justice-launcher-setup[.]exe

resource
unpack001/bundled-mods/justice/justicev-26.1.2.jar

resource
justice-launcher-setup.exe
unpack001/$PLUGINSDIR/NSISdl.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/justice.exe

justice-launcher-setup.exe

IMPHASH 46ce5c12b293febbeb513b196aa7f843
SHA256 6aeb88c1ea36d896e9f3f1d5716d7bf309b089fd4e91b7bfbbc1d9f846d93e28
MD5 48fb75f5881a038e1d00a49a485304ba
SHA1 438f035426dddb6ecc655d8d7078f28da76084dd
SHA512 d4076501114eb043f5ec0f683c4e044cf65ea03324ee83e1accb54867d44f6c79db77745905157e0e4a8cb2953563448e0e5ebdf839c3f959e28309f5e61131d
SSDEEP 196608:/ccC1MOrN+VsNQN6l3rZHPffqkkFZGrOf/RFsE:/U1MOrsVsCw7v3qyrOfXsE
TLSH
T1687633289177AE5ADF930DB0A23B9A139155F10213232BD5AE10D6FC1D9F192BE0D9F3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13983

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

RemoveDirectoryW lstrcmpiA GetTempFileNameW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW WriteFile GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize CreateFileW GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject ExitProcess

$PLUGINSDIR/NSISdl.dll

IMPHASH db80d5e142e716e818b7f4614dcade3c
SHA256 ddf40229dd9d6b268902d8dea88c8a04aacf1af218dd29f6dcd35babc54ac08d
MD5 8eabbe36e8b52e69322780d0f541fd19
SHA1 e5fa3eca8d2035e4fa006b7123c348348e4e6de4
SHA512 4189fabff409be4bc7a8e81be58fb18e32398e4ef4c01a70cf823d79e76f47c4681734808fd61db8728c73d2bcad890b09aa09d5a0f0b0c3ad581be1beaf9ce7
SSDEEP 384:jrSQMCOUILnCaSPy/yhJzmGSMRWyOUKie:jrSQMCOp0yamMRWysie
TLSH
T17B623C16B62084F5DBB2167034D73B3E6BB28F6A1A2848C34BF35C4E9E52307B675D85
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9321

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/nsDialogs.dll

IMPHASH 3b477381217c97b22146297f93df2a92
SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
MD5 8f0e7415f33843431df308bb8e06af81
SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
TLSH
T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsExec.dll

IMPHASH 68b7023f8923dd087549802f8fa631c3
SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
MD5 8fe362ffdfa66269b8a64e3a87f68e52
SHA1 b5daaa60a6b8591a670da9fc3a2d6f896d55f568
SHA512 8f2904e01b0835683a0f11114a09da291ba527d867e73db2765185f780f2278debd9c5fc4281a42a6065c5ef5947bdc6239ae4c5835df62c71e1fce80d8bf942
SSDEEP 96:JXzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHnDQ:JgQHDb2vSuOc41ZfUNQZGdHD
TLSH
T1F8E1193571C02DF7E08D89707816BD2F83F4D43627BA05A04A771AD579D0AF6EE28B42
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

bundled-mods/justice/Justice-1.21-1.21.1.jar

SHA256 e215c2ec5273ca6a4d057a23a319a954fd8aa93dd577f158d831f7612ccab9ce
MD5 f4aa4d61c90075f17ede7872d467c588
SHA1 b33dd91343b624fdd44575eacc8e224472642fb6
SHA512 d19b63b1b1dedf65a13eb1be2c449137014b55fb0698f92ac11ab1b89d2ed8b720de5ace2790af9a4d495477d3eb400df417b4548606e65f6da6ff37b126a584
SSDEEP 49152:24uwulP0sTpS4O4+4/dVBWXLMK6H3PHOqBAWA8Ah2ho4qR:s10sTpPnXBW7MKWN3A8IR
TLSH
T17EA52342AD88CB3DD613863A5252C1C7105B22CCE25A913FBEB5150FE9F1E57274BBE8
MD5 SHA1 SHA512 SSDEEP TLSH

bundled-mods/justice/Justice-1.21.11.jar

SHA256 916630995359a92302a5309a79fcb64feb5aa49ebff67a8d025e4699695d88c4
MD5 191b9debae7aca960fb6173b4d164e1e
SHA1 cdfa541211572284c822416546227de49c8e2484
SHA512 d0cb093686512446938154916648ef4cc7e75b55dca2f30fb98b697ca34c54485882d183f6895fc3a9f6772425cd6dfedab04c73d04f14a5d8e660f7598a97a8
SSDEEP 24576:upnDOfbeQQFGkDDmbntNT6AhFREgGY6sZCT/hGh75pv:ukeQAGkDCz3eRCZCTpW5V
TLSH
T19B0512197D86876DD51340BAC121C6E7A09A07D5E206A13F2D77005AAEE8C4F2F17EFE
MD5 SHA1 SHA512 SSDEEP TLSH

bundled-mods/justice/Justice-1.21.6-1.21.8.jar

SHA256 a4d623a82574015697e6c45881f1d59ce4f18f4861862aec2e3908ee5c8e7569
MD5 503314f5f2328376194591be0450eab0
SHA1 638e7f3a95bdb85953c8f7cf84467fcce8423bee
SHA512 7ecb81a5eb72ac62ede740d0ae26524da33fa727b9882b84e8c801b324d73674da3005e9d56b76ae464c90cf3f466a0c022dcff04f4116314b8b94ba0f573002
SSDEEP 24576:UpnDOfbeQQFGkDDmbntNT6AhFREgGY6sZKhtAAT1KJQ:UkeQAGkDCz3eRCZwaa
TLSH
T1430512087E86876DD11740BAC12285E7A09B07D5E506A07F2DB3015ABEE8C5F3B1BDBD
MD5 SHA1 SHA512 SSDEEP TLSH

bundled-mods/justice/Justice-1.21.9-1.21.10.jar

SHA256 ae7f219610e5501a62f92cca60ecf712e13ce635f4f59bd3afc5cf190a6f420b
MD5 18e09e4f3032eeb65b6fa0d45362a9e7
SHA1 2207379fb0af1d1dcf8977c72e88617a4620de0d
SHA512 ea80c1b7ba7cb7c5382301f9ccda9f0a557447921692c8a40100c8fd4209189a9f626288ea59d2ae882dd9fdaa0bab2f2eeb21189b8e91a311e5ef5de1e68b35
SSDEEP 12288:twF8+YBFDeQZeFGxSYEV9Wpc6nN0kntNT2yAcxhFF7ExyGYyd5CULIjZTercavJ6:GF8fbeQQFGkDDmbntNT6AhFREgGY6sZT
TLSH
T1F7F401187E9A836DD11304BAC12285E3A19B07D4A609A17F2DA7005DBDE8C5F3F17DBE
MD5 SHA1 SHA512 SSDEEP TLSH

bundled-mods/justice/Justice-26.1.1.jar

SHA256 6b83466d076ec94ac2c997709e41f9fe0e5f701c6898036e575e69d4e5a1a05d
MD5 1506db95c5f0c51177530864dd776cbd
SHA1 f89a92161c88c4fbbba39dc5e826663260af90f0
SHA512 b735965417abf8b08efebcf34c226fb16e571183bb4f70bf9897b6e4aa74708b1772240300b8b14a8c492e393771d8055e49a490d90867556f60bfa0a969de97
SSDEEP 24576:fOBz1fbeQQFGkjjGbHNNTaghFxEAG4as5dYWVgC:2HeQAGkjCTX+Ri5KUgC
TLSH
T10605122979D6C761D16305B9C321A1E3E1EB02DCE606613F3DA6011BADF8D082B57DFA
MD5 SHA1 SHA512 SSDEEP TLSH

bundled-mods/justice/Justice-26.1.jar

SHA256 6b83466d076ec94ac2c997709e41f9fe0e5f701c6898036e575e69d4e5a1a05d
MD5 1506db95c5f0c51177530864dd776cbd
SHA1 f89a92161c88c4fbbba39dc5e826663260af90f0
SHA512 b735965417abf8b08efebcf34c226fb16e571183bb4f70bf9897b6e4aa74708b1772240300b8b14a8c492e393771d8055e49a490d90867556f60bfa0a969de97
SSDEEP 24576:fOBz1fbeQQFGkjjGbHNNTaghFxEAG4as5dYWVgC:2HeQAGkjCTX+Ri5KUgC
TLSH
T10605122979D6C761D16305B9C321A1E3E1EB02DCE606613F3DA6011BADF8D082B57DFA
MD5 SHA1 SHA512 SSDEEP TLSH

bundled-mods/justice/Justice-26.2.jar

SHA256 b08c0db4c46c38ea720d4cdb241de3d85b43d9e2f3b6336478712c62515d1632
MD5 91e9d5cea206bc9c7e1b0d4083278168
SHA1 871294b5f7176749c52e7d83e72de01591d1cb39
SHA512 7a5ea379105790b752261fd4a76f425b4fd416bbf3626d1dc5c7a3a82cad7f4ec83f0b75ea59437e638f8b1ecb3fe6ce901e89052ca8ceb7738a6b221eca28ed
SSDEEP 24576:qOHwzFlkOfbeQQFGkjjGbHNNTaghFxEAG4as5yX:NHLCeQAGkjCTX+Ri5yX
TLSH
T11205122979D6C765D16305B9C322A1E3E1EB02ACE506713F3DA6010EADFD8093716DFA
MD5 SHA1 SHA512 SSDEEP TLSH

bundled-mods/justice/JusticeV-1.21-1.21.1.jar

SHA256 e215c2ec5273ca6a4d057a23a319a954fd8aa93dd577f158d831f7612ccab9ce
MD5 f4aa4d61c90075f17ede7872d467c588
SHA1 b33dd91343b624fdd44575eacc8e224472642fb6
SHA512 d19b63b1b1dedf65a13eb1be2c449137014b55fb0698f92ac11ab1b89d2ed8b720de5ace2790af9a4d495477d3eb400df417b4548606e65f6da6ff37b126a584
SSDEEP 49152:24uwulP0sTpS4O4+4/dVBWXLMK6H3PHOqBAWA8Ah2ho4qR:s10sTpPnXBW7MKWN3A8IR
TLSH
T17EA52342AD88CB3DD613863A5252C1C7105B22CCE25A913FBEB5150FE9F1E57274BBE8
MD5 SHA1 SHA512 SSDEEP TLSH

bundled-mods/justice/JusticeV-1.21.11.jar

SHA256 916630995359a92302a5309a79fcb64feb5aa49ebff67a8d025e4699695d88c4
MD5 191b9debae7aca960fb6173b4d164e1e
SHA1 cdfa541211572284c822416546227de49c8e2484
SHA512 d0cb093686512446938154916648ef4cc7e75b55dca2f30fb98b697ca34c54485882d183f6895fc3a9f6772425cd6dfedab04c73d04f14a5d8e660f7598a97a8
SSDEEP 24576:upnDOfbeQQFGkDDmbntNT6AhFREgGY6sZCT/hGh75pv:ukeQAGkDCz3eRCZCTpW5V
TLSH
T19B0512197D86876DD51340BAC121C6E7A09A07D5E206A13F2D77005AAEE8C4F2F17EFE
MD5 SHA1 SHA512 SSDEEP TLSH

bundled-mods/justice/JusticeV-1.21.2-1.21.4.jar

SHA256 2d039d1e1361da4bf543205e0e92ebc5c2654bcea2d3c85ff5cf206d2206f730
MD5 d1cc4cf1d03d21cfb6fbe264440c1b46
SHA1 380d97f1b4ca4524a65986888fc7a04cef9f23e1
SHA512 c452eb5eb0c0b553223780abc8db457ad3ae0724ec470174f85ec54e5d5dc32933caf18c2de44540e4e74c59c954719371b0e7e96e93b293b29b8e9890484965
SSDEEP 24576:0ppjKoUZEfbeQQFGkDDmbntNT6AhFREgGY6sZUQG31Kr:6h3aMeQAGkDCz3eRCZjr
TLSH
T188050218AE96836DD01341BAC222C5D7A19B03D4A506A07F2DBB0159BDE8C5F3B17DFE
MD5 SHA1 SHA512 SSDEEP TLSH

bundled-mods/justice/JusticeV-1.21.6-1.21.8.jar

SHA256 a4d623a82574015697e6c45881f1d59ce4f18f4861862aec2e3908ee5c8e7569
MD5 503314f5f2328376194591be0450eab0
SHA1 638e7f3a95bdb85953c8f7cf84467fcce8423bee
SHA512 7ecb81a5eb72ac62ede740d0ae26524da33fa727b9882b84e8c801b324d73674da3005e9d56b76ae464c90cf3f466a0c022dcff04f4116314b8b94ba0f573002
SSDEEP 24576:UpnDOfbeQQFGkDDmbntNT6AhFREgGY6sZKhtAAT1KJQ:UkeQAGkDCz3eRCZwaa
TLSH
T1430512087E86876DD11740BAC12285E7A09B07D5E506A07F2DB3015ABEE8C5F3B1BDBD
MD5 SHA1 SHA512 SSDEEP TLSH

bundled-mods/justice/JusticeV-1.21.9-1.21.10.jar

SHA256 ae7f219610e5501a62f92cca60ecf712e13ce635f4f59bd3afc5cf190a6f420b
MD5 18e09e4f3032eeb65b6fa0d45362a9e7
SHA1 2207379fb0af1d1dcf8977c72e88617a4620de0d
SHA512 ea80c1b7ba7cb7c5382301f9ccda9f0a557447921692c8a40100c8fd4209189a9f626288ea59d2ae882dd9fdaa0bab2f2eeb21189b8e91a311e5ef5de1e68b35
SSDEEP 12288:twF8+YBFDeQZeFGxSYEV9Wpc6nN0kntNT2yAcxhFF7ExyGYyd5CULIjZTercavJ6:GF8fbeQQFGkDDmbntNT6AhFREgGY6sZT
TLSH
T1F7F401187E9A836DD11304BAC12285E3A19B07D4A609A17F2DA7005DBDE8C5F3F17DBE
MD5 SHA1 SHA512 SSDEEP TLSH

bundled-mods/justice/JusticeV-26.1.1.jar

SHA256 6b83466d076ec94ac2c997709e41f9fe0e5f701c6898036e575e69d4e5a1a05d
MD5 1506db95c5f0c51177530864dd776cbd
SHA1 f89a92161c88c4fbbba39dc5e826663260af90f0
SHA512 b735965417abf8b08efebcf34c226fb16e571183bb4f70bf9897b6e4aa74708b1772240300b8b14a8c492e393771d8055e49a490d90867556f60bfa0a969de97
SSDEEP 24576:fOBz1fbeQQFGkjjGbHNNTaghFxEAG4as5dYWVgC:2HeQAGkjCTX+Ri5KUgC
TLSH
T10605122979D6C761D16305B9C321A1E3E1EB02DCE606613F3DA6011BADF8D082B57DFA
MD5 SHA1 SHA512 SSDEEP TLSH

bundled-mods/justice/JusticeV-26.1.jar

SHA256 6b83466d076ec94ac2c997709e41f9fe0e5f701c6898036e575e69d4e5a1a05d
MD5 1506db95c5f0c51177530864dd776cbd
SHA1 f89a92161c88c4fbbba39dc5e826663260af90f0
SHA512 b735965417abf8b08efebcf34c226fb16e571183bb4f70bf9897b6e4aa74708b1772240300b8b14a8c492e393771d8055e49a490d90867556f60bfa0a969de97
SSDEEP 24576:fOBz1fbeQQFGkjjGbHNNTaghFxEAG4as5dYWVgC:2HeQAGkjCTX+Ri5KUgC
TLSH
T10605122979D6C761D16305B9C321A1E3E1EB02DCE606613F3DA6011BADF8D082B57DFA
MD5 SHA1 SHA512 SSDEEP TLSH

bundled-mods/justice/JusticeV-26.2.jar

SHA256 b08c0db4c46c38ea720d4cdb241de3d85b43d9e2f3b6336478712c62515d1632
MD5 91e9d5cea206bc9c7e1b0d4083278168
SHA1 871294b5f7176749c52e7d83e72de01591d1cb39
SHA512 7a5ea379105790b752261fd4a76f425b4fd416bbf3626d1dc5c7a3a82cad7f4ec83f0b75ea59437e638f8b1ecb3fe6ce901e89052ca8ceb7738a6b221eca28ed
SSDEEP 24576:qOHwzFlkOfbeQQFGkjjGbHNNTaghFxEAG4as5yX:NHLCeQAGkjCTX+Ri5yX
TLSH
T11205122979D6C765D16305B9C322A1E3E1EB02ACE506713F3DA6010EADFD8093716DFA
MD5 SHA1 SHA512 SSDEEP TLSH

bundled-mods/justice/justice-1.21.2-1.21.4.jar

SHA256 2d039d1e1361da4bf543205e0e92ebc5c2654bcea2d3c85ff5cf206d2206f730
MD5 d1cc4cf1d03d21cfb6fbe264440c1b46
SHA1 380d97f1b4ca4524a65986888fc7a04cef9f23e1
SHA512 c452eb5eb0c0b553223780abc8db457ad3ae0724ec470174f85ec54e5d5dc32933caf18c2de44540e4e74c59c954719371b0e7e96e93b293b29b8e9890484965
SSDEEP 24576:0ppjKoUZEfbeQQFGkDDmbntNT6AhFREgGY6sZUQG31Kr:6h3aMeQAGkDCz3eRCZjr
TLSH
T188050218AE96836DD01341BAC222C5D7A19B03D4A506A07F2DBB0159BDE8C5F3B17DFE
MD5 SHA1 SHA512 SSDEEP TLSH

bundled-mods/justice/justice-1.8.9.jar

SHA256 cc04fa5e39d4e9cd4c04e454d81ee119e18b03958cce06a57f970a42994167ed
MD5 0fb46d3c12d8f17db50cb0e38e83fad2
SHA1 8716988a186b42cf9bf536db8984af9b33505ad1
SHA512 0dc5291092465fe7e4930c3e5bda234b85b03221c3b9782048994c32478fdd41ae56aff8843e21a07b9ee9c5aaa96f201c0d69f6f426a145150348e37c9d61ff
SSDEEP 6144:n3jTqsi10yZ3CtZDhOlVMIySHB5A/E5Wb3zFzidFVN7WQ:3ys6BZStZFOUITi/EMDRWzVN7WQ
TLSH
T137340210DBE78B13CA07C63FA6618183B8BEE45C6601E836696514BCBC77CE4477BE64
MD5 SHA1 SHA512 SSDEEP TLSH

bundled-mods/justice/justice-26.1.2.jar

SHA256 6b83466d076ec94ac2c997709e41f9fe0e5f701c6898036e575e69d4e5a1a05d
MD5 1506db95c5f0c51177530864dd776cbd
SHA1 f89a92161c88c4fbbba39dc5e826663260af90f0
SHA512 b735965417abf8b08efebcf34c226fb16e571183bb4f70bf9897b6e4aa74708b1772240300b8b14a8c492e393771d8055e49a490d90867556f60bfa0a969de97
SSDEEP 24576:fOBz1fbeQQFGkjjGbHNNTaghFxEAG4as5dYWVgC:2HeQAGkjCTX+Ri5KUgC
TLSH
T10605122979D6C761D16305B9C321A1E3E1EB02DCE606613F3DA6011BADF8D082B57DFA
MD5 SHA1 SHA512 SSDEEP TLSH

bundled-mods/justice/justicev-26.1.2.jar

SHA256 6b83466d076ec94ac2c997709e41f9fe0e5f701c6898036e575e69d4e5a1a05d
MD5 1506db95c5f0c51177530864dd776cbd
SHA1 f89a92161c88c4fbbba39dc5e826663260af90f0
SHA512 b735965417abf8b08efebcf34c226fb16e571183bb4f70bf9897b6e4aa74708b1772240300b8b14a8c492e393771d8055e49a490d90867556f60bfa0a969de97
SSDEEP 24576:fOBz1fbeQQFGkjjGbHNNTaghFxEAG4as5dYWVgC:2HeQAGkjCTX+Ri5KUgC
TLSH
T10605122979D6C761D16305B9C321A1E3E1EB02DCE606613F3DA6011BADF8D082B57DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned JAR

Checks for missing JAR codesign signature.

justice.exe

IMPHASH e98f1319b510c756a55cbb5ea23c94bc
SHA256 ba0157202d80fc6f44d712db0104358329c8d7f955c85d3f8f09af4306e05477
MD5 a0d55948cbf98d44216dcd3487101260
SHA1 37bf700a79697648c9f140f1fe361c4109bd601d
SHA512 74bd0248239378483dc31872825a104a87a33f2fa42dd56a167be00daf840d38927d73f9d903099d5d727cd2c286d69e235dac194d9b7d15f5f7b11e53d69811
SSDEEP 98304:h9VA6gh8XHOJgZjOHBzu8aAHcV6KzVD1OtJAUa1IW47Qceyxn+O/X:iJgZjOHBzu6XaOW4YyxH
TLSH
T150961801BE9B59A8D08ACCB0C34B8B678A2134DB1936F4BF55C952292F7D7B45F1831E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5632444

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

justice.pdb

bcryptprimitives

ProcessPrng

ntdll

NtReadFile RtlNtStatusToDosError NtWriteFile NtCreateNamedPipeFile NtOpenFile RtlGetVersion

kernel32

SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime IsProcessorFeaturePresent TerminateProcess SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GetLastError LoadLibraryW CloseHandle RtlLookupFunctionEntry WaitForSingleObjectEx GetCurrentProcess WideCharToMultiByte ReleaseMutex GetProcAddress MultiByteToWideChar HeapAlloc LoadLibraryA SleepEx FormatMessageW SetHandleInformation DuplicateHandle ExitProcess CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW GetModuleFileNameW SetWaitableTimer Sleep GetModuleHandleA SwitchToThread GetProcessHeap HeapFree GetCurrentThreadId GetModuleHandleW GetUserDefaultUILanguage LCIDToLocaleName GetCurrentProcessId HeapReAlloc GetTickCount64 WaitForSingleObject GetExitCodeProcess GetProcessId GetSystemTimePreciseAsFileTime lstrlenW LocalFree SetThreadStackGuarantee GetCurrentThread SetLastError GetCommandLineW CreateWaitableTimerExW CreateProcessW FreeEnvironmentStringsW GetEnvironmentStringsW CreateDirectoryW CreateFileW CreateThread QueryPerformanceCounter QueryPerformanceFrequency WriteFileEx ReadFileEx GetEnvironmentVariableW CreateMutexA GetCurrentDirectoryW RtlVirtualUnwind RtlCaptureContext AddVectoredExceptionHandler SetEnvironmentVariableW FindNextFileW InitializeSListHead MoveFileExW CopyFileExW DeleteFileW GetTempPathW GetFileAttributesW GetFileInformationByHandleEx GetFileInformationByHandle FindFirstFileExW SetFileInformationByHandle SetFileTime GetFullPathNameW WriteConsoleW GetConsoleOutputCP GetSystemInfo GetConsoleMode GetStdHandle GetFinalPathNameByHandleW FindClose SetFilePointerEx FreeLibrary LoadLibraryExW OutputDebugStringW OutputDebugStringA LoadLibraryExA

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WakeByAddressAll WaitOnAddress

dwmapi

DwmSetWindowAttribute DwmGetWindowAttribute DwmEnableBlurBehindWindow

oleaut32

GetErrorInfo SysFreeString SysStringLen SetErrorInfo

user32

FillRect ReleaseDC RegisterTouchWindow IsWindow UpdateWindow InvalidateRect SetCursorPos SetCursor PostQuitMessage GetActiveWindow SetMenu RemoveMenu CreateIcon SetMenuItemInfoW DrawMenuBar CreatePopupMenu LoadCursorW CreateMenu GetForegroundWindow FlashWindowEx IsWindowEnabled EnableWindow IsIconic SetWindowRgn SetPropW DrawTextW GetKeyboardState SetWindowTextW GetWindowTextLengthW AppendMenuW DrawIconEx InsertMenuW EnableMenuItem GetCursorPos ClientToScreen GetKeyState TrackPopupMenu MonitorFromWindow IsProcessDPIAware SetWindowDisplayAffinity MonitorFromRect GetWindowDC ToUnicodeEx MapVirtualKeyExW GetKeyboardLayout ScreenToClient ShowWindow GetSystemMetrics GetAsyncKeyState SystemParametersInfoA SendInput CheckMenuItem VkKeyScanW RegisterWindowMessageA GetClipCursor SetCapture GetDC GetTouchInputInfo CreateAcceleratorTableW CloseTouchInputHandle GetMenuBarInfo DestroyAcceleratorTable DestroyIcon DestroyMenu ShowCursor SystemParametersInfoW TrackMouseEvent GetMonitorInfoW GetClientRect OffsetRect FindWindowExW GetWindowPlacement EnumWindows SetWindowPlacement GetWindowTextW GetWindow IsWindowVisible GetWindowThreadProcessId SetForegroundWindow ChangeDisplaySettingsExW SetWindowLongW TranslateAcceleratorW GetSystemMenu DefWindowProcW SendMessageW GetMenuItemInfoW SetParent SetFocus GetParent DestroyWindow MapVirtualKeyW GetUpdateRect ValidateRect GetRawInputData PostMessageW MsgWaitForMultipleObjectsEx DispatchMessageW PeekMessageW PostThreadMessageW RegisterRawInputDevices EnumChildWindows AdjustWindowRectEx GetMenu DispatchMessageA TranslateMessage GetMessageA SetWindowPos RegisterClassExW MapWindowPoints GetWindowLongPtrW RedrawWindow AdjustWindowRect EnumDisplayMonitors MonitorFromPoint GetMessageW SetWindowLongPtrW CreateWindowExW GetWindowLongW InvalidateRgn GetWindowRect ReleaseCapture ClipCursor

comctl32

SetWindowSubclass RemoveWindowSubclass DefSubclassProc TaskDialogIndirect

ole32

CoTaskMemFree CoTaskMemAlloc CoUninitialize RevokeDragDrop CoInitializeEx CoCreateInstance RegisterDragDrop CoCreateFreeThreadedMarshaler OleInitialize

shlwapi

SHCreateMemStream

advapi32

RegQueryValueExW RegOpenKeyExW RegEnumKeyExW RegGetValueW RegCloseKey EventRegister EventUnregister EventWriteTransfer EventSetInformation SystemFunction036

shell32

SHAppBarMessage DragFinish SHGetKnownFolderPath DragQueryFileW ShellExecuteW

gdi32

CreateRectRgn SetBkMode SetTextColor CreateSolidBrush DeleteObject CombineRgn BitBlt GetDeviceCaps DeleteDC SelectObject CreateDIBSection CreateCompatibleDC

bcrypt

BCryptGenRandom

crypt32

CryptUnprotectData

ws2_32

select freeaddrinfo recv WSARecv getpeername getaddrinfo send WSASend WSADuplicateSocketW connect ioctlsocket getsockopt closesocket WSASocketW WSACleanup WSAStartup WSAGetLastError getsockname setsockopt

vcruntime140

memset memcmp wcsrchr memcpy _purecall __C_specific_handler _CxxThrowException memmove __std_exception_destroy __current_exception __current_exception_context __std_exception_copy __CxxFrameHandler3

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-math-l1-1-0

floor round pow roundf __setusermatherr trunc

api-ms-win-crt-string-l1-1-0

strlen wcslen wcscmp _wcsicmp

api-ms-win-crt-convert-l1-1-0

_ultow_s wcstol _wtoi

api-ms-win-crt-heap-l1-1-0

free _callnewh malloc _set_new_mode

api-ms-win-crt-utility-l1-1-0

_rotl64

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _cexit _exit exit _set_app_type _register_thread_local_exe_atexit_callback _configure_narrow_argv _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e _c_exit terminate _initialize_onexit_table _register_onexit_function _crt_atexit _seh_filter_exe

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sharing

General

Malware Config

Signatures

File Explorer

justice-launcher-setup.exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/NSISdl.dll

advapi32

wsock32

user32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/nsExec.dll

advapi32

user32

kernel32

generic

bundled-mods/justice/Justice-1.21-1.21.1.jar

bundled-mods/justice/Justice-1.21.11.jar

bundled-mods/justice/Justice-1.21.6-1.21.8.jar

bundled-mods/justice/Justice-1.21.9-1.21.10.jar

bundled-mods/justice/Justice-26.1.1.jar

bundled-mods/justice/Justice-26.1.jar

bundled-mods/justice/Justice-26.2.jar

bundled-mods/justice/JusticeV-1.21-1.21.1.jar

bundled-mods/justice/JusticeV-1.21.11.jar

bundled-mods/justice/JusticeV-1.21.2-1.21.4.jar

bundled-mods/justice/JusticeV-1.21.6-1.21.8.jar

bundled-mods/justice/JusticeV-1.21.9-1.21.10.jar

bundled-mods/justice/JusticeV-26.1.1.jar

bundled-mods/justice/JusticeV-26.1.jar

bundled-mods/justice/JusticeV-26.2.jar

bundled-mods/justice/justice-1.21.2-1.21.4.jar

bundled-mods/justice/justice-1.8.9.jar

bundled-mods/justice/justice-26.1.2.jar

bundled-mods/justice/justicev-26.1.2.jar

justice.exe

bcryptprimitives

ntdll

kernel32

api-ms-win-core-synch-l1-2-0

dwmapi

oleaut32

user32

comctl32

ole32

shlwapi

advapi32

shell32

gdi32

bcrypt

crypt32

ws2_32

vcruntime140

vcruntime140_1

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0