2e0fd7ff399228525e2441ea451ecda7ba371c39eecf22a62868df6be9abd5aa

Analysis

user interaction
yes
max time kernel
312s
max time network
330s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
09/08/2026, 17:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Ogulniega.Minecraft_0.0.9_x64_en-US.msi
Size 7.0MB
Sample260809-vy135asfke
SHA256 2e0fd7ff399228525e2441ea451ecda7ba371c39eecf22a62868df6be9abd5aa
MD5 5af938b1b960db3ef39c4e99de13b4dd
SHA1 62f566c367361f9129d907ed15b14580e2170f64
SHA512 1f3d7a8be0bc43295f6348df825531e08b5d87b1134f036eb31d07ce1f84f1a8f6caa527fe85a0829a248b2e47917b9ef37fed5756357401caecddf78487f129
SSDEEP 196608:g0DH4jiqzsiMb2PU8HQ0uGMWLVA0YERdFksuO:ghi4sidHGGMkADetb
TLSH
T15976334AF6C84372D84B64341A52DBB56B71EC748FB19B4713B83B641EB0BD0C63A653
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery persistence privilege_escalation ransomware spyware trojan

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-4146128427-3460078792-3629963422-1000\Control Panel\International\Geo\Nation	javaw.exe

Executes dropped EXE 2 IoCs

pid	Process
3784	Ogulniega Minecraft.exe
5316	javaw.exe

Loads dropped DLL 13 IoCs

pid	Process
2252	MsiExec.exe
5316	javaw.exe
5316	javaw.exe
5316	javaw.exe
5316	javaw.exe
5316	javaw.exe
5316	javaw.exe
5316	javaw.exe
5316	javaw.exe
5316	javaw.exe
5316	javaw.exe
5316	javaw.exe
5316	javaw.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Ogulniega Minecraft.exe

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\D:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\D:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 2 IoCs

description	ioc	Process
File created	C:\Program Files\Ogulniega Minecraft\Ogulniega Minecraft.exe	msiexec.exe
File created	C:\Program Files\Ogulniega Minecraft\Uninstall Ogulniega Minecraft.lnk	msiexec.exe

Drops file in Windows directory 18 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Installer\e5949b1.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\Installer\SourceHash{7D97F083-887F-444A-B58F-14F87375D25B}	msiexec.exe
File created	C:\Windows\Installer\{7D97F083-887F-444A-B58F-14F87375D25B}\ProductIcon	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI4B28.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\{7D97F083-887F-444A-B58F-14F87375D25B}\ProductIcon	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4852_846689368\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4852_846689368\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4852_730099705\ct_config.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4852_730099705\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\Installer\e5949b1.msi	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4852_846689368\Microsoft.CognitiveServices.Speech.core.dll	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4852_730099705\crs.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4852_730099705\kp_pinslist.pb	msedgewebview2.exe
File created	C:\Windows\Installer\e5949b3.msi	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4852_730099705\manifest.json	msedgewebview2.exe

Event Triggered Execution: Installer Packages 2 TTPs 1 IoCs

persistence privilege_escalation

Installer Packages

T1546.016

Msiexec

T1218.007

pid	Process
4512	msiexec.exe

Modifies trusted root certificate store through registry 1 TTPs 2 IoCs

A root certificate was added, modified, or removed in the trusted certificate store registry paths.

defense_evasion

Install Root Certificate

T1553.004

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	Ogulniega Minecraft.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	Ogulniega Minecraft.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	javaw.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	javaw.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies data under HKEY_USERS 5 IoCs

description	ioc	Process
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307700088591321"	msedgewebview2.exe

Modifies registry class 26 IoCs

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\Clients = 3a0000000000	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Local\\Temp\\"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\380F79D7F788A4445BF8418F37572DB5\Environment = "MainProgram"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\380F79D7F788A4445BF8418F37572DB5\External	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\Language = "0"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\Version = "9"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\Assignment = "1"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\ProductIcon = "C:\\Windows\\Installer\\{7D97F083-887F-444A-B58F-14F87375D25B}\\ProductIcon"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\AuthorizedLUAApp = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\380F79D7F788A4445BF8418F37572DB5\MainProgram	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\ProductName = "Ogulniega Minecraft"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\AdvertiseFlags = "388"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\DeploymentFlags = "3"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\1EE3A6EAA1F1CFD50857396B4ACB2C7F\380F79D7F788A4445BF8418F37572DB5	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList\Net	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList\Net\1 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\PackageCode = "5F5EFE0DABB8848419FED8F366884AF9"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\1EE3A6EAA1F1CFD50857396B4ACB2C7F	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList\Media\1 = ";"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\380F79D7F788A4445BF8418F37572DB5	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\380F79D7F788A4445BF8418F37572DB5\ShortcutsFeature = "MainProgram"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\InstanceType = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList\PackageName = "Ogulniega.Minecraft_0.0.9_x64_en-US.msi"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList\Media	msiexec.exe

Modifies system certificate store 2 TTPs 6 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0	Ogulniega Minecraft.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 0f00000001000000300000000b043572c899dec43efd590cfce610cf443a6315925ebfe589f7506907e44824608489581c7ca0e041458514cf157614090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b0601050507030853000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c06200000001000000200000004ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a0b00000001000000180000005300650063007400690067006f00200045004300430000001400000001000000140000003ae10986d4cf19c29676744976dce035c663639a1d0000000100000010000000280cf6042c30a2646644ba7286a3aa97030000000100000014000000d1cbca5db2d52a7f693b674de5f05a1d0c957df02000000001000000930200003082028f30820215a00302010202105c8b99c55a94c5d27156decd8980cc26300a06082a8648ce3d040303308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374204543432043657274696669636174696f6e20417574686f72697479301e170d3130303230313030303030305a170d3338303131383233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374204543432043657274696669636174696f6e20417574686f726974793076301006072a8648ce3d020106052b81040022036200041aac545aa9f96823e77ad5246f53c65ad84babc6d5b6d1e67371aedd9cd60c61fddba08903b80514ec57ceee5d3fe221b3cef7d48a79e0a3837e2d97d061c4f199dc259163ab7f30a3b470e2c7a1339cf3bf2e5c53b15fb37d327f8a34e37979a3423040301d0603551d0e041604143ae10986d4cf19c29676744976dce035c663639a300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff300a06082a8648ce3d040303036800306502303667a11608dce49700411d4ebee16301cf3baa421164a09d94390211795c7b1dfa64b9ee1642b3bf8ac209c4ece4b14d023100e92a61478c524a4b4e1870f6d644d66ef583ba6d58bd24d95648eaefc4a24681886a3a46d1a99b4dc961dad15d576a18	Ogulniega Minecraft.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8	Ogulniega Minecraft.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 19000000010000001000000076935b5c5a037216daaf8aac76df42c1030000000100000014000000d1cbca5db2d52a7f693b674de5f05a1d0c957df01d0000000100000010000000280cf6042c30a2646644ba7286a3aa971400000001000000140000003ae10986d4cf19c29676744976dce035c663639a0b00000001000000180000005300650063007400690067006f00200045004300430000006200000001000000200000004ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a53000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b060105050703080f00000001000000300000000b043572c899dec43efd590cfce610cf443a6315925ebfe589f7506907e44824608489581c7ca0e041458514cf1576142000000001000000930200003082028f30820215a00302010202105c8b99c55a94c5d27156decd8980cc26300a06082a8648ce3d040303308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374204543432043657274696669636174696f6e20417574686f72697479301e170d3130303230313030303030305a170d3338303131383233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374204543432043657274696669636174696f6e20417574686f726974793076301006072a8648ce3d020106052b81040022036200041aac545aa9f96823e77ad5246f53c65ad84babc6d5b6d1e67371aedd9cd60c61fddba08903b80514ec57ceee5d3fe221b3cef7d48a79e0a3837e2d97d061c4f199dc259163ab7f30a3b470e2c7a1339cf3bf2e5c53b15fb37d327f8a34e37979a3423040301d0603551d0e041604143ae10986d4cf19c29676744976dce035c663639a300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff300a06082a8648ce3d040303036800306502303667a11608dce49700411d4ebee16301cf3baa421164a09d94390211795c7b1dfa64b9ee1642b3bf8ac209c4ece4b14d023100e92a61478c524a4b4e1870f6d644d66ef583ba6d58bd24d95648eaefc4a24681886a3a46d1a99b4dc961dad15d576a18	Ogulniega Minecraft.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 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	Ogulniega Minecraft.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 5c00000001000000040000008001000019000000010000001000000076935b5c5a037216daaf8aac76df42c1030000000100000014000000d1cbca5db2d52a7f693b674de5f05a1d0c957df01d0000000100000010000000280cf6042c30a2646644ba7286a3aa971400000001000000140000003ae10986d4cf19c29676744976dce035c663639a0b00000001000000180000005300650063007400690067006f00200045004300430000006200000001000000200000004ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a53000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b060105050703080f00000001000000300000000b043572c899dec43efd590cfce610cf443a6315925ebfe589f7506907e44824608489581c7ca0e041458514cf157614040000000100000010000000fa68bcd9b57fadfdc91d068328cc24c12000000001000000930200003082028f30820215a00302010202105c8b99c55a94c5d27156decd8980cc26300a06082a8648ce3d040303308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374204543432043657274696669636174696f6e20417574686f72697479301e170d3130303230313030303030305a170d3338303131383233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374204543432043657274696669636174696f6e20417574686f726974793076301006072a8648ce3d020106052b81040022036200041aac545aa9f96823e77ad5246f53c65ad84babc6d5b6d1e67371aedd9cd60c61fddba08903b80514ec57ceee5d3fe221b3cef7d48a79e0a3837e2d97d061c4f199dc259163ab7f30a3b470e2c7a1339cf3bf2e5c53b15fb37d327f8a34e37979a3423040301d0603551d0e041604143ae10986d4cf19c29676744976dce035c663639a300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff300a06082a8648ce3d040303036800306502303667a11608dce49700411d4ebee16301cf3baa421164a09d94390211795c7b1dfa64b9ee1642b3bf8ac209c4ece4b14d023100e92a61478c524a4b4e1870f6d644d66ef583ba6d58bd24d95648eaefc4a24681886a3a46d1a99b4dc961dad15d576a18	Ogulniega Minecraft.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
3136	msiexec.exe
3136	msiexec.exe
3784	Ogulniega Minecraft.exe
3784	Ogulniega Minecraft.exe
3784	Ogulniega Minecraft.exe
3784	Ogulniega Minecraft.exe
3784	Ogulniega Minecraft.exe
3784	Ogulniega Minecraft.exe
3784	Ogulniega Minecraft.exe
3784	Ogulniega Minecraft.exe
1300	msedgewebview2.exe
1300	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
4852	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4512	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4512	msiexec.exe
Token: SeSecurityPrivilege	3136	msiexec.exe
Token: SeCreateTokenPrivilege	4512	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4512	msiexec.exe
Token: SeLockMemoryPrivilege	4512	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4512	msiexec.exe
Token: SeMachineAccountPrivilege	4512	msiexec.exe
Token: SeTcbPrivilege	4512	msiexec.exe
Token: SeSecurityPrivilege	4512	msiexec.exe
Token: SeTakeOwnershipPrivilege	4512	msiexec.exe
Token: SeLoadDriverPrivilege	4512	msiexec.exe
Token: SeSystemProfilePrivilege	4512	msiexec.exe
Token: SeSystemtimePrivilege	4512	msiexec.exe
Token: SeProfSingleProcessPrivilege	4512	msiexec.exe
Token: SeIncBasePriorityPrivilege	4512	msiexec.exe
Token: SeCreatePagefilePrivilege	4512	msiexec.exe
Token: SeCreatePermanentPrivilege	4512	msiexec.exe
Token: SeBackupPrivilege	4512	msiexec.exe
Token: SeRestorePrivilege	4512	msiexec.exe
Token: SeShutdownPrivilege	4512	msiexec.exe
Token: SeDebugPrivilege	4512	msiexec.exe
Token: SeAuditPrivilege	4512	msiexec.exe
Token: SeSystemEnvironmentPrivilege	4512	msiexec.exe
Token: SeChangeNotifyPrivilege	4512	msiexec.exe
Token: SeRemoteShutdownPrivilege	4512	msiexec.exe
Token: SeUndockPrivilege	4512	msiexec.exe
Token: SeSyncAgentPrivilege	4512	msiexec.exe
Token: SeEnableDelegationPrivilege	4512	msiexec.exe
Token: SeManageVolumePrivilege	4512	msiexec.exe
Token: SeImpersonatePrivilege	4512	msiexec.exe
Token: SeCreateGlobalPrivilege	4512	msiexec.exe
Token: SeCreateTokenPrivilege	4512	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4512	msiexec.exe
Token: SeLockMemoryPrivilege	4512	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4512	msiexec.exe
Token: SeMachineAccountPrivilege	4512	msiexec.exe
Token: SeTcbPrivilege	4512	msiexec.exe
Token: SeSecurityPrivilege	4512	msiexec.exe
Token: SeTakeOwnershipPrivilege	4512	msiexec.exe
Token: SeLoadDriverPrivilege	4512	msiexec.exe
Token: SeSystemProfilePrivilege	4512	msiexec.exe
Token: SeSystemtimePrivilege	4512	msiexec.exe
Token: SeProfSingleProcessPrivilege	4512	msiexec.exe
Token: SeIncBasePriorityPrivilege	4512	msiexec.exe
Token: SeCreatePagefilePrivilege	4512	msiexec.exe
Token: SeCreatePermanentPrivilege	4512	msiexec.exe
Token: SeBackupPrivilege	4512	msiexec.exe
Token: SeRestorePrivilege	4512	msiexec.exe
Token: SeShutdownPrivilege	4512	msiexec.exe
Token: SeDebugPrivilege	4512	msiexec.exe
Token: SeAuditPrivilege	4512	msiexec.exe
Token: SeSystemEnvironmentPrivilege	4512	msiexec.exe
Token: SeChangeNotifyPrivilege	4512	msiexec.exe
Token: SeRemoteShutdownPrivilege	4512	msiexec.exe
Token: SeUndockPrivilege	4512	msiexec.exe
Token: SeSyncAgentPrivilege	4512	msiexec.exe
Token: SeEnableDelegationPrivilege	4512	msiexec.exe
Token: SeManageVolumePrivilege	4512	msiexec.exe
Token: SeImpersonatePrivilege	4512	msiexec.exe
Token: SeCreateGlobalPrivilege	4512	msiexec.exe
Token: SeCreateTokenPrivilege	4512	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4512	msiexec.exe
Token: SeLockMemoryPrivilege	4512	msiexec.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
4512	msiexec.exe
4512	msiexec.exe
3784	Ogulniega Minecraft.exe

Suspicious use of WriteProcessMemory 20 IoCs

description	pid	Process	procid_target
PID 3136 wrote to memory of 2252	3136	msiexec.exe	100
PID 3136 wrote to memory of 1152	3136	msiexec.exe	104
PID 4512 wrote to memory of 3784	4512	msiexec.exe	107
PID 3784 wrote to memory of 4852	3784	Ogulniega Minecraft.exe	108
PID 4852 wrote to memory of 4816	4852	msedgewebview2.exe	109
PID 4852 wrote to memory of 1500	4852	msedgewebview2.exe	110
PID 4852 wrote to memory of 1500	4852	msedgewebview2.exe	110
PID 4852 wrote to memory of 1500	4852	msedgewebview2.exe	110
PID 4852 wrote to memory of 4548	4852	msedgewebview2.exe	111
PID 4852 wrote to memory of 3984	4852	msedgewebview2.exe	112
PID 4852 wrote to memory of 3984	4852	msedgewebview2.exe	112
PID 4852 wrote to memory of 4668	4852	msedgewebview2.exe	113
PID 4852 wrote to memory of 4668	4852	msedgewebview2.exe	113
PID 4852 wrote to memory of 4668	4852	msedgewebview2.exe	113
PID 4852 wrote to memory of 1300	4852	msedgewebview2.exe	119
PID 4852 wrote to memory of 5800	4852	msedgewebview2.exe	120
PID 4852 wrote to memory of 5800	4852	msedgewebview2.exe	120
PID 3784 wrote to memory of 5316	3784	Ogulniega Minecraft.exe	121
PID 4852 wrote to memory of 1384	4852	msedgewebview2.exe	122
PID 4852 wrote to memory of 1384	4852	msedgewebview2.exe	122

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Windows\system32\msiexec.exe
msiexec.exe /I C:\Users\Admin\AppData\Local\Temp\Ogulniega.Minecraft_0.0.9_x64_en-US.msi
1⤵
- Enumerates connected drives
- Event Triggered Execution: Installer Packages
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4512
- C:\Program Files\Ogulniega Minecraft\Ogulniega Minecraft.exe
  "C:\Program Files\Ogulniega Minecraft\Ogulniega Minecraft.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Modifies trusted root certificate store through registry
  - Modifies system certificate store
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3784
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=3784.3376.13667225638798465577
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:4852
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ff91bd2b078,0x7ff91bd2b084,0x7ff91bd2b090
      4⤵
      PID:4816
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1860,i,12507388352511235661,7536541050235664680,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1856 /prefetch:2
      4⤵
      PID:1500
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1988,i,12507388352511235661,7536541050235664680,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1964 /prefetch:3
      4⤵
      PID:4548
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1960,i,12507388352511235661,7536541050235664680,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:8
      4⤵
      PID:3984
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3436,i,12507388352511235661,7536541050235664680,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
      4⤵
      PID:4668
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4396,i,12507388352511235661,7536541050235664680,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=776 /prefetch:8
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:1300
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=776,i,12507388352511235661,7536541050235664680,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:8
      4⤵
      PID:5800
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2956,i,12507388352511235661,7536541050235664680,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:8
      4⤵
      PID:1384
- - C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exe
    "C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exe" -Dfabric.addMods=mods\1.20.1-vulkan -Dorg.lwjgl.system.stackSize=256 -Djava.library.path=C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\fabric-1.20.1-0.19.3-natives -Djna.tmpdir=C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\fabric-1.20.1-0.19.3-natives -Dorg.lwjgl.system.SharedLibraryExtractPath=C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\fabric-1.20.1-0.19.3-natives -Dio.netty.native.workdir=C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\fabric-1.20.1-0.19.3-natives -cp C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport-native-unix-common\4.1.82.Final\netty-transport-native-unix-common-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\commons-codec\commons-codec\1.15\commons-codec-1.15.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\text2speech\1.17.9\text2speech-1.17.9.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\blocklist\1.0.10\blocklist-1.0.10.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport\4.1.82.Final\netty-transport-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\guava\guava\31.1-jre\guava-31.1-jre.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-core\2.19.0\log4j-core-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\ow2\asm\asm-commons\9.10.1\asm-commons-9.10.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\brigadier\1.1.8\brigadier-1.1.8.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-buffer\4.1.82.Final\netty-buffer-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-resolver\4.1.82.Final\netty-resolver-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\logging\1.1.1\logging-1.1.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\authlib\4.0.43\authlib-4.0.43.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\datafixerupper\6.0.8\datafixerupper-6.0.8.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\guava\failureaccess\1.0.1\failureaccess-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport-classes-epoll\4.1.82.Final\netty-transport-classes-epoll-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\joml\joml\1.10.5\joml-1.10.5.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\commons\commons-compress\1.21\commons-compress-1.21.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\fabricmc\sponge-mixin\0.17.3+mixin.0.8.7\sponge-mixin-0.17.3+mixin.0.8.7.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\sf\jopt-simple\jopt-simple\5.0.4\jopt-simple-5.0.4.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\commons-logging\commons-logging\1.2\commons-logging-1.2.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\ow2\asm\asm-util\9.10.1\asm-util-9.10.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\patchy\2.2.10\patchy-2.2.10.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\ca\weblite\java-objc-bridge\1.1\java-objc-bridge-1.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport-native-epoll\4.1.82.Final\netty-transport-native-epoll-4.1.82.Final-linux-x86_64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\it\unimi\dsi\fastutil\8.5.9\fastutil-8.5.9.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-slf4j2-impl\2.19.0\log4j-slf4j2-impl-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\code\gson\gson\2.10\gson-2.10.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna\5.12.1\jna-5.12.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\httpcomponents\httpclient\4.5.13\httpclient-4.5.13.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\ibm\icu\icu4j\71.1\icu4j-71.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-api\2.19.0\log4j-api-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-handler\4.1.82.Final\netty-handler-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\commons\commons-lang3\3.12.0\commons-lang3-3.12.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\ow2\asm\asm-analysis\9.10.1\asm-analysis-9.10.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\commons-io\commons-io\2.11.0\commons-io-2.11.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport-native-epoll\4.1.82.Final\netty-transport-native-epoll-4.1.82.Final-linux-aarch_64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\github\oshi\oshi-core\6.2.2\oshi-core-6.2.2.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\slf4j\slf4j-api\2.0.1\slf4j-api-2.0.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\fabricmc\fabric-loader\0.19.3\fabric-loader-0.19.3.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna-platform\5.12.1\jna-platform-5.12.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-common\4.1.82.Final\netty-common-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\ow2\asm\asm\9.10.1\asm-9.10.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\fabricmc\intermediary\1.20.1\intermediary-1.20.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\ow2\asm\asm-tree\9.10.1\asm-tree-9.10.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\httpcomponents\httpcore\4.4.15\httpcore-4.4.15.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-codec\4.1.82.Final\netty-codec-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\fabric-1.20.1-0.19.3.jar -Xmx6144M -XX:+UnlockExperimentalVMOptions -XX:+UseG1GC -XX:G1NewSizePercent=20 -XX:G1ReservePercent=20 -XX:MaxGCPauseMillis=50 -XX:G1HeapRegionSize=32M -Dlog4j.configurationFile=C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\log_configs\client-1.12.xml net.fabricmc.loader.impl.launch.knot.KnotClient --version fabric-loader-0.19.3-1.20.1 --gameDir C:\Users\Admin\AppData\Roaming\.ogulniega\profile --assetsDir C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets --assetIndex 5 --versionType release --width 1280 --height 720
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks processor information in registry
    PID:5316
  - - C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exe
      C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exe -XX:+UseSerialGC -XX:MaxHeapFreeRatio=30 -XX:MinHeapFreeRatio=10 -XX:MaxGCPauseMillis=10000 -Xms8m -Xmx512m -cp local\crash_assistant\5316_1786296601138_app.jar;local\crash_assistant\5316_1786296601138_mod.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-core\2.19.0\log4j-core-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\code\gson\gson\2.10\gson-2.10.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna\5.12.1\jna-5.12.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-api\2.19.0\log4j-api-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\commons-io\commons-io\2.11.0\commons-io-2.11.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\github\oshi\oshi-core\6.2.2\oshi-core-6.2.2.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna-platform\5.12.1\jna-platform-5.12.1.jar dev.kostromdan.mods.crash_assistant.app.class_loading.Boot --args-file local\crash_assistant\5316_1786296601138_args.info
      4⤵
      PID:5508
    - - C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exe
        
        C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exe -XX:+UseSerialGC -XX:MaxHeapFreeRatio=30 -XX:MinHeapFreeRatio=10 -XX:MaxGCPauseMillis=10000 -Xms8m -Xmx512m -cp local\crash_assistant\5316_1786296601138_app.jar;local\crash_assistant\5316_1786296601138_mod.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-core\2.19.0\log4j-core-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\code\gson\gson\2.10\gson-2.10.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna\5.12.1\jna-5.12.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-api\2.19.0\log4j-api-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\commons-io\commons-io\2.11.0\commons-io-2.11.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\github\oshi\oshi-core\6.2.2\oshi-core-6.2.2.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna-platform\5.12.1\jna-platform-5.12.1.jar dev.kostromdan.mods.crash_assistant.app.class_loading.Boot --args-file local\crash_assistant\5316_1786296601138_args.info -gpuDetect
        5⤵
        
        PID:9852

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3136
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding F952CD20FCC0FC848866D5157076DAA7 C
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  PID:2252
- C:\Windows\system32\srtasks.exe
  C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
  2⤵
  PID:1152

C:\Windows\System32\winver.exe
"C:\Windows\System32\winver.exe"
1⤵
PID:5048

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
PID:1088

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Installer Packages

T1546.016

Privilege Escalation

Event Triggered Execution

T1546

Installer Packages

T1546.016

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

System Binary Proxy Execution

T1218

Msiexec

T1218.007

Credential Access

Discovery

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e5949b2.rbs

Path C:\Config.Msi\e5949b2.rbs
Size 10KB
SHA256 9a9206bc563feca9740a0004aeca010a14406cf140ce0342d5d2708a49dd7ae7
MD5 32943bac23a6553531b43cebfd1ee570
SHA1 29fcb79731959531dfd72619d54a967f7cf8dab8
SHA512 022879eeef228b6197d9d7f5a41e420ed60e82c721870e32bef6028197dfb39086247380b0d015b2e205f6664c866c47c218be72108ed04454eac8e485f1166e
SSDEEP 96:ImCP8qmw5q849CyMeuuzRUDlgCOTlSUDlgCgj5+qxTlQt45bB155VQ+55QutW55t:dCIw5q849+ehKpHGjpHG/VPnW9i5Lptg
TLSH
T11D222106BA20D1E3FDA75B38CB5327513B63D2EA8334578B05CD99605F923885FAA14B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ogulniega Minecraft.exe

Path C:\Program Files\Ogulniega Minecraft\Ogulniega Minecraft.exe
Size 19.0MB
SHA256 77a40b6eb759bac578bb1be29e380b5cd46543f2d5b5c56e2986e5d73f300239
MD5 cbba43f12e0f3fd68078e51aa0c7b7dc
SHA1 32946bb1c1123da97fe3311b09affa9a4c1e237d
SHA512 0769121a61dd06806149453f784323289d25c078d466d2639fcf1dd38f7f03f11fb212b3744ee8869583222dbb529f08f32ca0a081543b819c17bb8726f82fb2
SSDEEP 196608:Zqbp5AxAI0U44lH5rHSm/2rLVsmiQa/dyz5f:Ap5AxAI0U44lH9Sm/2rxVi5Ve
TLSH
T1441717217B5A99ACD09AC474834B8A724A7130DB0B35B9FF448496383F6DBF46F38359
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ogulniega Minecraft.lnk

Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ogulniega Minecraft\Ogulniega Minecraft.lnk
Size 2KB
SHA256 40f3ddaaf8e21660625eb0f2489489dc9bcc149b242067eb6b0dbb1a0acbbead
MD5 43445dc15a5960eadf1dea6b8b29dce1
SHA1 838d73c567dc89622b627bea2fc202741480cad3
SHA512 4ac81e4eb5c4662ac2da084f822b7b96524a97e0a6684c207889a54015c1e5cea40c01999c1331ca578a1a9017f780b6f8aa9adb9362836f8f991866f5f89395
TLSH
T1E541116457E51B5AF3B3D73A6FB11610AE73FC12D5288F6F025142C6097640059B5F3E
MD5 SHA1 SHA512 TLSH

Submit Download

Ogulniega Minecraft.lnk~RFe594c51.TMP

Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ogulniega Minecraft\Ogulniega Minecraft.lnk~RFe594c51.TMP
Size 2KB
SHA256 f31e46612bac695b24d0f16993e9857dc88ca5504ee87e2bf52211502ef8886c
MD5 4243a6579bcf57e1b29136bb5bc80dd2
SHA1 1b2434528073c0f26276c644e586868e95c12aaf
SHA512 012fbe13b736c9d5ec7121940c046200fd77c1d4f2964ae819b56b8324235b38ce7c31bfa4a5160b7ab0b59d817bc802de080d29f63280f9330b428a356bde16
TLSH
T1D141016457E41B5AF3B3D33A6F710610AE73FC12C8248F6F025142C6057640199B5F3E
MD5 SHA1 SHA512 TLSH

Submit Download

MSIF96E.tmp

Path C:\Users\Admin\AppData\Local\Temp\MSIF96E.tmp
Size 132KB
SHA256 7f47d98ab25cfea9b3a2e898c3376cc9ba1cd893b4948b0c27caa530fd0e34cc
MD5 cfbb8568bd3711a97e6124c56fcfa8d9
SHA1 d7a098ae58bdd5e93a3c1b04b3d69a14234d5e57
SHA512 860cbf3286ac4915580cefaf56a9c3d48938eb08e3f31b7f024c4339c037d7c8bdf16e766d08106505ba535be4922a87dc46bd029aae99a64ea2fc02cf3aec04
SSDEEP 3072:Kx2YbpcgwmiTPJDnCO+DATkURBnrskNwPj2:XXgwmY1CPx2XG2
TLSH
T1DBD39D02B5D0C473D9BE09390870DB229F7EB930DF909EDB636856699E702C19E35A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 32d73a1a61feb9496f146d3450b6e88a173a9e01bde2cc84b2af42d6dcabaa1d
MD5 da11aa520e09a2dcb57453fe22c27b98
SHA1 0fecccc84e0a74a9c8ea7d26fbddb1258d08e0cb
SHA512 87f6833065594c874bf5c1dd03029136e8aad0b7df6e406aef201f7e119b34eb93c367a6991e197f18fc3aec350895a3e68ee18091e768a42b5d0d6d48f1b1b8
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 d36c643188143fc7299c33dfdfcf42d1fc16b0ad7902c3217ce10e5c8b27965e
MD5 77fa5f67d69d5d70556f27ad2db95404
SHA1 5228b38b643ebd7d9014a5a3a954268174f596f3
SHA512 958d84583c005170d3c0ed6379bf82e8dadb264b542c9d54fe717f544b8e552191be68fefeb62b90a6dbdbf67df7bd260d0f69ee75d149f0fcecc6aed5c0acff
TLSH
T185D0121337618774C020A1335002714C8400D20B40454104D828851E1A444501902491
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 408B
SHA256 8a85ee1f5e8fc40b3298c350e9592cc2a1d0d5fcb88c175088019e3b7be9b217
MD5 70606df1570bb1919236f8629bd2edf1
SHA1 98afa9485658a6f13f180cd10e5bc3d950a47129
SHA512 efa7f4f7a11397097039544c2b2c56e4dc399cde5d4faaacf3acdf265d57bdce22daea13741fb28991b86da39bcad4cffcfd1da4113700c18ba882667b53e397
TLSH
T15EE0970240A9A42DF30001F4C1E88893367028903C070F30038CCFB3B823FE78A020E2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 432B
SHA256 f695a284a91ac9c1fbb84e1ffcf0e4d2d87a5cb0a775c89fa257bf5bce8a5fb9
MD5 a9727033abf03e8a33b8c5bef4597b11
SHA1 cdd12a302ad9a209ae52bda89bddfc916e60080c
SHA512 b5d4108fb7864cf5000111d5e397788e33cad757974586cad1f7435eadfbcfce783ffdf425d03d422a1f4c50fdbffb8e3a2569483ec4031d538417dfd2df5834
TLSH
T119E02E120429A17EF75101F0C1D90963B2B028A03C434F20438DEFB67803FE68E011F2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e93d.TMP

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe59e93d.TMP
Size 48B
SHA256 66fe4edb51a5b4ccc481c17cf7dbefdce7661bc3cf94b0668eac51a81795d8c7
MD5 439918055542578142db5cb417a5bf1a
SHA1 60bf8ee93e6521da9c24668f518cfad232fa21a3
SHA512 c15dd538fbf6e365bfc2a6457dac0abf7ea97a4a395ca2865b40f3b948398870c7cc2ae8f97abea77138e12661f64295b2099fe378bf3ebd55ae5dba19462881
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Preferences
Size 6KB
SHA256 0532c4e158bca336b4586ac575b8491c9e340ad1b7219ac948e32effabb2abaf
MD5 4f94c4f1ddcb7f303a8d29f401066455
SHA1 3e63d04cf9049e3acb49d7916a0b14bf88478bc5
SHA512 6b676ebb5159cb524fdb3381c9c65bdb548f5bc3a9c586e42dd6f4d28a0b297db0e58829dc74b998139e5e9c7b109be9e3965f41ca7973efade5cd06eeebe5e3
SSDEEP 96:stO05i++NhW2b9mSBffkZ8i0vhEEktkm/7qx+WVHMSm+uecJIQ1idQjD+gH2MOB:stO0UbpfMZ8pant/S+WiTIQwdml2MC
TLSH
T12CD1B9025E2879B74CC7F6197A35BF13E2F6606261D50E58ABFC861C04E76CD230B90B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5a32e8.TMP

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Preferences~RFe5a32e8.TMP
Size 6KB
SHA256 53b4a51bd7cff45ba0f1d2cfb2c686e39f5daa3e0058434a77541817a91c2886
MD5 c44ac2011ea53d1c991bc69efd487055
SHA1 b14052a6250b3e24eb185e67ab1e31183c27a1ee
SHA512 47346a25b6579a25e2daca8099b0f3ae693e1e180bf4a953b9cd41d27ebfd185cec52a69446d16dcb4825c8f6a38e69f1ebe22da589e739f2882f022965cb01a
SSDEEP 96:stO05i++NhW2b91SBffkZ8i0vhEEktkm/7qx+WVHMSm+uecJIQ1idQjD+gx2MEB:stO0UbKfMZ8pant/S+WiTIQwdmT2M8
TLSH
T1B6D1A9025F6879774CC7E6197A35BB53D2F6606272D40E98EBFC852C04DA6CD630B90B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State
Size 4KB
SHA256 744bf4df157d6f3423b1b696791f816369c93a448b3ec646073393ddff65f511
MD5 b0c8ed6c2d700b8533de86730b8f9670
SHA1 16e1dc8c56a5065bfba11db2ba193b476dce9c35
SHA512 da66e2819c93f8592923fe59a5c027067204c3bdbd3e4a1bfabac1cdb5a1e208a2e0e2aedaff1eecb1a9d9283506f36f2c191eb652420abeaa0b94cb13889d52
SSDEEP 96:zuMlNkCufDygf0O8Frh/cInURoDoto+5d4uDVjByD16fAZdoZXTr65a:z1lNbEKooDUh6oV9yDtwDX
TLSH
T1A591B535B464B9774DF2A940B9853F13B666606BE5807FA8DAED0F0C01DB39C2302C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State
Size 16KB
SHA256 4ac3851256d54547f82143070c865ad39e09f2e193a5b64b913d72ba4d0986b5
MD5 8f720fa068d27a84f640656a5694f975
SHA1 259135e9c2451ca91f3f90ca7207f0c8094bb0d2
SHA512 75dd0feddd02cc98e67749786859899c3c972607dddaa1b5ce907ba2b3b74c7daac5e7861332a0db30942b39a4f16ef940a1b9c1753b5f5af1389c763d3e9fce
SSDEEP 192:z17DFOKH/2/aQWjYhwZ00i+z/kNWIU6ZwNj1Jfo/iVQ45hgj4k2NbhKooDUh6oVH:zB+aQikB+z/xvxjg/qhECNbydee8D9zv
TLSH
T159729D2A65787E3395F3F5007A481B9BDAB994B6D0C16EB84AEE1F0D02DB3981303D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State
Size 1KB
SHA256 646a0426235ca77fc960177c8f3ba3683e71e3db2b3a8d4736e699d98d99c488
MD5 9b68992542f224bc1438d047ecb37af3
SHA1 9f912b899879b6a371e7a801a7002fe358586979
SHA512 9062d73dbf8cbcf5394a5847473ddb9488e2c762f9bf43e96b3a9a4869587b148e5e7176ae60e37d634fa31ffb40fad2fc87bfb56586d1402c66f19bdb79a73a
TLSH
T199316572F9907B7169D2B9417542BFA35D2231AFD1018F84E2EE0B1D02E778C632AC63
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State
Size 2KB
SHA256 e9d1e5354571c6b38ca6a2d3b2eb82fb9e78f89b4424fc2f1d4815f360612616
MD5 f1fca011c6dc6b342ec4ee3309adef68
SHA1 d854c9058bfb9a7c0814d145ac71b43ddf5417a7
SHA512 15ec87c056a29900c3dc63e8e7810f00f21a84faa36524223a99b3d8469557f14cdc522802de15564fbb165e9186b94e713f253b8bc5dc5adda4401708591898
TLSH
T18451B833FC04BA7389E3A94079457F239D3661AAE6525FA0A6ED0B0C01DB65C2306C67
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State
Size 3KB
SHA256 094e14ed3c2d9628b1ea8efb1cc0036d790acca9d9055d63a054398cd13e1a61
MD5 c9220f4b3f9b162eba1d8811a97c4bb6
SHA1 4c3b0dcf3dee278999fb0dbaac27bd5eb42d87ae
SHA512 b970d833caa2b82c17e76e1e57f5f6cb52a11262708adf9fc4eecc32481d07b8aa7cbc31ac9e89b3a03e73d3322bc6b16f1ef70990c79e1ea1df85efcf39b2df
TLSH
T10D716436B964B5774EE3A940B8853F13BA66616BE5816FA4D6ED0F0C01DB39C1312C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe5995be.TMP

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State~RFe5995be.TMP
Size 1KB
SHA256 0a21fefd9ac01b6e5dfe373a14c5b26b32f864354a8c4570f20e11f9e9ecf788
MD5 6b9f20d928a3fdefa1bf6de4689d534f
SHA1 c7177a707f5579d52db9b73c571140ff096a79b2
SHA512 48e24f86835f561eb2b9cd27f88a7351e5d44f50028b7dccd68af17c388b48c0f26084f3a9dacb8dbe033516920726f9c4d51ac76ea4200fa351e1fe97546657
TLSH
T1DA216572F8947A7179C669417542BF971D2161AFD1018F48E2DE071D02E769C532AC73
MD5 SHA1 SHA512 TLSH

Submit Download

java.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\java.dll
Size 144KB
SHA256 18b105254c16e1d83614ff4e32cd62ce402fbe6339bdd1b24ccc7d999fed7f5f
MD5 59c9bb7a3cb27b3a94b721283788fbf5
SHA1 8d97d4f0694e3b8851f92c2efb2f1538be9553f7
SHA512 12ecb29b55181b729cc24e2484d78857df68f80d3dbc89ceb75c13d0bffbfec6ea5ab8113b4c33f8e25296c97791ee311d886b8b9f9b6c653238a90a27d350e1
SSDEEP 3072:CYID3sxlejDPQL8HDIHsHtk1tI9SZLuV9c0FqL8LrbS/1qCn+vqX:CbDcjs+3I0LbLYFqX
TLSH
T1DBE33A0BB24240A2F85AB6BC701A910BD37A7461012CD3FA47E58A9F9F5F7313E97791
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javaw.exe

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exe
Size 49KB
SHA256 767e6219738867eaa40cb6d80edb6f17090558b67ce101a00e27b99cdaac2277
MD5 37fad9adeb9799c904e763a6321c40dd
SHA1 1d5354b9d006545ef8bf3c9bdb92dddd9d8bcf69
SHA512 1b67c29e4f6f1ab81544f0eaa809a8487a8fb01f8200a6d81bb8ec26825507d459f2d8444faed75efd8fc6776023c36211b7124ff110e694b11df7af3616edde
SSDEEP 1536:EmBEBM5RdJ5R3sozkt5RA3EH5J7VIvPh:Hb7k/IEZJ+v
TLSH
T110337D57AA082C81F42FC4F198A7752645B4BD032FD1A3EB7DC6B21E0871391A9276DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jimage.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\jimage.dll
Size 33KB
SHA256 f01c057da0222bc70a7f904c3104dedfc6f268446ee797c6dd70f9651a52265f
MD5 d035982c15591784dce2ec90e5d6d34c
SHA1 959f8800aafeac4b08ad3a0f83565429e2a47269
SHA512 83735427b6a5c8e5337aae60820b54bc614d24403707f2172381511453e3012a7780aa7c605eb9bd3beb1b9653e780601a8cbd95869806e1405b075462958f05
SSDEEP 384:mXEYMr5gSz7lVypm4PcySd9a0oDGkyvRs1NyEIYi2mL4/y8RFvIIvZ2pPkkOC:m0bjypFG7a0oDGHvRsqYiDLk5kIvkPk
TLSH
T133F26D56EA445C59DD27E63CC4AA9A1FE6B2F8525F51C3CB1B20825F0F233803B6C7A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jli.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\jli.dll
Size 87KB
SHA256 5d6a3581649cf281a2a4db2aeff53ccb1134b45cb04fa282efa7eb9a58cf5b79
MD5 3c7cce26a5adff02441a5a3ce6a22bcb
SHA1 d19a1524e42740e77d63cca73d939f49087f8b02
SHA512 369696704ff4b3a729d4357d990d4c2dad2a2beae99b3b94e193a44e206321d387e2eb29affc0b1879164342dbf1422ce21bae84c991ef7a1d04d604a8c39d0e
SSDEEP 1536:FDwJp5pu6D8oAy3htz7KmkquoWT0fdxIO6RYXtGIfm7VIv4r9Q:FD6p5pr8oAyv/TuJT0lb6RYXgIfm+vCy
TLSH
T1A0938E9B53E021E0DEB785B8D9B05A0BD3F1F0562761838F136885AA0F637527E1CBD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jsvml.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\jsvml.dll
Size 849KB
SHA256 d0971a028ff3e94ec749e5ab62abfc4d883b1c85550521ac120b622982fb8114
MD5 8b7560d16ee886e9d5a0df632769a570
SHA1 850b2f271af7c8a62caa8980ede9de0411054868
SHA512 1d01f505673e341ff0154ddff0fd351b9f3a1a4988aff482a9fc75ccfe2556f7a76cbb73eb0a4931794886e43c867e3e97248126ba84ea789b13b28059ba4298
SSDEEP 12288:WRybOUKnvJNeCs5wHuRpj/V71AVNV+Ssc3:WobO7JN3qwHgpjN7wj+9O
TLSH
T19005AF82F81284CDC03534B024FFBD95A91A1CE941BC0EB32772AE9D2AFD7467957A74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\msvcp140.dll
Size 561KB
SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
MD5 72f3d84384e888bf0d38852eb863026b
SHA1 8e6a0257591eb913ae7d0e975c56306b3f680b3f
SHA512 6d53634bc51bd383358e0d55988d70aee6ed3897bc6ae5e0d2413bed27ecff4c8092020682cd089859023b02d9a1858ac42e64d59c38ba90fbaf89b656c539a6
SSDEEP 12288:rSTTigI46Bb3SUPvRgrKtzL4oaQEKZm+jWodEEVPLwtQB:rUStZaQEKZm+jWodEE9CQB
TLSH
T1B9C41A23B74905A0E195E3B8A1878316D7F1BC4A8312A3C792FBD66D2F673D1673B250
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

net.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\net.dll
Size 96KB
SHA256 aa178fbeb19980dfbb6827b3b2532cd110d585192041883032bf2dbb20e4785d
MD5 898fd821991d994b18a28e93a1156e06
SHA1 3824baa8c162c5f07abaeb32fb9531efe26f56a4
SHA512 fb80c5354cbf8dbe6c4edfc0a13a669ecfd36d4a57738c88ebfa530738950c5798579e60fdb6ae59b2e229a213eb704b2239cea95c082037e6f061b1bfb3e43e
SSDEEP 3072:gPSfwd6sn+hIcB/lRXsm+xd3MXf9EZC19AD+v1:g9dnni/lRXspJMv9T9z1
TLSH
T1C1A35B05635824D5FC77D2BC8696821BD7B3B0B02610839F13A6C66EAFEB7713E19781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nio.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\nio.dll
Size 78KB
SHA256 1d3f193e94d404a18caa24440e61af652ec705258f5fa5a3cb90bc790e9b98ba
MD5 15587b4f8fc7619f749bf9e8fb6909d2
SHA1 6eccfad899dd4c9352851a56e20980f708c86e0b
SHA512 ffdd9c02347d83e64cc3d5e04e9f2ee00aa72db880688d2675cae6c5bd218fdd480c9c762f298737df8a9499c561dc8b0426c9db651cf92648aa3de7552004a1
SSDEEP 1536:w0p78LdqTFVd44arFkE4WdZJI3L4W2supMTlYG7VIv8:w0pqIFz4rtDZK3L0pMT+G+v8
TLSH
T124733AA25364849BE82AB53C429A5747E333FC514510A35F5368CB659F2F2B33E3E782
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

classes.jsa

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\server\classes.jsa
Size 10.6MB
SHA256 8347a88483e44b9acd4ad1edf78d0b5519c999f15d5548add755b551d12ce2bc
MD5 812cbb9991bcaf72c90082bfcdc107ba
SHA1 ea3b67387fcbf55deb978ae455f394b5c846b6ba
SHA512 29b1cbb6738d5bd8e6753a5a0b9346b0fc777952559d865bdb0ccdc1a75f7d55f0588036c02e69180ffb7cebeaaac6238872cb340c148eb3f17987a1c9218ede
SSDEEP 49152:hh6zkayA+JlVh2fOSl0uc2l/lSRTH3Z8Dut7:hh6z5ih2fOSl0Al/WHI
TLSH
T1E7B6E45BF550B653D53887758AA783A0A334B862AB4387C73784E37E9DC32D44E42BD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jvm.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\server\jvm.dll
Size 12.1MB
SHA256 5539382b75556a9873fafa2d8b7d0b36b169ac436a3608467da4f74c2600cbce
MD5 edfea9605fcc209be410d46a7697f795
SHA1 7737eef09bf637d485838eecf9fc696b787120ee
SHA512 c6de3f9120f057b366e00937dbb346fdfec8922216826dd67f04e196e8b6e18d8aa63c959a7e0787d9052994c9567ce17d9866bcf30fae623f6e0cb88c329301
SSDEEP 393216:svBYrTJNjaUoY6kaNNyDAQdtzz9m8RQ/n2uecNvB8Mt4FDQnheN0HDYRnLapyxZi:gh4Vw
TLSH
T105D67C1BA27480D5C82BE178C62F5A0BD7F2B4644374DBDF11A8465D2F63BE59A3E320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\vcruntime140.dll
Size 117KB
SHA256 02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a
MD5 caf9edded91c1f6c0022b278c16679aa
SHA1 4812da5eb86a93fb0adc5bb60a4980ee8b0ad33a
SHA512 32ac84642a9656609c45a6b649b222829be572b5fdeb6d5d93acea203e02816cf6c06063334470e8106871bdc9f2f3c7f0d1d3e554da1832ba1490f644e18362
SSDEEP 1536:dI2v39UXigCBs29DdxfggO6vMMKZsY2ofRjoecbdhUwdJTzmZhTzC:diwskD8B6vMMEs5oGecbd2wHT0Te
TLSH
T1FBC38C4672A042FBD16AC274C1E35E17FB75B84487A0A7CF03A58A690F53BE09E3D385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\vcruntime140_1.dll
Size 48KB
SHA256 7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637
MD5 2bd576cbc5cb712935eb1b10e4d312f5
SHA1 dfa7a46012483837f47d8c870973a2dea786d9ff
SHA512 abbd3eb628d5b7809f49ae08e2436af3d1b69f8a38de71ede3d0cb6e771c7758e35986a0dc0743b763ad91fd8190084ee5a5fbe1ac6159eb03690ccc14c64542
SSDEEP 768:IzzO6ujT3MbR3vXCz6S5Mq83yJ9d3+DuO9zUgElq9z6m:Fq/XuA3o9dgzUZWz5
TLSH
T17C235C9457784086D59F95B0C1D6EE537E7CFA964B00928F0BA1E1882F637D0EB3D22B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zip.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\zip.dll
Size 87KB
SHA256 2cc26c530a65b8a839e40ce820565e531fefcc5a207822e09f7a073fb8676b70
MD5 9977d24ae02799a76ce20f94cceea1cb
SHA1 4c6de3098f832d2e143e0e2cc377616980fb8808
SHA512 7fc85260d07ea4246ff22aad1f22b16c8a76c963cbfbccc97ffe6ddfc8ba5eaea3ad8ce013928c690ba315e0c41fb2cbabedbd6190a6ee26428d12fb4069086e
SSDEEP 1536:ygM3+is9MZS35tDMqiCH353CUKfltXIOQIOhG6rFK7VIv:DM3+isaY3jMqirUeL5GhG6rFK+v
TLSH
T1CF939C5589A05295DABB85B0C9F20A3FD3BAB01117D0578BA35C879A2F533613F483FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ADDITIONAL_LICENSE_INFO

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\legal\java.logging\ADDITIONAL_LICENSE_INFO
Size 49B
SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
MD5 19c9d1d2aad61ce9cb8fb7f20ef1ca98
SHA1 2db86ab706d9b73feeb51a904be03b63bee92baf
SHA512 7ec63b59d8f87a42689f544c2e8e7700da5d8720b37b41216cbd1372c47b1bc3b892020f0dd3a44a05f2a7c07471ff484e4165427f1a9cad0d2393840cd94e5b
MD5 SHA1 SHA512

Submit Download

ASSEMBLY_EXCEPTION

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\legal\java.logging\ASSEMBLY_EXCEPTION
Size 44B
SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
MD5 7caf4cdbb99569deb047c20f1aad47c4
SHA1 24e7497426d27fe3c17774242883ccbed8f54b4d
SHA512 a1435e6f1e4e9285476a0e7bc3b4f645bbafb01b41798a2450390e16b18b242531f346373e01d568f6cc052932a3256e491a65e8b94b118069853f2b0c8cd619
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\legal\java.logging\LICENSE
Size 33B
SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
MD5 16989bab922811e28b64ac30449a5d05
SHA1 51ab20e8c19ee570bf6c496ec7346b7cf17bd04a
SHA512 86571f127a6755a7339a9ed06e458c8dc5898e528de89e369a13c183711831af0646474986bae6573bc5155058d5f38348d6bfdeb3fd9318e98e0bf7916e6608
MD5 SHA1 SHA512

Submit Download

jvm.cfg

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\lib\jvm.cfg
Size 29B
SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
MD5 7ce21bdcfa333c231d74a77394206302
SHA1 c5a940d2dee8e7bfc01a87d585ddca420d37e226
SHA512 8b37a1a5600e0a4e5832021c4db50569e33f1ddc8ac4fc2f38d5439272b955b0e3028ea10dec0743b197aa0def32d9e185066d2bac451f81b99539d34006074b
MD5 SHA1 SHA512

Submit Download

0350aeae0132a9a0b08532250861fbe2208d9f78

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\03\0350aeae0132a9a0b08532250861fbe2208d9f78
Size 14KB
SHA256 1cc999aeaa9f92549332a50ca319c04eae9be57246f489a7fd107e6acb0ff921
MD5 29de7ae2d41c5046b361545d116d85ed
SHA1 0350aeae0132a9a0b08532250861fbe2208d9f78
SHA512 c18d89e1f77bb1050ab551c1ac37a62862a24747998f987e01c5aff51f09158150063a5233b23a98871ae2d5c1ff511c9de78e70dca40e093623c4b9c2768615
SSDEEP 384:StD7dm9TT6qgkbXDlkZAJln+OjxSJKQwOSXTCFdi:SaTWqgGBkmJlnXNPQwOgz
TLSH
T17962C066C5266006F036317BB87469314BD49E346FE0A9C71F3A24BF9A3B224769C4E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

14b3534e2622470a71dbe69474c15e6a233cc1c6

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\14\14b3534e2622470a71dbe69474c15e6a233cc1c6
Size 21KB
SHA256 73e971f5d04a9d412575178c0514cea591a2a78a9df0c72567ba297643c33e8f
MD5 a479c50c69cfcfe6c02346a4d3ee4bc7
SHA1 14b3534e2622470a71dbe69474c15e6a233cc1c6
SHA512 ac369fd5412026b623e1a99dc908944da38bde19caf3e4c6ca14cc966d718a4261124b648af7846b62fe9c4d7fa838dfd3dcd55f52659ee3f71dec991f50a5c8
SSDEEP 384:2ktDwaHsNaeaQaqdzb8QvaxEFQpUnOxwA1mlRDKQJ0ZQ2yheO+2mVg7vsmBDQkA1:2kVsFavS8kah+n0wA1mnDQ/vCbl5A1
TLSH
T179A2C0E9DA788981FE133739B03117F77E81398096D411DEF7E9B1E91A29D21A440E8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1b5871a3af4dc425f20f9c1e06297f5fff2f3545

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\1b\1b5871a3af4dc425f20f9c1e06297f5fff2f3545
Size 11KB
SHA256 0cf5bf9d988f2a675554c0976b1672024ccc38620a07154682b6183b374df0f1
MD5 c64eb35403e015079de6b09c9d62e3de
SHA1 1b5871a3af4dc425f20f9c1e06297f5fff2f3545
SHA512 8d85963e0a439d5571a6f272dd186496da666d9649496a3a9ca07d6e8db8ea6045c7663cf249971008bb452edef5e9118722968448a2b24621ccc76eb43553c4
SSDEEP 192:EMttxOqdm9TTYlqg12M3FCu13v0Pdk2CGtvw7yn3LAUk5S2tQw8Pxb:rtD7dm9TT6qg12M3Frpv2utGN3LAUk5E
TLSH
T1B442BFD76C39B86FD22360B63AB891010FF0F974339005DBE27597B68BF2B817255689
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

55da1856e77cfd31a7e8c3d358e1f856c5583198

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\55\55da1856e77cfd31a7e8c3d358e1f856c5583198
Size 4KB
SHA256 09d5879722c54c86d39d83df919f7f712ed92044ffb5b0a6757b9fc2e02281a3
MD5 db6deee4c221859885a69a10fb062467
SHA1 55da1856e77cfd31a7e8c3d358e1f856c5583198
SHA512 146a3189403c9437b6e74ed754ddd8d6694f6cd375c7c687ba77f0a97e7037df31df7c5123eeda260e3bdc163e637bcdff418e6a468a43188c9a72736b552fd2
SSDEEP 96:gaBVAfY5gK6f9bJdnieRgdaUjuweDbAPPPPPtPPPPPPPwPPPPPPPPPPPPPPPPPP8:gajAg5oV9dnrgXjuvAqFikDtAae1ag
TLSH
T178A129E5DCB0B1C7FC4B307B725803E82AA33E84A56ED6D6BB1409851DBBDE106B4589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

56c1d0ac0de2265018b2c41cb571cc6631101484

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\56\56c1d0ac0de2265018b2c41cb571cc6631101484
Size 4KB
SHA256 139fc234e51f7825fcdedf10c93d8d60c59df9b4955334f409a624e4b3e6bfbb
MD5 04136fa704ddf7b6a0d5101adb0de640
SHA1 56c1d0ac0de2265018b2c41cb571cc6631101484
SHA512 d0acce8422bee523dac86ca130bfab55e2e0e50906b47ae599d4f5ec0d0627e5c4ef263c77c708586ab4b32786f8aca72f3d39c49926a09a2d5277e7652e4373
SSDEEP 96:SVAfY5gK6f9bJdnieRgdaUjuweDbAPPPPPtPPPPPPPwPPPPPPPPPPPPPPPPPPPPs:cAg5oV9dnrgXjuvAqFiwotx5RGW83s
TLSH
T123A15CD9DCF091E5FC0730F3B1260BD03AA17E84AA96E6E5BF4106895C67DB12374126
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5887d10234c4f244ec5468080412f3e6ef9522f3

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\58\5887d10234c4f244ec5468080412f3e6ef9522f3
Size 6KB
SHA256 a0d603f69ad58662e688d74b9ca2f345eebc0938b4af954f16840adf436fe8d9
MD5 1545455944217e6467c30bc9cf0ba0f6
SHA1 5887d10234c4f244ec5468080412f3e6ef9522f3
SHA512 f27e519c219c4d3053c698ac641dc6e252cc208e83b004e0db7fb3015cb9fe5f99bb7739d0b16337f03379dd5775c29456c7ae4f37b15c74b1c851b620df56d3
SSDEEP 192:rDJomrimXOct5g6kf8npoBhieO0y6AIEVG:/imzp26zn6hDOPIgG
TLSH
T149D17CEADE30E4D6EC0531B25A6C0E68BF96BA600234E2EADF54531F08B7D532DF1158
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5fd568d724ba7d53911b6cccf5636f859d2662e8

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\5f\5fd568d724ba7d53911b6cccf5636f859d2662e8
Size 4KB
SHA256 8a716f2a3cbfb5d330d3aa9999ff56f0636cf388991caa06d866576989c9f36e
MD5 1dcad8cfe89774102ad3dd284a2f6d6d
SHA1 5fd568d724ba7d53911b6cccf5636f859d2662e8
SHA512 09b45d02b1af69500c616386867a9cc9a0a925007c7bc4419ab90463316511b3083400cd176b8b0d0ee3d6e31cc837ba10a31128d22bccc5e2a8cc556666ae8f
SSDEEP 96:2VAfY5gK6f9bJdnieRgdaUjuweDbAPPPPPtPPPPPPPwPPPPPPPPPPPPPPPPPPPPx:4Ag5oV9dnrgXjuvAqFiZIjoUaI1
TLSH
T16CA12ACADC7099C6FC4B32B775591BD43BE13F48A566E7D6FB4021980827DA0437461E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a908e7c7d61e01bc4223b4991820bfc56f84c5e

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\6a\6a908e7c7d61e01bc4223b4991820bfc56f84c5e
Size 7KB
SHA256 bdf31938067bc0e93acbc4ea0c122e6811d6192ac783505f8a28154f97811949
MD5 2417fd4837472466b995c85a7907878d
SHA1 6a908e7c7d61e01bc4223b4991820bfc56f84c5e
SHA512 36d6df94e71df90cafc56f236fb5e24f7ab5351195b2b00eee394440c5ac79abbb3f9c8a2430dc61a9b6f07246d38afb0bba680271411e31141317f97fceb1e7
SSDEEP 192:iXDJomrimXOct5g6k3FFCN07DQwYYfQONDrCSuAHB:Aimzp26mFUCYavxh
TLSH
T1BFF19DE2CF40E444CD9AB23983A107D52FA377A88828B3E5EBDD163F09B1DC659D0514
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ea4e448fbc2a079acb0cf3564273083dadae165

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\6e\6ea4e448fbc2a079acb0cf3564273083dadae165
Size 9KB
SHA256 7e1199a39e8c088612dffc5b4ab172bbc6cdb6213c6912cbd61bece1c688c9b5
MD5 a1768252e718e04da8be080972afab61
SHA1 6ea4e448fbc2a079acb0cf3564273083dadae165
SHA512 fd57b105413aad4f34dca5f4011d4d23e5a8d0bb62f4bc0a5ae64eee6f60b8a57406e3ab9ad1df3bded4336736b02b84c3222f4ba724569cbff5348ce7bb701a
SSDEEP 192:OXDJomrimXOct5g6kzaPhOZhZ6elQHifvoq2QdeqylOLLAXY5:8imzp26bhOHZ6elQHifTDslqAXS
TLSH
T11012AFF7DAD1EB07E513727096C50954EF732B810530EADAB62C06261C77DCD581953D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

827d71834e69954e0a7fd7748998332e0b619d29

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\82\827d71834e69954e0a7fd7748998332e0b619d29
Size 9KB
SHA256 0cb98a5f26379959daf5710f40adee69aa6f6bd0d607267ca43f9677ad31cffc
MD5 d11fbfbe2bab53a8db38ca1e08182613
SHA1 827d71834e69954e0a7fd7748998332e0b619d29
SHA512 e8c8935a74d3fb5a29095d677684405fd9199cc2b1130612d41715f1ceb9b74c59043073c38d23f3701120edeaf4d0b5362596d1da89cc9a7957f4cefff57d2d
SSDEEP 192:5XDJomrimXOct5g6koPiKn2eGqf9MQjubFx2jPyVm19mjcqd7AB:timzp26dF/GW2nbFQjPidEB
TLSH
T1D912AFF28E11E0C4EC4735F922750DA8AF821B748475E6DA975C173C18E7F99DAC118D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8e3b07adf3b09ea60e82062277fe301205d03421

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\8e\8e3b07adf3b09ea60e82062277fe301205d03421
Size 15KB
SHA256 a582b6441d740b826b362943f3a9cde320aa78dab5fd9261e2e33da9883e3404
MD5 7f0cfe36c692c0014b60327027c46120
SHA1 8e3b07adf3b09ea60e82062277fe301205d03421
SHA512 abb3bab0d93d89cedf83a6cf73aac05356f6c0a823080fba800b3ffced3712cc4d4513d86dcafee71c999f3e983733e0dceab4741fe85c582038fa1753ebaf2b
SSDEEP 384:7iJKXg1/E6cIOFz1q6jTOzleczdohgCoFllpuHTuDnnViNF2:E/E62pqYOlZGK4uDn4G
TLSH
T1AA72CFC4CEF0A499EC67347BCA700A22BA7BC92415904BD2E4A46233C52697D9D591BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

954f82c6da9670f1383b4d0002061ebc1536c35a

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\95\954f82c6da9670f1383b4d0002061ebc1536c35a
Size 11KB
SHA256 2ac0d1f1564ea3ed904d6923156fea3153147b3f16b733416760ae86e384a549
MD5 d0ae5985e40c4fa69cfceebad3e2c4aa
SHA1 954f82c6da9670f1383b4d0002061ebc1536c35a
SHA512 61a8f84d6d73fcbaf46ecc9d81c9ac439591e776fe50e261156e14e71ad7ad093e944ff79ec48057ecbf0f271f3da9dc8c257ebd41ad8dbc98c89282a5212842
SSDEEP 192:w9DJopTxIXg1fnEObzcoIA7hH/Zje9OrZQ93gzmfhpQd3XKQPJDap+UsH1V:KiJKXg1/E6c6VH/Z6OW9XfPCHXBute
TLSH
T1C0329EB4CBF5E1BDDD18B4B4E59406B83FD6A2659D9C92F0BE1C1B350C02741A5AD0E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c137787095596d770aa3e4f0fe4f9de1ed0b635

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\9c\9c137787095596d770aa3e4f0fe4f9de1ed0b635
Size 11KB
SHA256 f568609506abf8c07cbd95164eac24c8bdf9a73161864f84fdb50877a8734b06
MD5 f961d3890ff93584572d3ec328d4de8d
SHA1 9c137787095596d770aa3e4f0fe4f9de1ed0b635
SHA512 06b65efaec64294896108026ba855cf40c93a1bac6d2e44f56ac4bc85b02ccd658e1119e6f3f1cc909917d8826ed6e76657c1c7ad9551c3f5d65e2b096e9c0e7
SSDEEP 192:1MttxOqdm9TTYlqgCdmT4RM6IjFiehKIsbfK3qjWjdoHXxgo:StD7dm9TT6qgCdnnKFB4y3aUdoh7
TLSH
T13932B0B6D815F2CBDD912170E26F7B245AD5A831F3A05ACA4F3512770BE7671B008558
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c63f2a3681832dc32d206f6830360bfe94b5bfc

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\9c\9c63f2a3681832dc32d206f6830360bfe94b5bfc
Size 4KB
SHA256 ac49293ab32aa3154eb5c1251e3175a55d28f9e6866bf74fa76c2cefdf6cc40e
MD5 62459d5e2818252fc2ecdf2c18dcdcbc
SHA1 9c63f2a3681832dc32d206f6830360bfe94b5bfc
SHA512 429897cde2e4f4307fb042eed6b987046e420aecdbd5d78acf3736b9a0284bc8429eab5109c96b39bd604f2a59390d69772dd42921c173ecc4fbbbd9b33a55f2
SSDEEP 96:9VAfY5gK6f9bJdnieRgdaUjuweDbAPPPPPtPPPPPPPwPPPPPPPPPPPPPPPPPPPPY:XAg5oV9dnrgXjuvAqFiKI/3hsJV9mf
TLSH
T152A13DDACC71A1C1FC0734B7B1B517C43AB63ED49A7BD6DABB080564242BDD153B444A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a4bc069321a96236fde04a3820664cc23b2ea619

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\a4\a4bc069321a96236fde04a3820664cc23b2ea619
Size 6KB
SHA256 ae97513c5bcac9d08f5c8bcbaf55b7a3112134603c141b5de70e15a06c77e325
MD5 02a9f2786ae1487a583495db000551a8
SHA1 a4bc069321a96236fde04a3820664cc23b2ea619
SHA512 18605d797527b44234a6f2b6a99b2915e7fc30c8c88192252fa3dd02e0b801b78a3f509c44beedc887ef9a38556758279c576d922c8558b2d7b44d795ef25192
SSDEEP 192:HCDJomrimXOct5g6keBoDzD+Bd40dDuKR/qwz:HEimzp26XoDSxpRz
TLSH
T163D15DD6CFA0F485D82573B099541DA47F6273A80539BBF5AF50237D8CD290B6BD019C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ae5309997bb45581abda6f80b78c77648cef9313

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\ae\ae5309997bb45581abda6f80b78c77648cef9313
Size 13KB
SHA256 cd05b445dea7b595a696ce16e84710821acd493a79fe85bcd1bf8ec6c9a62edd
MD5 664578b2dc3a8e06e8b3f12e064f87c7
SHA1 ae5309997bb45581abda6f80b78c77648cef9313
SHA512 a9543cc31fb948d00bd9efd72801272753ce7ce2c5e344d606dad24fcbe2571555d3a404c6be240e6d6d2a7ee14e049b41c9e8a6e2eee54e7c61ab30ce9997d0
SSDEEP 384:rtD7dm9TT6qgmF+fPJ99H4Oe8QSV2cIz2AjnnQHF3KUQJGhS:raTWqgLN4OeWXaQHdKU5S
TLSH
T1EA52B0B6F9003C2FC5592472F031D8760FD4F8742AA0AAC6D72E647A462A360FAC24C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b5f9075a8bf6977e7dfd3d316a673eaaa5834a99

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\b5\b5f9075a8bf6977e7dfd3d316a673eaaa5834a99
Size 9KB
SHA256 a3e41dc0e455cd84ce622aa658dfd69db3e0c6b9a40e1047db8be93ebce5887e
MD5 e84223b7ff2941548c568732dcde353d
SHA1 b5f9075a8bf6977e7dfd3d316a673eaaa5834a99
SHA512 01d967475af32985c7a359e5cfef292cf335d661d88b92a28c279c1a3e8c1c4b7dc82c45b32366be6f6f295dfea3e4ead6a3bab245c59b8d325efd116657c2d1
SSDEEP 192:QXDJomrimXOct5g6kRujnCRwId7ZF8H0rPsOphH3+ZzzCu9JF+xd:eimzp26njnCRlrCHMphXC9JF+j
TLSH
T1E2129EFA4E54B46DC4127B35019B0F752FA33F6542F08BE789FC212A8D3B5955AC2288
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cba537acd887eb709d3fb44ff11dd2a370f64dc6

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\cb\cba537acd887eb709d3fb44ff11dd2a370f64dc6
Size 12KB
SHA256 3003e277b3775f7067a2e899eb047ef509e5953475fbf9eaec947b1ab38963bd
MD5 445c7410933689d74bcf8b88a8d9f3ef
SHA1 cba537acd887eb709d3fb44ff11dd2a370f64dc6
SHA512 f0fe8029b4a27745fd24dc19f6627412989c5093a2847db5cec33aa246286a1288479a42d9935d41335ca886af7604bfd4379fb613bb6c8e06b267989ef59d83
SSDEEP 384:StD7dm9TT6qgjoF43+fF2ii7c5tn92fAX9glszIezU:SaTWqgjoF43+fF2ii7cThIew
TLSH
T138429DABD824FC56D85E51B3F82245114AD9B0B55DF818CFCB06E9FE4BB1F10EA0249E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd39ba3ef95ea55ccf82a164485fecab65f3cb69

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\cd\cd39ba3ef95ea55ccf82a164485fecab65f3cb69
Size 9KB
SHA256 59efe9756a0d4e207adf79a33022698b05ea9fa2c2f7083aa732d021e8625e95
MD5 eaa36c0bee73527e8ec7e8df54429b58
SHA1 cd39ba3ef95ea55ccf82a164485fecab65f3cb69
SHA512 86eab3d880a2b93221bc8d28d5aa1603bb14b8c85b1b2c42b1941595f54522a57f7adfbe94dd8632316bd9c2a07f8c72fc2427f417145e8cf64c59d8006ce39c
SSDEEP 192:1MttxOqdm9TTYlqgq8dJJIwvYQPQe/5/i1HFg:StD7dm9TT6qgqOJJIbQPWhC
TLSH
T17D228CFB8D11AA23D82610B59AB919210FD8F8782B51D4DDFF3A54EED6A3710F24118E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

db682892da4e2e4214ff3233bf719c7609d95477

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\db\db682892da4e2e4214ff3233bf719c7609d95477
Size 18KB
SHA256 e64e9dfb183cdf3d11333e2c04b52cebd94adbc668e1a7732277fffa473b6547
MD5 cee920e6bc3ddb85ec5f487df603282f
SHA1 db682892da4e2e4214ff3233bf719c7609d95477
SHA512 cc37b6b7ab4497f90b414a069de5ece462e23c10d3a173fab84a6c4b8c7aeefbf84113c4d3204c77012f1cfabba2e4a74331ecabe0b33c11d5bd04fcfa451ef6
SSDEEP 384:0iJKXg1/E6cGg2WnsVmx7VwvmWUObmdtY8thh6H80j3yg:H/E602WnsUxVwvfUObAth6c0L3
TLSH
T17882D0DF96BBE507E5163A77452246B23B6376156534C7DBB38203AF089232CECA026C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e26fa3036cdab4c2264ceb19e1cd197a2a510227

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\e2\e26fa3036cdab4c2264ceb19e1cd197a2a510227
Size 6KB
SHA256 c7918a0b58c45a6f0d29fa990bbd31a7b482ef61387c83a02eb7f70b672e4761
MD5 8db68cc6dce4b8e01fc10385f2eac7bd
SHA1 e26fa3036cdab4c2264ceb19e1cd197a2a510227
SHA512 150be040bbf4d7d8dcb35aaea7b21908964b4cb86a9f33c4a3126b523b6ba964f36384b0c7dbe3f9dc49a3fa10ed04f355832e9ee5dfa8a53f799b2761ad297f
SSDEEP 96:ncczOrVko1BJoQhri4BXOYwgucPaMN+BPPPPPnQYyMXkM940n8Kp24wVjN5nyD0/:wDJomrimXOct5g6kXa0/24wVjrQ8Oq
TLSH
T13ED14BE6D9E0E988EC2B327156450A166EE277B84134C3C79FB8621F48F7A6F9C65044
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e9833a1512b57bcf88ac4fdcc8df4e5a7e9d701d

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\e9\e9833a1512b57bcf88ac4fdcc8df4e5a7e9d701d
Size 6KB
SHA256 5998bf8ee2eecc2779ef896f04a540f9d48d4e96cc9227aae4646f4d9b817749
MD5 26a15393379cd7d6072f09f196027786
SHA1 e9833a1512b57bcf88ac4fdcc8df4e5a7e9d701d
SHA512 73f6fa5e911fd64a3e45037876cc9edd8606c4590d0db5488de2169fddc6d5f80649c0108631e37af2fb52618b477d1a9086c734f8ac901a6b64cb06f64ef0e1
SSDEEP 192:dXDJomrimXOct5g6k2fFttQfWohWydus2KUHSd:Rimzp26FfFrQ+ofus2KUHSd
TLSH
T1F4E17DFECD31E2CCCD5931305A271FA43F5B2AA50634EAD58E94132D09E2A199685998
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e9bab7d3d15541f0aaa93fad31ad37fd07e03a6c

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\e9\e9bab7d3d15541f0aaa93fad31ad37fd07e03a6c
Size 6KB
SHA256 f7e03bb5bcc487cea313bfd72ded4cfd4e215b82228cf9744760f61da4c496bb
MD5 246bb0ace989af2b492c055b1d55cf26
SHA1 e9bab7d3d15541f0aaa93fad31ad37fd07e03a6c
SHA512 5f6128d4645a2e3ea9acf81a6ac55f00776995d5d1b7d72c4539e8fad65db2e32bbb75c195c9b7c96a7189408fd402992f506feffb3728ce8d28002bf9fad1b8
SSDEEP 192:kDJomrimXOct5g6ked/w5s+DqL4IqCTuY:uimzp26hYy+DOKY
TLSH
T1FDD17DEADF90A1C6FC36B23445054EB1BFB62B784875A6C7CB54036D0CA2D9F558108E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fd2d8033225ffd30e6d719b33ec44ca146757d19

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\fd\fd2d8033225ffd30e6d719b33ec44ca146757d19
Size 533KB
SHA256 2222b522b3ed5a6c88c2725a443cee6eeeb85806b1e60bce76552b15b4e4570a
MD5 f55b47d8bfdf90963015706682c127fa
SHA1 fd2d8033225ffd30e6d719b33ec44ca146757d19
SHA512 f62b2863f11e536ffd13e7f92157dd0771d4dfabb689cd0fc3c86e389ba2dd4360763fc3dab5fafd0aa0bc3218d68d5d4743a5de78fa9dcf9e758036ecf38655
SSDEEP 12288:OC2CzCW0Hx6c4LoAIWKswXXpNmCf+w0K22UieaTDgAq4hlJ:OCTCW0Hx6c4LoAIWKswXuCYK22UieaTj
TLSH
T114C43E25C5672FE705CA92A27CA40542F23582678E0439EDB724D65D3FEE8DF20B325E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

failureaccess-1.0.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\guava\failureaccess\1.0.1\failureaccess-1.0.1.jar
Size 4KB
SHA256 a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26
MD5 091883993ef5bfa91da01dcc8fc52236
SHA1 1dcf1de382a0bf95a3d8b0849546c88bac1292c9
SHA512 f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae
SSDEEP 96:6nc3+Tkadi8HKcL9CpLPu6+Lh61QyBcajLHtlqekr7ztyldIag4m85Bx:gc3+WTzpMyBcctlqGgZCBx
TLSH
T1989197F32A8DD4EFE64ACDBB06A1D5157530CA9B410EA1073A9570F40FA1DC44B06ECE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

guava-31.1-jre.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\guava\guava\31.1-jre\guava-31.1-jre.jar
Size 2.8MB
SHA256 a42edc9cab792e39fe39bb94f3fca655ed157ff87a8af78e1d6ba5b07c4a00ab
MD5 e37782d974104aa3b0a7bee9927c8042
SHA1 60458f877d055d0c9114d9e1a2efb737b4bc282c
SHA512 532664e3dd33699bdfb296e355bc58fde77edc019c10f464ae49fe2494a68fd25d1623a9c86bc72830ca9f1354226366ac6f3c09d77be952641e971386a4ebbb
SSDEEP 49152:X+GWMKp96fG5vlDOZCAz9iKJfWYNl/AWWNrgwYjTW82yp1jQq7oWo0ugz61zT:HWFzwGiZCPCDYW6rufDw
TLSH
T174D5D0977DDCD43EFBCBDA335024926E3C180B69D009A55711A42DAD28A6C4D0F26BFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

authlib-4.0.43.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\authlib\4.0.43\authlib-4.0.43.jar
Size 118KB
SHA256 697043d19e0b84b04f011dbec1bec3d80c04d8c468e7e4c6b221c0183bc1c0ef
MD5 ab48965a39c0d1a8095d09cb4460b2c8
SHA1 2ff9d747a77570a07a60d32ac77eb6162ad2a2d9
SHA512 71a76aecb18ab9f6cecbcc987360d0d9cbb02359ac30355ff28dcf4d14be4d80c4139c5698d44e2b03543c2ea037913e02df215b594c4a0230c14ccc6206a419
SSDEEP 1536:2wwiBS9vyCNUngTF7v5BwjJ/ms6QVxszRkweF+SrBAEP4ElWUHD4gRURpMgG7:2tisECGngT13wOzSJgKAt7cUG
TLSH
T1C7C38D33CA8CD49AFB2731F272588CD17AA905BCB14B549317E6B8A179F18690F53327
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist-1.0.10.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\blocklist\1.0.10\blocklist-1.0.10.jar
Size 964B
SHA256 830bfd639c8db49236bbd8e45d3a2b8c96c56ff654a10118654958a6235d4c44
MD5 fc1420e3182dd32b4df9933f810ebebb
SHA1 5c685c5ffa94c4cd39496c7184c1d122e515ecef
SHA512 10da612530b7c1e1ef3acd02d2d71fd689f3688fcdcd8b0710a9af646816c88fedc6ed2ea8da2d58e61c6ffc9347a61993bd27dfe04cfc3b646a927bcc48da4d
TLSH
T1B2110239559CE1AAFE38627349A2C6AF743F487C869EC2425501EEF01EF99240E22219
MD5 SHA1 SHA512 TLSH

Submit Download

brigadier-1.1.8.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\brigadier\1.1.8\brigadier-1.1.8.jar
Size 75KB
SHA256 cf65afa612fffbe4dc976115dac0312f48b9c84b3ddaf58bec8018a9454440d7
MD5 34f54dae241296b633655353219f8e06
SHA1 5244ce82c3337bba4a196a3ce858bfaecc74404a
SHA512 74434e25ccfd59eea62a731d68dd4dddbab0b7ade42fc4cf53f6f8fae7d35b26a063455995885db260c3f2d6a8f7419535af11db1f79bf9f1614311cd546b321
SSDEEP 1536:f6k6oSiJWa+KPXFo+5m6nPfkDiy983P8Y3xn:ykhCa+gaR6nPfkDFGUYJ
TLSH
T14573BF31FC8CE2CAF723227941A1ADB669B90E5CF04A341215A87FC157BAC654E93379
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

datafixerupper-6.0.8.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\datafixerupper\6.0.8\datafixerupper-6.0.8.jar
Size 673KB
SHA256 6e38e9fc5404be7e45189aa14ca6058bc85df20d6760a212b6d48e666abf0fef
MD5 d20e6e9dedd37803586d8b134730655f
SHA1 3ba4a30557a9b057760af4011f909ba619fc5125
SHA512 a6ab54a3addc195dbbb64cd1d2eda20ea3d92c6548827ecfa3329a9417b90efc0b440b2fb613fc1833980f76ccdbec90bae2c72dda6af37cef390a2876ff9c6b
SSDEEP 12288:JQj0nB3d/RaUMJOlcFaTQUZ14TtXU+mRzzaSKss+ie:Sj275aTwcfzknefj+7
TLSH
T1CCE4C15BBD4CB7F4EF6B7132432188C67C29186DAA05049337D93BD1A97180E2F5AB2D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logging-1.1.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\logging\1.1.1\logging-1.1.1.jar
Size 14KB
SHA256 c1756eaf0685da94142bacc84309bb7ccddf65e004638c3299ab645710b5938c
MD5 3e448abd81afec16d287d93b0628813f
SHA1 832b8e6674a9b325a5175a3a6267dfaf34c85139
SHA512 1644422367d71a14a53353dcaf605ab88d7899c23c643826f42eec6828156a3467ea2fd3ec0d909ed5dd30be90a4dfe0dc9bbe8d6f43e5e22e70f114c45f1876
SSDEEP 384:ppehxQTzb1WWh5LXMRcJKacYZZ+RUI+bxaX2KBpf3/ByD:PtTzb1TTMzacqMRUbxav/By
TLSH
T1E9624A3675DD8C4DE329263484C05DC6387E2FDCD18BDB672AF23A6949B18260FE3664
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

text2speech-1.17.9.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\text2speech\1.17.9\text2speech-1.17.9.jar
Size 11KB
SHA256 c2a95b499e76fada7dd63e9b0ec797b678d411c2b0ee6f37f4dc674662bfb0af
MD5 f5b05e8db22e2e0668b786e11ac9d3ce
SHA1 3cad216e3a7f0c19b4b394388bc9ffc446f13b14
SHA512 e7a9ca0449f1fcde00f242043e6f2890993aed4d98621e77a46858c7c9f4a1e5134cc77c33dd2d3b83b2e7164e99a616e3aaefbe860bb209be23e74f7b32a29f
SSDEEP 192:xeeNyWjqALq0t8lunvhN5y6UbkVqX99pFAwq0DzOcI+XSWBb8EkOAbtcsI:1sYgyvHU6Zqt9POcIGSAYhbk
TLSH
T152424B2F1D5E94AFE323713084614B87BC265CF4D7090C91287BAD98AC2A5394F66BFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

commons-codec-1.15.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\commons-codec\commons-codec\1.15\commons-codec-1.15.jar
Size 345KB
SHA256 b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63
MD5 303baf002ce6d382198090aedd9d79a2
SHA1 49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d
SHA512 da30a716770795fce390e4dd340a8b728f220c6572383ffef55bd5839655d5611fcc06128b2144f6cdcb36f53072a12ec80b04afee787665e7ad0b6e888a6787
SSDEEP 6144:clDdXraL6MLAdTAR5JV4WtBTvEYc6xymTWZaJlQ1V0n34Pw2z:MrqxLA9AR5JV4Wte1mTQ2tId
TLSH
T12E74BF62E0C50840FE36A174A1B67C7E7C7EDB49828775C926ECB3834AF5D548E6316C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

netty-buffer-4.1.82.Final.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-buffer\4.1.82.Final\netty-buffer-4.1.82.Final.jar
Size 297KB
SHA256 a7ce7f6d8c1e82b044cd56765dab4338251596416de03b1f9a05d7402429c29d
MD5 47b1a2d86a0b211d971fc4156560f793
SHA1 a544270cf1ae8b8077082f5036436a9a9971ea71
SHA512 5e04ffbe47398028fff4c92974973a950283fb243a81d117b8b93705a31d18c62fd29937a7c95a9f77d5caa7ba73b3f8be0226a89e83c09dd0a2b11e3c8f3782
SSDEEP 6144:oZgLRCMCREV4GyTHs+Ac58B7HKlbZh0sWta39VZswzqfpsnv:3LRCLHRWB+Dh0sIG9Pxqxuv
TLSH
T18B54F2207CAB4452C4A73037D661485BB63E4CCEEA1FF85910D5149F2E78898CFB9BE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

netty-resolver-4.1.82.Final.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-resolver\4.1.82.Final\netty-resolver-4.1.82.Final.jar
Size 36KB
SHA256 4cfeba7ec535964a35722178aeecc87ec186dba0203d04389a850e8e62575383
MD5 acd354b623c1fc096dd601759d4da7a7
SHA1 38f665ae8dcd29032eea31245ba7806bed2e0fa8
SHA512 ccd9aa1b9fd5a3683140f80b9c2c354d6a21b2a0e62eb0414ca2fe51fe550d3502d6d506375a1af19b3c82acb810e5492938d81ad4ba67f760c63c07ae395a5a
SSDEEP 768:lpOhUw1f5BngPlCUHqYTAWv4MKJ0n1HM0zf91:l8hzRBngPlTHqYTfv4Mnn1s0zfv
TLSH
T1C2039E282BE6702CE68BF131D3409093620C1888E65FB86655DC6E4353F7BC46E9E7F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

netty-transport-classes-epoll-4.1.82.Final.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport-classes-epoll\4.1.82.Final\netty-transport-classes-epoll-4.1.82.Final.jar
Size 138KB
SHA256 73f827fca18870959b9581c6875130576e5de684cfb4e6f346f8c1c266840ba3
MD5 ffaf8f9be348cef0be51cdb9fd715afa
SHA1 e7c7dd18deac93105797f30057c912651ea76521
SHA512 3f00bf901dee34db7991377650dea94378e993fc7f9f6158773af35d54041f6a1ac29b5bfd13080bb710a054bc9c4e5ae522f7b7261a38b000bdc39ee8d2ee77
SSDEEP 3072:sWtsNYoIQPKxGxQOZikDdPgNigEEQrcwgigNWEHRJybo+7O:szJNPQGdZi8PgNi+Q4wgDEU9v
TLSH
T1F4D3E0A4EBA1D433F0D3E070C2D071866B1D7AC6FE17984716E86909E5FB9CE5B61AC0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

netty-transport-native-unix-common-4.1.82.Final.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport-native-unix-common\4.1.82.Final\netty-transport-native-unix-common-4.1.82.Final.jar
Size 42KB
SHA256 1096f16527a51dd5f44ced90636110a429cc7359a9a8a91db25000b747793429
MD5 8184757d93ca61b6a47c739798b6e249
SHA1 3e895b35ca1b8a0eca56cacff4c2dde5d2c6abce
SHA512 321d42e684bb73513b18ce7a0b44beb71b4914be44b1646d6e394f5487af5eb8e9b186e78e4e23d3526f47acb9a26c2faa2909b4ffdfd2a0dc755fbe19dfac85
SSDEEP 768:r9lgR1CFRMaLl9dZowNVfPM6tZjd3ewXFyfgDfq0/A1gfhavIqj5avMI:pORAFRMa3Aw9HjowVyfoqyA1wq+
TLSH
T15F13AEB4E565C029E107F13196C4D992B60CE65EFF46980320D8298AE6BBDC0CF79FC2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

netty-transport-4.1.82.Final.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport\4.1.82.Final\netty-transport-4.1.82.Final.jar
Size 474KB
SHA256 c210069be4ab4120f5ac7cb5e4a126d3a007e78a64fd44c9971220e013dbaef1
MD5 763e0f1a9170807d91dcd25e26f09667
SHA1 e431a218d91acb6476ccad5f5aafde50aa3945ca
SHA512 d8ea740600013adbc419252a3c30f288da8015a47b345cb929d20cdeb5eb33e846dca9b738e59c31e97bd8dbde2e7c0eb7690f16d16d7c160736bb46e9de87d3
SSDEEP 6144:aqHcbQ/y5OkNfZbCq87fk2TwoWU2XOaatGns83Ejy3sGSo0b8Lp0yavQtfsB5ZbL:jHcbQ/yZfZsk2Uoa4wsfGS+avbBzzNtD
TLSH
T151A4B0B5F5B2C461D143F03140C4501BB61EABC8EB1BA89712D86D06EDFE8C5ABA9FC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

log4j-core-2.19.0.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-core\2.19.0\log4j-core-2.19.0.jar
Size 1.8MB
SHA256 b4a1796fab7bfc36df015c1b4052459147997e8d215a7199d71d05f9e747e4f4
MD5 b7f521926226a16531f8e212b1da1ffd
SHA1 3b6eeb4de4c49c0fe38a4ee27188ff5fee44d0bb
SHA512 1300ada6f86818ef4dcd17448a8965c1c6dd41ec414de2b2a5bafdf25d03c12100fa9e8f422d7b346f2984e5dfb3d599f8c1a971a6bcaca0cf938943d06364e7
SSDEEP 49152:eCBdQ2xUbmi6TFTeI3EFRSd4r7Tcyb+NQ/QpJXpEfAD:eDuPA8c7YaU
TLSH
T11A85B027F5AF5861D2030A3DC1425A11753A81C4D08BF8BF2A5C367FCCB99B64AD379A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

joml-1.10.5.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\joml\joml\1.10.5\joml-1.10.5.jar
Size 695KB
SHA256 cac9f22f83a7aa33eebda73c16ff5261e3cb4911b6bafcf4c79ea486099d0c9a
MD5 406b22ecc091923bbd37ecf8141a9576
SHA1 22566d58af70ad3d72308bab63b8339906deb649
SHA512 ceccef841dd71d98240da830fa90667791b35387ef6ab5a6126976c6099eafec81787a2c63cddc78f9bfe7d9808431ea0e2baba1b8f73d46fb88030f453dfe62
SSDEEP 12288:PSKxiJscNPSubsLZYz+cBeKKQaQSLu7ar9kb9f6AHzG8fym98rHA8I:H/cBS8sLZG+HtQaRu7aahf6fm98rA8I
TLSH
T15CE4234DDCA98A15F43B6B71704784BFF5180188B0A681EF38A903994F278E9275F7DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lwjgl-glfw-3.3.1-natives-windows-arm64.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-windows-arm64.jar
Size 120KB
SHA256 1c8209a714eb3309d711786f01a068c8a2307bba947306530f47b86d47ef378d
MD5 c2cde15f7ea458637967f166347f6671
SHA1 beda65ee503443e60aa196d58ed31f8d001dc22a
SHA512 1f8791ddeb0734ed934bed4f1da3576493202c8f682eab0cf2041e5670526189b8d1a8b053644be800a9c17365711c8e8a15bc78a85f66b9f9a40ed3a2d7e6a3
SSDEEP 3072:OAVnhnHzDBjBhKV2Lv6FdRkPmALwm0DVUpjOSecob4:OQnnB4QvcdOPEmAw+cob4
TLSH
T1D8C312B5C482D420D27BC4714F9526CEBB1DF1EADDB8A651BC6309863C3623EA3E85D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lwjgl-jemalloc-3.3.1-natives-windows-x86.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-windows-x86.jar
Size 107KB
SHA256 639bb2d75df3dd59ea7b0bf8b847e0af57074694d793920ba1c9537897b2c3d8
MD5 45794508ab9c8e86b37432d925d1888f
SHA1 fb476c8ec110e1c137ad3ce8a7f7bfe6b11c6324
SHA512 3469400fffa4140736ae54c768a92fdbc402b9e0833dfe42e34db58eb33c203d8a80d5d93fc5fbdf51922f62e0ed7730c033c011e765608745e9fe918b1a079a
SSDEEP 3072:L3ISegn3zAcif3jt7pDAqhjoAiejz+mbBKnN8megDXiUnH:L3ItIjAcif3ZlAqBoA1BKnNreiiUH
TLSH
T199B31269DCB1E071E43C657CEC511B9624FB8B23BD9CBAEA0D003659A56720BCFD5063
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lwjgl-jemalloc-3.3.1-natives-windows.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-windows.jar
Size 132KB
SHA256 225f37df5500614675be9acb6278cb6c9c80a349264798b2cfc7ec434f1ed472
MD5 c4bfd687e0734cca9d33fb99f40ec248
SHA1 948a89b76a16aa324b046ae9308891216ffce5f9
SHA512 c371a8f308108fc260b39c3824ab13f3c2570e96d6df893ec8582717f60d663d63406bf316eaac255e113694ad077f7ffd5a4ef5c90f65ccafaed16aabd178e9
SSDEEP 3072:vFNTyriaUPV3uJ5UPgRCNW8GCDuR56oI+h5u68igMjPT40kOtFCCM:9hqrU936m5k8GCDuW+hh3T40pFC/
TLSH
T189D312244D974315C3745F78DCAB8778BB4C53A3DBAE20A58D8829E7E97CAD30F92601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lwjgl-openal-3.3.1-natives-windows.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-windows.jar
Size 563KB
SHA256 5f7e666aa24ca8b3fb758e72c03ffb9d809b30489c6a7b47ead67c6977ff654e
MD5 aee2d03a3928acfee314187ccdd3fc1b
SHA1 30a474d0e57193d7bc128849a3ab66bc9316fdb1
SHA512 c41bd91c76b36d5fb02239c2a0e316845b4f2775402435b44dc447fdf65b17723717974b76b0938f6282a5e8318e6a44775bd45606673a8ab9d195124eafb281
SSDEEP 12288:rT6jCWSJZOk6YhZgvRPZ/M+2e6IDK4jS11CA2YRKcsZmWezT:rT6jCtM4ZuRP72HIDlA2WKcs8WezT
TLSH
T1BDC423AAC21F77A3CB454AB1B29131ED0AFE34873E7C936B35084EC1F5525A51FB0949
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lwjgl-tinyfd-3.3.1-natives-windows-arm64.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-windows-arm64.jar
Size 106KB
SHA256 50e5d0345dcbe004972de853aa54650c77b3f0d0d2056dd5bae0f66528ebe78f
MD5 23ec39b37454e0da99c2b758128d0f3f
SHA1 83a5e780df610829ff3a737822b4f931cffecd91
SHA512 17701dc71c0620add532f5bcd172bdb6137593bf408e5fe7653649d5ea856197d412fe29e86027fd60a48ba2ef3385fed65896f45b337750dd30060c8f9e93f8
SSDEEP 1536:4WbDtpLpAD+1U5swGIG8Xf2PTX2H/ec3hjaP6UZ/k0W+kXGvvfUoxmOZZRmPZii8:4WGDUU6of7H2c3h2PjZsWvvvtQZ8
TLSH
T1D9B30270B564CACDF958837889CF769693F02230CDDAA7CC60E8B423BDB7D189658598
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lwjgl-3.3.1-natives-windows-x86.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-windows-x86.jar
Size 131KB
SHA256 e90c1f9cf5701aeef2982ebf0905a2b991f4622b8a7f8250eaf0873b5a0a0223
MD5 0f0bfa91e563448711e9b7b54710ba53
SHA1 3b14f4beae9dd39791ec9e12190a9380cd8a3ce6
SHA512 46e0acecb2bb8922384c006c044ce6d323781881ea18480a712a5d6adfd1d96387351875af8eb005a10b4ae3ddaff0a70a4cc0a1620f8f75cf257f9cbc8ffa08
SSDEEP 3072:YOA1O4Y45exf3G74TSml0Yg7T84chz//5qL3TL0BXHxRQ+eF150h:PI5t74TSmuTd8zJg3TL01/Qza
TLSH
T17CD31279D9E1163EFABD817813F39B7B63BB39D6680680BD14364187EEB90188D152B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lwjgl-3.3.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1.jar
Size 707KB
SHA256 cf83f90e32fb973ff5edfca4ef35f55ca51bb70a579b6a1f290744f552e8e484
MD5 268db624c57a2c8abad40587f873fa8d
SHA1 ae58664f88e18a9bb2c77b063833ca7aaec484cb
SHA512 2a6d8d2d438293da4f8bd84c02a4df3793a6c410e4491baccedaf135865b7cfdcca4a78b09210faaeafdcd1cd5d039c4da936d286e8ad324ea8e498f989b7346
SSDEEP 12288:7XdhSu2hHXMVjk76L8QB7MqSA+TFQgx4ngOgMFt/ISv/25J8GUOnc9YV7xYQt:jgxMVj58QB7Ma+TfxHO7VIue+G5ciV7H
TLSH
T1A3F40120CEA2906DE075213556935653743E1BEAFF875CB88CE09AC6D03287F4BA3772
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

asm-commons-9.10.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\ow2\asm\asm-commons\9.10.1\asm-commons-9.10.1.jar
Size 73KB
SHA256 6d0abefb7cbf972ea16edb37ec14835372505063a45f976ab7ea889ed9497895
MD5 8eee0b1bdd046baf472eb83dd5e6bb44
SHA1 4229e4c55fd8e01c23f9fe9884075cc628aacc50
SHA512 8540a8f9a63b22bae54fc501f2da405c2c1c45fa13921a1193629cfbfbb716473f8a19984559af7b0b1ea3814d439ec445ea1cfeb159bf922bb7e60a40acf823
SSDEEP 1536:SFSgDvgkJafJUU/cArN+ElpSic4F8NNpMJExg+fW8k/6gPH1yQBAOx/gdTn:SEgk7J/rNZF83pMJEffW8k/xPH1ySAOW
TLSH
T13F73D021F1EBD123E063B07EA4F75D63F43A4B3D9B8A79FA18D8C5C5D1D184C194A168
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-1.20.1-0.19.3.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\fabric-1.20.1-0.19.3.jar
Size 22.0MB
SHA256 56b71336d2b4fdffd197f56595b0da93e32a946f78f382a299b8f4b92758bb0f
MD5 95f0c064ec0fa739613b993c92a68db4
SHA1 0c3ec587af28e5a785c0b4a7b8a30f9a8f78f838
SHA512 42274bb1d2857b84c81f4a9e99bd043fd2f17610b5f43c3cb8bed625442a131f33b6e3469cfe4d9130f6fb3366378b66292d912c5e9f5dc2282ca5bec8bf2617
SSDEEP 393216:D9MyEPJBuZV/1zOvJQxaX1VEi63Mv0ECnAkW4gcCpVW/CSCgdV:DcTuZVZCJJlD63NCLp2pdV
TLSH
T17A37CF1CBFB7A998E50FC03A41798053E42C9BFAD808E9DF667484493DA9CC51743DEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

citresewn-defaults-1.2.2+1.20.1-5c6bd819e958c6c5.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\citresewn-defaults-1.2.2+1.20.1-5c6bd819e958c6c5.jar
Size 218KB
SHA256 c24e3485cb76b6a62978f06859c560c8a3bccc0465315f650e0f4bf4b235fe02
MD5 71355de7a7c1afabd62ede5b0ebd5290
SHA1 2a6879e880c58a05431cc5d4d51725d0e76317e2
SHA512 4d66fdd57592ebf65068720c58f51501dc931909193f2587ea48318fc206705d24004b65323e4c85e47d9b82d0a42e3be71de3db6e0326f24c718fc736816a67
SSDEEP 6144:uHeTy5+pQuJPcbm0Ck7au6nAtGxz7ffke:2Wy6QkSkTu6nEGx3fke
TLSH
T17824E052B769C81EC20795355C60D9E364375A2E3A4AFC1F0DA404AD0BFEC3B5B06BAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-biome-api-v1-13.0.15+93aa238b77-37e9b753a30afe0.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-biome-api-v1-13.0.15+93aa238b77-37e9b753a30afe0.jar
Size 80KB
SHA256 f0e6b7811ec5f30fb4ad1178da75615269c841daccf6fd2d3520d82e2ebde90b
MD5 aa248d6af32c21406ca419c8f6d881e9
SHA1 0d5ca3d8c716b983a2a95f0ce7bccbd6a1352856
SHA512 9e14efc109e2af069c25e313e181fcd36590aaa3b803b2d569f9d6e3f02db4d283ed52539734f7d764d1b2dd0346ad38366730d17bde71190a37d1da5214f123
SSDEEP 1536:avYsRjqEkr83kcX0yItruvm92ZJRyJ705q7YXOn6AV5vAF5ruXf6:WYsR8psluYZJRyJ4JOLvA
TLSH
T1B183AE653B48A596D08785730851C2B6FA25E9CB5F0149EF11B91B1DCEC692FC306BCF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-block-view-api-v2-1.0.3+924f046a77-242c146e8e33234e.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-block-view-api-v2-1.0.3+924f046a77-242c146e8e33234e.jar
Size 23KB
SHA256 72bd942643d6d751bddf10baa6db1538df1737eaab5c5215bc4d1197ea1df2d1
MD5 a34643d6948206cb2d6947603cc25cfe
SHA1 97b3472ffbfc0044a824f70c69975a452e920120
SHA512 925b98cccb5b83add37eb0a116b27adebd8aeb9455edcd00217d3f976d7df00f22206b0e13b3b23d1689d32c857f744e1b0b6e057840a22b44b1b2ed3f22aaa4
SSDEEP 384:jTGIXRTNQ9phB4RrcCffep7x+wjbHwlG4YU+xPEmLcg1Uxkcy/0SH:e+UpUCC+p7QwjbQvkEa1UxCh
TLSH
T1E6B24B243B85A49BC44342324D60C037D125DDCF5F46AAEF7425906C8E9BEABA701BDF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-command-api-v2-2.2.14+1802ada577-2e3cf91d720a5c45.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-command-api-v2-2.2.14+1802ada577-2e3cf91d720a5c45.jar
Size 37KB
SHA256 9f04feff432521fd3151773f88dfbf4959d8262569553b9909481a3e97524c8d
MD5 9700da2f452819ab8bf64f887d21e227
SHA1 84c428034286e62380b3af64dc8bb89be08a11e6
SHA512 10fcb5afb43c2bb68eabd48fa199d463f17b50a72e20264a4a2405f08da214f605ca25dcaf6ba98f6edf5f522b1f756e135145609e6bf7e19810fbddfc928bd3
SSDEEP 768:u68+C+pcfwjCdepHRkcWAFQAJNKi1pWdaj8+E5v3S1KcC:u6I3ddepHRkNKQcKi0/Xv2KT
TLSH
T184036B127BCC781BC48392320A61C171E4649BC75F0A99CF2179398D8EA7D5B9346BEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-content-registries-v0-4.0+1802ada577-165f533012b13644.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-content-registries-v0-4.0+1802ada577-165f533012b13644.jar
Size 56KB
SHA256 8400250eed838e76c04e587e2a39559dc49d0e6f95dbb64acc0144ad51b9d857
MD5 d502883390d0fa3d35e308afc5eed888
SHA1 c9483d98b1de73a96d5a79cc1bc6428688ee95da
SHA512 917d4a16f1fb3278d2b1664c14ae77e309ee6e84f4056c75d7fc1671dc51cf6bdb985dce3a0d60551a3bae2aad224c7a51c718f4571a85f3350e42e5dfcd6997
SSDEEP 768:a5ZkTY2C+pOwjAIW5F3CLWFgWtSxG5rpiowpY7r19xdBaZ/Jtz5bNUpSl:dTYvpGW5RCLWFPGGJUU19xdBaZRVM4
TLSH
T122439D66BF4DE55BC1C3833A0D108072D528EDCB5E054DCB126512AE8EDAEA783527EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-data-generation-api-v1-12+238242b777-ed078194de86955e.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-data-generation-api-v1-12+238242b777-ed078194de86955e.jar
Size 95KB
SHA256 382aa3e6ba9ab31f28b24a0b1e11e0d7e485108e3714255b4775e156963891d0
MD5 b1b4b86f078aebc116279bf54c541c12
SHA1 12a686d8b2a4b964c0fc0bad6dd068d095df06e7
SHA512 6ac789900589d2a436143600c8c7fdb8600bd8e5379dcf995e7c9b07b83fa1336891c8fad570bc9339086605cfbda5b5002070cf6809ff4c4bdcb858ce293e27
SSDEEP 1536:0tdxo+8+zPckupYGqaierPK8NQuMJMRq5torPMHwMzyi7D2PljfP:0tdxo+8+z1M9ierC8GeCtowQs37yP5
TLSH
T1EF93AE297B46643BC04391321C54C473D118A9C79F8959DF002A216ECFDBE5BAB867EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-game-rule-api-v1-1.0.41+1802ada577-952cc503e286e377.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-game-rule-api-v1-1.0.41+1802ada577-952cc503e286e377.jar
Size 53KB
SHA256 8d9794b9fe04ee88615040333d268a5b8eaae14f17628c9c170cee98ddc55249
MD5 016b6ce8076d1a02673adc399c1e4c1c
SHA1 574ece10448b1b0ca7aa08b7a3b7e4bf2afc8ef8
SHA512 f79253eb44541877ae5dce2a14234430d628a1ec40daa6e559f1fe7712dc02c57a2996581bb1f6241445e55b5a5a416050af109dd4b6296d7de1c952bfbd2b9d
SSDEEP 1536:Mz6CDv207rl53Y3XJwM9tWAo0Ea8F5MINg5+:K6e43H9tWAliDZ
TLSH
T14E337D177B48D40BC09742334991D0F6D064DACBAF0AD9CF20A8224D6EA7D779306BEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-item-group-api-v1-4.0.14+1802ada577-65f7306139dbb27d.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-item-group-api-v1-4.0.14+1802ada577-65f7306139dbb27d.jar
Size 55KB
SHA256 fddfcd06c7a1f356c64f1a2e027b1a06fcc788740f98bae7167bc5e9574f20a9
MD5 9b72b3d4719e47b1173ff678ecfb17b9
SHA1 51e6d9fbc4c4bdc705b8beef81f12621e6dc31d3
SHA512 1579d126522ec6981e8ab00ef7f6ef42d6af2cfce6c5c41b062b066bd22eb0f213edf00273238b408cec5ed4a6b84450b1b87e7e5f6cac84bd2346a662f26592
SSDEEP 768:5Ge6ktC+p7awjRfXucJN0244+lly+BkUpD6LzftQwkMyYzwL7WOg/a7bYR397BDF:ekYOa+1EWHdBDeSfmu9J/frH
TLSH
T1D5435C663B48681FC04B913104A1C4B3D118E7CB9F4AEDCF2525228D5EA6E179726FEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-lifecycle-events-v1-2.2.2+1802ada577-b3f23b2ebb7eacc7.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-lifecycle-events-v1-2.2.2+1802ada577-b3f23b2ebb7eacc7.jar
Size 89KB
SHA256 180cf253a3f8ca3b38c7b32f4471b70936a5252f35cd03af01f118c32f6215ec
MD5 8a389cec2d9afe6b51491f930c4faa15
SHA1 96505e4ecb0488f186da54d693938f23a976ae14
SHA512 fde5578db66c3403709ed6ef647a98c549ad046d49265d381b60a15d9b8d4a50a46ae3507e80b0333a004f246929640fecef8f4f0f6bbef0427152cf744f7646
SSDEEP 1536:OrL5NJCVWgjqtaxK96M8dI1xP6HxcBGFcqbiyGWpkdZ3PWUrudpP:OpP3gjqLx6HccodZ3uCO
TLSH
T114935B1A3B5C64A7D143863B5A74C032E17894CF6E121ACF9875184E4EA3B6BD709BCF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-object-builder-api-v1-11.+e35120df77-c89f0d078635543b.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-object-builder-api-v1-11.+e35120df77-c89f0d078635543b.jar
Size 69KB
SHA256 54f3830dac266f0df4a19a995643c6fefd2c6d58b6ba8a4a2b19697e86994f74
MD5 e554f71ddb1eb2d1e23ba942c73ead8a
SHA1 fc64aea13f40fcae5a6d1bfdeb05f94ae0455979
SHA512 c2cc4e3d68d6b9cf04af31eb9f577cc929375869b0b912e33230c48d2eb4e6beeefe1fcf4ea9cda7bf06ad259a38f5c14d344c7245e4049e3695aa35564d6795
SSDEEP 1536:lGqMAltedMF20MS/r8u0bmStKvX9rmafJAGnai:bFpMVtFaKGnz
TLSH
T14F637C217B8DA88FE047C13209248536D02999D74F5AF9EF1056A15DCEDBA4B8703BEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-particles-v1-1.1.3+1802ada577-f4621d59241956c5.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-particles-v1-1.1.3+1802ada577-f4621d59241956c5.jar
Size 31KB
SHA256 1b52d612998aa8b02e86bb376b62099e8cc5aae7f1fbbff4a4760084762bcd16
MD5 d744ee989d2949040e9f37baedca4a4e
SHA1 7dd931fd541e225e80c48b3ccd18146791cdc75e
SHA512 93f703da7070ec4f41d3e97a7919f45ea1f5023ebf041380a446e9832681a0c0896bb663b800c173f51687ca4a43522da60bccf6b8c1d026e26c2d443cd51e26
SSDEEP 768:b4GtKXFv+C+p8wj+N+DzQXgRtJxBBaUsL5:b4GQHLp+oGtPXzsV
TLSH
T1D4E23A563B8E6AABC04782334CD0C472D038AAC75F8789CF6421211D4F97E9B8745BDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-recipe-api-v1-1.0.25+1802ada577-ef4a6fb42053c95c.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-recipe-api-v1-1.0.25+1802ada577-ef4a6fb42053c95c.jar
Size 49KB
SHA256 7bbdbe8374d162926f532b3705f65035cf39f93e176d5506b5082674a583ff9c
MD5 3851941a88062ceefe61bd07547093cd
SHA1 c8429a0c415f479554f058bd88e99267d01b9d34
SHA512 a6959e61850598f955985d95361c9038ae31f0decc556f3569b17103945663674a80ed2a63f390810e892f5eb836c6829efcf6bc1e282797e855a6a83f5bd56c
SSDEEP 1536:g0KSdXnowVHGLzOuzyJFq0HmoW/u8RE+7:tF4ImXGq0HpWFh
TLSH
T190337C563B5DB84ED003C2728D91C07ED528968F7E035ECFA644250C9EEAA5B930B6DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-registry-sync-v0-2.4.1+4c0a70e677-8e5b8dadae7a629b.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-registry-sync-v0-2.4.1+4c0a70e677-8e5b8dadae7a629b.jar
Size 115KB
SHA256 d03582c28c50ecb1232e44d924538851dbbb54cf2dacd590aaeef53d9e528c1f
MD5 88a79411969144d27c78ff248d7d9f97
SHA1 b27809a3acbd20bdd43417220337bef1e31617d2
SHA512 686520256120528aa34180ce7fb33391ecd540a0e61f79f8dd030520927487fa38574da63d183c87b2283b65f29c4ea21e13a9d5f5c2d8c5235b42fb8789cc4d
SSDEEP 1536:JzCAX88Tas4QMUitw8yyTRkTZgjTvYd+cBjhJWgnhladqqBA3vfdLeMLYa9:JzCssQwrVkTZITYNLKUqsvVLeq/9
TLSH
T1E6B3AE55BF49E51BC1839A360D208072C03DD9CBAF064DDF422812BD8E96A9BC7567EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-renderer-indigo-1.5.3+85287f9f77-eb760cabb594e4f9.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-renderer-indigo-1.5.3+85287f9f77-eb760cabb594e4f9.jar
Size 114KB
SHA256 4787e93506223b3929d08d5d0868749d73792cf819f47a8b5b4eaf9dd77f97a7
MD5 1210072aa00c147fe7fb9d2b2d2f9f13
SHA1 891773ba43d3425ca9d21aad19dbf76eb142196f
SHA512 9ea79d7800d36cddef3160b6878f52ec21ee559f13721a6111a17469eb82d87f3c05c5d2e7a02297423b6f6818fc02a23885b82614d1795ca8c5ce8e9e3b869a
SSDEEP 3072:crvyqgtNIF8xaHuVa+l0WRhijYF6dhGYax:crMkHuxAQBZx
TLSH
T124B38DB23B59749FC44342329560C676D23AA4C75B0EB8C72131102E8DBEE67935DBDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-resource-loader-v0-0.11.1+fb82e9d777-14fdbb059ba5cd43.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-resource-loader-v0-0.11.1+fb82e9d777-14fdbb059ba5cd43.jar
Size 92KB
SHA256 d5918d34217d121850943e24eabad2792e2adaa16d0ab0354ecbdc2313f48715
MD5 27d592b7e995c42d8609f261ee93eee9
SHA1 2ed8c2efb29d9693009ffd4a50ad2da8c1fae95f
SHA512 7c008fe07f2e2eac4d23a7e05f5f3456b27911127fa7e845545586ceea077f70ea0b078c7769b7615245c022676c8c9c2ec96f6188eb4bbbf488ba436c30291f
SSDEEP 1536:HaD6a85cd3bGDipeJOQMm00Q/kRu7FHDhtMsmSjYjcBDO5JD/SI:HazRKipesXm0ZaCHX7Nwx
TLSH
T12D937B537B89E82AC02785370A20C472C10456DBDF50ACAFA415111DDEF7EAB971AFEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-screen-handler-api-v1-1.3+1802ada577-3f8ad3f85edcbcb4.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-screen-handler-api-v1-1.3+1802ada577-3f8ad3f85edcbcb4.jar
Size 30KB
SHA256 bcf37995b2151384fef6a7190a2fd0c535272d54de6f719febc8cbff912107e4
MD5 9c752e8e3abc997a45b411a8647fc990
SHA1 f31627e8d2b806654ab82c0341dfdded8dfe4cb6
SHA512 b28fa237f968bf9d6eb6b0949a66382d7e583c71ea9a9d40f5408c8b9ecd2254e4ee1c96b4d589a2d98c020342594e96902747ed5a967ba85f760227e5caf1a1
SSDEEP 768:QAS/97pHC+pSwjWCLxc0pi5+/g3ytCqXIT+tlAoP:dSFlihZSe+nYgIgAQ
TLSH
T16CD24A6ABF4D6557C24345320A90C072D138DACB9F15A9CF2028226CCE57F6B9B51BDF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-tag-api-v1-1.3.0+238242b777-440d05a2cf60c21c.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-tag-api-v1-1.3.0+238242b777-440d05a2cf60c21c.jar
Size 24KB
SHA256 16beb98dab7c5bd6d207dd9f736eb2ac329c51bc6dfb9bd154123ac072175281
MD5 6415764ea8b54a35eca8364d09495e86
SHA1 e20dae95fc788b4f768151dce12af96058cb9c51
SHA512 01823f8574c094b02a0f7e3d8f993dc5b37f21fe57d5fda9a3625a7835fc4e5d2c15614632180dd2ce5484d741699168a9ae3723303e429d793da77b452558e8
SSDEEP 384:fL1uhRjfUrcCffepR/PGtLXxmb3b+QpJ8J6VIYNBukgwLDOoqo:T1uhdfLC+pRXeLXxmb1RvNBXHnqo
TLSH
T179B26B553F4C695AC08B85320AA0D1B3E029A9DF5F42DDDF2058215C9E96D2FE303BEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-transitive-access-widener+1802ada577-3e2ae96e91b53f0c.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\processedMods\fabric-transitive-access-widener+1802ada577-3e2ae96e91b53f0c.jar
Size 11KB
SHA256 f9641cd9ea3c73404c809d6b3e6726fb88e473a69fc3b3c471fc97dd6c884846
MD5 d4e6a673a263656a8606441c695f76a6
SHA1 e7e36d897e980d36a4b562cf9300096988c04892
SHA512 8bb1209bacace6f635b2400888fd7e90ec034873e07d6a96bfa1ab44b14c136caf47051fc2e00c950e1da8bf8fa0d1507c3d39b17f3e85d1427bb18c7619fc43
SSDEEP 192:ImizPL25nyHM9PcoXr2NA4C8o23fS7NxdRcNl8iIQaO77ewjJD6dC/PNs7ESgAKq:gzPL2lyWc6rcCffepX+wjcdQFsASD
TLSH
T1FC32AE617B84850CD08BA6300991E117E129E7CC9B15CB9F039A30241E9AF6EBF07DED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

client-intermediary.jar.tmp

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\remappedJars\minecraft-1.20.1-0.19.3\client-intermediary.jar.tmp
Size 22B
SHA256 8739c76e681f900923b900c9df0ef75cf421d39cabb54650c4b9ad19b6a76d85
MD5 76cdb2bad9582d23c1f6f4d868218d6c
SHA1 b04f3ee8f5e43fa3b162981b50bb72fe1acabb33
SHA512 5e2f959f36b66df0580a94f384c5fc1ceeec4b2a3925f062d7b68f21758b86581ac2adcfdde73a171a28496e758ef1b23ca4951c05455cdae9357cc3b5a5825f
MD5 SHA1 SHA512

Submit Download

client-intermediary.jar.tmp

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\remappedJars\minecraft-1.20.1-0.19.3\client-intermediary.jar.tmp
Size 23.6MB
SHA256 484e1dd2672df784faeb7c3a6f779b2a901e802bf3ab2e04bcb7ef5382183a92
MD5 f9ef4111f0cd06d6e9f137b9ddbab6a2
SHA1 f0513aa026b06681bdedf77ca1add8f6bc66cbb9
SHA512 3380be9ed99cdf0c7e0958ffbb6f4e0f2bb3028a0e2acac9ff4a990230044964fe91e19b8c6b125cce458d18b931702b044b60e684739b0fc49a7b4ca8f5526a
SSDEEP 393216:wxGE3fqtnpuOcgEgiFO4OfcU1IgIF1xyr0//b0NQPgzy03XKXpeD+E:PIyn0cDr4Ofc6qxh/uZaXpe5
TLSH
T17F47AE68BFAB9B54E04F963D44AD4202FC34CABD9824F2EF617850073DD48D45A53FAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

config.toml

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\config\crash_assistant\config.toml
Size 22KB
SHA256 5a12e59b11d201759cb39483465b1a83c38456096a3aee673e4e2ec0c17d4936
MD5 4f9fc794f3fc27dd9750926b76b1cff6
SHA1 fb0bf227c4f26febd27873d6a5f54405aef12388
SHA512 ab69c59389de7b1ec31b4cbf5c2ed859f42263a680c809f4010b26c587b8601823ce1b3588c1d5ffca8bcdea52b23a776dfae921abcaa11bad636c51804c2761
SSDEEP 384:W4WBlBlIqWQt+ZQ604D/zNuNHSdh0y5jXhos3G7oRQtZpL59E:W4glBlxWQt+Zp/zNjhvZXhoGG7oRQtZK
TLSH
T108A2F959EE6D733A4E92D002AB7EC191F33500A91777B72E749A81BC3380C5646BFDA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5949b1.msi

Path C:\Windows\Installer\e5949b1.msi
Size 7.0MB
SHA256 2e0fd7ff399228525e2441ea451ecda7ba371c39eecf22a62868df6be9abd5aa
MD5 5af938b1b960db3ef39c4e99de13b4dd
SHA1 62f566c367361f9129d907ed15b14580e2170f64
SHA512 1f3d7a8be0bc43295f6348df825531e08b5d87b1134f036eb31d07ce1f84f1a8f6caa527fe85a0829a248b2e47917b9ef37fed5756357401caecddf78487f129
SSDEEP 196608:g0DH4jiqzsiMb2PU8HQ0uGMWLVA0YERdFksuO:ghi4sidHGGMkADetb
TLSH
T15976334AF6C84372D84B64341A52DBB56B71EC748FB19B4713B83B641EB0BD0C63A653
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata-2

Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
Size 24.0MB
SHA256 618664d1668f44073eaab2046ebf7ea7f786533ef42f3d87815bfe95161fe99e
MD5 3bbe53373c5fcdc9dfa27903ddd7c69e
SHA1 8de13c72a4b004087c5ec34133392f2e6979e189
SHA512 93d6a884f49a33b719c555988d7507bc1628b16e903abcb20b803a48b54694e6d938580a3baa11a83a4d0277d43ff26217616e8c726a85ae8f9fdbf28244563b
SSDEEP 24576:2Epmg3MidoO/vvTLDe8+GZWykMbhh0DaAM4tajQO8Z6jQ2icop/GJAhHTV:z4
TLSH
T1A447F62436F92210F7F39E3DACF06A2349397D579C16DE8D45421B4E0922B71E872F6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{ecbcc11c-66ff-43a1-848a-55c5bba5371c}_OnDiskSnapshotProp

Path \??\Volume{e33a91d8-0000-0000-0000-d08302000000}\System Volume Information\SPP\OnlineMetadataCache\{ecbcc11c-66ff-43a1-848a-55c5bba5371c}_OnDiskSnapshotProp
Size 6KB
SHA256 85daaadcb5d38d9c829915720bdd5ec7a3a1b1a105a6c1fb2a570a385b453395
MD5 90db70b073fc57bd3dd2c58eb8781db7
SHA1 79c2d4ea51ff4e3dccf8687707aeed47b911f27d
SHA512 726ea51b832e08dce092d2097e9ff1980b3748d5ec784bd5a09a897609e3ff73e187500d0677214acc6fcf33088343ad9af224cc7657a8749c3b6137d6fcd171
SSDEEP 96:F+mB2Pvc8DD84LTHzbOHXOHBlBRQ88Sc9XE56tOSVQpu:Ydb++ZVm
TLSH
T1C7D19C085AF54311E2B3AB3229F14557A477B811EF33CB8E0194238E6671910F875F6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1300-8762-0x000001D82CB00000-0x000001D82CB01000-memory.dmp

Download

memory/1300-8756-0x000001D82CB00000-0x000001D82CB01000-memory.dmp

Download

memory/1300-8760-0x000001D82CB00000-0x000001D82CB01000-memory.dmp

Download

memory/1300-8754-0x000001D82CB00000-0x000001D82CB01000-memory.dmp

Download

memory/1300-8761-0x000001D82CB00000-0x000001D82CB01000-memory.dmp

Download

memory/1300-8755-0x000001D82CB00000-0x000001D82CB01000-memory.dmp

Download

memory/1300-8764-0x000001D82CB00000-0x000001D82CB01000-memory.dmp

Download

memory/1300-8765-0x000001D82CB00000-0x000001D82CB01000-memory.dmp

Download

memory/1300-8766-0x000001D82CB00000-0x000001D82CB01000-memory.dmp

Download

memory/1300-8763-0x000001D82CB00000-0x000001D82CB01000-memory.dmp

Download

memory/1500-73-0x00007FF93C440000-0x00007FF93C441000-memory.dmp

Download

memory/1500-277-0x0000025F82B40000-0x0000025F82BF0000-memory.dmp

Download

memory/1500-11649-0x0000025F82B40000-0x0000025F82BF0000-memory.dmp

Download

memory/3984-79-0x00007FF93BA00000-0x00007FF93BA01000-memory.dmp

Download

memory/3984-80-0x00007FF93AE70000-0x00007FF93AE71000-memory.dmp

Download

memory/4668-101-0x00007FF93C440000-0x00007FF93C441000-memory.dmp

Download

memory/4668-279-0x000002102C610000-0x000002102C6C0000-memory.dmp

Download