ff248d7d9f97
- SHA1 b27809a3acbd20bdd43417220337bef1e31617d2
- SHA512 686520256120528aa34180ce7fb33391ecd540a0e61f79f8dd030520927487fa38574da63d183c87b2283b65f29c4ea21e13a9d5f5c2d8c5235b42fb8789cc4d
- SSDEEP 1536:JzCAX88Tas4QMUitw8yyTRkTZgjTvYd+cBjhJWgnhladqqBA3vfdLeMLYa9:JzCssQwrVkTZITYNLKUqsvVLeq/9
- TLSH T1E6B3AE55BF49E51BC1839A360D208072C03DD9CBAF064DDF422812BD8E96A9BC7567EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-renderer-api-v1-3.2.2+1802ada577-450cd028ebe1be05.jar
- Size 58KB
- SHA256 5167d9a83cab82bda5d7a29837c292c58a0c27a15fbd777b2090416965494fe0
- MD5 2a2877a76579ad6e1681dde383f04fb5
- SHA1 be11bef7a13c48e3455acc7314908acb7d74f9ae
- SHA512 6b73403653e054c8ace7988463ef285e0c741b63abea3af78959eb24a4cf248a3db8a1baa30d45cd9cc9d79c0844d2d36941d2e50ca8855ebe045c008cf7987e
- SSDEEP 1536:g43RzlS3qpwCwJtHzF8f0ALD5+SeYtndYTtqdo:g431lXwnFSD73dY5d
- TLSH T1AB437C617B56B89FC04382324950C872C12A95CB9F0D79CF1199102F8EAFD6B938E7DE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-renderer-indigo-1.5.3+85287f9f77-eb760cabb594e4f9.jar
- Size 114KB
- SHA256 4787e93506223b3929d08d5d0868749d73792cf819f47a8b5b4eaf9dd77f97a7
- MD5 1210072aa00c147fe7fb9d2b2d2f9f13
- SHA1 891773ba43d3425ca9d21aad19dbf76eb142196f
- SHA512 9ea79d7800d36cddef3160b6878f52ec21ee559f13721a6111a17469eb82d87f3c05c5d2e7a02297423b6f6818fc02a23885b82614d1795ca8c5ce8e9e3b869a
- SSDEEP 3072:crvyqgtNIF8xaHuVa+l0WRhijYF6dhGYax:crMkHuxAQBZx
- TLSH T124B38DB23B59749FC44342329560C676D23AA4C75B0EB8C72131102E8DBEE67935DBDE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-renderer-registries-v1-3.+df3654b377-990564bff124529f.jar
- Size 18KB
- SHA256 e865c39c91425f3e163058065547c4e4cd2562b1ac423d4971d3bc11d775997c
- MD5 d7cb784eddd1dac9381a83688c625d29
- SHA1 fa3fb2fa2a314176223a2197062351b106af5dd9
- SHA512 a11fd93e10991c19feb3916f15afc10291a4a23befca455948d238b27d9be9d9f3361ab4a395086f04a236975eaf856b3202b0ca27d0f354f99c0f9a353851d5
- SSDEEP 384:7CVpZzT+rcCffepd+wjwBviG+JSCRV8i7APKK:OpZdC+p8wjwBARVAPKK
- TLSH T152827E95AF84A58FC04341354D50C422D236ACCB4F0E9EDB262611FE5D5ADDBA30A7FE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-rendering-data-attachment+92a0d36777-3201dbcdcc322cbb.jar
- Size 17KB
- SHA256 7f26eb4060ee7cdef940e62dffb6e5fe855a59e29a29dbbddeace6be35c9be84
- MD5 6a5ba3168047011d3ecb8189d0bb0101
- SHA1 319be97c4c87570ce94de7c079fd2c5c7f098105
- SHA512 46b3a973d9405176b783c4285bb0f2834db0748c5141ca3fd1ff43481cc0805b0b531f58f7952abb56edbd220c551d5aac31176cc8dc890a29099ed775d8483b
- SSDEEP 192:4GGop5/EPNRdPXzPT2At8r2NA4C8o23fS7NxdRcNl8iuO77ewjj3AsRxKK4FdwWq:rtEPTdbC9rcCffepp+wjEszK71sAwSfy
- TLSH T1BE8209317F48A84AC04B42354960C562C159FECFAF09AACF2644111E9E97E7F970ABDF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-rendering-fluids-v1-3.0.2+1802ada577-27fc4c268fdb77a8.jar
- Size 27KB
- SHA256 19ef500abc410396519138ab4d343e39b1fc7d4a3b92ed10bced4df908aee915
- MD5 c275c583d9a7ebefdf2efcded4e2619d
- SHA1 da05d3260f182df7779cbca94b61603e17916ec7
- SHA512 c8289ce78fe05d276d8268f154f3801c89df4aa678d540a6b9c4434198373cd35b99e147635ce852e48521058c809996ecba394a7fe2171ae526c1b32c4f448f
- SSDEEP 768:Ia/imeq6C+pWwjktUlpp9WE0RKTAa5tZV8rL8:IiRHjd9ipfoRoAa5tZCr4
- TLSH T1C5D26C267B4F745BC80343324A51C436D066AACF1B2EA9CF1165111F5EAAF6B430E7DE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-rendering-v0-1.1.50+df3654b377-6306fc6f15e83ed5.jar
- Size 16KB
- SHA256 ac3237233282d14f83afd18cd1e4206b6846320d18de06efe8383ef0ff45cb2a
- MD5 b5cc97a616b2f7ac764267e2b3fc2cc1
- SHA1 19a6bec6b1d855c1c838123c438aaa4f5d59c210
- SHA512 9269f163948546740231a0fb51374312274fbbc4e5eaf6796e966f08b0d4e635ef93874f926af339c4a5418b59cd20ca1407660bd440b4a8fb740ee300f22ad0
- SSDEEP 384:zgnLKnurcCffepV+wjDdsb6NpGKU4Ki6YoqUae2:EnKdC+p0wjDdsb2pUNiZ8a9
- TLSH T162723B247F8AB84BD44782310950C837C035A5CF0F0AADDF6616215D8D5AEAB970ABEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-rendering-v1-3.0.9+1802ada577-9dfbdd3b036f2789.jar
- Size 95KB
- SHA256 d098832781b9f1f2c7507bb8f279683954c6d088acd3c4e72a672e12b568419d
- MD5 296da320b8dee7803f44254fc100e7a9
- SHA1 c7222a8fb72814b5298b403f87f75930af3fdd4c
- SHA512 59093476e79e9520142e9b2aadd2d0b5acbb9f14edb1c9b5ebd0af927a318b84dc361b708937700a046fd2752808e7f0e85f048038ad2df4178f3d21454d64c2
- SSDEEP 1536:MCvr+nz5aXLOlDMqrtljqRCRwvdf9jj2D4g3UJe2NzaUPM+MQ+Z6R:5vgaX6dnwvfelkCUE+MQ+0R
- TLSH T11F937D70BB8E34ABD44342768950C476C02678CB0F0E9CCB6564116FDDDAA6B970E7EE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-resource-conditions-api-v+1802ada577-b8448a66ac916a41.jar
- Size 42KB
- SHA256 9f996b2855ed8150e3c141b3b03f94c3445a3f5def8e027ad8fb3e664d191bf7
- MD5 fde5b871dbd6d6ce71987fbbf23d9fa8
- SHA1 d36cd1f5bbd2d499502dc9237d1cad44b47d9fd6
- SHA512 0291d2d016e3c73ece86c9afd0bc731ae046eaa5be4fcd8493a9808d093a31cb94d99c67332c1c15ed35401e09be9af4969b77751a314e0a5c1c0dbebbdc08f4
- SSDEEP 768:cAVViC+pYwjf/G8gBg+2yqVAvICdO03hld2U/RJrce8:cIhX2+8FcI6O+hld5N8
- TLSH T115137C67BB8C951BD01B9231078081BAD138D6C7AF5989CF116610298FF3F579706EDE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-resource-loader-v0-0.11.1+fb82e9d777-14fdbb059ba5cd43.jar
- Size 92KB
- SHA256 d5918d34217d121850943e24eabad2792e2adaa16d0ab0354ecbdc2313f48715
- MD5 27d592b7e995c42d8609f261ee93eee9
- SHA1 2ed8c2efb29d9693009ffd4a50ad2da8c1fae95f
- SHA512 7c008fe07f2e2eac4d23a7e05f5f3456b27911127fa7e845545586ceea077f70ea0b078c7769b7615245c022676c8c9c2ec96f6188eb4bbbf488ba436c30291f
- SSDEEP 1536:HaD6a85cd3bGDipeJOQMm00Q/kRu7FHDhtMsmSjYjcBDO5JD/SI:HazRKipesXm0ZaCHX7Nwx
- TLSH T12D937B537B89E82AC02785370A20C472C10456DBDF50ACAFA415111DDEF7EAB971AFEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-screen-api-v1-2.0.9+1802ada577-72f49f39b9fd9bcb.jar
- Size 55KB
- SHA256 50877c2a5a533ebd2435df3e37e2bdae7152e5ecfee3b28cbc702c5e1d961b8c
- MD5 c8c01944ab0660021f6c9ce3b18e830d
- SHA1 6c11a50afc5d046ca4545c4463836416597f7fa2
- SHA512 12528e2939d1f7fb81c2227c5a6f78f37c07e984e0e16642376ef8fe5ea917f71493649b5f8bcc74a8ebf4500055678c35fad611f08b803efaf75816424f558c
- SSDEEP 768:l1JMIzC+p4wjM/f7/DlUx2g8RgBEr7m3PaioWK5jk5ZXoQ7kImz+:zJMI+j73V7RgurKiiuKZXzkZ+
- TLSH T1DC436B657B4B210BC0438A73495084B2D1389ACB1F19B9CB683D117DEF8BB27A3557DE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-screen-handler-api-v1-1.3+1802ada577-3f8ad3f85edcbcb4.jar
- Size 30KB
- SHA256 bcf37995b2151384fef6a7190a2fd0c535272d54de6f719febc8cbff912107e4
- MD5 9c752e8e3abc997a45b411a8647fc990
- SHA1 f31627e8d2b806654ab82c0341dfdded8dfe4cb6
- SHA512 b28fa237f968bf9d6eb6b0949a66382d7e583c71ea9a9d40f5408c8b9ecd2254e4ee1c96b4d589a2d98c020342594e96902747ed5a967ba85f760227e5caf1a1
- SSDEEP 768:QAS/97pHC+pSwjWCLxc0pi5+/g3ytCqXIT+tlAoP:dSFlihZSe+nYgIgAQ
- TLSH T16CD24A6ABF4D6557C24345320A90C072D138DACB9F15A9CF2028226CCE57F6B9B51BDF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-sound-api-v1-1.0.14+1802ada577-738ceba6556064e9.jar
- Size 18KB
- SHA256 764dad44ccee7a6a94ee007794013c9b5ee0325b6ddea8c26d79bd91ecd1595c
- MD5 d31acb418d303ad0695985d99d197a31
- SHA1 98fe2b9c78e179b0b66cdd88e5757451f71106b4
- SHA512 990e67185cb21e6f6fbfd219027f92a43e3f3d83c54f6fb8119224b88da1ce9db11c87338437e396d92c51c4967b50ce94a9046d06199e59f116d299462eeb2a
- SSDEEP 384:+9FFa+/4Y9QrcCffepN+wjyw6+AP3Gdj1Oe+gkpokN:+M+/40C+pMwj5bAvgj1OWWvN
- TLSH T1F9823A567B84648FC44B82354950C273E528EACE2F4AECCF2809215D0D96F6FAB06FDD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-tag-api-v1-1.3.0+238242b777-440d05a2cf60c21c.jar
- Size 24KB
- SHA256 16beb98dab7c5bd6d207dd9f736eb2ac329c51bc6dfb9bd154123ac072175281
- MD5 6415764ea8b54a35eca8364d09495e86
- SHA1 e20dae95fc788b4f768151dce12af96058cb9c51
- SHA512 01823f8574c094b02a0f7e3d8f993dc5b37f21fe57d5fda9a3625a7835fc4e5d2c15614632180dd2ce5484d741699168a9ae3723303e429d793da77b452558e8
- SSDEEP 384:fL1uhRjfUrcCffepR/PGtLXxmb3b+QpJ8J6VIYNBukgwLDOoqo:T1uhdfLC+pRXeLXxmb1RvNBXHnqo
- TLSH T179B26B553F4C695AC08B85320AA0D1B3E029A9DF5F42DDDF2058215C9E96D2FE303BEE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-transfer-api-v1-3.3.6+8dd72ea377-e049ecc403658818.jar
- Size 184KB
- SHA256 5fd270c2a5472665ba4cb2ecb03ffeb8ed1fe863b7b8d93270ccb670f7a2f23b
- MD5 6dc5c76dc11407216f6d8ef71bdb5bee
- SHA1 f2d20e9cfd4ff6fc1f027cb4a01e31f7a7ce876c
- SHA512 6abf8936f1eed180978505b84ec7bcb8df76eff222b23dde26f52f2b6d8667882bb5a4c9232b92e5a5a65cf285cd86f3306afde34d0301bb24cf11cc09f5cb34
- SSDEEP 3072:D+AxVD0veXEK2hoSlKlh3uffcWywcxkAtbxtF7mR/://dXARkgHtbAw
- TLSH T10C049D253F496C17C00792310BD08479C13DCAC79E89A9CF2265119F9FE6AAF87867DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-transitive-access-widener+1802ada577-3e2ae96e91b53f0c.jar
- Size 11KB
- SHA256 f9641cd9ea3c73404c809d6b3e6726fb88e473a69fc3b3c471fc97dd6c884846
- MD5 d4e6a673a263656a8606441c695f76a6
- SHA1 e7e36d897e980d36a4b562cf9300096988c04892
- SHA512 8bb1209bacace6f635b2400888fd7e90ec034873e07d6a96bfa1ab44b14c136caf47051fc2e00c950e1da8bf8fa0d1507c3d39b17f3e85d1427bb18c7619fc43
- SSDEEP 192:ImizPL25nyHM9PcoXr2NA4C8o23fS7NxdRcNl8iIQaO77ewjJD6dC/PNs7ESgAKq:gzPL2lyWc6rcCffepX+wjcdQFsASD
- TLSH T1FC32AE617B84850CD08BA6300991E117E129E7CC9B15CB9F039A30241E9AF6EBF07DED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\libjf-base-3.12.5-b4204c8346e51be4.jar
- Size 580KB
- SHA256 09ba5872b3f83ddf6fb65826dabf1b731675cf1832343fe069b87f06404a6af7
- MD5 b10e860ac2affc5405480f7e4b88e61e
- SHA1 f4d3eac0de75680cdcaaa4c57de38ad155622ee0
- SHA512 79be1b35d8498af8e3a49d82a4deaa624ce49b0ff384b4f8855f8420b8e7e97caeb4090e83b1a5f1c03eec3de14cb1835c5154e212502fbd57ffe82e253837ce
- SSDEEP 12288:Q/U5cmx/NrGNsP0UQPI0Gdnc+dOlTviqMYX:2U5b58UwDucSOxcYX
- TLSH T164C4CF52BE88C9CACDEF8CB10B93450FD48171B9838B5A0701A1B5D4CAE3BA65F457DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\libjf-config-commands-v1-3.12.5-bb9de8aaf6d8587.jar
- Size 39KB
- SHA256 6579eea2dd1ffe5a091fdadeff0c7f48313e9100be151e481b1f84e171dfcdf8
- MD5 6ad8d801e590373f53d845b63c5c0f12
- SHA1 531f864c04e85fca341b3c96933a1b7c88c5b45b
- SHA512 ab42cc509be8ca128490c3abaaf3c284406e2cebc8515e72a59db20cd89544600612416410625c353a6482395e0c576cc8d566a8d8a6551b76ca372288d4f8c2
- SSDEEP 768:Upu5oFm/kRUhgqDnsz8vE8b2c1YZGSWCVzpxr8+cdh61SUTZQiQAHU6yRfh:U5rQrvaySGSWCJplJcdklQiQB6yR5
- TLSH T12603E1E4A89481CBDD775F74838F9F49E050B8BE84A2F64542B872FA3496ED40D40E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\libjf-config-core-v1-3.12.5-1f98b45e4b161568.jar
- Size 78KB
- SHA256 e1a06d8681627c433076c823e74d9a02e8fb5617646e21b6e4cff4e39f6f5095
- MD5 262ed6feb0f05138b3fbd6cc9952b9ca
- SHA1 d98891ef62779a74bc12472e72b0ebf427c8bb05
- SHA512 972213930bf20badb0a1967e84c1fba72c223471ae510d8c9e0d979d2d4226ea1bfa6af3841cb5a1e6a10b18fe483fc1ed57b5a48380e32d92e5abbf5c215384
- SSDEEP 1536:JyAqzpYFLu+3XZ+ahIXR/BACpLXmWrZ+wu8a/B:dApwDHbhaR/BACpLLEwu8E
- TLSH T172736C9B3C8CC8DBEDEF4CB08B43691FD91272F84A4B694315A075D0C991B651F8A68F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\libjf-config-reflect-v1-3.12.5-713a756edd7afa6c.jar
- Size 10KB
- SHA256 c74b4d1f02bcd668f99e0eccd1a16f29bb507b7ac4ad4844d19ef16fcade65fd
- MD5 f8eb48900cc226906967f97119f24e35
- SHA1 8a8d1a564205c59ca5189ca2531c267d9d132603
- SHA512 51a0c4998b7f856bca887507ce66e3ebb3e043d5f051e4d4404624d641dc73210fddeb3cd2f48982bcbc07f7511e18e6455cb1d244ecbc913b063dfa94c3cffb
- SSDEEP 192:svUBp4iF5RQ7Wr9o+3NuGc89MFRlyJGE434FUGkOhNOHJYZt:UgtjS+3NuzHgGEj5LhDt
- TLSH T11122E79E3DD8C4CBCCDF4EB44BC35D1DD81670A8028A6F03255476C4C9EABA51F4A98B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\libjf-config-ui-tiny-v1-3.12.5-cbd6a9a107f0082c.jar
- Size 146KB
- SHA256 dae2d07968db9a4779e58cfa4d4c02cff69522a26f352c1fb3dcd5eba5cf72c2
- MD5 72b5f8efdbec1e25415e4b7409cf860a
- SHA1 81d07f8f6f523ca98df0a688d15e28f3a8678d3c
- SHA512 e7e310824eb6244778c0c4f54f58ebf5417b248b46f8c9f044a958ba1ad9be8fac81ea7336aed52a56fd210d0c46f6c2a9fd0d787d3167cd4dcad82204e3dc71
- SSDEEP 3072:Zd6/4Xb/Odq90VEF0z3R5Lele852QP6i5Inc8/x5XdEGJn:bDD90VEO7G55f7y/x5XuAn
- TLSH T111E3F2A63645C9CACEAF08F643465B7EE80270FD990A1A4F3071B3D4C1D2AD46A47AD7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\libjf-data-manipulation-v0-3.12.5-8cefcb007c8a3fcc.jar
- Size 16KB
- SHA256 abaa08dcf8d7999966b8706b38ac395d75ceaa1941550f095685dacae6b548cb
- MD5 73f767350f5c0314432d01a70c8828a2
- SHA1 19a7643f936fff6462cf019b956b1f1b003d4173
- SHA512 5581b7b0269d63b4834491ac74caf34d8d397a006cdaaf4c42ac079ab1051fbed0eb9478933c827df4ff882cb28db60e33454a3f69591a9874b027c54c25c9cc
- SSDEEP 384:UKMXEeqeVTjPhgj/YKuee57rHE5Fwpy3USlpevtligpa:UKMXEF3jAKuh57Q5FKWsvTFY
- TLSH T140724BC53E94D8A7CCFF89F60AC3482EE01174A94A976F07095074D19DE6BE02F4B99B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\libjf-data-v0-3.12.5-44dedbcc6c21d5ba.jar
- Size 82KB
- SHA256 bed3f73c3518108b1bca0218805231f0851b97db4152a1af3ee5abe69fe57803
- MD5 00dc41be621da43527f5842550e04435
- SHA1 5dd2489298687fa2208d75af2705d083dcb4d6d7
- SHA512 526043f05f4b965324a5621d81428da36fc0284ee0f0a05ba48a93fab0fb7671ead34b5b221259783971630893acb88eefe493c34c948a2ef2f9df8e07a13ca1
- SSDEEP 1536:UtOBXTtTC7Yi8esGXlw852QPODb+5lOncvE/SU5zT4JCuSE5oJN:UIR5Lele852QP6i5Inc8/x5XdEGJN
- TLSH T16E83F16037D18ACEEBEB14F003495EA9D482B9BF5310475B3200F7F899E69A9250B6D6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\libjf-translate-v1-3.12.5-c1593e50529d22f1.jar
- Size 23KB
- SHA256 3e4f725fcb0512335c4a9e5117f5d48b9cf856511c631776dca5d6423b5abefc
- MD5 c642f7756bead54dec7396f70038a46f
- SHA1 114ddda2806361cf470d67c429bbf36c33a69daa
- SHA512 cb5faf76fe056784210c919d45052cb447452006879a6bbe3e65bfe7d3838c1fdc75c197b2d835d316c5edb10efc4f6a4bd165940f91c737acaf66abada8e2ac
- SSDEEP 384:UZH5jOjmKIofImkWM1GbC7s+jfnwYBzikpHCjPazwdmfhYr:UZZrKTtM1Ug3igHWdmfhYr
- TLSH T1C7B2085A39E4D8CEDDAF88748BC3845AD858B4AD4272AF032A0165C1CED5F5D0F0E6DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\libjf-unsafe-v0-3.12.5-144477310d0fb52f.jar
- Size 35KB
- SHA256 fd296cf544d7c2339ed44ec817088fed34607450f8bbf839a28b269e6770a3c6
- MD5 e895b2324c50e890d0a0592b73dfbcf1
- SHA1 bd124476471744d59172e1e94e8381ad2523f29a
- SHA512 6ad34e4d935e307b150f948478a8583377dff3cf8a3ca948ee7d68ae681902d4679b5bd4b7ceb57505a12a6b2879ff0597d98e4fb3eb336b3ae65a3aa1608a79
- SSDEEP 768:UOwQ8Pp7PbSkpHl+l0uSGYFCCelRFLL9EVpth:UOiPp7yzzYFZelz92
- TLSH T184F28DA5BDC4C0CAEDCF99B14787605E7066A1EC0A4F4F1318A0B6C4CAE5EA51F8658F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\libjf-web-v0-3.12.5-411a9f5f355c5ab0.jar
- Size 70KB
- SHA256 168f3170f721b8bc40629375a7f9445372c3f05b1516137871278d3cda08fc58
- MD5 46aa6f40bb5042f094868e14d279ddef
- SHA1 927c150a6673f3d731339354ff711714fd016984
- SHA512 805a1c7505bc5736cace607232e84c03120cdac90c1ffc0c43aa5b57e2a6ecac98bfc700cf85b5f21acb6b888413bcb8c116aa654cd5fd18b8836d43d017e670
- SSDEEP 1536:UYt55ybkk4fIrL+XuUsRrvaySGSWCJplJcdklQiQB6yRW5:UY8wBXu7Rrvanm0ZcdTiQESY
- TLSH T18C63DFD83980D2CBEDEF8D7146830E5AD241B46C892B6F03467431E4D4D6BF51F4AA9E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\midnightlib-1.3.0-9e23832326e54d4c.jar
- Size 55KB
- SHA256 4d09b7a4873fb48035f3a26a74922f6815fadc0da5d721ed896a0645ceccab49
- MD5 1e2a7e71e0c0a306f88727c318b4397c
- SHA1 de59c953550796ced676a0b055584b82c83662bb
- SHA512 fd31a319a50f84236b24ab350cdc5c63d7e951fea6568277e965fdf331d6fca69872a199827d5a067c9ca9b9189450680c5233c827e5d0ec87c82112c6d9e8d1
- SSDEEP 1536:P+6dDnCpy1W7/IQX3i/SHKP+HS+6ywGQtZ:2MDCpvI/P+p6y2
- TLSH T179439E664F987F9FD24FF137D091820D66982340810FBA7A1DAD3B95E81B9BA170139F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\mixinextras-0.5.4-edfcdd3df0b35281.jar
- Size 710KB
- SHA256 bd79ddb2f54b39a08deeb50cb12439bba01481264dd5a9f5ea830551bfef31ff
- MD5 d5070aa9700de60274a740d4c2640b4d
- SHA1 5e167154bcb9942111313a5e186e16cd7265f858
- SHA512 31b929374c2526ebb532185cd54b752c0a5ca7f56a48c99ed6a73f598a4155c9db88ab4c8ea5904fa2e2f78310424393238b2db6cd435c0f3ad87d1391ea3320
- SSDEEP 12288:W0yJcZYeBFMvTXXZSrnqF5fDEobQm9lz2UiHIVSA6qq0Pc8xWyqR/6ZO6342:4vRvzXcnqFZEobQRHJApq0PVxoR/Qpo2
- TLSH T110F4C02233DC46F5DE67C1B392629137D5290AFBF4062C42EE981AEB2C7E5490F79748
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\mixinsquared-0.1.1-fe6bfbac9a4fd7f.jar
- Size 18KB
- SHA256 e37018cf661e8daef4a70b662142254855f4d0436bbed925db16c4b39cd60fe5
- MD5 4161a319dbabe83dfdff78a7a4435d49
- SHA1 37cd59e3fda72a8baa68d9f09ae9e47b8137e883
- SHA512 09428a616fe3826f7798e0ef0c04266643b889dff9ffb319d15c02d37ad5d8a4dca705962f7b64c46d234702c2fc79b1fcb8f3e1789a577021397ab1d8441ee4
- SSDEEP 384:IoLjhQgsAXE+KvMNLoVMdKW8JFviBaleDJ5wI:TjoAXE+KENLqM4WqQx
- TLSH T1FA826C7DBBCE5C7CCEA78232B481B543329C497CD6176B244CF849C799BEAA24B1240C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_jetbrains_kotlin_kotlin-reflect-2.4.10-598f1b4274ae618c.jar
- Size 3.6MB
- SHA256 3a61089413ad170e85737d7319c40dcaf8fcdf0a7f6dec4a9e47eea95455c27b
- MD5 5f736031776dd70cacc94f7776fa5954
- SHA1 60f1aa1c5802e18e5078acf0dd16471a7817a7d1
- SHA512 5e5e676bd7a5c3996445a09891954a5d83e6a6716eb2e22e8930ff3fca679e8091dfa9e254366f8c605aff1e56d6ee7aa254c8f9753befb8f4b9e72607b9575d
- SSDEEP 49152:SiVDQnYnF7J5jmxGwzuWtJ3yWDZ8qFob3ePqlu+xr22W+nARBCdm2CgH/f6LJWhp:ZDQm7JYKGyKZKjOIZx6KAv2jH/f6Ylr
- TLSH T19706C02A79F1FD50C8A794B192C09876982602CFA467A00B55B4855E1CFF7CACF25FCE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_jetbrains_kotlin_kotlin-stdlib-2.4.10-ce2c1266395fbcef.jar
- Size 1.8MB
- SHA256 ab46d7a84c0d958b6ef2515a6c3a0592813b5dcb849f28fbb8ea6c1cc51b5cff
- MD5 cfa12fcbecadbcca692e6c672373d549
- SHA1 0961896eb0f9be1a8c7ece0da70447ee39ee7b0a
- SHA512 243e4e51af5c71cd9bdd5f2fcb57790e178f0421283985f9524193a75bf525295528c7218e89361770c8b8bba727538366f96b20780f1d4e24dc392d4350da7a
- SSDEEP 24576:6jrKnqGqAivgoXZj85fa5tw0N4y1iw/6A0Q2R4JQZxrmENO3Sj/iZK2rb41LbPZE:6jrOTqEasBw/1JsyENO3A/iZ9MYp
- TLSH T19885F13579D1DD70D16778B18341A077A82E83CFF04B6017AAB00A5B68FAA4DD316FE9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_jetbrains_kotlin_kotlin-stdljdk7-2.4.10-91367d75b2ee0e93.jar
- Size 1KB
- SHA256 4491915fd8a144925c1698bdbf01b4be2de65a806d276d2a321f2630aeebeacb
- MD5 85f66a64b8d089429e5a883b8d7db165
- SHA1 37ada450d843d571151286e3d014f4ad267220ff
- SHA512 ca6a88741ea433c9035e1a659ea7d492e28e845ab67cb867f8f01acefebf5eb5d506a365c6cff963fff1e47e2290892056e00a5e13220960b14fd2f383137241
- TLSH T13E21C0303EE8EA6BE19E96B4EB54E016E63656CD020D1A172E481C241EFCD450F82EC9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_jetbrains_kotlin_kotlin-stdljdk8-2.4.10-a14d93fa49032979.jar
- Size 1KB
- SHA256 1e7c6289501363f62ae2e7cd3698cff0c2bb67ecb1dd921d1271f10f702441ea
- MD5 4515a07a901d576cfec95717c3f56cb5
- SHA1 e02bd269aa2a7be77598baa71a2343f842fa6f88
- SHA512 5c01167b060da8482666b2469450a20eb20d7822d1c9a0149f239cd0d580069287d81d74aad5168207fca79ee14259466e8f70ad8b217d0efc2bb8f6e967eedb
- TLSH T1C521AA703FE0DCABD20E82B5D751F029DB3AD58C028DAA479B4458345EFD8494E01EDA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_jetbrains_kotlinx_atomicfu-jvm-0.33.0-e348aaa397d08812.jar
- Size 61KB
- SHA256 843dd749ff32112956dba51a57923ad995900665d058cb9c90d44cbeace7dcdb
- MD5 8c9413bce80c2a2e626a3e5cacfdf2c2
- SHA1 b49494ba1a8cda42e9eaaadb748e08c8c174d8f2
- SHA512 23450eda3938fd6039f6cc3829db40415e59baff415790545268bf576fe2c8df33255fcec0344e6e6f01ea3eaab2d4380aa94470aa2f063b2f57794e12ccac2a
- SSDEEP 1536:yv/PGDSz0+igxpXutfnGIfZLB7sNHBFHS5bY66aT:yXViOut/GMLB4NHBFHS58kT
- TLSH T14B53BF2C3EF9C4E8E517C47446049C3BC45E66CED1CA62175E9284D22AFFE4D93A2AC7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_jetbrains_kotlinx_kotlinx-co-jvm-1.11.0-e44c0f0f4a5439d9.jar
- Size 1.5MB
- SHA256 14f5a46b344ab7420d35ed618ed0a483687d57b23470722b6568f1b643f001f3
- MD5 53b5dc857cdb4bb9df168e3b39aecc1e
- SHA1 576435b43819be284202963a5afe5e34208338e8
- SHA512 1cf2aa53686b02e6105c8dea73dc684b87302630eaabe0e2d80a0895274c8644e3ca60afcc2018f4962b9c138fa17fceebf5b3ee45decf02b37a790c33ec48fa
- SSDEEP 24576:PmSaceDTVspmSK+IJ+cukinR4paJbNGrG1xGIkcrmZ0JzuM:2tspmSK+IJAkWmUJbN318YJzuM
- TLSH T1F175D0B1FB98DE30E09344B74A80A1E7661E23CFE097B01BAFA5158BD5F5905C30DBA5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_jetbrains_kotlinx_kotlinx-cojdk8-1.11.0-d32d9ed9e92938cf.jar
- Size 1KB
- SHA256 180d58cac512a1a3003b2f11085a81636792dc13fcf0b4859e6f502a93ab9ded
- MD5 b429752bf0a576e3186628bfd7eb31cb
- SHA1 8f394ef8c96ae12cddd2812e0fef4a4b4ad5ed57
- SHA512 6ef01232dedde1c9acf7c012e30e4584ada6f0afd842eef652d65adf27fd25044ea5760c72aa0645f4a13bdff04aa84c504fefa9468986dc01d0d94684e8972f
- TLSH T15D2179703FD8D52BD34E83B1CB53E1ABA2361169020D754F1B4CAC1847BDF496E059C6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_jetbrains_kotlinx_kotlinx-dae-jvm-0.8.0-29674e5d8fb61b6d.jar
- Size 715KB
- SHA256 28cf54bf6dc8fd304249fea4b33ae10855e65fb4ef007c5acbbcf3dfa72f549e
- MD5 0e8369e0d1380ab4b401e482308fb2c4
- SHA1 911d057b281c6a7cd2008266e1eb60b0af3e40fc
- SHA512 c72f4e313f1003ce312dd0250a4575edc2230ebdc8892b1f347de27405c0580c7982a069b6d4f6c6a79f6c6879d2fb88a646f0ba7638750b2e65db1a1bdeb040
- SSDEEP 12288:6ilfLd2A3JEqmJNZqewWPELJWcTg/Nz7RdWWiX9kCJvdbmLW5S3c:6iZUcCjJjqeFPENWcOz7mWS9kcvBmLWL
- TLSH T162F4D036B994C959CD2341F0515170A6AF1AA3CFC6865117BCF20B462CF2D4EA33EBB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_jetbrains_kotlinx_kotlinx-ioe-jvm-0.9.1-cb2a0150b3a1a4cd.jar
- Size 151KB
- SHA256 38da6c1a9aa4c9210bf2b83e2e1e6ebc2ba51c5db5d81b85eb2334ffd923407a
- MD5 0ac24f59af7631d9ac1791e4f81085b0
- SHA1 722b832350883341d825d37f840bf5482b82b506
- SHA512 38759dd1b43a329e6d6b79be0ddd73b07a49d7b8f0ac9420d6ff36691dc882218b4140ce18596f2e0a5e9979ff4699c85576b2fbf545322748628faa4c470360
- SSDEEP 3072:KCGartbd7kLV/mJuNA4T3+22qjBH9ew3dxmjOu/YGskFqqzg/Zy/:pGwb+YJuNx72oBH9eOmjv/TFqGz
- TLSH T16BE3E1763988CE24F13368F34314D5FBF60B92CEE4A2581B59910C4E37F869AD38A6D5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_jetbrains_kotlinx_kotlinx-iog-jvm-0.9.1-ac206d22d70080ef.jar
- Size 22KB
- SHA256 2a5f2fa5c405189e38b2bdc287fc4e5661e4c6ec0ad50883e10af9fb2a401512
- MD5 c941502127b4e50088d72d9a922f5f39
- SHA1 a616d3049e41138d71da7b857000c9e43d570265
- SHA512 3f666e5a5dce0aae99cce05552c567e84dd5a6eb2d830d170afa766b8e30239cd47d71812696cb91a1ce5a488c963b0d0c1f6cee925ddd5a114563c026158ed6
- SSDEEP 384:YJaDOkuo0gsOWSwq26gxzx2RRiAanK7hv4xqesLGalfQwSlO5zPo2K:YJ5Z7gs/Swz2RRd6al4wSl07oT
- TLSH T1A0A2AD193FD4C869E3A689F3C560B557B69260CDC1BE6477CB80D8B72BB910503315E9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_jetbrains_kotlinx_kotlinx-se-jvm-1.11.0-52108abbd787b7f9.jar
- Size 399KB
- SHA256 61222d6d12fd1529db2bb810ce5bc8a222ea3371c98a556345c2fd258798baac
- MD5 da3954203dfc112095652355889e9797
- SHA1 311d0a637848e29566f48b647645d535ae534f7f
- SHA512 7a8c22fca7f0d92d76956721f6507a3f81387ab217265c48ae80434458ddfa19153c6d13d9637f61cff1f2362eb004243cd6ce2dfe1edba6b1773c5d47d24119
- SSDEEP 6144:dlqJKrae7aQ2hNnPhCgFPArG7q+RM0yzh7xejukQYeECPC+hc2HMO9mVpdv8yW:dltrqhVPhCqPB1fy7xezGCUbMO93
- TLSH T1DE94C06E7B84CE26CC23A4B34A20E06D743972CFD096A4D7B9A104A515F36C9D727F8D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_jetbrains_kotlinx_kotlinx-se-jvm-1.11.0-8b8e43b961e1ce7f.jar
- Size 289KB
- SHA256 a7f8870500369a34fc817965d79866f19934cddf7975d221e348f12bb377824e
- MD5 cb51ba029021334197592fa51d29e828
- SHA1 c32dae6558d63a7a4588e11d9c0c863fb1b34c5b
- SHA512 213b0240e61ae84fb387498e3852b4a622428417c6a7e2db2e5c09a7732e94be87a0d2572a214269280a26b672dd3cd998a1e34ff98208975f8795aa65cc9866
- SSDEEP 6144:qXUaUMFceWduNvbQCoESCdQ8c5XGg32oZoQo2qa6rg9tcvbBw0PUihoYu:+UaUkc5I7KY2VXnZoQo2L6rgrcqtiNu
- TLSH T15154DF6ABF848E43DD2F90F349189219343935CFC586A0CBBAD009A119F76CD9767B9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_jetbrains_kotlinx_kotlinx-se-jvm-1.11.0-d7ffe353d5ab8d56.jar
- Size 70KB
- SHA256 cb0996e2d4f908c4ec8d26c768dc2276308cb164b84e41d0c95ec7a3930cd4f6
- MD5 7e87d328a499305293dc829413772abe
- SHA1 00d97ced343562977d42164a18a695f2069cb1b9
- SHA512 a7846e8efb432e1552d1d3dbecf8ffda66fcbe1a86da5ac75785e79e9fbefcf10fde74a50ccb503cbc9df9ef6582f2d219af7a2f05f7ee56ca3984231424e373
- SSDEEP 1536:GotujVHGZ73ZTe7UTI5SRQKZGbBAtbt043lXzU:GnjVHGZ73ZSgTI5SRQpct0EXzU
- TLSH T19563D0F97799CE56C827DAF14300E47E712E31CFC05218C3B9A69AD61AD65C98703F8A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_json_json-20230227-948057474e8a1507.jar
- Size 71KB
- SHA256 0ff30c388c4aba2ee38a6f63981acca203b896233ebe95052464be6fa9936772
- MD5 68aa496bb2f5ef3eaea55cf19f2b6f0f
- SHA1 3da168f30a4f388c7ab3374a21084b26e0628dde
- SHA512 2ca9124a211665b1aaec3545c48a26ad847b7134798022fb307698b306962926c2303422eaaab339eabe005490156604d9f93217d78a0f5555373c0063759c03
- SSDEEP 1536:AH7TTVRcecb0ipLVDzkv5vi4mZr6ByLoto763/HzdTc31t:AHHxRcecb0MVDM564mZEyLoKm3/HzdT+
- TLSH T1CE63F19AB8519836FA0FC17505C6CA17935809CFE1D8E1878694379A7A20DCB0727FEF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_lwjgl_lwjgl-shaderc-3.3.2-cdf478342fde39f0.jar
- Size 29KB
- SHA256 21f10312071b1c18acff91ccd7967b9dd76c908c780bc0204e1c8f26ca6c34c7
- MD5 9c0fd574f6ac52db5baf70e6cd2d58c9
- SHA1 4558df74937ea6d0fc9ba66b5f21f838ac2ecf3f
- SHA512 79d97dab392dc8609595d017bfeb2c8d9202bbd702cc1a9dc346f222f0e8c66d9e757c67e6720265a74ae0597e89e0d94bce64205e628dbe4a8dcfd9e46e673b
- SSDEEP 384:8xxB2Bj5gUC44r8lxPNBCoJhBV2tWHNho0suPsUrtI:IHejOzVwJtfB09AltI
- TLSH T11DD219363D9AFD9DF36B00F55313AE1B711183C48D9CBBCA09A4551CAAEE4E2C183E95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_lwjgl_lwjgl-shaderc_natives-arm64-3.3.2-5f428b42d246dfc2.jar
- Size 1.8MB
- SHA256 a3a4fc615fd68e74d6c85aa363eb2ef625f94e3071e3c1c994097759fea576df
- MD5 d14fb2fc8b0f78bca6c65c5f3b9c9ef5
- SHA1 02a35244f4d3dcf758b0b2e8df6e651d216aad5f
- SHA512 bab11ddc0d25297bbabcbc5c059017addcdf9b52e4bf98bc6af43f5358d362d8f0c1cc9215b694e53d16012d8d3bd1ade65da0578b4fb287f1f0d3e7c3c0cfe8
- SSDEEP 49152:NDjzE41PEcYzKHldtOLJGQMKLYxtELW8sPWhzS:N441ECStzsxtELW8c
- TLSH T14795332C88D953AEEE7FA532C4093C654BFCEAC89B59D16E188958BE3C4447B055FB0C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_lwjgl_lwjgl-shaderc_natives-linux-3.3.2-7c95a848b0d7e801.jar
- Size 2.5MB
- SHA256 d514abddb1b62646b9d2580aca704daa7e658c8226dc63c1259c7fed6cd465dc
- MD5 ea5c8c1356a588ddadcbfd0cc6b66c58
- SHA1 f7a445cf9fefd430ea357f0c127fe75a4de1d088
- SHA512 fd038518e773a35e63b81683e0b27cc7f1ce77c94b199b4ad1994251544a1bbcafeec3c97a5e64604d265eb22e7022cd63b61b98109471fdf5b499d5d8623062
- SSDEEP 49152:Lx9wF4fcJnG+UrMy1ZHETJtYh7BdG3U7pBPOcS4Ax6sy:F9fkigy1F8tYTduUFBPO7mR
- TLSH T190C533E4B9DEB905D6DEB6F366F0F9343F4A45389861D940EE2D0DA8273D20E07056C9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_lwjgl_lwjgl-shaderc_natives-macos-3.3.2-bc9396b7fd59d69a.jar
- Size 2.1MB
- SHA256 aab7869aa4c7672b3f118a2255846cedeafe7eb147fbfc7c574e2b9a7c4b2bc5
- MD5 ce3563e4169139bf7a1dca05c26f8b13
- SHA1 c7d13fb11d72760bb1e6bc976ec77ddd01547acd
- SHA512 388d5f2a4f5c4af5bef7093a6a3dcc5c9c7d8d97724d901b560d757bae90cade3d4946ba269e644028c434abdc1bef5f7fe81bf584eafb8f953af2bd20798783
- SSDEEP 49152:/nnYWN/VqQpaYl2w+zmFqCtrHsVSdJAyfJRRAN5l56bCYktBt:fYAT+z6tTuSdWqR69R1Bt
- TLSH T110A53356EF23D7BDC29B09B0B0F2E4693B74F8DE040F52977D84230D6B7254665AA223
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_lwjgl_lwjgl-shaderc_natives-ndows-3.3.2-c5610acee767a1af.jar
- Size 1.5MB
- SHA256 6e6811c583b77d04401d549466e50994bef69c82724cd1257d23f56f18657251
- MD5 96ab65692bbf104bdf8d15999cf2e2e9
- SHA1 a5423d494d9735f0b458697045f91ab647a060b6
- SHA512 94eb28cbe04f45a36b767a1f9b1bd9f0be5ae3e9dfc0589ac7fc04fa5fd17f54459837a5b90df9a0b884ec4657a992d42546a527c18d82268fbf8bfab4468b03
- SSDEEP 49152:AlAPhPLlAWnoq51Le+lNOIi9PIxWIPAdFxux:A+PhPLlAm351LxvOIi9okvux
- TLSH T1B07533FC2A09F64EF46DB57B11CCBEB83050E437029E3684A95A5EDED89A3E70747580
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_lwjgl_lwjgl-vma-3.3.2-c6e4cb3d20069eb1.jar
- Size 96KB
- SHA256 38f12677c755b230bfd8bb9088a0e186c631a09d5310c9047a5adf60df34f8ec
- MD5 5aa580371cefdd401345eff8b0ddba45
- SHA1 0afb0498b01bf40f8c4ac11996f8fbb9ff2c28c6
- SHA512 0c510ef5b66cf335f8b3be1db17afda0b0038d9bef0bd3a53f819e6ca8da77ec47868820c3aa316e29b694fcacdbe9c2c6f47128020676f43583995c1bfbb705
- SSDEEP 1536:3Pp1nsbYeQHIthBkSvi3UbbgaOttgd0gDY7nWLTDP/1N8S0:3nTHIthBakROttg5TLnPZ0
- TLSH T1BFA3C0265C66F56EE35F40B8E7336E42A46AD38C0CD9FBD2191469104A558FB8303FF9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_lwjgl_lwjgl-vma_natives-linux-3.3.2-2df6f2326212373c.jar
- Size 57KB
- SHA256 93a8fcd793320eb2757070d4579a87907cb04f6645c7916d8ef97a7bb4073149
- MD5 6938179364032a36e7079f7b4763b299
- SHA1 e4fee21a493c22ad2d888844eb736933ac2e3a22
- SHA512 18e1dc792679934f51b15b04521edb444b8801c8b25f563739f388c3bfbdc8d9e982f2db708d3c8cf8d145b408be1e7589185f0bf08aa9c7cc02a100bd43c6e9
- SSDEEP 1536:/V4DFiPtA77xmz6OqRg1rE3W2jrT+GisDoF:KDEP+mz6OqKlEfjn+Gxe
- TLSH T1E74301B90669EC0ED9ADD0794744C21E354A17C01C7EB8DDB86E3C392A8C254F5DAE83
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_lwjgl_lwjgl-vma_natives-macoarm64-3.3.2-42d92e07e91cf7a5.jar
- Size 58KB
- SHA256 6758b3d19c629283e7ee4a44b7acfae859596d2308d04cfec50f88b455327d21
- MD5 ea9bfa99b2f8b1045f0e55d3ff4b5fa0
- SHA1 cf7bee400aa0f215ba1e4a1c59b0460127b3c95a
- SHA512 c2c8b661407928046ccdf87c3302f6f8d806a2f3260601ed698d3e8ec1fb33ca0ba4ce53fbf4fc74901c1d764ac4374c2382f1a18056e34ed0b6140e41993085
- SSDEEP 1536:dB7Ce+1qpyeYAF/zYlsXyPOnNk0MIoDl52npadiY:rbI/eYAgs/ADlQaAY
- TLSH T1D743F13F1D799A3AD2BF42F06713BC14791958D607E4BE8E0E31AC542D8FE1046A9C5D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_lwjgl_lwjgl-vma_natives-macos-3.3.2-2f80f90db970ef65.jar
- Size 62KB
- SHA256 34e18e656a6d48b855ef1dc7f31d11a518980be77382eef989d34ca06035d1c7
- MD5 98a2336f6cab4e6f9c48df4ee50d8779
- SHA1 b7f9a20558016cc79c560f963bc295f5bf54400a
- SHA512 e0833ea52c2d1299ec189466f0d5527a11cb4322a971026c85e0afc8dd003b8c886aa01d75baa24516da21b9d69e727e0c3eb2f430e91f609640fc11e4d80dca
- SSDEEP 1536:69ETbv1r7v4t0lp3YhEiaA+AmsRHTiePCKxmlvHS4C6mFAUm:69uLRT4t8QE3AjRfdAS4C6mFAd
- TLSH T1875302321AF1E8CFE30B2AF173524C15B497F6ACDA4EEB548E4F2D00DA519E6E542C15
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_lwjgl_lwjgl-vma_natives-windows-3.3.2-a1e03f8429ac2b2f.jar
- Size 124KB
- SHA256 29b3fc8f8157084438e6ae4d60b6e88a1af393a765d6f9c1eae3bc6737dcbc5e
- MD5 ba6d8abf25f08e25eb6f388738500364
- SHA1 f31697f513112e21442ef0aa2b4a6c7eeb43030a
- SHA512 feba0e5a332c6bca3628c1e36bff824c03adac3dd8f2e0193bcfda38eab76cc3af8e29475c7d9ff12155c83cc90d21e25f6bec9e5b73222c5cae2c3466c8dbbe
- SSDEEP 3072:W6trhVrFPfNfSavNdckRmO/CuliRTWxwvr9pXUloZEo1k:3NhPtSEN2dO/aRTWuvRKloZ7k
- TLSH T154C3127418307B0ED9316AFA8FFA7F1A781D715ABDB937C019902406BB2D46166C70DE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_lwjgl_lwjgl-vulkan-3.3.2-49ca903fc2ecceb7.jar
- Size 5.4MB
- SHA256 5290ba17de647c8055e755b7dcd354a4467f08415679254459e16f875b805638
- MD5 8ae0b0f6f5cd60d3b253f85d70859838
- SHA1 f8c315ed8316316998c96ad766021603f6ecf373
- SHA512 0634e0cd499dc2f8af3b10b06ccdf9cb00fb96bd2c5dcd5005349fd93b62117538d652fdf8621f4f6401a10a17a6662b9c38207e6b9fdd6f5f9b25ca28b3a1e0
- SSDEEP 98304:leFFbT0zVclBkSz0zp3V6pSEQnF/hMILRZYEv+eA/W:ls8zVcXIzpwpSEQnF/eI0O+u
- TLSH T19746F166AD62C02DD08F99395693BAC3FC0853989887FCE621F4074598788F95783FF9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_lwjgl_lwjgl-vulkan_natives-macos-3.3.2-6a02cc6d5b28bf28.jar
- Size 2.0MB
- SHA256 98de11d15a070595e9b0a442dc6b3942f6445b3c187cbb929e317a38d07d2f0e
- MD5 4c66edf37e41ede19c95300b6b55455a
- SHA1 12373fa952bc1f3722333a6ad7cf61b874239e50
- SHA512 194b57e5e784e4f95d117b49f232509bae5cc30d6304da414941d49a0a97bee651db45d46bfc33a923235f77e5030c159181074134d41627828f5a5d0bb54c9e
- SSDEEP 49152:fh0w7w5xKr1HZ4ur/uW7dNV/Yl6RcNifCGe7kpH+uyAhRWwP9by:fyiw5xDurH73OlT7lkpLPhq
- TLSH T1299533D06C8C7BABFABD01FE95C786A3551E59AA6D523C453A1BE1050F2CEA41D0CE0E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_lwjgl_lwjgl-vulkan_natives-marm64-3.3.2-5a3697235ad8e224.jar
- Size 1.8MB
- SHA256 dd478ad3d8a798ff11ae14e39307038fbe77545a2015254d73f83887e46c7c16
- MD5 8cbabbe4d90a5ff7810cec1c609d77c8
- SHA1 40b4964ad56d39d26d1075bff9c96ed989a29126
- SHA512 7539d16956782d3e5163b8601ce575827000c176f4c3230e589a4ad06d6bb878a216343dcf3e92032520af35be672d3291eca74ff0cebb160a11eea8558564b1
- SSDEEP 24576:+acDIpHiIrPDRBsF4r3kVA407kCGotlkl1g8dEVLs4OSd57U4HEegJv25YhxEY:6DLIrPlBs4xrG6lea8EVLj957OvBxEY
- TLSH T16785339B286FF019E34A5970A21A0C4535E4D164637C306AF803F965E0BD7F94F3AAED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_quiltmc_parsers_gson-0.2.1-dca73e94c7c97f1f.jar
- Size 4KB
- SHA256 a4ba4e7e59b327f3e2f52b0d4e6b3303bcad2cd02bae81e9641a6a989e39ed78
- MD5 31c4f0552232cd7f6d433a779ea222bd
- SHA1 02b8ce66d1b4f6456298d2edf311f9c873bd07ef
- SHA512 82196783a41bb7b7a56b4fde6804c9109aee071f312a627b3156ef4c41c8e064c3169209d10016ae874791d48d62d02d1defe84cf1ef0c93e11889ebb53e7d72
- SSDEEP 96:MJcVhzcVcfccOcrcTOIKSaK7DE2kbeqtuCx7cDBVI47OehJlETXefxNK0QH+ckgC:MyXoefBHQWv6DxWuJVJ7xhJlffxNK0Oo
- TLSH T17FA1E8B4E8C09457D34F27FEC7CDE303111E080ADA949BAF49002A76AD789489B8B8D3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\org_quiltmc_parsers_json-0.2.1-f4450bb516755a53.jar
- Size 22KB
- SHA256 a39eaafba2b77855fd05797d1435ad2de0af0809cec59cdf369c6a140635caa5
- MD5 fd8e70e047066a4a471b065364442cde
- SHA1 541d707b4a69033b73797cc100d0c7eede91d055
- SHA512 bff62543499880ae7360e085013737ffd1143a29492bd5f5c51fcd2f6e37b0f74f531d5f76d4f59a65ef2487acf675d1cefd609e7b4615b45082d14d999b23ec
- SSDEEP 384:MXIjwCZeTaxu83uKkdFMD+TKoGyaSg8/baO05DiHDMdS/+TIcOQbI0ghc5OsSmw1:MYjwCZeTaM83kvUWggbaO0soxAQcer3M
- TLSH T1CFB2BE75D482A12AE53B3EFFCF55A7852015045E215EE72F8B10321D0CB1E6E06DFABA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\shared-resources-api-1.5.2-61a7579845debd05.jar
- Size 19KB
- SHA256 b07f993ea26ae4da5f98779d2c468b02482b1e97b4bdbbc9d284e7c397785d04
- MD5 bedb9c78372543f4d86e1e5efc1bc921
- SHA1 8f42779c33c39734bba0ee085d98d7501d197c98
- SHA512 8ab71db259fc988d9ad99eb17d275d1268e95abd23e9655f989e3845c0db6c8dfc1f7168b638746fec63fc4f666b28b951e9fdad215ad8b199a17f74c26f21ba
- SSDEEP 384:/ztpvcpkPQT5Kes4QmMvJbn/nUySgfK/S8s/Oczi58UecZ5dgz4gH:/Jim4T5KepQNVnsMX1GLzPZXzgH
- TLSH T1D8925B717C40483AE51345FA30029E487307A6D0E629BE6FDDA967680DBBAC42747F8E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\spruceui-5.0.0+1.20-a7e7164e506142b1.jar
- Size 185KB
- SHA256 33cd2633f38cbeacabe634fb6a2f94e3211d85b1da0f2535f831432d79424f11
- MD5 1ebe7a8a39f7dd896cd43e9210c69ee4
- SHA1 b61b5034be305cb3d6644277e4d75234f5935db5
- SHA512 4e916163d152615d7d28482b5343b2949ff9a49c44da99a9edc3153eb42f62b81fb4871e640256535b7f181d0473640c46d99feb92b1f873af550fdb2029edbd
- SSDEEP 3072:jEtp0yetIIVC34WxQvBmnFUwiF+2flf9ylpAN92lmBvQH/bcoh:jEoyeGIWjSvQFUBVNgXAOmBG/bHh
- TLSH T17C04AF3CBB534898C143C47D50054066DA9463A8E20698AB5DBB6B8DCE3FF8D1F16F9B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\transition-1.0.21-ea70c1ff13ea4919.jar
- Size 1.2MB
- SHA256 8a141ed7efa4c6220baf6e4fc54796572b70c4923d47f8f64029f2970aff671a
- MD5 e4444a7433a8b96f6f39b8b1d877f486
- SHA1 1fdbb4cc58a7b3fc6a478a390e13ce1b3a1fcfb8
- SHA512 138df653e9f2087860196136c4ca017542cbf5cae5448037e6924373a255e3bbfcecf4d2466600f38464e5fef61b111da3efccc340c561a066f2e60e14dbc868
- SSDEEP 24576:vhG8M9JT4Tf+3NHR67e81yA8csKHaxnP3vjPMDqhfjVBSF4W3:5G8meaRR6a8Mtcszn7JxVH0
- TLSH T1D555C095FDEC8BBFE00FE73380508293EE5D02C6B4059A2F155186E71ED9C4F8B46A99
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\trender-1.0.15-4bbbcf64d3ed9b8.jar
- Size 373KB
- SHA256 c48f8cd65f1f708aaba28be6226d685f7f1cbee1712acee3469e1debfca7474d
- MD5 15b1e5804812560f6f2f0386598a4415
- SHA1 9d1cadc7359f69a1d70cb84b02e10e888ac7674f
- SHA512 1203ad596f01af5e8012de4414de07f63e50a2813a9360c7799d215333dafe5a9d5b3528c9a4f01d2a37e185c435ff48d117dc3701751f0cabbe5b235cd6c49c
- SSDEEP 6144:64oKRpb894SQbYERerWIcF988gUousvjodKi5O2XLC2lBjx5rREFv:6ym94S8YEAqtj8Oousvjod1OMCMBnuR
- TLSH T1C284C005E9AAE67FC4674476D141CF83ED1F02DA9049E09F4A20524F0CFCD9B8B5AB9E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\voicechat_api-2.6.20-a75144d119029c80.jar
- Size 2KB
- SHA256 ff5871ecc7d79f05b919a7136ec6fc4313999117d7219ee2ecbc94416761cbf3
- MD5 d487c210c9626044dcc9aface1070405
- SHA1 e8c4f9f0b64da3280feef6e4714fc1e0518869c4
- SHA512 8c5913974341161019a9aace14e09532f81c012f31dbe0e897bb870d62c055d5265eaa2c031b511382d913ec62a4a20dd32d7a2eda4a21b5e6a4f1a5c9436b54
- TLSH T10C510AB13284F202C37F7A3687B15E27E01B132BC893365B79591C0098E1288BB5A5C4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\remappedJars\minecraft-1.20.1-0.19.3\client-intermediary.jar.tmp
- Size 22B
- SHA256 8739c76e681f900923b900c9df0ef75cf421d39cabb54650c4b9ad19b6a76d85
- MD5 76cdb2bad9582d23c1f6f4d868218d6c
- SHA1 b04f3ee8f5e43fa3b162981b50bb72fe1acabb33
- SHA512 5e2f959f36b66df0580a94f384c5fc1ceeec4b2a3925f062d7b68f21758b86581ac2adcfdde73a171a28496e758ef1b23ca4951c05455cdae9357cc3b5a5825f
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\remappedJars\minecraft-1.20.1-0.19.3\client-intermediary.jar.tmp
- Size 23.6MB
- SHA256 af3b89a41a360929f5b844b7981cde08949e77a7ffcb62b1f1cfe36a48dc0231
- MD5 da598d2753fc14f35662a4b2da4a6845
- SHA1 baf1f1872daf4cc201cabbdf2ec7b63132d53486
- SHA512 966283438d5b2c35d84451d13951ef1fb7edce4ec344fa741bb4763a6ca9af17e23fd8ec534f64684a407355548161d1233964fdd1dc33f1b97ce59395fec95d
- SSDEEP 393216:BDcfBB+JpkLgd3NG+2JGVMm7+PQhDErFbVe7vuUbAda8Fojd3R2i40:aJspAEd2pS+PA8bsqUQS5QiN
- TLSH T14D47AE58BBA79B64E18F9B3E49A98203FC30C67D9814B29F317851077DD4CC41E53BAA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\config\crash_assistant\config.toml
- Size 22KB
- SHA256 5a12e59b11d201759cb39483465b1a83c38456096a3aee673e4e2ec0c17d4936
- MD5 4f9fc794f3fc27dd9750926b76b1cff6
- SHA1 fb0bf227c4f26febd27873d6a5f54405aef12388
- SHA512 ab69c59389de7b1ec31b4cbf5c2ed859f42263a680c809f4010b26c587b8601823ce1b3588c1d5ffca8bcdea52b23a776dfae921abcaa11bad636c51804c2761
- SSDEEP 384:W4WBlBlIqWQt+ZQ604D/zNuNHSdh0y5jXhos3G7oRQtZpL59E:W4glBlxWQt+Zp/zNjhvZXhoGG7oRQtZK
- TLSH T108A2F959EE6D733A4E92D002AB7EC191F33500A91777B72E749A81BC3380C5646BFDA4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\local\crash_assistant\5456_1786296526826_mod.jar
- Size 3.0MB
- SHA256 2463022d546c12f82f44f1dad0cd769490cd2408f641ba886b2627a654f7ba9e
- MD5 5650b6be8f66e5970a89f8a54b739f10
- SHA1 120b03408ce162c0c59e457d91bb251c8188bd91
- SHA512 517c75bfc370a24e06fad1f8ccd6979e2adc887a3bcd074aed2ccfbf33eaee8c719160faef3b3de74445b4bc4e0c04e7042270e4923aa77157fc6dd0e0941a38
- SSDEEP 98304:SQFse4aEY78Q+7WQPR9tEtHwEECD/jtSJOps:SAsBaEY7UyQZ9tSDE4/jtSX
- TLSH T12CE5121F787A852DF3476871A801AB53D6A5274E4003EA0F117509886DFBFDF0F8A9B9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Windows\Installer\e586de8.msi
- Size 7.0MB
- SHA256 2e0fd7ff399228525e2441ea451ecda7ba371c39eecf22a62868df6be9abd5aa
- MD5 5af938b1b960db3ef39c4e99de13b4dd
- SHA1 62f566c367361f9129d907ed15b14580e2170f64
- SHA512 1f3d7a8be0bc43295f6348df825531e08b5d87b1134f036eb31d07ce1f84f1a8f6caa527fe85a0829a248b2e47917b9ef37fed5756357401caecddf78487f129
- SSDEEP 196608:g0DH4jiqzsiMb2PU8HQ0uGMWLVA0YERdFksuO:ghi4sidHGGMkADetb
- TLSH T15976334AF6C84372D84B64341A52DBB56B71EC748FB19B4713B83B641EB0BD0C63A653
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
- Size 24.1MB
- SHA256 8d1c9c6b9e0dad1535a3f938df90d5dfd6e22d9f296096324f2ef28f4993e5dd
- MD5 4811d5e81780872a6b7b67ca63e56d19
- SHA1 822493933e66e940ac859fb1541cbb39d245dcc1
- SHA512 0dd4756ede4d48ee2c0da445700b01c8ab25feed8dd2795e7fed3fcfce43f99fa4be774b0390c9930befdc94a457ef2fd61490faaa55ae48d59213464e4c635d
- SSDEEP 24576:au8m+1zvdoO/vvTLrWNOoWaZsEEjF1dSBbGNPic1FUaMeK0wo/lEFb2RY:G
- TLSH T12F47F52437F92510E7F39E3DACF06A2349397D9B9C199E8D05811F4E0921BB1E872F5A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path \??\Volume{6e0928ee-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{43435a99-aba1-49a9-869f-b6d26f191957}_OnDiskSnapshotProp
- Size 6KB
- SHA256 f66694c7ffc0b9124d5c34f1b76721099d181dbc47c464d41b7702d59611a5d8
- MD5 7999512106176ad40abc5870fe86ebe0
- SHA1 cba2687ef2f230d063a802696a8282a96c73ee87
- SHA512 bfc85c699202fe7c4e1939e2251e1458ad3af474a42c0b2e26974efcd24a677b1fc00df9e97ec7036e415053d23e7045cd8f1b49ede1a83936abc16fbbec11e9
- SSDEEP 96:FvcemfFLvc8DD84LTHzbOHXOHBlBRQ88Sc9XE56tOSVQpu:FM/b++ZVm
- TLSH T120D1AA085AF54711E2B3AB3229F14557A877B951EF33CB8E0198238E6670A10F936F5F
- MD5 SHA1 SHA512 SSDEEP TLSH