2e0fd7ff399228525e2441ea451ecda7ba371c39eecf22a62868df6be9abd5aa

Analysis

user interaction
yes
max time kernel
334s
max time network
339s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 17:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Ogulniega.Minecraft_0.0.9_x64_en-US.msi
Size 7.0MB
Sample260809-vy135asfke
SHA256 2e0fd7ff399228525e2441ea451ecda7ba371c39eecf22a62868df6be9abd5aa
MD5 5af938b1b960db3ef39c4e99de13b4dd
SHA1 62f566c367361f9129d907ed15b14580e2170f64
SHA512 1f3d7a8be0bc43295f6348df825531e08b5d87b1134f036eb31d07ce1f84f1a8f6caa527fe85a0829a248b2e47917b9ef37fed5756357401caecddf78487f129
SSDEEP 196608:g0DH4jiqzsiMb2PU8HQ0uGMWLVA0YERdFksuO:ghi4sidHGGMkADetb
TLSH
T15976334AF6C84372D84B64341A52DBB56B71EC748FB19B4713B83B641EB0BD0C63A653
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery persistence privilege_escalation ransomware spyware trojan

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
2104	Ogulniega Minecraft.exe
2648	javaw.exe

Loads dropped DLL 13 IoCs

pid	Process
4344	MsiExec.exe
2648	javaw.exe
2648	javaw.exe
2648	javaw.exe
2648	javaw.exe
2648	javaw.exe
2648	javaw.exe
2648	javaw.exe
2648	javaw.exe
2648	javaw.exe
2648	javaw.exe
2648	javaw.exe
2648	javaw.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Ogulniega Minecraft.exe

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\D:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\D:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Program Files directory 2 IoCs

description	ioc	Process
File created	C:\Program Files\Ogulniega Minecraft\Ogulniega Minecraft.exe	msiexec.exe
File created	C:\Program Files\Ogulniega Minecraft\Uninstall Ogulniega Minecraft.lnk	msiexec.exe

Drops file in Windows directory 41 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Installer\e5944ef.msi	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1722053052\Part-RU	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_2036544590\protocols.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\~DF6CBD2397EA6C14C8.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI49FF.tmp	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1722053052\Part-FR	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1722053052\Part-IT	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_33779013\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_33779013\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1142172183\manifest.json	msedgewebview2.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\Installer\SourceHash{7D97F083-887F-444A-B58F-14F87375D25B}	msiexec.exe
File opened for modification	C:\Windows\Installer\{7D97F083-887F-444A-B58F-14F87375D25B}\ProductIcon	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1722053052\LICENSE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1722053052\Part-ZH	msedgewebview2.exe
File created	C:\Windows\SystemTemp\~DF9D199E08245BEFE2.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1722053052\Part-DE	msedgewebview2.exe
File created	C:\Windows\Installer\{7D97F083-887F-444A-B58F-14F87375D25B}\ProductIcon	msiexec.exe
File opened for modification	C:\Windows\Installer\{7D97F083-887F-444A-B58F-14F87375D25B}\ProductIcon	taskmgr.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1722053052\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1722053052\Part-NL	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_2036544590\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_2036544590\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_33779013\metadata.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_33779013\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1722053052\adblock_snippet.js	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1722053052\Filtering Rules-CA	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1722053052\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1142172183\LICENSE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1142172183\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\~DF147E5D0806E08A2F.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\~DFE923E33E3A2885E1.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1722053052\Filtering Rules-AA	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1722053052\Part-ES	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1142172183\keys.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1142172183\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\Installer\e5944ef.msi	msiexec.exe
File created	C:\Windows\Installer\e5944f1.msi	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3680_1722053052\Filtering Rules	msedgewebview2.exe

Event Triggered Execution: Installer Packages 2 TTPs 1 IoCs

persistence privilege_escalation

Installer Packages

T1546.016

Msiexec

T1218.007

pid	Process
1340	msiexec.exe

Modifies trusted root certificate store through registry 1 TTPs 2 IoCs

A root certificate was added, modified, or removed in the trusted certificate store registry paths.

defense_evasion

Install Root Certificate

T1553.004

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	Ogulniega Minecraft.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	Ogulniega Minecraft.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe

Checks SCSI registry key(s) 3 TTPs 8 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 0000000004000000cb7618cb91d4c6300000000000000000000000000000000000000000000000000000000000000000000000000000000000001071020000000000c0120000000000000000000000002701010000883801cb7618cb0000000000001071020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0830200000000006025c501000000000000000000000700010000e84101cb7618cb000000000000d08302000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030a9c701000000000000050000000000000000000000070001000098d4e3cb7618cb00000000000030a9c7010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030a9cc0100000000000005000000000000000000000007000100009854e6cb7618cb00000000000030a9cc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	taskmgr.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	javaw.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	javaw.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	taskmgr.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe

Modifies registry class 26 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\1EE3A6EAA1F1CFD50857396B4ACB2C7F	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\380F79D7F788A4445BF8418F37572DB5\ShortcutsFeature = "MainProgram"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\ProductIcon = "C:\\Windows\\Installer\\{7D97F083-887F-444A-B58F-14F87375D25B}\\ProductIcon"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\DeploymentFlags = "3"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\InstanceType = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\380F79D7F788A4445BF8418F37572DB5	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\380F79D7F788A4445BF8418F37572DB5\Environment = "MainProgram"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\ProductName = "Ogulniega Minecraft"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\PackageCode = "5F5EFE0DABB8848419FED8F366884AF9"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\Language = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList\PackageName = "Ogulniega.Minecraft_0.0.9_x64_en-US.msi"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList\Net\1 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\AuthorizedLUAApp = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\1EE3A6EAA1F1CFD50857396B4ACB2C7F\380F79D7F788A4445BF8418F37572DB5	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList\Net	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList\Media	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList\Media\1 = ";"	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\Clients = 3a0000000000	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Local\\Temp\\"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\Assignment = "1"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\AdvertiseFlags = "388"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\380F79D7F788A4445BF8418F37572DB5\MainProgram	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\380F79D7F788A4445BF8418F37572DB5\External	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\380F79D7F788A4445BF8418F37572DB5\Version = "9"	msiexec.exe

Modifies system certificate store 2 TTPs 6 IoCs

defense_evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 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	Ogulniega Minecraft.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0	Ogulniega Minecraft.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 0f00000001000000300000000b043572c899dec43efd590cfce610cf443a6315925ebfe589f7506907e44824608489581c7ca0e041458514cf157614090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b0601050507030853000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c06200000001000000200000004ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a0b00000001000000180000005300650063007400690067006f00200045004300430000001400000001000000140000003ae10986d4cf19c29676744976dce035c663639a1d0000000100000010000000280cf6042c30a2646644ba7286a3aa97030000000100000014000000d1cbca5db2d52a7f693b674de5f05a1d0c957df02000000001000000930200003082028f30820215a00302010202105c8b99c55a94c5d27156decd8980cc26300a06082a8648ce3d040303308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374204543432043657274696669636174696f6e20417574686f72697479301e170d3130303230313030303030305a170d3338303131383233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374204543432043657274696669636174696f6e20417574686f726974793076301006072a8648ce3d020106052b81040022036200041aac545aa9f96823e77ad5246f53c65ad84babc6d5b6d1e67371aedd9cd60c61fddba08903b80514ec57ceee5d3fe221b3cef7d48a79e0a3837e2d97d061c4f199dc259163ab7f30a3b470e2c7a1339cf3bf2e5c53b15fb37d327f8a34e37979a3423040301d0603551d0e041604143ae10986d4cf19c29676744976dce035c663639a300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff300a06082a8648ce3d040303036800306502303667a11608dce49700411d4ebee16301cf3baa421164a09d94390211795c7b1dfa64b9ee1642b3bf8ac209c4ece4b14d023100e92a61478c524a4b4e1870f6d644d66ef583ba6d58bd24d95648eaefc4a24681886a3a46d1a99b4dc961dad15d576a18	Ogulniega Minecraft.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8	Ogulniega Minecraft.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 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	Ogulniega Minecraft.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 6b00000001000000200000004ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a0f00000001000000300000000b043572c899dec43efd590cfce610cf443a6315925ebfe589f7506907e44824608489581c7ca0e041458514cf157614090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b0601050507030853000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c06200000001000000200000004ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a0b00000001000000180000005300650063007400690067006f00200045004300430000001400000001000000140000003ae10986d4cf19c29676744976dce035c663639a1d0000000100000010000000280cf6042c30a2646644ba7286a3aa97030000000100000014000000d1cbca5db2d52a7f693b674de5f05a1d0c957df019000000010000001000000076935b5c5a037216daaf8aac76df42c12000000001000000930200003082028f30820215a00302010202105c8b99c55a94c5d27156decd8980cc26300a06082a8648ce3d040303308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374204543432043657274696669636174696f6e20417574686f72697479301e170d3130303230313030303030305a170d3338303131383233353935395a308188310b3009060355040613025553311330110603550408130a4e6577204a6572736579311430120603550407130b4a65727365792043697479311e301c060355040a131554686520555345525452555354204e6574776f726b312e302c06035504031325555345525472757374204543432043657274696669636174696f6e20417574686f726974793076301006072a8648ce3d020106052b81040022036200041aac545aa9f96823e77ad5246f53c65ad84babc6d5b6d1e67371aedd9cd60c61fddba08903b80514ec57ceee5d3fe221b3cef7d48a79e0a3837e2d97d061c4f199dc259163ab7f30a3b470e2c7a1339cf3bf2e5c53b15fb37d327f8a34e37979a3423040301d0603551d0e041604143ae10986d4cf19c29676744976dce035c663639a300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff300a06082a8648ce3d040303036800306502303667a11608dce49700411d4ebee16301cf3baa421164a09d94390211795c7b1dfa64b9ee1642b3bf8ac209c4ece4b14d023100e92a61478c524a4b4e1870f6d644d66ef583ba6d58bd24d95648eaefc4a24681886a3a46d1a99b4dc961dad15d576a18	Ogulniega Minecraft.exe

Suspicious behavior: EnumeratesProcesses 59 IoCs

pid	Process
4592	msiexec.exe
4592	msiexec.exe
2104	Ogulniega Minecraft.exe
2104	Ogulniega Minecraft.exe
2104	Ogulniega Minecraft.exe
2104	Ogulniega Minecraft.exe
2104	Ogulniega Minecraft.exe
2104	Ogulniega Minecraft.exe
2104	Ogulniega Minecraft.exe
2104	Ogulniega Minecraft.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
2408	msedgewebview2.exe
2408	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
3680	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1340	msiexec.exe
Token: SeIncreaseQuotaPrivilege	1340	msiexec.exe
Token: SeSecurityPrivilege	4592	msiexec.exe
Token: SeCreateTokenPrivilege	1340	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	1340	msiexec.exe
Token: SeLockMemoryPrivilege	1340	msiexec.exe
Token: SeIncreaseQuotaPrivilege	1340	msiexec.exe
Token: SeMachineAccountPrivilege	1340	msiexec.exe
Token: SeTcbPrivilege	1340	msiexec.exe
Token: SeSecurityPrivilege	1340	msiexec.exe
Token: SeTakeOwnershipPrivilege	1340	msiexec.exe
Token: SeLoadDriverPrivilege	1340	msiexec.exe
Token: SeSystemProfilePrivilege	1340	msiexec.exe
Token: SeSystemtimePrivilege	1340	msiexec.exe
Token: SeProfSingleProcessPrivilege	1340	msiexec.exe
Token: SeIncBasePriorityPrivilege	1340	msiexec.exe
Token: SeCreatePagefilePrivilege	1340	msiexec.exe
Token: SeCreatePermanentPrivilege	1340	msiexec.exe
Token: SeBackupPrivilege	1340	msiexec.exe
Token: SeRestorePrivilege	1340	msiexec.exe
Token: SeShutdownPrivilege	1340	msiexec.exe
Token: SeDebugPrivilege	1340	msiexec.exe
Token: SeAuditPrivilege	1340	msiexec.exe
Token: SeSystemEnvironmentPrivilege	1340	msiexec.exe
Token: SeChangeNotifyPrivilege	1340	msiexec.exe
Token: SeRemoteShutdownPrivilege	1340	msiexec.exe
Token: SeUndockPrivilege	1340	msiexec.exe
Token: SeSyncAgentPrivilege	1340	msiexec.exe
Token: SeEnableDelegationPrivilege	1340	msiexec.exe
Token: SeManageVolumePrivilege	1340	msiexec.exe
Token: SeImpersonatePrivilege	1340	msiexec.exe
Token: SeCreateGlobalPrivilege	1340	msiexec.exe
Token: SeCreateTokenPrivilege	1340	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	1340	msiexec.exe
Token: SeLockMemoryPrivilege	1340	msiexec.exe
Token: SeIncreaseQuotaPrivilege	1340	msiexec.exe
Token: SeMachineAccountPrivilege	1340	msiexec.exe
Token: SeTcbPrivilege	1340	msiexec.exe
Token: SeSecurityPrivilege	1340	msiexec.exe
Token: SeTakeOwnershipPrivilege	1340	msiexec.exe
Token: SeLoadDriverPrivilege	1340	msiexec.exe
Token: SeSystemProfilePrivilege	1340	msiexec.exe
Token: SeSystemtimePrivilege	1340	msiexec.exe
Token: SeProfSingleProcessPrivilege	1340	msiexec.exe
Token: SeIncBasePriorityPrivilege	1340	msiexec.exe
Token: SeCreatePagefilePrivilege	1340	msiexec.exe
Token: SeCreatePermanentPrivilege	1340	msiexec.exe
Token: SeBackupPrivilege	1340	msiexec.exe
Token: SeRestorePrivilege	1340	msiexec.exe
Token: SeShutdownPrivilege	1340	msiexec.exe
Token: SeDebugPrivilege	1340	msiexec.exe
Token: SeAuditPrivilege	1340	msiexec.exe
Token: SeSystemEnvironmentPrivilege	1340	msiexec.exe
Token: SeChangeNotifyPrivilege	1340	msiexec.exe
Token: SeRemoteShutdownPrivilege	1340	msiexec.exe
Token: SeUndockPrivilege	1340	msiexec.exe
Token: SeSyncAgentPrivilege	1340	msiexec.exe
Token: SeEnableDelegationPrivilege	1340	msiexec.exe
Token: SeManageVolumePrivilege	1340	msiexec.exe
Token: SeImpersonatePrivilege	1340	msiexec.exe
Token: SeCreateGlobalPrivilege	1340	msiexec.exe
Token: SeCreateTokenPrivilege	1340	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	1340	msiexec.exe
Token: SeLockMemoryPrivilege	1340	msiexec.exe

Suspicious use of FindShellTrayWindow 54 IoCs

pid	Process
1340	msiexec.exe
1340	msiexec.exe
2104	Ogulniega Minecraft.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
2104	Ogulniega Minecraft.exe
2104	Ogulniega Minecraft.exe
2104	Ogulniega Minecraft.exe
2104	Ogulniega Minecraft.exe
2104	Ogulniega Minecraft.exe
2104	Ogulniega Minecraft.exe
2104	Ogulniega Minecraft.exe
2104	Ogulniega Minecraft.exe

Suspicious use of SendNotifyMessage 43 IoCs

pid	Process
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe
4556	taskmgr.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1340	msiexec.exe
4592	msiexec.exe
4344	MsiExec.exe
4556	taskmgr.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4592 wrote to memory of 4344	4592	msiexec.exe	90
PID 4592 wrote to memory of 5416	4592	msiexec.exe	96
PID 1340 wrote to memory of 2104	1340	msiexec.exe	99
PID 2104 wrote to memory of 3680	2104	Ogulniega Minecraft.exe	100
PID 3680 wrote to memory of 5124	3680	msedgewebview2.exe	101
PID 3680 wrote to memory of 1756	3680	msedgewebview2.exe	102
PID 3680 wrote to memory of 1756	3680	msedgewebview2.exe	102
PID 3680 wrote to memory of 1756	3680	msedgewebview2.exe	102
PID 3680 wrote to memory of 1756	3680	msedgewebview2.exe	102
PID 3680 wrote to memory of 1320	3680	msedgewebview2.exe	103
PID 3680 wrote to memory of 4496	3680	msedgewebview2.exe	104
PID 3680 wrote to memory of 4496	3680	msedgewebview2.exe	104
PID 3680 wrote to memory of 4496	3680	msedgewebview2.exe	104
PID 3680 wrote to memory of 4872	3680	msedgewebview2.exe	105
PID 3680 wrote to memory of 4872	3680	msedgewebview2.exe	105
PID 3680 wrote to memory of 4872	3680	msedgewebview2.exe	105
PID 3680 wrote to memory of 4872	3680	msedgewebview2.exe	105
PID 3680 wrote to memory of 4872	3680	msedgewebview2.exe	105
PID 3680 wrote to memory of 5416	3680	msedgewebview2.exe	110
PID 3680 wrote to memory of 5416	3680	msedgewebview2.exe	110
PID 3680 wrote to memory of 5416	3680	msedgewebview2.exe	110
PID 3680 wrote to memory of 2408	3680	msedgewebview2.exe	111
PID 3680 wrote to memory of 4928	3680	msedgewebview2.exe	112
PID 3680 wrote to memory of 4928	3680	msedgewebview2.exe	112
PID 3680 wrote to memory of 4928	3680	msedgewebview2.exe	112
PID 3680 wrote to memory of 3492	3680	msedgewebview2.exe	113
PID 3680 wrote to memory of 3492	3680	msedgewebview2.exe	113
PID 3680 wrote to memory of 3492	3680	msedgewebview2.exe	113
PID 3680 wrote to memory of 2016	3680	msedgewebview2.exe	114
PID 3680 wrote to memory of 2016	3680	msedgewebview2.exe	114
PID 3680 wrote to memory of 2016	3680	msedgewebview2.exe	114
PID 2104 wrote to memory of 2648	2104	Ogulniega Minecraft.exe	115

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Windows\system32\msiexec.exe
msiexec.exe /I C:\Users\Admin\AppData\Local\Temp\Ogulniega.Minecraft_0.0.9_x64_en-US.msi
1⤵
- Enumerates connected drives
- Event Triggered Execution: Installer Packages
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1340
- C:\Program Files\Ogulniega Minecraft\Ogulniega Minecraft.exe
  "C:\Program Files\Ogulniega Minecraft\Ogulniega Minecraft.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Modifies trusted root certificate store through registry
  - Modifies system certificate store
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2104
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=2104.4600.17475133368269516743 /pfhostedapp:606e0854d16556e2f66a0fb7865ced1f5d313a4a
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:3680
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView /prefetch:4 /pfhostedapp:606e0854d16556e2f66a0fb7865ced1f5d313a4a --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ff960885fd8,0x7ff960885fe4,0x7ff960885ff0
      4⤵
      PID:5124
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1760 --field-trial-handle=1764,i,16814051478152199603,8359105737884269318,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:606e0854d16556e2f66a0fb7865ced1f5d313a4a
      4⤵
      PID:1756
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2080 --field-trial-handle=1764,i,16814051478152199603,8359105737884269318,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:606e0854d16556e2f66a0fb7865ced1f5d313a4a
      4⤵
      PID:1320
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2304 --field-trial-handle=1764,i,16814051478152199603,8359105737884269318,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:606e0854d16556e2f66a0fb7865ced1f5d313a4a
      4⤵
      PID:4496
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3432 --field-trial-handle=1764,i,16814051478152199603,8359105737884269318,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:606e0854d16556e2f66a0fb7865ced1f5d313a4a /prefetch:1
      4⤵
      PID:4872
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4476 --field-trial-handle=1764,i,16814051478152199603,8359105737884269318,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:606e0854d16556e2f66a0fb7865ced1f5d313a4a
      4⤵
      PID:5416
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4600 --field-trial-handle=1764,i,16814051478152199603,8359105737884269318,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:606e0854d16556e2f66a0fb7865ced1f5d313a4a
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:2408
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4608 --field-trial-handle=1764,i,16814051478152199603,8359105737884269318,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:606e0854d16556e2f66a0fb7865ced1f5d313a4a
      4⤵
      PID:4928
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4028 --field-trial-handle=1764,i,16814051478152199603,8359105737884269318,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:606e0854d16556e2f66a0fb7865ced1f5d313a4a
      4⤵
      PID:3492
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView" --webview-exe-name="Ogulniega Minecraft.exe" --webview-exe-version=0.0.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4012 --field-trial-handle=1764,i,16814051478152199603,8359105737884269318,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:606e0854d16556e2f66a0fb7865ced1f5d313a4a
      4⤵
      PID:2016
- - C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exe
    "C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exe" -Dfabric.addMods=mods\1.20.1-vulkan -Dorg.lwjgl.system.stackSize=256 -Djava.library.path=C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\fabric-1.20.1-0.19.3-natives -Djna.tmpdir=C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\fabric-1.20.1-0.19.3-natives -Dorg.lwjgl.system.SharedLibraryExtractPath=C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\fabric-1.20.1-0.19.3-natives -Dio.netty.native.workdir=C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\fabric-1.20.1-0.19.3-natives -cp C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport-native-unix-common\4.1.82.Final\netty-transport-native-unix-common-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\ow2\asm\asm\9.10.1\asm-9.10.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\commons-io\commons-io\2.11.0\commons-io-2.11.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\slf4j\slf4j-api\2.0.1\slf4j-api-2.0.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\text2speech\1.17.9\text2speech-1.17.9.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\guava\failureaccess\1.0.1\failureaccess-1.0.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\guava\guava\31.1-jre\guava-31.1-jre.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport\4.1.82.Final\netty-transport-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\commons\commons-lang3\3.12.0\commons-lang3-3.12.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\sf\jopt-simple\jopt-simple\5.0.4\jopt-simple-5.0.4.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\it\unimi\dsi\fastutil\8.5.9\fastutil-8.5.9.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\datafixerupper\6.0.8\datafixerupper-6.0.8.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\github\oshi\oshi-core\6.2.2\oshi-core-6.2.2.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\commons-logging\commons-logging\1.2\commons-logging-1.2.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\ow2\asm\asm-analysis\9.10.1\asm-analysis-9.10.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\commons-codec\commons-codec\1.15\commons-codec-1.15.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-core\2.19.0\log4j-core-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-codec\4.1.82.Final\netty-codec-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\httpcomponents\httpcore\4.4.15\httpcore-4.4.15.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-slf4j2-impl\2.19.0\log4j-slf4j2-impl-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\ow2\asm\asm-commons\9.10.1\asm-commons-9.10.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\fabricmc\intermediary\1.20.1\intermediary-1.20.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport-classes-epoll\4.1.82.Final\netty-transport-classes-epoll-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport-native-epoll\4.1.82.Final\netty-transport-native-epoll-4.1.82.Final-linux-x86_64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna\5.12.1\jna-5.12.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\fabricmc\fabric-loader\0.19.3\fabric-loader-0.19.3.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-resolver\4.1.82.Final\netty-resolver-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\httpcomponents\httpclient\4.5.13\httpclient-4.5.13.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\authlib\4.0.43\authlib-4.0.43.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\blocklist\1.0.10\blocklist-1.0.10.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-windows-x86.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\ca\weblite\java-objc-bridge\1.1\java-objc-bridge-1.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\brigadier\1.1.8\brigadier-1.1.8.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\java\dev\jna\jna-platform\5.12.1\jna-platform-5.12.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\ow2\asm\asm-util\9.10.1\asm-util-9.10.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\logging\1.1.1\logging-1.1.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\ow2\asm\asm-tree\9.10.1\asm-tree-9.10.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-windows.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-handler\4.1.82.Final\netty-handler-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-common\4.1.82.Final\netty-common-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\code\gson\gson\2.10\gson-2.10.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\net\fabricmc\sponge-mixin\0.17.3+mixin.0.8.7\sponge-mixin-0.17.3+mixin.0.8.7.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-windows-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-buffer\4.1.82.Final\netty-buffer-4.1.82.Final.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\ibm\icu\icu4j\71.1\icu4j-71.1.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport-native-epoll\4.1.82.Final\netty-transport-native-epoll-4.1.82.Final-linux-aarch_64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\commons\commons-compress\1.21\commons-compress-1.21.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\joml\joml\1.10.5\joml-1.10.5.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-macos.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\patchy\2.2.10\patchy-2.2.10.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\apache\logging\log4j\log4j-api\2.19.0\log4j-api-2.19.0.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-linux.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-macos-arm64.jar;C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\fabric-1.20.1-0.19.3.jar -Xmx6144M -XX:+UnlockExperimentalVMOptions -XX:+UseG1GC -XX:G1NewSizePercent=20 -XX:G1ReservePercent=20 -XX:MaxGCPauseMillis=50 -XX:G1HeapRegionSize=32M -Dlog4j.configurationFile=C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\log_configs\client-1.12.xml net.fabricmc.loader.impl.launch.knot.KnotClient --version fabric-loader-0.19.3-1.20.1 --gameDir C:\Users\Admin\AppData\Roaming\.ogulniega\profile --assetsDir C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets --assetIndex 5 --versionType release --width 1280 --height 720
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks processor information in registry
    PID:2648

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4592
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 9E4D9B50B5384991F73F5D3D04141E05 C
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:4344
- C:\Windows\system32\srtasks.exe
  C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
  2⤵
  PID:5416

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
PID:4652

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4556

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4256

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Installer Packages

T1546.016

Privilege Escalation

Event Triggered Execution

T1546

Installer Packages

T1546.016

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

System Binary Proxy Execution

T1218

Msiexec

T1218.007

Credential Access

Discovery

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e5944f0.rbs

Path C:\Config.Msi\e5944f0.rbs
Size 10KB
SHA256 c839bab3aaf5cd3eefbc6a8930b1762eaff3f4340631f8f7445e5b71678c85f0
MD5 2d9795d441cb6e44a214d7fbeee4476d
SHA1 b742b4516675700c8da13ca1e89e274c77999b15
SHA512 a3cc89d84ed037d79276cbbca3e66159589e05b65fa6c607df0d2a318043cf5563def6bea8f9e9f01f2ab26a8a9337093d9071770564f749b9cc3ca69318cb6b
SSDEEP 96:6mCP87mw5q849AUNCPnzRUDlgCOTlSUDlgCgj5+qxTlQN45bB155VQ+55QutW55t:bCJw5q849NCrKpHGjpHGpVPnW9i5Lptg
TLSH
T1D0222106BA20D1E3FDA75B38CB5317513F63D2EA8334538B05CD99605F963885FAA18B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ogulniega Minecraft.exe

Path C:\Program Files\Ogulniega Minecraft\Ogulniega Minecraft.exe
Size 19.0MB
SHA256 77a40b6eb759bac578bb1be29e380b5cd46543f2d5b5c56e2986e5d73f300239
MD5 cbba43f12e0f3fd68078e51aa0c7b7dc
SHA1 32946bb1c1123da97fe3311b09affa9a4c1e237d
SHA512 0769121a61dd06806149453f784323289d25c078d466d2639fcf1dd38f7f03f11fb212b3744ee8869583222dbb529f08f32ca0a081543b819c17bb8726f82fb2
SSDEEP 196608:Zqbp5AxAI0U44lH5rHSm/2rLVsmiQa/dyz5f:Ap5AxAI0U44lH9Sm/2rxVi5Ve
TLSH
T1441717217B5A99ACD09AC474834B8A724A7130DB0B35B9FF448496383F6DBF46F38359
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ogulniega Minecraft.lnk

Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ogulniega Minecraft\Ogulniega Minecraft.lnk
Size 2KB
SHA256 f04b15240f048df8c0d3e685cda175f7bb321fb51d4c0fa009af736d90f52de1
MD5 b1beb23519c2249e679a0afb90312e8d
SHA1 9af4ae69f5d554dc016d4fd86b0985daf244d74e
SHA512 0b38c6f716ef3e64422e987b7da0e1e84bc7a23d4e8aa04a62c4bb8d81f9e9b0b4af109a4f78b85d0aa04e5b6d8d07b4aa4f70688e3219bf2de7befdc8cfd557
TLSH
T1B041F12096F41799F377D33AAF714610AE73FC12D5358B5F015542C916724019979F3E
MD5 SHA1 SHA512 TLSH

Submit Download

Ogulniega Minecraft.lnk~RFe594e07.TMP

Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ogulniega Minecraft\Ogulniega Minecraft.lnk~RFe594e07.TMP
Size 2KB
SHA256 d2ed990e2c4c75ebcf784404ab6c67c05aa50464ddeb715879191291cebc60e4
MD5 3cf99c71a6939f48f54d088d5a6ddb96
SHA1 1a74841c33c9ee3c261143f398b0f248fd025888
SHA512 8a1f3c2a4838d04111889a3b89ee806dc5063ec5c9fac591564b6f40835dcb39fe8758e83d7e3583c2e2430503ecf79ba4fd2e6bb15e0a37f28c375285effdfa
TLSH
T14D41EE6097F41B9AF3B3D33AAE714610AE73FC1295359B5B019642CA0671401A9BAF3E
MD5 SHA1 SHA512 TLSH

Submit Download

MSIFBFF.tmp

Path C:\Users\Admin\AppData\Local\Temp\MSIFBFF.tmp
Size 132KB
SHA256 7f47d98ab25cfea9b3a2e898c3376cc9ba1cd893b4948b0c27caa530fd0e34cc
MD5 cfbb8568bd3711a97e6124c56fcfa8d9
SHA1 d7a098ae58bdd5e93a3c1b04b3d69a14234d5e57
SHA512 860cbf3286ac4915580cefaf56a9c3d48938eb08e3f31b7f024c4339c037d7c8bdf16e766d08106505ba535be4922a87dc46bd029aae99a64ea2fc02cf3aec04
SSDEEP 3072:Kx2YbpcgwmiTPJDnCO+DATkURBnrskNwPj2:XXgwmY1CPx2XG2
TLSH
T1DBD39D02B5D0C473D9BE09390870DB229F7EB930DF909EDB636856699E702C19E35A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 770c5f085a12b3baa3cde62f07c9ef5e10dc14a109184cb405af9a6cccef3dd4
MD5 ed5750749f64f1709f785a2119fa94f2
SHA1 526612679416703c1564495101be45ff592362f3
SHA512 54bd0a7df58d8136abdeb2ee99c359b2330b11f99552afc7010605970ef62708001f421772079cb7bd501855aff0b956e3e6ca946b2912feb311e465ccd3abef
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 e14496cfd7a9b5f3c4b3ab6c3b43c7888a0124fce8a8c2c8021f277ca8f07d39
MD5 da1fc904724dcc0d2394bfdf1c3e1b17
SHA1 79ae60da0281bf8ec0a408ff24ceaf6bcddbf2e8
SHA512 b7f80597eef9716f26ab4970fdb1f0c83a23909e443a194f4698da85a5a7cc34a644d6bbb4c1f44e03c922c429bdb94c2a2c2cb9543032a69aa1d97c1c3a6e93
TLSH
T13BD0121232118534C11134330012A6085400C20F50494041943DD66D1B080645E02441
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 432B
SHA256 c2c989400bf55ea5b9a216d7561ee2c3fd8f9e7046e6b79ab849dc352cb1df5f
MD5 7bba46dc073410301262d202a17a6c5c
SHA1 27af96ecf24a7754f8eac6ffa30ac5d24ff12685
SHA512 2c206b2f3e3734ee141a418f78075e324db78ed2ee262924df42d0647370f0944d2b077fded87023ad2eac9b27651b7ee16157b9856cd04be3d5e81b3fef9618
TLSH
T1CCE02B02445D9568E314CDF081CA05E2F1B0A9DC2C470C2403B01FBD24133369810720
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ac0ff.TMP

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5ac0ff.TMP
Size 48B
SHA256 7cac108b0b246b13669e1131e9a7164f7950470c7a63d7d5e21f0a2ecda0bf28
MD5 5ae04aaecc88a82684eabcf5c2f79d5c
SHA1 ccd8ac826a76aa339dbc038aa29c505d764d495e
SHA512 e809ad9bdcb4058ca698cfa071cf4ee45b0d5c391453d465c20990d20bf12d37a17a4485afa82efb64ef028478996504383308d1b66b4f09b0535c585546d624
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5b7740.TMP

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Network\Network Persistent State~RFe5b7740.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Preferences
Size 6KB
SHA256 70a376a575ce035faf001db10d4ad6195c27a697c90624566984d1a52eb66eaa
MD5 1e29e03b89b616d4c0ee51c625def228
SHA1 ac117c792c1b65bd847210f9d72fadb3e09f297b
SHA512 e1432f74feff2fa8227d2c37f921a81d4a0c85f9b7940b5743cc7da0483f6243a6c235386d77a0fa2b9082a031d30ae2147846a34694718b2da198c1eabc8880
SSDEEP 96:stJ/dM++IwGjb9Fk/o5h16Z0Hs7/x+6MhmuecJVxMHnjefK+g9hNT28XM1C7K:sttObOUonHsV+FdVxqjhb/G6K
TLSH
T1D4D1A4025A247C7B4CC6F609BA39BB17E2F9647261D11E58E7F8562C08DB6DD620390B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Sync Data\LevelDB\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c47c47a1-2b4b-4f60-9815-af52986b9a8d.tmp

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Default\c47c47a1-2b4b-4f60-9815-af52986b9a8d.tmp
Size 6KB
SHA256 4e56b5d38369fb8654b64d30a9c3f432b1f88ed7a68667ad5f64c724af87aea2
MD5 0566643aa70cee7b23e9e94145c82098
SHA1 effb3e96c51a9d6bb66f59bc24a2a6ac768fd7f9
SHA512 5754800676e3efd498cb976aca2ae3d237f107bac4d0e170106fdfcdf0f72cefb6be6bed2f109848a1221ca596e4a09b4d5289d6215fabc9362f5a1d63282436
SSDEEP 96:stJ/dM++IZjb9Fk/o5h16Z0Hs7/x+6MhmuecJT31ejefK+g9i8B28XM1C7K:sttObIUonHsV+FdT3QjhbHG6K
TLSH
T1D4D1B5025E24797B4CC6F609BA35BB17E2F9647271D41E58E7F8962C08DB6CD630780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State
Size 2KB
SHA256 2a78f952ac26570244e8e8cbc640b6bbe814e1fd35b616165a6c5b9b8dbd5894
MD5 5ab9a299deed2639e42fe308c57b972f
SHA1 c102a6430e2c5a09479573004939a333b61714b3
SHA512 d322ae1ee428367f732b55e27efd767f6e5bd0dd1ae31284b99666d7c01b9a3a078cd43c354494ae53554a97a8cadf02dd7b87d1467559b64c30b12dcec2fa25
TLSH
T17351B733B914AF37ADA6D64AB84E7F13CEF55066A6611F20EADC2B1801C715D5342C3B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State
Size 3KB
SHA256 ebf0ce799edce010824cc8509d3492e2c49d1e456d0f06e43a70da32a86cf3dc
MD5 710d9bb3e38ea5e809b66a5910b7196e
SHA1 0491059e03d61dd06c900740a8c0471aee074808
SHA512 3d6fa3ec72699a6324a4b089bdeb1d50586675575c59f27a3df329e57b07100192cfcb45f54230522934d4346a25631115e1b75af9f8e42c21211879ee69aa85
TLSH
T1AC619637A924EE3B5DE6DA06B88A3B07ABE55027E5917F65DAEC2F0C01D728C1341C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State
Size 15KB
SHA256 0720846e1ba44ad44a0ad047d22acf3d795377dd345120fd0b6a322ca99278e3
MD5 a0af9af5df29df1136309f44068283e9
SHA1 c31d02793b172f6cd06cd8dce1f00be91003e935
SHA512 fac64f2c082e7d46ac11e82f8f6536febca214559f92e10801bc6a1185151dbfbec013912bfce706f609aca71b132e0692af5c02d442ff010728b52666d025f9
SSDEEP 384:6+aQikB+z/xvxjg/qhEwNBSTmocpdAVdpUO9zz:F/UxvxjgC+rVYdUbFz
TLSH
T19172AE2794297E37A5F7FA05795D5B4BCFF898B290C16EB84AA96F0D02C72981302C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State
Size 15KB
SHA256 c1cc63625b85c6ee4fd690f7d2b901f60c690430aee9ce9c0ea3f1fdb5201dba
MD5 ff05c42b4dc2760a1b1de61bc32e1543
SHA1 b37635eeccbb3957c8d2089dc59f649ec1257aaa
SHA512 fe3bcb31f49eb8422013540be606adb52081ec153a92da9317dd57598927015288acaf9202870d6a9aea12504ab8f540e25bb71a988bec8feddcbb0be45e80df
SSDEEP 384:I+aQikB+z/xvxjg/qhEwNBSTmocpdAVdpUO9zz:H/UxvxjgC+rVYdUbFz
TLSH
T19272AE2794297E37A5F7FA05795D5B4BCFF898B290C16EB84AB96F0D02C73981302C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State
Size 15KB
SHA256 5b18f8c28451949f7179657b720020db1971445fbbf4d2a59f47faf62544df2e
MD5 1dd3e6db14a8ab0f00653eb45738599b
SHA1 eafb7e70059cd1e8f507e9b475bcf7450d90ddf0
SHA512 7cf4e4df4885e8fcfea362f2285e374ca4c8fa87d36ca1f2fd35cbd1754f45aa5c48d0421130b01064e902405e6ce83006ba9ffd1d8b9f997f52a4d5e6cbe63e
SSDEEP 384:++aQikB+z/xvxjg/qhE1NBST5ocpdAVdpUO9zz:J/UxvxjgC+4mYdUbFz
TLSH
T1B672AF2794297E37A5F7FA05795D5B4BCFF898B260C16E784AB96F0D02C73981302C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State
Size 15KB
SHA256 1ce2c00b4794b1fe77bcf114fe7a49dd07bd073342bb2dfd979a2d246424b9bb
MD5 05e29c47be9734c5c4932e5d8e0e13f5
SHA1 7b6d0666dececd57f84235805203b6131ccdf804
SHA512 29445756f4a7b4c565e8a4915bb2cab5198931bb9a2d25db99124de215170e4aedb64bde200054a2fa268b3a505d5babeed47ad635f3809e2d7e031f1c51e204
SSDEEP 384:X+aQikB+z/xvxjg/qhE5NBSTKocpdAVdpUO9zz:m/UxvxjgC+UxYdUbFz
TLSH
T1F472AF2794297E37A5F7FA05795D5B4BCFF898B290C16EB84AB96F0D02C73981302C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe5a4f69.TMP

Path C:\Users\Admin\AppData\Local\xMelonekMaX\EBWebView\Local State~RFe5a4f69.TMP
Size 1KB
SHA256 88b90e5ef8063fa90a3cd095408237885e91ece62af2777d0717d468c105b86b
MD5 d7b37e516fb8d9722893e6eea4c90340
SHA1 5362beb761fbeb41a4277970817c60d94a1799cd
SHA512 33f41e06b58161dc9b6bc7c47088940df24c942dad35b1ca9910e5f74a7b1208ff6327290c31fc65fbb67c60881d7af9987f5f0ed5eb26ffeaa98406c55912a3
TLSH
T128218773E5149F32BC85E29B601ABE1B5EF1106B52204F04A5DD6B9802D714DD516837
MD5 SHA1 SHA512 TLSH

Submit Download

java.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\java.dll
Size 144KB
SHA256 18b105254c16e1d83614ff4e32cd62ce402fbe6339bdd1b24ccc7d999fed7f5f
MD5 59c9bb7a3cb27b3a94b721283788fbf5
SHA1 8d97d4f0694e3b8851f92c2efb2f1538be9553f7
SHA512 12ecb29b55181b729cc24e2484d78857df68f80d3dbc89ceb75c13d0bffbfec6ea5ab8113b4c33f8e25296c97791ee311d886b8b9f9b6c653238a90a27d350e1
SSDEEP 3072:CYID3sxlejDPQL8HDIHsHtk1tI9SZLuV9c0FqL8LrbS/1qCn+vqX:CbDcjs+3I0LbLYFqX
TLSH
T1DBE33A0BB24240A2F85AB6BC701A910BD37A7461012CD3FA47E58A9F9F5F7313E97791
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javaw.exe

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\javaw.exe
Size 49KB
SHA256 767e6219738867eaa40cb6d80edb6f17090558b67ce101a00e27b99cdaac2277
MD5 37fad9adeb9799c904e763a6321c40dd
SHA1 1d5354b9d006545ef8bf3c9bdb92dddd9d8bcf69
SHA512 1b67c29e4f6f1ab81544f0eaa809a8487a8fb01f8200a6d81bb8ec26825507d459f2d8444faed75efd8fc6776023c36211b7124ff110e694b11df7af3616edde
SSDEEP 1536:EmBEBM5RdJ5R3sozkt5RA3EH5J7VIvPh:Hb7k/IEZJ+v
TLSH
T110337D57AA082C81F42FC4F198A7752645B4BD032FD1A3EB7DC6B21E0871391A9276DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jimage.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\jimage.dll
Size 33KB
SHA256 f01c057da0222bc70a7f904c3104dedfc6f268446ee797c6dd70f9651a52265f
MD5 d035982c15591784dce2ec90e5d6d34c
SHA1 959f8800aafeac4b08ad3a0f83565429e2a47269
SHA512 83735427b6a5c8e5337aae60820b54bc614d24403707f2172381511453e3012a7780aa7c605eb9bd3beb1b9653e780601a8cbd95869806e1405b075462958f05
SSDEEP 384:mXEYMr5gSz7lVypm4PcySd9a0oDGkyvRs1NyEIYi2mL4/y8RFvIIvZ2pPkkOC:m0bjypFG7a0oDGHvRsqYiDLk5kIvkPk
TLSH
T133F26D56EA445C59DD27E63CC4AA9A1FE6B2F8525F51C3CB1B20825F0F233803B6C7A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jli.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\jli.dll
Size 87KB
SHA256 5d6a3581649cf281a2a4db2aeff53ccb1134b45cb04fa282efa7eb9a58cf5b79
MD5 3c7cce26a5adff02441a5a3ce6a22bcb
SHA1 d19a1524e42740e77d63cca73d939f49087f8b02
SHA512 369696704ff4b3a729d4357d990d4c2dad2a2beae99b3b94e193a44e206321d387e2eb29affc0b1879164342dbf1422ce21bae84c991ef7a1d04d604a8c39d0e
SSDEEP 1536:FDwJp5pu6D8oAy3htz7KmkquoWT0fdxIO6RYXtGIfm7VIv4r9Q:FD6p5pr8oAyv/TuJT0lb6RYXgIfm+vCy
TLSH
T1A0938E9B53E021E0DEB785B8D9B05A0BD3F1F0562761838F136885AA0F637527E1CBD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jsvml.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\jsvml.dll
Size 849KB
SHA256 d0971a028ff3e94ec749e5ab62abfc4d883b1c85550521ac120b622982fb8114
MD5 8b7560d16ee886e9d5a0df632769a570
SHA1 850b2f271af7c8a62caa8980ede9de0411054868
SHA512 1d01f505673e341ff0154ddff0fd351b9f3a1a4988aff482a9fc75ccfe2556f7a76cbb73eb0a4931794886e43c867e3e97248126ba84ea789b13b28059ba4298
SSDEEP 12288:WRybOUKnvJNeCs5wHuRpj/V71AVNV+Ssc3:WobO7JN3qwHgpjN7wj+9O
TLSH
T19005AF82F81284CDC03534B024FFBD95A91A1CE941BC0EB32772AE9D2AFD7467957A74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\msvcp140.dll
Size 561KB
SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
MD5 72f3d84384e888bf0d38852eb863026b
SHA1 8e6a0257591eb913ae7d0e975c56306b3f680b3f
SHA512 6d53634bc51bd383358e0d55988d70aee6ed3897bc6ae5e0d2413bed27ecff4c8092020682cd089859023b02d9a1858ac42e64d59c38ba90fbaf89b656c539a6
SSDEEP 12288:rSTTigI46Bb3SUPvRgrKtzL4oaQEKZm+jWodEEVPLwtQB:rUStZaQEKZm+jWodEE9CQB
TLSH
T1B9C41A23B74905A0E195E3B8A1878316D7F1BC4A8312A3C792FBD66D2F673D1673B250
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

net.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\net.dll
Size 96KB
SHA256 aa178fbeb19980dfbb6827b3b2532cd110d585192041883032bf2dbb20e4785d
MD5 898fd821991d994b18a28e93a1156e06
SHA1 3824baa8c162c5f07abaeb32fb9531efe26f56a4
SHA512 fb80c5354cbf8dbe6c4edfc0a13a669ecfd36d4a57738c88ebfa530738950c5798579e60fdb6ae59b2e229a213eb704b2239cea95c082037e6f061b1bfb3e43e
SSDEEP 3072:gPSfwd6sn+hIcB/lRXsm+xd3MXf9EZC19AD+v1:g9dnni/lRXspJMv9T9z1
TLSH
T1C1A35B05635824D5FC77D2BC8696821BD7B3B0B02610839F13A6C66EAFEB7713E19781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nio.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\nio.dll
Size 78KB
SHA256 1d3f193e94d404a18caa24440e61af652ec705258f5fa5a3cb90bc790e9b98ba
MD5 15587b4f8fc7619f749bf9e8fb6909d2
SHA1 6eccfad899dd4c9352851a56e20980f708c86e0b
SHA512 ffdd9c02347d83e64cc3d5e04e9f2ee00aa72db880688d2675cae6c5bd218fdd480c9c762f298737df8a9499c561dc8b0426c9db651cf92648aa3de7552004a1
SSDEEP 1536:w0p78LdqTFVd44arFkE4WdZJI3L4W2supMTlYG7VIv8:w0pqIFz4rtDZK3L0pMT+G+v8
TLSH
T124733AA25364849BE82AB53C429A5747E333FC514510A35F5368CB659F2F2B33E3E782
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

classes.jsa

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\server\classes.jsa
Size 10.6MB
SHA256 8347a88483e44b9acd4ad1edf78d0b5519c999f15d5548add755b551d12ce2bc
MD5 812cbb9991bcaf72c90082bfcdc107ba
SHA1 ea3b67387fcbf55deb978ae455f394b5c846b6ba
SHA512 29b1cbb6738d5bd8e6753a5a0b9346b0fc777952559d865bdb0ccdc1a75f7d55f0588036c02e69180ffb7cebeaaac6238872cb340c148eb3f17987a1c9218ede
SSDEEP 49152:hh6zkayA+JlVh2fOSl0uc2l/lSRTH3Z8Dut7:hh6z5ih2fOSl0Al/WHI
TLSH
T1E7B6E45BF550B653D53887758AA783A0A334B862AB4387C73784E37E9DC32D44E42BD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jvm.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\server\jvm.dll
Size 12.1MB
SHA256 5539382b75556a9873fafa2d8b7d0b36b169ac436a3608467da4f74c2600cbce
MD5 edfea9605fcc209be410d46a7697f795
SHA1 7737eef09bf637d485838eecf9fc696b787120ee
SHA512 c6de3f9120f057b366e00937dbb346fdfec8922216826dd67f04e196e8b6e18d8aa63c959a7e0787d9052994c9567ce17d9866bcf30fae623f6e0cb88c329301
SSDEEP 393216:svBYrTJNjaUoY6kaNNyDAQdtzz9m8RQ/n2uecNvB8Mt4FDQnheN0HDYRnLapyxZi:gh4Vw
TLSH
T105D67C1BA27480D5C82BE178C62F5A0BD7F2B4644374DBDF11A8465D2F63BE59A3E320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\vcruntime140.dll
Size 117KB
SHA256 02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a
MD5 caf9edded91c1f6c0022b278c16679aa
SHA1 4812da5eb86a93fb0adc5bb60a4980ee8b0ad33a
SHA512 32ac84642a9656609c45a6b649b222829be572b5fdeb6d5d93acea203e02816cf6c06063334470e8106871bdc9f2f3c7f0d1d3e554da1832ba1490f644e18362
SSDEEP 1536:dI2v39UXigCBs29DdxfggO6vMMKZsY2ofRjoecbdhUwdJTzmZhTzC:diwskD8B6vMMEs5oGecbd2wHT0Te
TLSH
T1FBC38C4672A042FBD16AC274C1E35E17FB75B84487A0A7CF03A58A690F53BE09E3D385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\vcruntime140_1.dll
Size 48KB
SHA256 7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637
MD5 2bd576cbc5cb712935eb1b10e4d312f5
SHA1 dfa7a46012483837f47d8c870973a2dea786d9ff
SHA512 abbd3eb628d5b7809f49ae08e2436af3d1b69f8a38de71ede3d0cb6e771c7758e35986a0dc0743b763ad91fd8190084ee5a5fbe1ac6159eb03690ccc14c64542
SSDEEP 768:IzzO6ujT3MbR3vXCz6S5Mq83yJ9d3+DuO9zUgElq9z6m:Fq/XuA3o9dgzUZWz5
TLSH
T17C235C9457784086D59F95B0C1D6EE537E7CFA964B00928F0BA1E1882F637D0EB3D22B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zip.dll

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\bin\zip.dll
Size 87KB
SHA256 2cc26c530a65b8a839e40ce820565e531fefcc5a207822e09f7a073fb8676b70
MD5 9977d24ae02799a76ce20f94cceea1cb
SHA1 4c6de3098f832d2e143e0e2cc377616980fb8808
SHA512 7fc85260d07ea4246ff22aad1f22b16c8a76c963cbfbccc97ffe6ddfc8ba5eaea3ad8ce013928c690ba315e0c41fb2cbabedbd6190a6ee26428d12fb4069086e
SSDEEP 1536:ygM3+is9MZS35tDMqiCH353CUKfltXIOQIOhG6rFK7VIv:DM3+isaY3jMqirUeL5GhG6rFK+v
TLSH
T1CF939C5589A05295DABB85B0C9F20A3FD3BAB01117D0578BA35C879A2F533613F483FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ADDITIONAL_LICENSE_INFO

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\legal\java.logging\ADDITIONAL_LICENSE_INFO
Size 49B
SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
MD5 19c9d1d2aad61ce9cb8fb7f20ef1ca98
SHA1 2db86ab706d9b73feeb51a904be03b63bee92baf
SHA512 7ec63b59d8f87a42689f544c2e8e7700da5d8720b37b41216cbd1372c47b1bc3b892020f0dd3a44a05f2a7c07471ff484e4165427f1a9cad0d2393840cd94e5b
MD5 SHA1 SHA512

Submit Download

ASSEMBLY_EXCEPTION

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\legal\java.logging\ASSEMBLY_EXCEPTION
Size 44B
SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
MD5 7caf4cdbb99569deb047c20f1aad47c4
SHA1 24e7497426d27fe3c17774242883ccbed8f54b4d
SHA512 a1435e6f1e4e9285476a0e7bc3b4f645bbafb01b41798a2450390e16b18b242531f346373e01d568f6cc052932a3256e491a65e8b94b118069853f2b0c8cd619
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\legal\java.logging\LICENSE
Size 33B
SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
MD5 16989bab922811e28b64ac30449a5d05
SHA1 51ab20e8c19ee570bf6c496ec7346b7cf17bd04a
SHA512 86571f127a6755a7339a9ed06e458c8dc5898e528de89e369a13c183711831af0646474986bae6573bc5155058d5f38348d6bfdeb3fd9318e98e0bf7916e6608
MD5 SHA1 SHA512

Submit Download

jvm.cfg

Path C:\Users\Admin\AppData\Roaming\.ogulniega\java\jdk-17.0.17+10-jre\lib\jvm.cfg
Size 29B
SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
MD5 7ce21bdcfa333c231d74a77394206302
SHA1 c5a940d2dee8e7bfc01a87d585ddca420d37e226
SHA512 8b37a1a5600e0a4e5832021c4db50569e33f1ddc8ac4fc2f38d5439272b955b0e3028ea10dec0743b197aa0def32d9e185066d2bac451f81b99539d34006074b
MD5 SHA1 SHA512

Submit Download

0350aeae0132a9a0b08532250861fbe2208d9f78

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\03\0350aeae0132a9a0b08532250861fbe2208d9f78
Size 14KB
SHA256 1cc999aeaa9f92549332a50ca319c04eae9be57246f489a7fd107e6acb0ff921
MD5 29de7ae2d41c5046b361545d116d85ed
SHA1 0350aeae0132a9a0b08532250861fbe2208d9f78
SHA512 c18d89e1f77bb1050ab551c1ac37a62862a24747998f987e01c5aff51f09158150063a5233b23a98871ae2d5c1ff511c9de78e70dca40e093623c4b9c2768615
SSDEEP 384:StD7dm9TT6qgkbXDlkZAJln+OjxSJKQwOSXTCFdi:SaTWqgGBkmJlnXNPQwOgz
TLSH
T17962C066C5266006F036317BB87469314BD49E346FE0A9C71F3A24BF9A3B224769C4E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

14b3534e2622470a71dbe69474c15e6a233cc1c6

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\14\14b3534e2622470a71dbe69474c15e6a233cc1c6
Size 21KB
SHA256 73e971f5d04a9d412575178c0514cea591a2a78a9df0c72567ba297643c33e8f
MD5 a479c50c69cfcfe6c02346a4d3ee4bc7
SHA1 14b3534e2622470a71dbe69474c15e6a233cc1c6
SHA512 ac369fd5412026b623e1a99dc908944da38bde19caf3e4c6ca14cc966d718a4261124b648af7846b62fe9c4d7fa838dfd3dcd55f52659ee3f71dec991f50a5c8
SSDEEP 384:2ktDwaHsNaeaQaqdzb8QvaxEFQpUnOxwA1mlRDKQJ0ZQ2yheO+2mVg7vsmBDQkA1:2kVsFavS8kah+n0wA1mnDQ/vCbl5A1
TLSH
T179A2C0E9DA788981FE133739B03117F77E81398096D411DEF7E9B1E91A29D21A440E8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1b5871a3af4dc425f20f9c1e06297f5fff2f3545

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\1b\1b5871a3af4dc425f20f9c1e06297f5fff2f3545
Size 11KB
SHA256 0cf5bf9d988f2a675554c0976b1672024ccc38620a07154682b6183b374df0f1
MD5 c64eb35403e015079de6b09c9d62e3de
SHA1 1b5871a3af4dc425f20f9c1e06297f5fff2f3545
SHA512 8d85963e0a439d5571a6f272dd186496da666d9649496a3a9ca07d6e8db8ea6045c7663cf249971008bb452edef5e9118722968448a2b24621ccc76eb43553c4
SSDEEP 192:EMttxOqdm9TTYlqg12M3FCu13v0Pdk2CGtvw7yn3LAUk5S2tQw8Pxb:rtD7dm9TT6qg12M3Frpv2utGN3LAUk5E
TLSH
T1B442BFD76C39B86FD22360B63AB891010FF0F974339005DBE27597B68BF2B817255689
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

55da1856e77cfd31a7e8c3d358e1f856c5583198

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\55\55da1856e77cfd31a7e8c3d358e1f856c5583198
Size 4KB
SHA256 09d5879722c54c86d39d83df919f7f712ed92044ffb5b0a6757b9fc2e02281a3
MD5 db6deee4c221859885a69a10fb062467
SHA1 55da1856e77cfd31a7e8c3d358e1f856c5583198
SHA512 146a3189403c9437b6e74ed754ddd8d6694f6cd375c7c687ba77f0a97e7037df31df7c5123eeda260e3bdc163e637bcdff418e6a468a43188c9a72736b552fd2
SSDEEP 96:gaBVAfY5gK6f9bJdnieRgdaUjuweDbAPPPPPtPPPPPPPwPPPPPPPPPPPPPPPPPP8:gajAg5oV9dnrgXjuvAqFikDtAae1ag
TLSH
T178A129E5DCB0B1C7FC4B307B725803E82AA33E84A56ED6D6BB1409851DBBDE106B4589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

56c1d0ac0de2265018b2c41cb571cc6631101484

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\56\56c1d0ac0de2265018b2c41cb571cc6631101484
Size 4KB
SHA256 139fc234e51f7825fcdedf10c93d8d60c59df9b4955334f409a624e4b3e6bfbb
MD5 04136fa704ddf7b6a0d5101adb0de640
SHA1 56c1d0ac0de2265018b2c41cb571cc6631101484
SHA512 d0acce8422bee523dac86ca130bfab55e2e0e50906b47ae599d4f5ec0d0627e5c4ef263c77c708586ab4b32786f8aca72f3d39c49926a09a2d5277e7652e4373
SSDEEP 96:SVAfY5gK6f9bJdnieRgdaUjuweDbAPPPPPtPPPPPPPwPPPPPPPPPPPPPPPPPPPPs:cAg5oV9dnrgXjuvAqFiwotx5RGW83s
TLSH
T123A15CD9DCF091E5FC0730F3B1260BD03AA17E84AA96E6E5BF4106895C67DB12374126
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5887d10234c4f244ec5468080412f3e6ef9522f3

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\58\5887d10234c4f244ec5468080412f3e6ef9522f3
Size 6KB
SHA256 a0d603f69ad58662e688d74b9ca2f345eebc0938b4af954f16840adf436fe8d9
MD5 1545455944217e6467c30bc9cf0ba0f6
SHA1 5887d10234c4f244ec5468080412f3e6ef9522f3
SHA512 f27e519c219c4d3053c698ac641dc6e252cc208e83b004e0db7fb3015cb9fe5f99bb7739d0b16337f03379dd5775c29456c7ae4f37b15c74b1c851b620df56d3
SSDEEP 192:rDJomrimXOct5g6kf8npoBhieO0y6AIEVG:/imzp26zn6hDOPIgG
TLSH
T149D17CEADE30E4D6EC0531B25A6C0E68BF96BA600234E2EADF54531F08B7D532DF1158
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5fd568d724ba7d53911b6cccf5636f859d2662e8

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\5f\5fd568d724ba7d53911b6cccf5636f859d2662e8
Size 4KB
SHA256 8a716f2a3cbfb5d330d3aa9999ff56f0636cf388991caa06d866576989c9f36e
MD5 1dcad8cfe89774102ad3dd284a2f6d6d
SHA1 5fd568d724ba7d53911b6cccf5636f859d2662e8
SHA512 09b45d02b1af69500c616386867a9cc9a0a925007c7bc4419ab90463316511b3083400cd176b8b0d0ee3d6e31cc837ba10a31128d22bccc5e2a8cc556666ae8f
SSDEEP 96:2VAfY5gK6f9bJdnieRgdaUjuweDbAPPPPPtPPPPPPPwPPPPPPPPPPPPPPPPPPPPx:4Ag5oV9dnrgXjuvAqFiZIjoUaI1
TLSH
T16CA12ACADC7099C6FC4B32B775591BD43BE13F48A566E7D6FB4021980827DA0437461E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a908e7c7d61e01bc4223b4991820bfc56f84c5e

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\6a\6a908e7c7d61e01bc4223b4991820bfc56f84c5e
Size 7KB
SHA256 bdf31938067bc0e93acbc4ea0c122e6811d6192ac783505f8a28154f97811949
MD5 2417fd4837472466b995c85a7907878d
SHA1 6a908e7c7d61e01bc4223b4991820bfc56f84c5e
SHA512 36d6df94e71df90cafc56f236fb5e24f7ab5351195b2b00eee394440c5ac79abbb3f9c8a2430dc61a9b6f07246d38afb0bba680271411e31141317f97fceb1e7
SSDEEP 192:iXDJomrimXOct5g6k3FFCN07DQwYYfQONDrCSuAHB:Aimzp26mFUCYavxh
TLSH
T1BFF19DE2CF40E444CD9AB23983A107D52FA377A88828B3E5EBDD163F09B1DC659D0514
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6ea4e448fbc2a079acb0cf3564273083dadae165

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\6e\6ea4e448fbc2a079acb0cf3564273083dadae165
Size 9KB
SHA256 7e1199a39e8c088612dffc5b4ab172bbc6cdb6213c6912cbd61bece1c688c9b5
MD5 a1768252e718e04da8be080972afab61
SHA1 6ea4e448fbc2a079acb0cf3564273083dadae165
SHA512 fd57b105413aad4f34dca5f4011d4d23e5a8d0bb62f4bc0a5ae64eee6f60b8a57406e3ab9ad1df3bded4336736b02b84c3222f4ba724569cbff5348ce7bb701a
SSDEEP 192:OXDJomrimXOct5g6kzaPhOZhZ6elQHifvoq2QdeqylOLLAXY5:8imzp26bhOHZ6elQHifTDslqAXS
TLSH
T11012AFF7DAD1EB07E513727096C50954EF732B810530EADAB62C06261C77DCD581953D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

827d71834e69954e0a7fd7748998332e0b619d29

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\82\827d71834e69954e0a7fd7748998332e0b619d29
Size 9KB
SHA256 0cb98a5f26379959daf5710f40adee69aa6f6bd0d607267ca43f9677ad31cffc
MD5 d11fbfbe2bab53a8db38ca1e08182613
SHA1 827d71834e69954e0a7fd7748998332e0b619d29
SHA512 e8c8935a74d3fb5a29095d677684405fd9199cc2b1130612d41715f1ceb9b74c59043073c38d23f3701120edeaf4d0b5362596d1da89cc9a7957f4cefff57d2d
SSDEEP 192:5XDJomrimXOct5g6koPiKn2eGqf9MQjubFx2jPyVm19mjcqd7AB:timzp26dF/GW2nbFQjPidEB
TLSH
T1D912AFF28E11E0C4EC4735F922750DA8AF821B748475E6DA975C173C18E7F99DAC118D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8e3b07adf3b09ea60e82062277fe301205d03421

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\8e\8e3b07adf3b09ea60e82062277fe301205d03421
Size 15KB
SHA256 a582b6441d740b826b362943f3a9cde320aa78dab5fd9261e2e33da9883e3404
MD5 7f0cfe36c692c0014b60327027c46120
SHA1 8e3b07adf3b09ea60e82062277fe301205d03421
SHA512 abb3bab0d93d89cedf83a6cf73aac05356f6c0a823080fba800b3ffced3712cc4d4513d86dcafee71c999f3e983733e0dceab4741fe85c582038fa1753ebaf2b
SSDEEP 384:7iJKXg1/E6cIOFz1q6jTOzleczdohgCoFllpuHTuDnnViNF2:E/E62pqYOlZGK4uDn4G
TLSH
T1AA72CFC4CEF0A499EC67347BCA700A22BA7BC92415904BD2E4A46233C52697D9D591BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

954f82c6da9670f1383b4d0002061ebc1536c35a

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\95\954f82c6da9670f1383b4d0002061ebc1536c35a
Size 11KB
SHA256 2ac0d1f1564ea3ed904d6923156fea3153147b3f16b733416760ae86e384a549
MD5 d0ae5985e40c4fa69cfceebad3e2c4aa
SHA1 954f82c6da9670f1383b4d0002061ebc1536c35a
SHA512 61a8f84d6d73fcbaf46ecc9d81c9ac439591e776fe50e261156e14e71ad7ad093e944ff79ec48057ecbf0f271f3da9dc8c257ebd41ad8dbc98c89282a5212842
SSDEEP 192:w9DJopTxIXg1fnEObzcoIA7hH/Zje9OrZQ93gzmfhpQd3XKQPJDap+UsH1V:KiJKXg1/E6c6VH/Z6OW9XfPCHXBute
TLSH
T1C0329EB4CBF5E1BDDD18B4B4E59406B83FD6A2659D9C92F0BE1C1B350C02741A5AD0E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c137787095596d770aa3e4f0fe4f9de1ed0b635

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\9c\9c137787095596d770aa3e4f0fe4f9de1ed0b635
Size 11KB
SHA256 f568609506abf8c07cbd95164eac24c8bdf9a73161864f84fdb50877a8734b06
MD5 f961d3890ff93584572d3ec328d4de8d
SHA1 9c137787095596d770aa3e4f0fe4f9de1ed0b635
SHA512 06b65efaec64294896108026ba855cf40c93a1bac6d2e44f56ac4bc85b02ccd658e1119e6f3f1cc909917d8826ed6e76657c1c7ad9551c3f5d65e2b096e9c0e7
SSDEEP 192:1MttxOqdm9TTYlqgCdmT4RM6IjFiehKIsbfK3qjWjdoHXxgo:StD7dm9TT6qgCdnnKFB4y3aUdoh7
TLSH
T13932B0B6D815F2CBDD912170E26F7B245AD5A831F3A05ACA4F3512770BE7671B008558
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9c63f2a3681832dc32d206f6830360bfe94b5bfc

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\9c\9c63f2a3681832dc32d206f6830360bfe94b5bfc
Size 4KB
SHA256 ac49293ab32aa3154eb5c1251e3175a55d28f9e6866bf74fa76c2cefdf6cc40e
MD5 62459d5e2818252fc2ecdf2c18dcdcbc
SHA1 9c63f2a3681832dc32d206f6830360bfe94b5bfc
SHA512 429897cde2e4f4307fb042eed6b987046e420aecdbd5d78acf3736b9a0284bc8429eab5109c96b39bd604f2a59390d69772dd42921c173ecc4fbbbd9b33a55f2
SSDEEP 96:9VAfY5gK6f9bJdnieRgdaUjuweDbAPPPPPtPPPPPPPwPPPPPPPPPPPPPPPPPPPPY:XAg5oV9dnrgXjuvAqFiKI/3hsJV9mf
TLSH
T152A13DDACC71A1C1FC0734B7B1B517C43AB63ED49A7BD6DABB080564242BDD153B444A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a4bc069321a96236fde04a3820664cc23b2ea619

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\a4\a4bc069321a96236fde04a3820664cc23b2ea619
Size 6KB
SHA256 ae97513c5bcac9d08f5c8bcbaf55b7a3112134603c141b5de70e15a06c77e325
MD5 02a9f2786ae1487a583495db000551a8
SHA1 a4bc069321a96236fde04a3820664cc23b2ea619
SHA512 18605d797527b44234a6f2b6a99b2915e7fc30c8c88192252fa3dd02e0b801b78a3f509c44beedc887ef9a38556758279c576d922c8558b2d7b44d795ef25192
SSDEEP 192:HCDJomrimXOct5g6keBoDzD+Bd40dDuKR/qwz:HEimzp26XoDSxpRz
TLSH
T163D15DD6CFA0F485D82573B099541DA47F6273A80539BBF5AF50237D8CD290B6BD019C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ae5309997bb45581abda6f80b78c77648cef9313

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\ae\ae5309997bb45581abda6f80b78c77648cef9313
Size 13KB
SHA256 cd05b445dea7b595a696ce16e84710821acd493a79fe85bcd1bf8ec6c9a62edd
MD5 664578b2dc3a8e06e8b3f12e064f87c7
SHA1 ae5309997bb45581abda6f80b78c77648cef9313
SHA512 a9543cc31fb948d00bd9efd72801272753ce7ce2c5e344d606dad24fcbe2571555d3a404c6be240e6d6d2a7ee14e049b41c9e8a6e2eee54e7c61ab30ce9997d0
SSDEEP 384:rtD7dm9TT6qgmF+fPJ99H4Oe8QSV2cIz2AjnnQHF3KUQJGhS:raTWqgLN4OeWXaQHdKU5S
TLSH
T1EA52B0B6F9003C2FC5592472F031D8760FD4F8742AA0AAC6D72E647A462A360FAC24C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b5f9075a8bf6977e7dfd3d316a673eaaa5834a99

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\b5\b5f9075a8bf6977e7dfd3d316a673eaaa5834a99
Size 9KB
SHA256 a3e41dc0e455cd84ce622aa658dfd69db3e0c6b9a40e1047db8be93ebce5887e
MD5 e84223b7ff2941548c568732dcde353d
SHA1 b5f9075a8bf6977e7dfd3d316a673eaaa5834a99
SHA512 01d967475af32985c7a359e5cfef292cf335d661d88b92a28c279c1a3e8c1c4b7dc82c45b32366be6f6f295dfea3e4ead6a3bab245c59b8d325efd116657c2d1
SSDEEP 192:QXDJomrimXOct5g6kRujnCRwId7ZF8H0rPsOphH3+ZzzCu9JF+xd:eimzp26njnCRlrCHMphXC9JF+j
TLSH
T1E2129EFA4E54B46DC4127B35019B0F752FA33F6542F08BE789FC212A8D3B5955AC2288
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cba537acd887eb709d3fb44ff11dd2a370f64dc6

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\cb\cba537acd887eb709d3fb44ff11dd2a370f64dc6
Size 12KB
SHA256 3003e277b3775f7067a2e899eb047ef509e5953475fbf9eaec947b1ab38963bd
MD5 445c7410933689d74bcf8b88a8d9f3ef
SHA1 cba537acd887eb709d3fb44ff11dd2a370f64dc6
SHA512 f0fe8029b4a27745fd24dc19f6627412989c5093a2847db5cec33aa246286a1288479a42d9935d41335ca886af7604bfd4379fb613bb6c8e06b267989ef59d83
SSDEEP 384:StD7dm9TT6qgjoF43+fF2ii7c5tn92fAX9glszIezU:SaTWqgjoF43+fF2ii7cThIew
TLSH
T138429DABD824FC56D85E51B3F82245114AD9B0B55DF818CFCB06E9FE4BB1F10EA0249E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cd39ba3ef95ea55ccf82a164485fecab65f3cb69

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\cd\cd39ba3ef95ea55ccf82a164485fecab65f3cb69
Size 9KB
SHA256 59efe9756a0d4e207adf79a33022698b05ea9fa2c2f7083aa732d021e8625e95
MD5 eaa36c0bee73527e8ec7e8df54429b58
SHA1 cd39ba3ef95ea55ccf82a164485fecab65f3cb69
SHA512 86eab3d880a2b93221bc8d28d5aa1603bb14b8c85b1b2c42b1941595f54522a57f7adfbe94dd8632316bd9c2a07f8c72fc2427f417145e8cf64c59d8006ce39c
SSDEEP 192:1MttxOqdm9TTYlqgq8dJJIwvYQPQe/5/i1HFg:StD7dm9TT6qgqOJJIbQPWhC
TLSH
T17D228CFB8D11AA23D82610B59AB919210FD8F8782B51D4DDFF3A54EED6A3710F24118E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

db682892da4e2e4214ff3233bf719c7609d95477

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\db\db682892da4e2e4214ff3233bf719c7609d95477
Size 18KB
SHA256 e64e9dfb183cdf3d11333e2c04b52cebd94adbc668e1a7732277fffa473b6547
MD5 cee920e6bc3ddb85ec5f487df603282f
SHA1 db682892da4e2e4214ff3233bf719c7609d95477
SHA512 cc37b6b7ab4497f90b414a069de5ece462e23c10d3a173fab84a6c4b8c7aeefbf84113c4d3204c77012f1cfabba2e4a74331ecabe0b33c11d5bd04fcfa451ef6
SSDEEP 384:0iJKXg1/E6cGg2WnsVmx7VwvmWUObmdtY8thh6H80j3yg:H/E602WnsUxVwvfUObAth6c0L3
TLSH
T17882D0DF96BBE507E5163A77452246B23B6376156534C7DBB38203AF089232CECA026C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e26fa3036cdab4c2264ceb19e1cd197a2a510227

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\e2\e26fa3036cdab4c2264ceb19e1cd197a2a510227
Size 6KB
SHA256 c7918a0b58c45a6f0d29fa990bbd31a7b482ef61387c83a02eb7f70b672e4761
MD5 8db68cc6dce4b8e01fc10385f2eac7bd
SHA1 e26fa3036cdab4c2264ceb19e1cd197a2a510227
SHA512 150be040bbf4d7d8dcb35aaea7b21908964b4cb86a9f33c4a3126b523b6ba964f36384b0c7dbe3f9dc49a3fa10ed04f355832e9ee5dfa8a53f799b2761ad297f
SSDEEP 96:ncczOrVko1BJoQhri4BXOYwgucPaMN+BPPPPPnQYyMXkM940n8Kp24wVjN5nyD0/:wDJomrimXOct5g6kXa0/24wVjrQ8Oq
TLSH
T13ED14BE6D9E0E988EC2B327156450A166EE277B84134C3C79FB8621F48F7A6F9C65044
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e9833a1512b57bcf88ac4fdcc8df4e5a7e9d701d

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\e9\e9833a1512b57bcf88ac4fdcc8df4e5a7e9d701d
Size 6KB
SHA256 5998bf8ee2eecc2779ef896f04a540f9d48d4e96cc9227aae4646f4d9b817749
MD5 26a15393379cd7d6072f09f196027786
SHA1 e9833a1512b57bcf88ac4fdcc8df4e5a7e9d701d
SHA512 73f6fa5e911fd64a3e45037876cc9edd8606c4590d0db5488de2169fddc6d5f80649c0108631e37af2fb52618b477d1a9086c734f8ac901a6b64cb06f64ef0e1
SSDEEP 192:dXDJomrimXOct5g6k2fFttQfWohWydus2KUHSd:Rimzp26FfFrQ+ofus2KUHSd
TLSH
T1F4E17DFECD31E2CCCD5931305A271FA43F5B2AA50634EAD58E94132D09E2A199685998
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e9bab7d3d15541f0aaa93fad31ad37fd07e03a6c

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\e9\e9bab7d3d15541f0aaa93fad31ad37fd07e03a6c
Size 6KB
SHA256 f7e03bb5bcc487cea313bfd72ded4cfd4e215b82228cf9744760f61da4c496bb
MD5 246bb0ace989af2b492c055b1d55cf26
SHA1 e9bab7d3d15541f0aaa93fad31ad37fd07e03a6c
SHA512 5f6128d4645a2e3ea9acf81a6ac55f00776995d5d1b7d72c4539e8fad65db2e32bbb75c195c9b7c96a7189408fd402992f506feffb3728ce8d28002bf9fad1b8
SSDEEP 192:kDJomrimXOct5g6ked/w5s+DqL4IqCTuY:uimzp26hYy+DOKY
TLSH
T1FDD17DEADF90A1C6FC36B23445054EB1BFB62B784875A6C7CB54036D0CA2D9F558108E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fd2d8033225ffd30e6d719b33ec44ca146757d19

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\assets\objects\fd\fd2d8033225ffd30e6d719b33ec44ca146757d19
Size 533KB
SHA256 2222b522b3ed5a6c88c2725a443cee6eeeb85806b1e60bce76552b15b4e4570a
MD5 f55b47d8bfdf90963015706682c127fa
SHA1 fd2d8033225ffd30e6d719b33ec44ca146757d19
SHA512 f62b2863f11e536ffd13e7f92157dd0771d4dfabb689cd0fc3c86e389ba2dd4360763fc3dab5fafd0aa0bc3218d68d5d4743a5de78fa9dcf9e758036ecf38655
SSDEEP 12288:OC2CzCW0Hx6c4LoAIWKswXXpNmCf+w0K22UieaTDgAq4hlJ:OCTCW0Hx6c4LoAIWKswXuCYK22UieaTj
TLSH
T114C43E25C5672FE705CA92A27CA40542F23582678E0439EDB724D65D3FEE8DF20B325E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

failureaccess-1.0.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\guava\failureaccess\1.0.1\failureaccess-1.0.1.jar
Size 4KB
SHA256 a171ee4c734dd2da837e4b16be9df4661afab72a41adaf31eb84dfdaf936ca26
MD5 091883993ef5bfa91da01dcc8fc52236
SHA1 1dcf1de382a0bf95a3d8b0849546c88bac1292c9
SHA512 f8d59b808d6ba617252305b66d5590937da9b2b843d492d06b8d0b1b1f397e39f360d5817707797b979a5bf20bf21987b35333e7a15c44ed7401fea2d2119cae
SSDEEP 96:6nc3+Tkadi8HKcL9CpLPu6+Lh61QyBcajLHtlqekr7ztyldIag4m85Bx:gc3+WTzpMyBcctlqGgZCBx
TLSH
T1989197F32A8DD4EFE64ACDBB06A1D5157530CA9B410EA1073A9570F40FA1DC44B06ECE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

guava-31.1-jre.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\google\guava\guava\31.1-jre\guava-31.1-jre.jar
Size 2.8MB
SHA256 a42edc9cab792e39fe39bb94f3fca655ed157ff87a8af78e1d6ba5b07c4a00ab
MD5 e37782d974104aa3b0a7bee9927c8042
SHA1 60458f877d055d0c9114d9e1a2efb737b4bc282c
SHA512 532664e3dd33699bdfb296e355bc58fde77edc019c10f464ae49fe2494a68fd25d1623a9c86bc72830ca9f1354226366ac6f3c09d77be952641e971386a4ebbb
SSDEEP 49152:X+GWMKp96fG5vlDOZCAz9iKJfWYNl/AWWNrgwYjTW82yp1jQq7oWo0ugz61zT:HWFzwGiZCPCDYW6rufDw
TLSH
T174D5D0977DDCD43EFBCBDA335024926E3C180B69D009A55711A42DAD28A6C4D0F26BFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

text2speech-1.17.9.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\com\mojang\text2speech\1.17.9\text2speech-1.17.9.jar
Size 11KB
SHA256 c2a95b499e76fada7dd63e9b0ec797b678d411c2b0ee6f37f4dc674662bfb0af
MD5 f5b05e8db22e2e0668b786e11ac9d3ce
SHA1 3cad216e3a7f0c19b4b394388bc9ffc446f13b14
SHA512 e7a9ca0449f1fcde00f242043e6f2890993aed4d98621e77a46858c7c9f4a1e5134cc77c33dd2d3b83b2e7164e99a616e3aaefbe860bb209be23e74f7b32a29f
SSDEEP 192:xeeNyWjqALq0t8lunvhN5y6UbkVqX99pFAwq0DzOcI+XSWBb8EkOAbtcsI:1sYgyvHU6Zqt9POcIGSAYhbk
TLSH
T152424B2F1D5E94AFE323713084614B87BC265CF4D7090C91287BAD98AC2A5394F66BFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

commons-io-2.11.0.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\commons-io\commons-io\2.11.0\commons-io-2.11.0.jar
Size 319KB
SHA256 961b2f6d87dbacc5d54abf45ab7a6e2495f89b75598962d8c723cea9bc210908
MD5 3b4b7ccfaeceeac240b804839ee1a1ca
SHA1 a2503f302b11ebde7ebc3df41daebe0e4eea3689
SHA512 5bd78eed456ede30119319c5bed8e3e4c443b6fd7bdb3a7a5686647bd83094d0c3e2832a7575cfb60e4ef25f08106b93476939d3adcfecf5533cc030b3039e10
SSDEEP 6144:UrBoCnU0+1j/OjXrf50ynaZ13lybiOmQ+CEEArHs2M1mX2TKYGGh82ajQe+yw:2oCnU0+hnZLOm7CH4Hs5mXmKYGer3
TLSH
T1F264E122F5C90811F733657AB09629AB38BED7C8D55B74DD20ECBA0394E6C054BE37A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

netty-transport-native-unix-common-4.1.82.Final.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\io\netty\netty-transport-native-unix-common\4.1.82.Final\netty-transport-native-unix-common-4.1.82.Final.jar
Size 42KB
SHA256 1096f16527a51dd5f44ced90636110a429cc7359a9a8a91db25000b747793429
MD5 8184757d93ca61b6a47c739798b6e249
SHA1 3e895b35ca1b8a0eca56cacff4c2dde5d2c6abce
SHA512 321d42e684bb73513b18ce7a0b44beb71b4914be44b1646d6e394f5487af5eb8e9b186e78e4e23d3526f47acb9a26c2faa2909b4ffdfd2a0dc755fbe19dfac85
SSDEEP 768:r9lgR1CFRMaLl9dZowNVfPM6tZjd3ewXFyfgDfq0/A1gfhavIqj5avMI:pORAFRMa3Aw9HjowVyfoqyA1wq+
TLSH
T15F13AEB4E565C029E107F13196C4D992B60CE65EFF46980320D8298AE6BBDC0CF79FC2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lwjgl-glfw-3.3.1-natives-windows.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1-natives-windows.jar
Size 142KB
SHA256 9e744ecb84029d7acedae876e2557659184a29afee55e453f4ab2567349bf849
MD5 0e08b9ceace15a4ff6b8acec0cfb9083
SHA1 ed892f945cf7e79c8756796f32d00fa4ceaf573b
SHA512 62cf4ae93728176dfae7d7138557f627abac64615ba48baf9394c92dc1162f49c8d2f30479ae7711475f57046b9b5d816e392734cebdfbc01c7680751ee4cc98
SSDEEP 3072:6bgGFcX+VZhji785NML1opJKGahOw9L0sol2m78+FPp:C82Pi7zhKJKGahOmoLl2mw+FPp
TLSH
T185E31280A168CA0DE252943769567667210F0C4F6F74BFD18A3978346533DE8CF93CAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lwjgl-glfw-3.3.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-glfw\3.3.1\lwjgl-glfw-3.3.1.jar
Size 125KB
SHA256 08bbc34eb752f863e37f83ab1c7b0c22f7cb26d0f8fb0a4a4a8c6028ac45b385
MD5 2c2a2f1578d628bee49176b83637574e
SHA1 cbac1b8d30cb4795149c1ef540f912671a8616d0
SHA512 4d5251b98317770936a835505831fc1f89a4e280d034dd6bb84ec01fad72b5c2cd68598a80397f381b69a83d3cf3b9b3dceec1b80ce60f25cd649d361746c0e1
SSDEEP 3072:HGVP4N2dilrOLmaveDVbCiw+whmql35FM9D1qAQOPlE+dZE304VxjOW:m+N2dBm+6bCis8ypC9DpO4y0a
TLSH
T1B9C3BFB17C67E567F432423E46539FD3283D8BC8EFCA5B62682257C2E8128246B433D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lwjgl-jemalloc-3.3.1-natives-windows.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-jemalloc\3.3.1\lwjgl-jemalloc-3.3.1-natives-windows.jar
Size 132KB
SHA256 225f37df5500614675be9acb6278cb6c9c80a349264798b2cfc7ec434f1ed472
MD5 c4bfd687e0734cca9d33fb99f40ec248
SHA1 948a89b76a16aa324b046ae9308891216ffce5f9
SHA512 c371a8f308108fc260b39c3824ab13f3c2570e96d6df893ec8582717f60d663d63406bf316eaac255e113694ad077f7ffd5a4ef5c90f65ccafaed16aabd178e9
SSDEEP 3072:vFNTyriaUPV3uJ5UPgRCNW8GCDuR56oI+h5u68igMjPT40kOtFCCM:9hqrU936m5k8GCDuW+hh3T40pFC/
TLSH
T189D312244D974315C3745F78DCAB8778BB4C53A3DBAE20A58D8829E7E97CAD30F92601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lwjgl-openal-3.3.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-openal\3.3.1\lwjgl-openal-3.3.1.jar
Size 86KB
SHA256 7325ee1b91a8a10c0626c69b557a88f2df6ac1bdca0e52e2a92d324249f2cad0
MD5 42c34453d0d5cab0907da376f5ada98b
SHA1 2623a6b8ae1dfcd880738656a9f0243d2e6840bd
SHA512 018f937695ebe99aede11ab5536ec2031760dd0e48b37cbcec2ec1cf8c5db166e0133fa4eb8bda27c020980e8a5883c9dcd8e57754cb8fe4b5e287deaa18c9f4
SSDEEP 1536:ykLAv3WiLF1CTD8DOdFxvax2g9jNCP5/siiM8qYiLud1EIz:ykUvmSFsg6asg9jo5/MXqpLC1jz
TLSH
T10983C022DCA35125E8639B3981FF0A67292E17DCBE4B15A553B01AC1B931825EB33F71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lwjgl-opengl-3.3.1-natives-windows-arm64.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-opengl\3.3.1\lwjgl-opengl-3.3.1-natives-windows-arm64.jar
Size 80KB
SHA256 ce0463d1557baf3a7c19fc1a7b4b633c5d4d6df30252a35aaa50294dde063562
MD5 9ed724ab79f60dbef272c458f3c5f536
SHA1 527d78f1e9056aff3ed02ce93019c73c5e8f1721
SHA512 3c6aa81a453a6976fe7c58c6503290b40aff22a4b2d36a5d0fc96a9fd997210e3cd6742967db61df7e341cc0aa0e09e2c9bbffb76019803cb63eeb7639ac0f7c
SSDEEP 1536:luMWdcjrU/EMPSXXfNBVc4P0kOvkWZeOs3Q+R/6H4KemdaExToX102iO0CYSC4+f:AviU/jPSXxckO/eOs3QEKhn0KSo4RG
TLSH
T1C28302FB4C9A7AAFD63F5D314D4810A6EAECA914095414FC4EC842C57D85FF4BE68C90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lwjgl-stb-3.3.1-natives-windows-x86.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-stb\3.3.1\lwjgl-stb-3.3.1-natives-windows-x86.jar
Size 219KB
SHA256 bf73e3b51bb430e588bd158e96cca298e98ca12f29dc5cf1445c1f0c5c39ba1b
MD5 0081675ed9ffdc0e4b759b6127c049b8
SHA1 a8d41f419eecb430b7c91ea2ce2c5c451cae2091
SHA512 c9deeb9b83f9bd50a3699c425af495677600b23ced58910bedd0aa9867c7ae6f3eb20f0296dc7ce5bf09df8629353c9bf375931dcea6c57f1babdc0614e57a8f
SSDEEP 6144:LrbNao2ALeeUrTwiC1m/5XuDd+zjHfiTxWIkWvY5e:7NiThTwiam/5X+dcjHaT5vYQ
TLSH
T1CB24120C9A639269C0DC2CFD2D8BF608B75DAE99AF2EEC3477C14440E7F7925121B958
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lwjgl-tinyfd-3.3.1-natives-windows-x86.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl-tinyfd\3.3.1\lwjgl-tinyfd-3.3.1-natives-windows-x86.jar
Size 107KB
SHA256 fb244153f2ff990716d263a859c2e170c7e5db2ea42993831083c79527212517
MD5 680dccaedcf8e31e0d67df15e47acc38
SHA1 842eedd876fae354abc308c98a263f6bbc9e8a4d
SHA512 4707f9d4f4aee3d854efc6f8e06f13d0c35fefe317fc10d843b873584004936f2cf7b0a31e24e9336a19943e836160a578269de59fdb836e0a4ad688d7c23a62
SSDEEP 1536:Zc3gGLvwVWTCK4ahxGym0KfVaAfuRq2Q3eHzyA+/eC2trNHb+El7KTKNseagB:eFeGz4eIym0K0gKQ3eTyT7sV8TKueR
TLSH
T109B302386F9AC47AD64A9EB813D1AF12383FB40354B094B4F64168407439DDFF6589EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lwjgl-3.3.1-natives-windows-arm64.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-windows-arm64.jar
Size 127KB
SHA256 ce3def195e9174f7df0039bbd555d83ae2a5e2358ee6fa02a27232f5d100f0de
MD5 ba5b7b842ce98d6898f44d1abc6eedbd
SHA1 0f46cadcf95675908fd3a550d63d9d709cb68998
SHA512 31875a7fab88da5473e16ec8857f2149ca27c14e340acc284994f6728d952eeed28d9bca565b69ca744c39c0f6c37fd81c5c662cb4c5f61ef4a340b2323b82c0
SSDEEP 3072:slA86Sitwax5XLNMxVvl8Aaedhd+j097XyR2RS3jW7:smpSYrXLexVd1aw+7R13g
TLSH
T1FCD3127002921058C4B7E2BF610ED2AE65AB8B3287CEC7A3FDA30395375535667CD26D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lwjgl-3.3.1-natives-windows-x86.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\lwjgl\lwjgl\3.3.1\lwjgl-3.3.1-natives-windows-x86.jar
Size 131KB
SHA256 e90c1f9cf5701aeef2982ebf0905a2b991f4622b8a7f8250eaf0873b5a0a0223
MD5 0f0bfa91e563448711e9b7b54710ba53
SHA1 3b14f4beae9dd39791ec9e12190a9380cd8a3ce6
SHA512 46e0acecb2bb8922384c006c044ce6d323781881ea18480a712a5d6adfd1d96387351875af8eb005a10b4ae3ddaff0a70a4cc0a1620f8f75cf257f9cbc8ffa08
SSDEEP 3072:YOA1O4Y45exf3G74TSml0Yg7T84chz//5qL3TL0BXHxRQ+eF150h:PI5t74TSmuTd8zJg3TL01/Qza
TLSH
T17CD31279D9E1163EFABD817813F39B7B63BB39D6680680BD14364187EEB90188D152B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

asm-9.10.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\ow2\asm\asm\9.10.1\asm-9.10.1.jar
Size 123KB
SHA256 ed825d10ab1399c8c0cb669e688cf0c8c82629b4c8399b58352b68e92ca10fcb
MD5 9cb72080438acf27f2607002e1444a7b
SHA1 ada2141c0cc52ee8f5c48cd5fa4ce0e794f22236
SHA512 8db6efa37d4d569bf2b95d90931b8064f87ed928d20bbf8d8e7fa6182e9a11d32e6a2cc034a3d173a38ee70ce2ea9f20f52f9d8730d9401d2bc6060674c18928
SSDEEP 3072:pCay/O07+gBkNqTcILhAk8FdRB2JCJkBG9S:kN/EOXTLG1jn224G9S
TLSH
T14DC30124B3D6E0E3F27B717E91A04903F15D8E6DD09EB6375890DBE3D5E008896823E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

slf4j-api-2.0.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\libraries\org\slf4j\slf4j-api\2.0.1\slf4j-api-2.0.1.jar
Size 59KB
SHA256 b36b99b8d99ea7857554d9b25dfdbd1fb25378c926f7b9e0249983c99335b2c4
MD5 f83e57c047d1e3e226b77abc9141d233
SHA1 f48d81adce2abf5ad3cfe463df517952749e03bc
SHA512 2f8f02b099de6e5eaaaf6d1a2f42d0a7d145696d348305d0ea64a4c9e18dc63504aaf55965055ae4d1ff1b471f768d74c95e756795bc13c356a9d388a5c587ad
SSDEEP 768:uxZoY6B8XtuX1lm91Pfa/0xKNM3saStCcdkLi3Btf+iYJteBEV/GfKRPtYcanbCg:uxZo8c1Ks0MNMm3HUKGV/GGPtYcd/Oh
TLSH
T18653AE5AFD8D802DF30BF4F580335A9AB72CD38C45A6512304F69E6AA476E550B23FC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

minecraft-1.20.1-client.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\minecraft\versions\fabric-1.20.1-0.19.3\bin\minecraft-1.20.1-client.jar
Size 22.0MB
SHA256 56b71336d2b4fdffd197f56595b0da93e32a946f78f382a299b8f4b92758bb0f
MD5 95f0c064ec0fa739613b993c92a68db4
SHA1 0c3ec587af28e5a785c0b4a7b8a30f9a8f78f838
SHA512 42274bb1d2857b84c81f4a9e99bd043fd2f17610b5f43c3cb8bed625442a131f33b6e3469cfe4d9130f6fb3366378b66292d912c5e9f5dc2282ca5bec8bf2617
SSDEEP 393216:D9MyEPJBuZV/1zOvJQxaX1VEi63Mv0ECnAkW4gcCpVW/CSCgdV:DcTuZVZCJJlD63NCLp2pdV
TLSH
T17A37CF1CBFB7A998E50FC03A41798053E42C9BFAD808E9DF667484493DA9CC51743DEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

client-intermediary.jar.tmp

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\.fabric\remappedJars\minecraft-1.20.1-0.19.3\client-intermediary.jar.tmp
Size 22B
SHA256 8739c76e681f900923b900c9df0ef75cf421d39cabb54650c4b9ad19b6a76d85
MD5 76cdb2bad9582d23c1f6f4d868218d6c
SHA1 b04f3ee8f5e43fa3b162981b50bb72fe1acabb33
SHA512 5e2f959f36b66df0580a94f384c5fc1ceeec4b2a3925f062d7b68f21758b86581ac2adcfdde73a171a28496e758ef1b23ca4951c05455cdae9357cc3b5a5825f
MD5 SHA1 SHA512

Submit Download

1.20.1-Rrls-3.2.0b-1.20.1-fabric.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\1.20.1-Rrls-3.2.0b-1.20.1-fabric.jar
Size 135KB
SHA256 5e2e379ed5ccea7c96ff6b168258a72c644d7d79ae8e489f8841f4146c6d730e
MD5 0971bbbf673e2fbd80f9fc837a8362bf
SHA1 563b1e2c62d1c1f7c036c0be314420c591076103
SHA512 f053120d7d27cd73e487232d3d1de5c7ad095638bc8aaa31adc9ca51e9158b40e9af41c081470192b7ff5cba666baac0eb2ef84e103544dee25f73ec6f9b26db
SSDEEP 3072:bletaoQI1gzpiFcfQu5waKrm2IOEAzh0DI+eEJNBTiG6iBn3InAan:boCI1spiFKJCrZhn0DaE7Bh6iBnS3n
TLSH
T16ED312467DEFD645D75BA0BA69B06538BA347D38F391E06B14F00C38187DE624F438A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1.20.1-SuperBetterGrass-1.5.2+1.20.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\1.20.1-SuperBetterGrass-1.5.2+1.20.1.jar
Size 774KB
SHA256 d36f2062e2848528079a10f4faf46c49b832784bc9bbd038e8e39b0d2f5f9d63
MD5 f22cf49d6d5c18ca335291689ba20208
SHA1 ac088a270899cc9430ad7e75bea81a812fa7a60e
SHA512 4353429bcaf0b5bbaf70b50fb3365f2a4efca826e7aeb56e7405d0f77da9fa80821f1f2e4ec66328858102f7f40d26ea5a5713e5a92a5a4aa46b05cc71b3626d
SSDEEP 12288:ilFAAMDmOqqwXIzVqeAAMDmOqqwXIzVqgqOI8JTnnr:i4D/qqJz4ND/qqJz4g9I8lnnr
TLSH
T1E5F46C54ECA95C5CE26BCB3681A78053C0A4DBA8204ED59FE131E1C97DBFED50F278A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1.20.1-enhancedblockentities-0.9+1.20.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\1.20.1-enhancedblockentities-0.9+1.20.jar
Size 479KB
SHA256 1284610d59b86e0bb9713c58f6c9471774ffdabe6fd37559613bc747d8652fd9
MD5 c904ad63c9ffc5f1e4185cd6e0cdef28
SHA1 613b6d984044c5bc1847f9207db64964323608b3
SHA512 8fe2f863e49bad5f0975b6802acc5bba972a16e09b730d3a9ec7650da5743fb3ff1fe1d1e7832e1200c663beb74de5367b72b168e2c9087f8b662623f264ef88
SSDEEP 12288:TRhIghqN1JbaSiQ5e3gXfl3HtLGS+047XtE/k9B+:T330Za/QLftNaSY7XtEv
TLSH
T14EA4F15999BB4688F62F503E88F9F143F0658169AE1010BBA4D0C5993F99D810F93FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1.20.1-perspektive-1.3.2.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\1.20.1-perspektive-1.3.2.jar
Size 33KB
SHA256 ecd41115860e58ca3f39dce079ae192d969413103bb982cbd1f4d234a22dc808
MD5 9b7b0bec2089991c43debf24fdc1c6fb
SHA1 34ab9bd7540dfed4c4b7bca6345cd803e18da668
SHA512 d06ac30bbc153fc7611b3d7f118ddeb5a68c132241a164345f8d499f3adfd3457150395ffed2035b86b12a6af8115a31b87a41db762bfcddcf0ef2eccc5d11a2
SSDEEP 384:9ePe3MaWZ2xbkZ+K/+F+2DqGhdV52KuwOMRpGNTI2P/WQa8sYRZMP90IyBsvhqyY:9emk25JgIn3uBwGDXjVRZwn5luoYr0zU
TLSH
T14AF26C04A7A3501AC25F00B9CF965B97AD9448FCD433E2673AA4922D2C537B44F2BED7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1.20.1-vulkan-exordium-fabric-1.0.3g.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\1.20.1-vulkan-exordium-fabric-1.0.3g.jar
Size 124KB
SHA256 c1f6a76a205e67d8c3bd125bfcd77deba9069167217f954d715b8734a76f9000
MD5 461a6d65b28504fb77738792f66564d8
SHA1 7c6fba7aa74a7a88a790d6f2a1c219710fe3b5a7
SHA512 1b5731f0b9467ed57e8395a7efec8a83c4da98ba73c4d31323dacb89c2464f78bfbe7e8104abf8d8e0fa4dbcec89c2d4a2752386a3606b68222c74deb021d1d3
SSDEEP 3072:K1q1LXX5VRbxjwtb0h4hciS6jMZYFOC8E1ZCrw:2q1LX5ndUJ0h4hcHyHY+6rw
TLSH
T1BDC3F165AF5E4336E41EC03FD6414D2AEEAD09C9D329500B1540D87B2C6CDF99FCAAE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1.20.1-zoomify-2.15.2.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\1.20.1-zoomify-2.15.2.jar
Size 850KB
SHA256 5b8177d6070e223672c1d2a10af4a24560b19e6e9820462dbb672c684324c919
MD5 a76cd048e771dca1539a6af9dd974611
SHA1 4e6df434df8303551e5eae4dc7d0a7859869e570
SHA512 e6c73e96e7764c1268aa0c6d1d60e7e02454ad0b374617fb233c2cc4aa8d9de9927ba66a02f05c2304dc16391af563c84409b7ac7ec65e37c19f2ca738eb9906
SSDEEP 12288:fjv7xD4gWL3/sGTpU6JA11BNW9p9rH3POdW5IngxmD0EmyK7cGxCTSU7aCaXd2by:fj1lWrvN7ZGWpc5myecGgfGCaN2bZeZ
TLSH
T196051249BDDCD928D903CE77994686726C290385E601A05FB30968B729E8CDF1F0AFDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1.20.1a-IAS-Fabric-1.20.1-9.0.6-SNAPSHOT.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\1.20.1a-IAS-Fabric-1.20.1-9.0.6-SNAPSHOT.jar
Size 300KB
SHA256 f1906066031739b7428385459b61844679480fbc1acdd55f2988e23bebb63ba8
MD5 dcec12f4c442233a751630875f732d41
SHA1 3c4c6a5504240bb71de309ac2b072c4f3ff56535
SHA512 893836465b90521b4a26c5ad4b8554d34f4e5d9fa19c2d4f8affda6718c4958fd2d2923a434df4511ac0d9676cc42c7d490e0c686ad4d4d31ad738210e87dc1a
SSDEEP 6144:oKM72JsS2daaeFffmqPTXkp9SJqag7e4a+yJhD7REmoS9A47SrDYugZrk:oRygAayfuuDS9SIa8exHR99A4cDY5A
TLSH
T169640255FA95C159C31FE1343168D2C3AC84038EE7AEAAAF91B0196919E0F9B4307DED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BadOptimizations-2.4.1-1.20.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\BadOptimizations-2.4.1-1.20.1.jar
Size 449KB
SHA256 3da53cdf856757d9ec7df0be86bc23b2c7d67a019b490f8f64317d4d9b77cac8
MD5 f8dd994ef309213c5dae5cbeef53123c
SHA1 304007dcb0fb15ed1a1bc3771736470dafc5be0f
SHA512 5e02d9c5a5bc3dccfccbfac4809cda4eb755c015060063b696e92568e0be3d8354a01f6ac5dae99bd27111b7e20bb680512287119459ad069dcf3e7d17cace0f
SSDEEP 12288:GoRbxgUJcNuWm03SjvW9DQLDY/eZGsvJJ:GoRy5NawDQ3Ku
TLSH
T1BDA412B1F7B218BAE007B6BB9672B471E7304942F420B997A4F241AF0496D65031BFD7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Clear-Water-2.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\Clear-Water-2.1.jar
Size 24KB
SHA256 2c5eee4698d25863813dd4daa2015459f0c8afd48f5e1e8d9f7e789d4569fe34
MD5 e377ec0ec2a3407ea5741ee5eadaec97
SHA1 6f39528f8cc605915465c8056adcbd875c2ba20d
SHA512 6251473cb238c3c46ff3c76579f5ea67d66f9cd8b9ad9a8337eb6bb3302d34c673118797433e75bcd15ab168b57e21b2117ae5102e28bb60e5603b0aac496de8
SSDEEP 768:Qc4PSvp7K2KUS+/uc+mpIcX9bdlNJU8JysgHb:Qc4PcKjBJc+mpPX95+b5Hb
TLSH
T1FDB2AFBE5EC1DA1DC367043CC66289DFA1F32B9DC10CAF429C15A86D280F569EBCD5A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashAssistant-fabric-1.19-1.20.1-1.11.11.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\CrashAssistant-fabric-1.19-1.20.1-1.11.11.jar
Size 3.0MB
SHA256 2463022d546c12f82f44f1dad0cd769490cd2408f641ba886b2627a654f7ba9e
MD5 5650b6be8f66e5970a89f8a54b739f10
SHA1 120b03408ce162c0c59e457d91bb251c8188bd91
SHA512 517c75bfc370a24e06fad1f8ccd6979e2adc887a3bcd074aed2ccfbf33eaee8c719160faef3b3de74445b4bc4e0c04e7042270e4923aa77157fc6dd0e0941a38
SSDEEP 98304:SQFse4aEY78Q+7WQPR9tEtHwEECD/jtSJOps:SAsBaEY7UyQZ9tSDE4/jtSX
TLSH
T12CE5121F787A852DF3476871A801AB53D6A5274E4003EA0F117509886DFBFDF0F8A9B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DisableInsecureChatToast-mc1.20-1.1.0.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\DisableInsecureChatToast-mc1.20-1.1.0.jar
Size 3KB
SHA256 0171843fc10ac10bc67aeea3fc07b574491798ee479016d870b45488c8e843c2
MD5 e15077d6b31ab19d246c4742f45f5aff
SHA1 bbe3e752e2c5ad0c958f24ddad1ff7cd2567448f
SHA512 05e3fa3fd164defdb74ed6feccd8fc1b5cefed35586239f18c7899b80814b8a7ac00a11ca10ff7f160fced599e6b6ace626bd2f73bc1e46ba0eaf4882ee61ea9
TLSH
T15C615324DF60602BDF03A27B81D3674FF23DA988214CE767B08446B84D0B7563F18AAD
MD5 SHA1 SHA512 TLSH

Submit Download

Ixeris-4.6.2+1.20.1-fabric.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\Ixeris-4.6.2+1.20.1-fabric.jar
Size 752KB
SHA256 facd5b8451677599235521e34064cbbb173cee7f336f07408241b9c89c8feb70
MD5 6aaaf3eaf918a221650016c46287365a
SHA1 c0c1eb04725b1f9907b0e606b72952e99ce09db6
SHA512 f88f199475b6f97aae2e75c22ec9498ec6050d96eec5ae0a0bac807029b02b534cd2b2bfc90f1c3217534f74367d5028a210b8f896087cc5f42c08fce1fb4e71
SSDEEP 12288:MYb4MD3alIYJg9EvMZ7/Sszs9M0W2/aPBnLe8TPfBrl6uM+icn2hz9lwLUPi7aC:MUb1YK9pZ71zs9M0WNZLBrcs2hz9/PiD
TLSH
T107F4D013BCCD7D6AEA335973F21171526A1B0788D894B54F38951E85CCF9A8B038AD8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ksyxis-1.4.3.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\Ksyxis-1.4.3.jar
Size 26KB
SHA256 23c8c5993004f0584eb27b19b4397b7aa8833f41b8f2d1ea201ee54a60f964b9
MD5 cd84b221908dd1045f81c94744027f93
SHA1 6f4b2ea7827da8136bdf436457a2ba3fcdb2120e
SHA512 55b1ec940910a6c36fa40595b0d7b8617e3a817c55ecb2d5c1ee54c026936d6f1a4bbe63228c60ebf75195bb14f3c9128c913ba949df2c5877b9b99d21bab9a4
SSDEEP 384:MqhgKGJ1mbAP5hQaYd+CycocXoLKl+7ArmKrKY2uvCuxaLAcHVsyl2Zq/G4vXRMF:hhb6GAP5hQmcpXUPKrKfuKuxfY7G40
TLSH
T1DDC29E35F2E99C30E437977142820093E9AB025C9B5E36EB1FF4491BA8F7C575A036D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NoRefreshScroll-1.20.1-1.0.5.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\NoRefreshScroll-1.20.1-1.0.5.jar
Size 43KB
SHA256 684780241b28907369f052152ce06529af387316a6dd6e8c622513053f0d5592
MD5 f820b261021edb144d63ddd4773d8613
SHA1 1cf1ebb5fd79cce39d732467247712e68b57e402
SHA512 d8b9fe87ccd73f4fc17d50bb8a047ebde5154043264b5b130020783641542f2a357f9efd9759cd42a5150d2a03e413aa363765a8fa948b0415df26099e45b587
SSDEEP 768:L/G4ogrHNbqqyxrLi8q/mXYMdoR58WLqu/DDTR28UnqeCXV+BrwjjHLXA:C4ogrHNbfsa8JtSxLqu/nBUn0YBEHU
TLSH
T14F13D0852F2AF595F2BEB274C9AF274EF17D45FC821B12171D5A38F49E468308D32580
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NoTutorialToasts-1.0.0.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\NoTutorialToasts-1.0.0.jar
Size 5KB
SHA256 aafd911a4aab86ef2ea023df80e11b69c3e336826e7ead5bed344677b28dd795
MD5 f08d2222b897acf519e5e2ddf5a8d29a
SHA1 f3419c3a046a2d17e15ef46dd421a2ecae7e615c
SHA512 c42597b1234a25fccb136c4aae4d94b8dac5a8e2009365f293a82a2294aca0ec40afedcbac7bac1a4a864f2c1fe28d7453150b4dfa4faf37e1b5150d44b3225a
SSDEEP 96:tnzFNjq8vxjE2tWK791/p9iYLTXZWdIX53WWwl:tBNG8ptjzLTx8Wwl
TLSH
T1A3B17568D696F1A8D685077782C3832FF170954B8424A8071258B1167EF5FE12FB37DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SmoothScrollingRefurbished+1.20-1.1.2.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\SmoothScrollingRefurbished+1.20-1.1.2.jar
Size 10KB
SHA256 1fbfdc69dcb39d1d96ae2887e4ba71fbb576b66fdda1964069821794cbff36ec
MD5 ed8de4a56563ef3ac6dde9c6961ab7b3
SHA1 25106afe4000969fd14e0ee70243138e746872b4
SHA512 3a4c6083c86f465264d96ea10f36d7cc88046c17622f29ad1966c9625abdf5105a77317a96b15033d29ef3997a22691891b92a448daf0753b747256fb158cf01
SSDEEP 192:EL4n1zT1xxe7epshOBKCArK+iJHf4k5TZ2lDXpA4MZZwU99ht1kXb+O:y4nHmSYHK+G4w92Y3ZZwU9ftW3
TLSH
T13322AFAB3DAB841ED31F0139D62B91E11A0C92681195EE0F15C00FAB9CF665F475BECE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TieFix-1.14.0.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\TieFix-1.14.0.jar
Size 1.0MB
SHA256 8a9ce27daa9fbe431b3484bc93b974aa415251cf061fab7448237fabda527a52
MD5 24d4b308e943962ea3b79929f2e1af61
SHA1 05376a4be257cc5fe3fae7a1f9a042fe30fa3b78
SHA512 5183095e9ec25ab94641d8f5d8864818a4d16a644bbc2e82b63964ff3d0cbee010b643ad063d0fb66d122bd5e50a09c999ff565a4652923fa6675c9fbd59007a
SSDEEP 24576:kqwpMD6UuQHRYSIR9hCbb5jk0CuAuaUuOsVXL:ItotIC5o0CruDulV7
TLSH
T1363523A461E50A36C6830CB772004582D237E25BA26CCEBD67DD84574CFEF9356EE31A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VanillaIcecreamFix-1.1.10-beta.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\VanillaIcecreamFix-1.1.10-beta.jar
Size 88KB
SHA256 59e6da2a505cb149666f8fa209d569594000cd2975a61a11848fe5df7e98d33b
MD5 bc72daa5d89c02c1f663ffb5bed9321a
SHA1 57c261688759e66030b3dc0098cd7d4a4f8dfeae
SHA512 9d38a43b5f3755ca944e2131d3f22f2e527622f6f0316c8ea10fb457b645e85e4fa541bea9930477bd28db337cbb89d5b5fdd36250431289536821c2beac4c04
SSDEEP 1536:Q8p3w7BG8wOjouCl3TiBEPLAGnneUbElYDDhY4F:Q8pA7BGXLNhi+TPneUbFDP
TLSH
T1B1934B28F686E874F157827C13D7CA0AF5FA434C8716417A349B166ACC58C5A3B27FB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VulkanMod_1.20.1-0.5.2.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\VulkanMod_1.20.1-0.5.2.jar
Size 18.1MB
SHA256 0419af972efa289816e536203e63ce2caf4e3fde4aa0504d3dbd5ad4a533feea
MD5 fd29ed70adcc3d080f231f4532164e32
SHA1 f613ec1316254acb8a7ce055ecc0a239fa291235
SHA512 788907e12f7662a3025942e281660cd4dcdbbd4a950f8dfbbaec8da9a771a1cb431e4a481f63078f14d73dd0ebaa676fbe24cac22a422a5a7a4e49d70ffcc357
SSDEEP 393216:6nwsJsWLfMlekV+w75xEWAZg8dbJfmHn9S56ksylPsJrMpO7lyQKM:0JJs9lek9f9WHgH9S56k/sCpOBdl
TLSH
T1DA173301AD99B42FD6774AB250D465919E7CDB0C038A610F6A14013E99FCADB0B1EFFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

architectury-9.2.14-fabric.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\architectury-9.2.14-fabric.jar
Size 571KB
SHA256 bd7a7032bedb2ff96c6991a846a44c857336a51442a105f5859017e8ba9d1321
MD5 2ae04e0dad60a390031ee341e0b2ab45
SHA1 4fa65e32dbf63a871a30fe8ec6fbff9a4b8d007d
SHA512 4cb8f009fd522d68a795d2cf5a657bdbe248b32ba7c33cd968f5ab521e9d60e198f8a3f6c50e7d960a2b8f50375116be0db1fd44b5710ea758697d8ea70d15de
SSDEEP 12288:mhfDn/o+rptFqMXpAV2RxUEwlsM0f2GGbxc8dnITtEYHrLTqp/86:mFk+rfFqiAVej228dn8LLTi
TLSH
T136C4AE21198E2071F267723ACDE05A13782A578BF916305D5AA12D3F0DB79CA9FBD343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

async-pack-scan-0.2.0.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\async-pack-scan-0.2.0.jar
Size 25KB
SHA256 34240a556fd698593eef0960c1512ed5b57533e7c8fe7c590a56c8ebb09ee232
MD5 581738ba3a9dee1ca6e04b8987e004a3
SHA1 98031fcba8c6ef047af95ea0dbb29aee67fb91ff
SHA512 f484b8c064cb7c10c9864fdbee08c68459d28cfc625bb0d232913fc78357c7bd016d7e68843353baa7f4ec69ec52ed0256afdc7e505c78066117b061297d6ef5
SSDEEP 768:F7ZjQfEEt3Zvjo3R7kZ8pY8siNWlpLpkCSd0q:FVjirvroccLApLpMd0q
TLSH
T12AB29F537EC8C5EBCCBF8E784B63865FE11EF06C06165607020061D9EAE9F491F4969B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

autosprintfix-1.0.0.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\autosprintfix-1.0.0.jar
Size 20KB
SHA256 4edc27bf68952ec2a0539cb91296f0ad1df4cc935bfadd45a4b5f2c8a91fb3c0
MD5 f7c807a0703e406d409c652f13f93085
SHA1 b5e41ab2729dca2f1673d04d988ccd00cec607b4
SHA512 a3d1c54fad802bdabb2698d79d64137a2c5ba7f4fbfd3f125104b08ebf8dd84ff3063306342bb969f1b752fac91f5ac248916a54b9033324729010a866dff1f9
SSDEEP 384:r3w9gnt1v83jhD5epAyo7BBiaQb2323iLcDEMOqqRavInwCVH:T9nHyhVepAXhyH3iLWEgqRavswCVH
TLSH
T1FD92BF6A2692D124C707017594B8CD3ABF9B77430A9EB19B08F4097A1C9B7BD1E58A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

brb-1.10.0-rc5+1.20.0-1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\brb-1.10.0-rc5+1.20.0-1.jar
Size 1.2MB
SHA256 4e38907f2197ec5ad12b114230d4ff8b172c41d807e9195efca90627222d280c
MD5 8707c583485f7784aa17cab84446b63f
SHA1 72049c813f0cb38cdc0ed827a659e8e7fc7b9dbe
SHA512 1e0d53d553d114a939f07c55a63a1317313d926ca633535225fbeb855b3017aa58277f13e4d29cc5dc89c01b24e0990411fe39bfe53c4c80c39a4dfcaa2c54f0
SSDEEP 24576:eOTgHsGn88d0UrekFplmylGVIADorSevqNkmcbf+LhS:ell8WBeCpJlG3fNPAf+VS
TLSH
T1B24523B8BFDDD8F3D6BFC43086268633A702994D4684963B05A50F9E6DC9D241603DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cicada-cape-fix-1.0.0.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\cicada-cape-fix-1.0.0.jar
Size 110KB
SHA256 c4bd8bbc916f5cca694fc2a11fdd8aa7c7e611763ae7460098146344e629d08b
MD5 961353d32572e86458cdbb6b5419f8de
SHA1 82a4ad3165c0c03bbfdd32fb43c1ec04dfdae578
SHA512 d5e94c3431a760943b860aee0b0a11629bc795555c8f104becc6369932096ce1fe102e8bc0a6f8403b2a6afd89b1521b1f3978678b2d62808d8b184f1a26a5d1
SSDEEP 1536:0QjcjnrdIWwrTDdJtlN23Mo12+IF/hb5LFpRnD8g1iBvnmdyjhLsJ/fJ5:zMIdrTftDdo12+I1L1hzdUipL
TLSH
T1ABB3129A34A7CB51D04BAAFAA0C390EF125B00C4AB11F55F628F66E447E5D970F04F66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

citresewn-1.2.2+1.20.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\citresewn-1.2.2+1.20.1.jar
Size 386KB
SHA256 1c5bb912a58b30ffabe554927903d8bf81f21fc922df6ba873fa37cb5881e903
MD5 e7cd058b8f1866b8b599abdcc830b109
SHA1 1197a13e1c69e808e0c5d992fb344840c99a15d6
SHA512 33b0edd61adb9d337226aeefd7fdb7b1cd76fc583f3f423a3d0d64c2487bf922a86f84e8a0344f77d5a39400226b7a6859a4c1e9961de0a443372dee798a7a59
SSDEEP 12288:r4gLyyQkMDCkO90HD4D8aE3p3+D9Tm+F3zvwW9:r4RGkOqjk/C0Ja+F3bF9
TLSH
T13C840202BF54595EC11795330D66D8D2A8278B693706DC4F09A400CE5BFA8B7A703FBE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cloth-config-11.1.136-fabric.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\cloth-config-11.1.136-fabric.jar
Size 1.1MB
SHA256 844f49c339c8f3144e167ab21b7d0059f0d571054e26285a0749348da25c49fa
MD5 45d8bada7797af61d1f5543313b1f9f0
SHA1 d5fe84a0cc9ed5c7290a76ba570e1f8716afecab
SHA512 2da85c071c854223cc30c8e46794391b77e53f28ecdbbde59dc83b3dbbdfc74be9e68da9ed464e7f98b4361033899ba4f681ebff1f35edc2c60e599a59796f1c
SSDEEP 24576:bqFsaUsa/3HzrvZppogonkjLyHL4YB6kpJWnD4+D/hAB2tezldBzR:e1a/LGNks6kjWMAe7d
TLSH
T1E945CF2F75E8F717F3C3D8B55AC04227AD4232C6E44042E33A673B67AE66E1D6641788
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

commandkeys-fabric-2.4.0+1.20.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\commandkeys-fabric-2.4.0+1.20.1.jar
Size 247KB
SHA256 17544f7bec959c2d1ee90b52032fb0d095c3d07b9e2163e40fcd447aeadf707f
MD5 141fad26d778211efcf0747bc82d70e2
SHA1 436186347964bbbd1f47d1adb864bde7743e3ced
SHA512 c0a301469965add4744fc8beba52a52235173690fb4fb39a3b50c9531c9e231a7f7781a0f4f1aa567633595d0216a7a50fd09a02d2bfc16c432bc9742f378fe9
SSDEEP 6144:9dRkn/Bv+kXkjOTL/X+fD/Pt6FCKhedKZU7bqNc:NkBxUjev+fD/PtzKhIKZkbqNc
TLSH
T17734C0196FDDCA3DE057C272D1D2C6C328184BACA103A52F497676962CD9CCB3B53AE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

customfov-fabric-6.2.1+1.20.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\customfov-fabric-6.2.1+1.20.1.jar
Size 47KB
SHA256 1fd9be64f0b4bd577dfae6da6397ddc1a6e9bb540b2871358c7b6642619295b8
MD5 deb9836bd2a6541d23d638bb1568c8da
SHA1 548855498d667712700921412cd6cd97b2e2ad95
SHA512 351a9a52675636b5c30ba77513d4feb59d6eb2bc3a61e9da3d7c46153facc4dc758aed02584ab376d154398c45bcfda4e87e8a6c261931a6c0d121599b1ad6ed
SSDEEP 768:dCZIZi1CER7pNX8nL9XhVs+G28a8eHK3SW+CzEf6DoW9A+YFaiGdDv/1sS:PER7jMnxXhhGpa3Hn8EooWA0nx/R
TLSH
T12B239D826BEE6B3EC98F697C824CC181F473EDAD122454C78940402B4DF1BD4AA73A5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

emoji-type-2.2.3+1.20.4-fabric.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\emoji-type-2.2.3+1.20.4-fabric.jar
Size 27KB
SHA256 c349a8a5e198d2ae2c2c1a6bea1d0cd6e9a7539531ffe67b0771a49ce04eacb3
MD5 0325d622c7f35c6ac186b1448f1f9736
SHA1 4b6334a28479292aae9959396ea0f06f3f793e96
SHA512 d2cf06954419e683ed28132ff4060efa1cabdc942f9ad619ef7a74e15c2163d658eacc7f3463552674aa1860f069a111ccb9cd1970e14add1465e03124b1e32f
SSDEEP 384:De7DMEkP/1d3Q9le3M/xtOvuxeYLWGI/VoSwfIghvXOkrYxunOh2s9RlMhVq2u5X:De/2tZM/eK8pY3h8Anin9Rlt5QTu
TLSH
T14ED28D152ED5D13FC1636236900D889DDD6A13C91602B02F67A1647AACF896B0B4FFFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

entity-view-distance-1.1.2+1.20.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\entity-view-distance-1.1.2+1.20.jar
Size 240KB
SHA256 f4bca1ec5cf5035b8789b0f03461e1bc0c4491f4359558a4bc869d6eaa0564aa
MD5 2fd416c564947f0bf790100ceec71e16
SHA1 2e622aefb07caef0686c0a4c36952521edbd840a
SHA512 88734a12b2ea97468ec4b3ae06c923915a568d25fa21102c51469f762270980ed1cfec106c2884a55e28428384dbce251161ea70fda366302ab4f04adc964223
SSDEEP 6144:HWymCap8hHBkYI4l10q9ki07GXsoUwhQT5zoo6TC6x02r:2lCapUdI4l1047XtE/k9Br
TLSH
T16A34025D2FFC8D1DE28B51725316E83FBC25A9CAFD1C360729DE29A5C9508A30381D9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

entityculling-fabric-1.10.5-mc1.20.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\entityculling-fabric-1.10.5-mc1.20.1.jar
Size 1.5MB
SHA256 cb4deb2a823c83af98fcc06e92807913b482de54981d1657a29882dc1fd4665c
MD5 ca868a97c2f22a66bec9f5f5818d5c34
SHA1 eab31fb55739a789ce84d72ba4432297f1309ee5
SHA512 0040810df359b1eb6eabe4142406d1fe69624dc1360efd8df7155c80ddab6fc0488bae0931f76e21b20c0776847b960d5e3bd7b726204ffc62a90edd6e825794
SSDEEP 24576:1ARh9nrZgmOL6eqOU4AaDyzvV9PahKb37EmP2ILovhNcXo0H8pRLyiQvVO+wzO:1OMz6eq3Ram9n37zP2thNcXn6L9gwzO
TLSH
T162753322199FA7DFF7D36532E0CA91578426594F54BEF237CF3128061EA8E672707218
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-api-0.92.11+1.20.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\fabric-api-0.92.11+1.20.1.jar
Size 2.0MB
SHA256 3278787c04ad636525b5c3400dff8302420f79279f6d51ce3edc0149060d12eb
MD5 480888e4128874e4be052b0e7ee81697
SHA1 2824689367eec2b52c6085e968343751137e66bf
SHA512 fb8d9d5c5ee387b12770fcef1cb4327f1575bd21606f1a268c9eff43fd3697cf0a3af55dd688cdc913f1423737f8905e13282eb69dd69f0995c32d6e620efb3f
SSDEEP 49152:sw6yLzI3PVF+6U3l4sycTB8dGH7QN1GxML6c7D12k4LQ4Iiqn:sw6y6PgTW806xMPV23LQ4IiI
TLSH
T113A53377F4485096CA5AB8BE7801A6045240F8EE3B0CFFBB1045A66C2FF5FFAD150A95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabric-language-kotlin-1.13.13+kotlin.2.4.10.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\fabric-language-kotlin-1.13.13+kotlin.2.4.10.jar
Size 7.7MB
SHA256 34ccdacf13bb9351fe43ce61912c2e09b72364e43e787d36ba3d2d04dec75a52
MD5 b70470268be8c74a10e10b24a2bf7df6
SHA1 620cb137a9dc69ce86f3114f19d9eedab16366f5
SHA512 9a63c35a550b0362b7b25ff045d93709c7b0dae08c89076cba422813fdfb9e5f5dd021ed3afac9f82e74e95b88c249e8f68b240717151540ca3e88cc27fb9c77
SSDEEP 196608:hA+fOxLqFAdB1QlFjyzAcNeVVgZqYyALAo5gyQVD:eGq0FgAfUqYjLMyi
TLSH
T1028633B25F88D9C6E6A170378720AEFE38741B57141AF958A36489F1178A1C3FF31789
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fabricskyboxes-0.7.3+mc1.20.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\fabricskyboxes-0.7.3+mc1.20.1.jar
Size 202KB
SHA256 277393ed2df9c0418ab0af23e7c4213bb08b71d139c022d38ca3ead93235ec35
MD5 a3e21b6bb94f98d3b5d29c77d1ad703a
SHA1 31a13b9ca0a500b4caad993ec42e1199142d86d1
SHA512 e71c12b81f10b42c06fac9719a2135c6d34f298fb12d926bce9aca6af8655b76ccb31dce9561543499a019e43e93cf4036dc051fe2a97ca2a8fe112f646a99a5
SSDEEP 3072:wXExzM5XwCf/nmrT45bBSZtL8pw7wTwNWEXolIq0hY8LIJyr:6ERM5XwCf/nmrT45d+lbwTwNWdlti8k
TLSH
T12714E116BBA4E0AACDEF2CB78D114833D462D0E5477393E306D0D2F096F9D552A11BE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fadeless-1.0.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\fadeless-1.0.1.jar
Size 7KB
SHA256 4a854afa0ca3fbc6e942ee1e4a2e94335d517c276bf7989684c07612f0e7ac77
MD5 1b17811bcc7052b8fc38a4c44bcf74a9
SHA1 8a48f9abfa26e4abc06490c6e818f5cf6af1c280
SHA512 8baece2486a29354276fbfbcb267ada333c26c59b3bd662101c309aea15689e06411d5e43e557601fb53288258a7b4239f34d573131972b098aaf69ff943ac96
SSDEEP 192:MCNi1V0I9wFablpIioukYXiK1FfItD3Btgn:Mj0ylpIiRyoIzKn
TLSH
T170F1A7466B529043CECB5AB7D2894305FEB4399C83135407B2A24C1EAEFC7B21D5FE98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fast-chest-1.5+1.20.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\fast-chest-1.5+1.20.jar
Size 24KB
SHA256 e2a6b132cccdd2454d53be1b3378ef426d41bbfca5313a51f9f159324483edbb
MD5 3d8e221cc1aa0e8811e9b191e3fe847b
SHA1 3a4f28e4bba3569607407e561927d40eeed1de12
SHA512 84afda0514eabed2dd0566cff75c244d528fee42cf4e5404f5b2efc676db63565e65aed23335bbc21638000b2391cf45aeb008653713e7460ac44966f5c8b017
SSDEEP 384:uv7/dm5qYconK0ohOQSxwGfQrHLEJUbh5lJPEPqetq9z8:uvpm5qnoKpAQSxwGI4UlTpJh8
TLSH
T1A4B24C24A9BD9E49D21F907B54B140C3D43447BA4A45F0EF22A490682EFCE9B0717EFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fastquit-3.0.0+1.20+.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\fastquit-3.0.0+1.20+.jar
Size 77KB
SHA256 6c07d505a7c7435c9813edf68103c8320e37c20daf95418d508aac2681212a78
MD5 a1b2847e248207157f5bbe7285b41927
SHA1 68f080925502a49027e231c63d3b94128ed6499b
SHA512 aa4710b43b9ed8a15f39d83fd0f6fc84f5c1e2348b2bad2e88ab0c0793d308162035f6bbed03488eefe719fe565ed37d6310c710f07349c10502ae5937555133
SSDEEP 1536:01TNqOlTH4jzGd16PWCqSk/Fe594LvfWzgNCSdQSnE:4Nqeoh5yLvf7/qME
TLSH
T1E473C0B72FCBA069DD26843B840490827B6CCAFC9810777F5B7407959CE2B780A47D6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ferritecore-6.0.1-fabric.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\ferritecore-6.0.1-fabric.jar
Size 122KB
SHA256 c7ba1118a05b2da900d1c369fbe1017a3e3ec3cafe5e51398b851279b9becf24
MD5 a19272e427f75fea59127de6610ea26b
SHA1 8fa3b84fc5860dbc30fdf8cced02af68dffcf3fa
SHA512 9b7dc686bfa7937815d88c7bbc6908857cd6646b05e7a96ddbdcada328a385bd4ba056532cd1d7df9d2d7f4265fd48bd49ff683f217f6d4e817177b87f6bc457
SSDEEP 3072:chZJyJi7+WCHute9GwgchZGCKRkXPI4zEf:chZMJE+7TIG0jRkXP2f
TLSH
T18AC38E2B3E38697DCD4B8D7738538225E1C1D04ACF24AA4748659A4BA914FFD470A78F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fsb-interop-1.3.6+mc1.20.1-build.50.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\fsb-interop-1.3.6+mc1.20.1-build.50.jar
Size 48KB
SHA256 17bec23a0a6d67bcaa4d056cd7b8938ba1c00f40b095cfa39c570a3f3b0d8b46
MD5 87fa8fe095bad30e9ca15ceb660b5e45
SHA1 4ead20a0528788f36d4a7e38d1ebfec35218387e
SHA512 922e5048e64b82181147cebda117408dabdc0119cd101172a7c24047a936b7add14a7db21b3aa73c6f0262b97cddd7f3768bdb30e08aae3fd88913e8f9fa5ee0
SSDEEP 1536:yx03dSGBzVuEYFnDRGhE8iNQ6UfRXl/kQZOm02Vxs:bdROnFDYhTNXlwhMK
TLSH
T1F423D180AF0F581BC74E8431F862D10956B0726F81D166E3A684F7492BB7C1DAE2D76B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

krypton-0.2.3.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\krypton-0.2.3.jar
Size 181KB
SHA256 69ad1810206ce12181b1b083640f044e7e250781c36c96c655eac36209057698
MD5 3bf353c1ab576b57c003109c079e2ec8
SHA1 4d499819effd8afe811e5d93952fcc46765a00df
SHA512 92b73a70737cfc1daebca211bd1525de7684b554be392714ee29cbd558f2a27a8bdda22accbe9176d6e531d74f9bf77798c28c3e8559c970f607422b6038bc9e
SSDEEP 3072:cI0l61h/reBKbu48CVn8btz85xci6o75WiHrbun5Rw35aFPhxXkgcd:oABGTl4rzPXu5e5SJtid
TLSH
T1B004E13537A6FA69C983C03863735D847B11DA740A9ECA0EB7440B6BCE99178391E7CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

language-reload-1.7.5+1.20.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\language-reload-1.7.5+1.20.1.jar
Size 71KB
SHA256 bfe158c575a9d31faf94019beb62a7fa6ef0ed75cdf19cf4a5356e0e755cc332
MD5 e54d06e9846fc770c6f0b7fd94c7d33e
SHA1 d825fcd495bcf53ab9ed3974a57f87b4d56d6a26
SHA512 ae9a1340b125b50008217e0a8a1a8131a5e0432ecbf33629eea51482737ba17b4e710329dfa3aab70caa034ea7d97a4ee231e1fd6cf252a721fdbc7b4a149cb7
SSDEEP 1536:K3oycb6ELmfKj8Wcag6ctKs9O+j8hO+fw7Mkw+0vP:KLsDvgVQ+j+1fhkw+0vP
TLSH
T123639E063FC0C46EE00B8F3568825CD758D802D61A42F83F465565AF79F2B9B3747AEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lazydfu-0.1.3.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\lazydfu-0.1.3.jar
Size 14KB
SHA256 4f3b77273b57d019a8db58371e63e4426557c1bb7c9cc10536a03972122778c8
MD5 b36e83f424c5bb5100a3e8ffea0c6ce7
SHA1 0dfa8b03ed408fb7fdada29e01cfebba02af1049
SHA512 dc3766352c645f6da92b13000dffa80584ee58093c925c2154eb3c125a2b2f9a3af298202e2658b039c6ee41e81ca9a2e9d4b942561f7085239dd4421e0cce0a
SSDEEP 384:rPycW1nAR9momphuoeQp6MP+d1GgcQoeO4GG:rPycmAR9N0uod8MPksgNJl
TLSH
T17E629F682A5150FAC39A10322452AE476B153F844878DE1C6C1B5F2D1C3FCD6B687B7F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libjf-3.12.5.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\libjf-3.12.5.jar
Size 976KB
SHA256 244f3649991a566d3446c22f39ed25444555bb81babeae16412c60cef85210d2
MD5 59ecccb381113a1860bdeebb1e27ef94
SHA1 0271ccc0e9621051cbcfc0ab5043ca7c2261634c
SHA512 ab7137023bc58af4bde32f390171791b39ff4b9f82ff0ef187c30cb04048bb195e18f8215951b2d110b07b060277823f66010cb7d7c6650bf62b9a4d88b472f8
SSDEEP 24576:3geRI3iI7NPJ5VlkjpkL6rgbvVhXfFk2QM:HRFIBP7Y9+3vbXfFkG
TLSH
T182253318AF748EDFF57F30A42B254E39DD83B4FF9A119AA933E445E092E39593006321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lithium-fabric-mc1.20.1-0.11.4.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\lithium-fabric-mc1.20.1-0.11.4.jar
Size 675KB
SHA256 76133efe92aea907cf75562d9e26517deb170e2580e1ecd4979da2c8902de782
MD5 01fba3b3678fadc34d4d2878031762cd
SHA1 048227ed60a3005cf9fa55880dfe0cf20b0ba680
SHA512 31938b7e849609892ffa1710e41f2e163d11876f824452540658c4b53cd13c666dbdad8d200989461932bd9952814c5943e64252530c72bdd5d8641775151500
SSDEEP 12288:4lo0j1Iy/RnWGCQ5nd09iLd5zuQsAd7TelQCpj:4l7ey/R4EdnLd9iAd7Ry
TLSH
T186E49D4A2FEFA23EFA0F9773444F60D3E5641EB5EA10545BA2D08B0B05D184F0B66DAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memoryleakfix-fabric-1.17+-1.1.5.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\memoryleakfix-fabric-1.17+-1.1.5.jar
Size 48KB
SHA256 b8ac33d7262e019710dd25e454116616bc9ed1f714ed910594b28a4c1da5adde
MD5 a8461f89d267441752c95beb5448e940
SHA1 784bbbe9c64ac9d3d4ad19786c02291e607fcf4e
SHA512 a7bf7429340d076f4b30602bc714280c3f5cb8e814e76e89296c8155e3355b33304a148e9218378a3383127e95b7ba47402506c687f1d58609704fe8cc60ab93
SSDEEP 768:5IJ1TgmSxkFhrUTXdcGkSDs1hLlHjnnQdUsU9Mqrzp/YDpIkpQq/cQI1eAsN:5GJQXdNDs1Pz+U39MqfODukiqblR
TLSH
T147238C207FFE89BBCEA35437B391184A6521268DCD40AF07449C2C595DF5FA22B25BCA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modernfix-fabric-5.25.2+mc1.20.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\modernfix-fabric-5.25.2+mc1.20.1.jar
Size 532KB
SHA256 5c1f852046e62a17056bb6b571164e61644076c5eb9029c92b31e337cc62c0d9
MD5 f4b88179db335a7e4f0234357b1a5ed1
SHA1 be03b9eb570c1e9df7593e68623f0fecbd039460
SHA512 878e39d182767ffd08ad6a3539fae780739129db133abe02b9b73dc3df6e1ac9ddbe509620356b0aae5e7bfbed535d0e18741703334317a16fefef820269da2d
SSDEEP 12288:e3XeLxpsSQj93NB1ctLH8Vp3zaBSSKxEP:YXe5QjlWtLUlzv0
TLSH
T125C4CF24AAFBFF3ED75350B3157A688570094F687841609F5A4C0B9A89E3C4B5B0BBCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modmenu-7.2.2.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\modmenu-7.2.2.jar
Size 704KB
SHA256 a041b0f0305ffa5eb90120aa23768e1cfbb27583904b1751e3783c0f69382f1a
MD5 2629511a2d3b141d9f2a24dc9685637e
SHA1 099c68feeb74887cbbbd8ce9a27c6123804a2c5a
SHA512 9a7837e04bb34376611b207a3b20e5fe1c82a4822b42929d5b410809ec4b88ff3cac8821c4568f880775bafa3c079dfc7800f8471356a4046248b12607e855eb
SSDEEP 12288:CezyKL/0yBeczZRlCfVo8+44/jV/aOsUfh4e2CNwk:Cezj8pczflWVo8H0UOsw4NVk
TLSH
T16CE4D07A89B95048DBDF33318263C10EE182BBA98442F55F1236C91F791FB09D98796F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

morechathistory-1.3.0.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\morechathistory-1.3.0.jar
Size 3KB
SHA256 87dd00a8b62b10bed3bb201d5aaf220fd72a6d77ef284c1fc65ddb5e262d4c8c
MD5 1980ac8b5b66417091d101682af8865c
SHA1 346cce5cb5d89e676d8ed0dca05522369063b3c3
SHA512 b8c097418f9b60b3dce19e6f0a5d2f7ca864f7ac543e589061c898fec141df147296c199fec71f52a5d5d078a6f9ff891704f9d81dcab8653d80885adb551726
TLSH
T121712F2C3E8CD92CE843627B0451C6C3A02887A8654B951F2698057C4DF5E8B8B67DEE
MD5 SHA1 SHA512 TLSH

Submit Download

moreculling-1.20.1-0.24.6.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\moreculling-1.20.1-0.24.6.jar
Size 268KB
SHA256 6ba025225149a19ff152a83198c1c10cc321e9e8a7706f7c77f25523ece89854
MD5 877f2e0587e9c49ecde5ef2712908f7c
SHA1 c99e1ede1b0a6b90467078a8abdd6259c83d77f4
SHA512 8e38b0e5f99faa46cb850695e3776f00689bcce48acd358fa28ce0679847e8bdd76094ac834022d885b447b6001d35c805072c26ba2c3544aad6c7034209be1b
SSDEEP 6144:wAjPAQLacvXAI/uIAG10ywyEVrO7/cVNpLgJh:w6AqvbuIA80ryE4otL8
TLSH
T1B044CF92ADE88CADD503543D83C088F2647447EC959AFC2FC593064A9EE4D5B270AFED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

no-resource-pack-warnings-1.3.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\no-resource-pack-warnings-1.3.1.jar
Size 4KB
SHA256 c3542072d9f3b52579a8d5b971daee5a489d326018b5af2081479d8e606f68ea
MD5 4b69c707e2d57ece32dd520c1d7ad1c8
SHA1 7a21f4604fab946201e2cfc1a9a8f526f5581cdf
SHA512 d745582794be5103cd8d5c562f97e0d9001d36bc5421dbfa63b417cbf439d12ec2c0844a47da0c4c06d8c1c9224939d296285fb02216a7e86410765f4b2165ef
SSDEEP 96:DWIdV4q0KTHozpbP+Ot+A7ai94IHYzG712GYjB58eSN1FmH:D3KQHo9tJuzG7MEJ7FY
TLSH
T170A1A3256FD1E03CE55782FF1246C173642C6B08D106A06F88A880B918FE39B6F17DED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

noisium-fabric-2.3.0+mc1.20-1.20.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\noisium-fabric-2.3.0+mc1.20-1.20.1.jar
Size 209KB
SHA256 266ef6f28ee69f91acce6ca991121c21f2944e76f366475778347d90d33b491d
MD5 4aa425a04054e2c300a8bb816574653c
SHA1 be85535cf1efe82bd8c41bcf851becaad498a598
SHA512 f0abcdac514bd2b4eb6af3529eeb9980a6fef534d31244879acb291a9943151aeb34f372bf98ae01f6191870bf95e1c0bc36d522433353a1090b96e7ac03c417
SSDEEP 6144:N76zUmdvK11WVWjAKE9f4DaF/QeT/AWWXl/acNKzbHeIBcoexs9t+RY4LV/eQ7Q2:wvgLWVOAZF4Da//AptacNKzbHeImoex7
TLSH
T10C2412822458896EFB8BF5BD369D4CB218B577F5878BE1AE80E211379191307130DEDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

notenoughanimations-fabric-1.12.4-mc1.20.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\notenoughanimations-fabric-1.12.4-mc1.20.1.jar
Size 1.9MB
SHA256 3eadee3d7fa85455be61e73ea894f2defbfeafc0b28fc9b0657a976bbdf30fde
MD5 9cd1800e864377b84ebf0963e4829cf5
SHA1 220aea191b2fc5045ff7121b07aedbe00e2ff4c6
SHA512 8c14940bcfba1ef40120caefb205540be65d8d5d78e943fc28855f1526902c9ba46d5ccc34ed8f5893fd85eec642b0edf3f883a9d2258ac0a021efb60dbbaa1d
SSDEEP 24576:wARh9nrZgmOL6eqOU4AaDyzvV9PahKb37EmP2ILovhNcXo0H8pRLyiQvVOIKrpm8:wOMz6eq3Ram9n37zP2thNcXn6L9+jwT
TLSH
T1979523A415469BFBE3C3A733A1CD51038C1A650EB069D53FBFAD648E8998D6B2707334
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

notenoughcrashes-4.4.9+1.20.1-fabric.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\notenoughcrashes-4.4.9+1.20.1-fabric.jar
Size 135KB
SHA256 3d6184d1a008997810de492ff506cb4696a541fffcdc8028558936b68234f1df
MD5 27e3f7f6072cc0d0fef5f85b82401e5c
SHA1 d9cb6a26df4b1785fbcaae0ac906df0da17d0280
SHA512 267f8f4799e7b861ffd11a2148886a95c5c1c52842794305202dd50f69246c800fdeb1daac65fdf148fa2081664a07e0eae18aa5a8579cffbd6a6d41b2b800e0
SSDEEP 3072:vUziqpUPRv1Roc8Ao6Wky8HXUdQzT7wrPXAMPQgRB:8zWRr78bh83ckTU/9PQgT
TLSH
T158D37DDAAF4FC713C64F893A848C82E1BC6635CB8467740B2B762085ED504772E57EB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ogulniega-mod-2.20b+1.20.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\ogulniega-mod-2.20b+1.20.1.jar
Size 329KB
SHA256 b15118a0e0746dd627a6465d0dd90f0d3c98f749966547b839d206804e175773
MD5 2fa329a4ecdd0a43f84e5bbf6705ea94
SHA1 9a2fc3282bdbfe27bde5644e6d56d0af99479e5e
SHA512 96394671b6bc8dea2a9d104ed724976b98304408928b6bf2cf1e17ebde43c8293ce23d410743baaf9320893772191a5bf1f1ef8aee5d6e6c13af75dbc9d9d0ee
SSDEEP 6144:Qcu8SLhly7XiUal8c5Hwf+aNaMnpEOfyo4DVWSzi22JH6o98o7tL:rufU5al8mIDphfh4DziDJV8StL
TLSH
T16C74D09B7F9CCE3EEF37683E8211CB13AB8516A8D049D51B0AE0288614B5C542FD79DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

owo-lib-0.11.2+1.20.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\owo-lib-0.11.2+1.20.jar
Size 884KB
SHA256 1c249c30d3e50bba5cb35e0c3acebf4bd5f969bd33402de2f3a6a619fd688d12
MD5 9150f588f732ae38c0320a17fa340626
SHA1 be88938ca5df78271e64bc9f85c3575754f33e2a
SHA512 807e4a3daf493e92c5ff0d5657efbba2a4e0cd2a9b753f2d6f153422629415f189345842a6dd258c87d4c02ebf38950a517bcd8a7ed929af6ed6485ae46cf77e
SSDEEP 12288:rZtY/lN/DXcZCty2NCQ0SINuyhUVAPBNMzWflVogjxUX2pwGd3529SO:Ud5cCNCtoaU7zUnlxN30/
TLSH
T11315D01ABDC4C829E3F37FB55400453AB26018488B955D2302F7BBD86C5EE792FD7A89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recipe-unlocker-1.0.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\recipe-unlocker-1.0.1.jar
Size 21KB
SHA256 4c9825937660acac23f7c10f5333ab5770a675a3f4dbc7ee2feda0d71963d870
MD5 6f7562f9802eb764265a063003f4e3b7
SHA1 f65d55e2fb39b4e145c6010154e556db4d2ee702
SHA512 369ae10bb816f0426db4ea5aaf47975d1fc296a0760ee76ff3701d9b43b0f60d536597883049cd66b5fa72dd92cb8fee97e7a792a509b8c079e65e502bda6b08
SSDEEP 192:8R+vOMhVGlXmZOOQYWSw0cpg8Lo114XMiNK8QvY2lTCv7mAtI98YpCpg4KDjSgYz:80vOuQkc1o1UNxinSC5Rp62rA7qUzZ
TLSH
T183A26EA49F7E6924E35B9BB4E557C342FF734118571162870EA16A2C0C8F4A0CB8EF76
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recursive-resources-2.5.2+1.20.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\recursive-resources-2.5.2+1.20.jar
Size 206KB
SHA256 23dda97c2341a0a2a2adb5587915fd2f20cadee84bcf855a64417b0e1db65e36
MD5 b1289e676d4d4d9f6322b2c8008c590d
SHA1 a77f1dd52ad0ee309edcc6c59ae94a3b4c84f1fb
SHA512 d30d789044e8b326309484cab18a4ae18e25e771a1ab96780961da18a01380b5746ec15c7a8cea910df230f98d6e4e899e5299658db3e8ced48a435f82ee5284
SSDEEP 6144:we3835j0Qi6YVBWjGg0EKmq9iwnyumN4NvxAi:13C5j0ZIjGvETEgapZ
TLSH
T1622402E6198004B8DE43B5F79105CADF699C10C88D88E82F77171A09AC5B7E46E4BFED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

replaymod-1.20.1-2.6.23.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\replaymod-1.20.1-2.6.23.jar
Size 14.1MB
SHA256 a46491d73456187ac888d31f6cc1160e42304427a63da88874c84abeb4d14033
MD5 a5306cc46ec23df781df1b86a2106373
SHA1 5688462d17b171c8791308b5a4963057876b6188
SHA512 dc255bf916acca75c4bbf1df0ad45a944bbbf014c0246082c31df56d4fa8425d6ddecf1f6c4cf81c4588c494a6da36436e639b989def9c02d1a80d58a39db66f
SSDEEP 393216:XIIrOMztn3NAK9+0GjyHkYvVD7yyl8gQcma20gnofa:4IrOMIKU0EyEyD7F8H0nfa
TLSH
T110E6E12778AC5C3FFE276E33281390327B7A69AFD18F565010E4A1D766A6C0B1B1479C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resourcefulconfig-fabric-1.20.1-2.1.3.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\resourcefulconfig-fabric-1.20.1-2.1.3.jar
Size 131KB
SHA256 f8fbad0b2ab07ccaffce53a9d835601b41ab013af8a501af4de56b3958d1182a
MD5 720878464dc76b75681072f025eae1aa
SHA1 d351fd7247c8adc0fe41d6b3a04bf869fdf4ddbc
SHA512 858a1730846637c42333793d8531ef98574bfff343703e2d8637d4bc8a4ed35e1fcab2bb67e263277165e3469fcb8dfe77acae7d91512b26e9fec5157e51d9ec
SSDEEP 3072:mvKKb5qFhih8kDNQMIzyp7Tg2FyQVp6It4Jv0a0RxD:q5DikavmpM2b6BJvJ03
TLSH
T1ADD38C5B2CCC85B7C9936F72E044D017FA0447C1F4A2F10B9B90A71295E7B9D866BE6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

serverpingerfixer-1.0.4.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\serverpingerfixer-1.0.4.jar
Size 6KB
SHA256 85e54ce49a3856e8a87ea936b297bcf344636807c86488ba2c0faa3df0031708
MD5 9c94c8925a4535a6d28f8a38b05cd876
SHA1 e68da275e6246fdb4e0241ba1df35182e1d0ffd2
SHA512 3362669e03fb8b70c7e90d5506e26971acd6cba6ed95b6042dd097af6f933e05a7801be79662830120eb76184eb624fbbfdde5fde9cba4bbdaad2896ed26d37b
SSDEEP 192:dVn1mQcVI87tAHkgOmsaiZDJxU4vysff0DGzKB:znI7IouOf5UW9fJm
TLSH
T1E2E139292F8CE22FC0674AB681400A9332140F9D4642F64F568455BE88FA9DB436EEFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shulkerboxtooltip-fabric-4.0.4+1.20.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\shulkerboxtooltip-fabric-4.0.4+1.20.1.jar
Size 1.2MB
SHA256 f5077ade6b9510b3bbbd3999d7be75b6bf44a8252afb33fc795b47e043f0614a
MD5 f3dbda55b10626725456665abd633e93
SHA1 40b822aeed9de6aec3c872af9be2ba17b3867482
SHA512 65cdc8b565e5a7f9a855dd35c7c4b20daae0c6a5822e9a32dabd0f8fd4df6353c9fbd9d1437b83c6f7824e1c65ce466a82f70a7b7ef007bd54afa63718037043
SSDEEP 24576:WT3ya1hsjHU6UuQHRYSIR9hCbb5jk0CuAuaUuOsVXsm:43ya1axotIC5o0CruDulV8m
TLSH
T1604512FF9C7B2CAFEE8319793801A741D216C37C59C8A96E13D40D86485AF076B49B6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

smallpop-1.20.1-0.4.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\smallpop-1.20.1-0.4.jar
Size 13KB
SHA256 4182105de9e618af45cd0e3a11bb70c7a2342b42c92382c5054e4da69c230281
MD5 bce8e04ab5061e64568f7130eedfbfe0
SHA1 a502e3a8cfbe6dfa5cda46895325ec0f5d80be89
SHA512 d56dda8e668bbea9b3a3ec0fe84af8decb25054395a85be759247b536ebb36402a7765cadbc51a53fa6be0d8dea7205fa73bc1fc2fb82f898ecf4922412a27a0
SSDEEP 384:Q9bD3w9gntS5VS71a+AU5BSMLlhcJmiuyNR45E//:Qlb9nUS71azU5BfcYGR45EX
TLSH
T1A652075565AEF92CC41F537674EEDB0BBB76824D2744B0A74092663D2CDDC30890BF29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

smoke-suppression-1.0.16+MC1.20-1.20.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\smoke-suppression-1.0.16+MC1.20-1.20.1.jar
Size 71KB
SHA256 2baf27d6ee2d27b376231bba3dfeaa7fe0f395fe26e528107bd391c4e2fac259
MD5 b50acf4b86dc025646ac3d26257cf476
SHA1 03ba9ab8bbe6595b30509e4bafe174ba97ddb369
SHA512 d181596c500ba888570f032ecf5dff19279730b4a5b5d50d902bd19591366382371c92ae8a09ddb25c214b44c0ca53c253ed35ac56ec441462c9340b0e403542
SSDEEP 1536:+lr41enHJykB2actSeOO86UMbjTEI7F0BrpVfz:+lr41eHJ7B2qtO86UMXwBBrpFz
TLSH
T13F635C14BF9C7A2ACF078B3C21A9F74CFA785E5C74D0B427069E50052DA5EB92A07E70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

smoothswapping-0.9.3.2-1.20.1-fabric.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\smoothswapping-0.9.3.2-1.20.1-fabric.jar
Size 58KB
SHA256 01f402a3685bf8e756c3f50661d06924c67ee375099c19aee884f52187fc07f0
MD5 9d5eb34ccbee43ccad248bd78c541dfc
SHA1 c4073f28f7f149711d390834f42ca5b2a12228c4
SHA512 f65c0a37f908fbad0240b36e024f629e8245faa87b5f6fea871c1466fbeaada7e664324275b1940a81cb0f97877b37bfea29ec6141229178b26d0e44652f7903
SSDEEP 1536:GJF8K3NXhJX2vROQsR79dYUwDzHh7xitDXZ76S/dS:KB3N3iy7LezHh9iVXZ2S/dS
TLSH
T1F843B0377EFB883DC99F4839804245937A849789A146A00F49F6C44D16F4E8B2F6EEDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

starlight-1.1.2+fabric.dbc156f.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\starlight-1.1.2+fabric.dbc156f.jar
Size 124KB
SHA256 2b4bb0256279b9edeec050ea02751119e4a7c6933a2b0d2905a72c56b14882d8
MD5 a0b391bf55891502c2074bd078bb5899
SHA1 a03102cab439cbab5a1d7d72cd7c2b4976ddd421
SHA512 6b0e363fc2d6cd2f73b466ab9ba4f16582bb079b8449b7f3ed6e11aa365734af66a9735a7203cf90f8bc9b24e7ce6409eb04d20f84e04c7c6b8e34f4cc8578bb
SSDEEP 3072:Oyaaf/NtC21+ASXpe7SP29L5EYoXwi3b8fYMkfUVWfT:ORA8Xjk+PQ5EfAw44dT
TLSH
T1C3C3D068BFB61C78CECB4776D0B6C2557B358BAF1102534355D1990B8CD2F207A6AB8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

statuseffecttimer-1.2.0+1.20.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\statuseffecttimer-1.2.0+1.20.jar
Size 164KB
SHA256 2882f4e361aece1555a2b6dfeacfe41fe81b201a9e69a350dd6c7531f9183b89
MD5 046fae58542e0d9a68597a1906308281
SHA1 4350959645a7c8a1f7758b50d3419ac0c3135d08
SHA512 485b9ec5117033c6a1bbb0cdea0a5e171bc2fac822f21e032ed83bd36e5a91b5f4edf6eaf99c57558ba2abb90a4259bf16e0db0ba1009f2d8ffcd19ffb8e58bf
SSDEEP 3072:HXHMIdnK7LghE70pl2MGImUbpJO6OZC7ia7Pr/vqFp42VMcuW+l:HLdK/qpopv0O6Oc7ia7j/ivZVm
TLSH
T116F3121E3F80E06BE0D79A7644B7C561753A4901AB00A55F7292B39FC4E09BB34BBCB5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

threadtweak-fabric-1.20.2-0.1.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\threadtweak-fabric-1.20.2-0.1.1.jar
Size 141KB
SHA256 13954c14a9491b07eab6d2b278faed5629d42ac52cc959711959f32270e6edff
MD5 3db999f5fc9b78fdbbf66d12461d49f5
SHA1 4849b845daf49089d0eb1268ce23d61b9694afa4
SHA512 b5a9fc2775bc8c020cb88b898dcdf473bf77f03ef41be1661a117872b16582a7e30b4f4a94d4c97855484a173e5e41951d47fcc17aef2429828b35308453835c
SSDEEP 3072:4Z2ptpTCvYToauVUdSPLaLO3ldZk/v9w1/nJ8q/LGxzxBXIaMaE:ltJCvYHpSTaay/lwpvqxzxB4wE
TLSH
T15AE30251B8CEC9BECEA71EB29202590332D707955791E12B3A057E7A8DF0E112F17CE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

timechanger-1.3.0.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\timechanger-1.3.0.jar
Size 65KB
SHA256 c8ddcf71c3b62cd94441500a85e3e7ca8ed7f68bc05cf1be1cd67738ef768ce1
MD5 ae62f2d0952d797ee65e5c338c3888f4
SHA1 9a0a9e839e67e6fa1fba55f879e2989a3196f9a2
SHA512 b206bf0687d8d56e4358ff1d1aee45b5d0f2fa54fa808755e46bcd871639fd37f082fa59c3ef1e6e1370f3b8ac456405a5d20487eed7b2138b4895fff7fb202f
SSDEEP 1536:dKtefS6DoBbc2CDq+65bUXtFvcbPJSzj0lgRu5BpUT0YYC4ZWX7Cu:7a6DAY20qLbUcbaIlCu2L4ol
TLSH
T12463E1E11E905F9BD06B167B88B1D0EDAB348BC44022961F1BEDBC7E5C13CB56016F96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

title-fix-1.0.1+MC1.17.1.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\title-fix-1.0.1+MC1.17.1.jar
Size 6KB
SHA256 d2fba560aa3cd06cb0819562e38372e9e8cb9d311856123d12785c0995b1cdba
MD5 0e3553416dbe7be461a4a0510ae8562f
SHA1 2a24ffbd54c7cceb01d8603e518bd978fcfa5752
SHA512 04e5e68fb399662fbf7f29b0f1f044c4a0567d1fee21628b6ff7994f9efe952499219b1934a3f9f1d1eb296816181d938300cd3ce01c0a36c7573b5e48466c69
SSDEEP 192:cL8DVHXMsq25L1oLpLPLel82TdLIOExh0z8Nd3/ev2L6LwLoLFnLYLCOFC+7G:pDVHT7h22TFExhM8fugFC+7G
TLSH
T142D191B5068AB41EC05D677825A8020BB9ED960B3439C2DF4C9A1D741CFD9AE7EC2F48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

voicechat-fabric-1.20.1-2.6.21.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\voicechat-fabric-1.20.1-2.6.21.jar
Size 5.0MB
SHA256 f2a596dcb7e437e90561701834ddee1e40e2fda2d9a7f0224b90c203872a8161
MD5 e7c468ffc12d1fe971b7e4d10d8884e9
SHA1 ef93640fdfa28f5bbf7001d7018154b62c259423
SHA512 63b3a92487d96b448b49ec784843f3d0b1f715791f1920b78b1b9e6833075ef454589a0ff17c7bfce750752b693f206fc126e64c5e48609af022d31b45f4c852
SSDEEP 98304:ZD38bywT95rz+OQf9Gnq9zyOrwvj6/O9+cfl0n5M3bZ/uccCPGq:ZDMuaFWHmOrU6/Otfls5M3bZS2Gq
TLSH
T18636127DFD76502CE187893591D2C8B3545A1388A709D0BF256F086F8DE4E87831BEAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

yet_another_config_lib_v3-3.6.6+1.20.1-fabric.jar

Path C:\Users\Admin\AppData\Roaming\.ogulniega\profile\mods\1.20.1-vulkan\preinstalled\yet_another_config_lib_v3-3.6.6+1.20.1-fabric.jar
Size 1.2MB
SHA256 7a2389ca436ea8f7abee787d6373f9526deece5d06785f3623b7fe89bd9b31ac
MD5 b6960b2defbf8cb1b983cffd261089ba
SHA1 dc5ac6c6c4d1e48e8e520b9a41b41e704e82cf55
SHA512 20f282b3cdaec7c83a96840edb756336677c5816ed943145022f1ce1eafac0c9aa7c621939e15abe6f4309626738bc56d3d1b8434f5175d22e7409108630b02b
SSDEEP 24576:WJ2aQu9tkrB7ycRkHpUtfafDFfrZBUm8GDZ0er9P:WQ69OvRkHp4afxf9em8kZ0er9P
TLSH
T1EE5502167E7C98AAE5B3C03AE152DAA55C1787CCD121B06F415A0BCF09D885F0F2EB9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5944ef.msi

Path C:\Windows\Installer\e5944ef.msi
Size 7.0MB
SHA256 2e0fd7ff399228525e2441ea451ecda7ba371c39eecf22a62868df6be9abd5aa
MD5 5af938b1b960db3ef39c4e99de13b4dd
SHA1 62f566c367361f9129d907ed15b14580e2170f64
SHA512 1f3d7a8be0bc43295f6348df825531e08b5d87b1134f036eb31d07ce1f84f1a8f6caa527fe85a0829a248b2e47917b9ef37fed5756357401caecddf78487f129
SSDEEP 196608:g0DH4jiqzsiMb2PU8HQ0uGMWLVA0YERdFksuO:ghi4sidHGGMkADetb
TLSH
T15976334AF6C84372D84B64341A52DBB56B71EC748FB19B4713B83B641EB0BD0C63A653
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ProductIcon

Path C:\Windows\Installer\{7D97F083-887F-444A-B58F-14F87375D25B}\ProductIcon
Size 34KB
SHA256 52d9a8185db9fd64182eab2983e86005994a330e8179b5c55bb2a4342b479581
MD5 3a1506bdf5a85c4d7bdffe1642c7f8aa
SHA1 1b254cedc30e302cb902a560dfa02a19c46c07de
SHA512 a2baf1651f1c6743d88bcb0b40d21fda0e41aa54e5428c79c5f07989cd634e559831fe0c8d0bfc5c07829ffcc48a726b4d5931929794e7f28ead2bf50aa5babc
SSDEEP 768:eNgbrXpM2o0cl6NUqlZaPruEzW2KhWKEapqoqHOW/Yu8zLYjv:hOv0COli3uWMqHOW/Yu8Ijv
TLSH
T129F2F14E677CCBF562043DB806FA762FC4B9A67E172826EB049542960E129D07FBC00F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata-2

Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
Size 26.1MB
SHA256 db101dafc28a1f0267738d59a892b3d3acecbc516f1f22a06e10df2a5946dc81
MD5 fbf3ff051e44cbbed13245f8e8b2696f
SHA1 af25d3a2909dc256dab4733ccec23455231de85e
SHA512 720d1f30fa87a816c7b96e11054c7829e3800ffbb95aa20f724d26db23485a7ce60f3eced8e04dd7b0ae9676f10fa736adce1a1073e4c2b3be81f425b56780f9
SSDEEP 24576:zFo3DMPwdoO/vvTL/SAiCiVQ/LeIpbFREf0AdfMqUXsa5lzScYRWSrYj2+Y:eH0
TLSH
T1AC57E32432F92100E7B79E3CACF46A634D397D5BAC19DE8D45411B4E0822F71E972F6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{210e07e8-4cb7-47d4-b413-8a1d6af9d950}_OnDiskSnapshotProp

Path \??\Volume{cb1876cb-0000-0000-0000-d08302000000}\System Volume Information\SPP\OnlineMetadataCache\{210e07e8-4cb7-47d4-b413-8a1d6af9d950}_OnDiskSnapshotProp
Size 6KB
SHA256 f90ff4ef7a6d253e717bb2df8acb1677ff94a3d263aaddcd0ea185b8894129d7
MD5 6d3934bfe05818b1733a4d13ca472727
SHA1 dbb5bdf64fbca89eaf2c5d565cb241ccf2c236e8
SHA512 48e144db7f03d5b0348ec027e25e3dfa9212d850a513cc2252962986c8d35f479b42fce860b62834f42e0b72ac3713b92f82c252f7fa8859ad7a9a0a5bee5643
SSDEEP 96:Fi/xdQROvc6DD84LTHzbOHXOHBlBRQn8Sc9XE56tOSVQpu:w/xbb++uVm
TLSH
T120D189185AF54311E2B3AB3228F14557A877B811EF33CB8E0198238E6631910F976F6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1756-1561-0x00000249D2D10000-0x00000249D2ED3000-memory.dmp

Download

memory/1756-94-0x00007FF982FD0000-0x00007FF982FD1000-memory.dmp

Download

memory/1756-268-0x00000249D2D10000-0x00000249D2ED3000-memory.dmp

Download

memory/2408-1029-0x0000015157690000-0x0000015157691000-memory.dmp

Download

memory/2408-1023-0x0000015157690000-0x0000015157691000-memory.dmp

Download

memory/2408-1027-0x0000015157690000-0x0000015157691000-memory.dmp

Download

memory/2408-1030-0x0000015157690000-0x0000015157691000-memory.dmp

Download

memory/2408-1028-0x0000015157690000-0x0000015157691000-memory.dmp

Download

memory/2408-1031-0x0000015157690000-0x0000015157691000-memory.dmp

Download

memory/2408-1021-0x0000015157690000-0x0000015157691000-memory.dmp

Download

memory/4556-280-0x00000155E5AE0000-0x00000155E5AE1000-memory.dmp

Download

memory/4556-271-0x00000155E5AE0000-0x00000155E5AE1000-memory.dmp

Download

memory/4556-273-0x00000155E5AE0000-0x00000155E5AE1000-memory.dmp

Download

memory/4556-281-0x00000155E5AE0000-0x00000155E5AE1000-memory.dmp

Download

memory/4556-282-0x00000155E5AE0000-0x00000155E5AE1000-memory.dmp

Download

memory/4556-279-0x00000155E5AE0000-0x00000155E5AE1000-memory.dmp

Download

memory/4556-277-0x00000155E5AE0000-0x00000155E5AE1000-memory.dmp

Download

memory/4556-278-0x00000155E5AE0000-0x00000155E5AE1000-memory.dmp

Download

memory/4872-114-0x00007FF982FD0000-0x00007FF982FD1000-memory.dmp

Download

memory/5416-872-0x00007FF9831A0000-0x00007FF9831A1000-memory.dmp

Download

memory/5416-873-0x00007FF983800000-0x00007FF983801000-memory.dmp

Download