Analysis
- user interaction
yes - max time kernel
121s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
22/10/2026, 22:55
Static task
static1
Behavioral task
behavioral1
Sample
MCServerManager-win-Setup.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
MCServerManager-win-Setup.exe
Resource
win11ltsc2024-20260911-en
General
- Target MCServerManager-win-Setup.exe
- Size 84.5MB
- Sample261022-2wlc8abf93
- SHA256 557d29c573332ad96ea85394b43db64e3f0285db40151c21566a393a9f09aeb8
- MD5 be8daf5b407fdb0960c26cfcf0b12593
- SHA1 0a23792bac806c6d05c026f433e27ced597bed4f
- SHA512 469787a1300f61ba766bfcbe94bfb9edadf4cad0afd02a1f21ea36603a1d27f88c8c5c56098f815c4c3aa68124c0d13dc875cb1d1ac9265e3f33caba872ab97c
- SSDEEP 1572864:wDUwkLhYIC6loVH8ms36q8aHwoSvIGM/dZ1iEo4E6gEwG+ceFmzSZOtz2qi:KxVH8336sQoSvIT/dZ1LoF6gFFmzSZMi
- TLSH T104183380FFCB92F9D8D70935107EB33F8B365505852CCA57EBE44D12FCA27215AAA129
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies Windows Firewall 2 TTPs 5 IoCs
pid Process 4648 netsh.exe 4436 netsh.exe 2240 netsh.exe 1772 netsh.exe 3672 netsh.exe - Checks computer location settings 2 TTPs 3 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000\Control Panel\International\Geo\Nation ServerManagerForMinecraft.exe Key value queried \REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000\Control Panel\International\Geo\Nation java.exe Key value queried \REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000\Control Panel\International\Geo\Nation ServerManagerForMinecraft.exe - Executes dropped EXE 6 IoCs
pid Process 1720 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 4964 java.exe 420 jcmd.exe 2100 jcmd.exe 1680 jcmd.exe - Loads dropped DLL 64 IoCs
pid Process 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 1720 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Looks up external IP address via web service 1 TTPs 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 61 api.ipify.org 62 api.ipify.org - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Event Triggered Execution: Netsh Helper DLL 1 TTPs 18 IoCs
Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.
description ioc Process Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key opened \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe Key value enumerated \REGISTRY\MACHINE\SOFTWARE\Microsoft\NetSh netsh.exe - Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain ServerManagerForMinecraft.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname java.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain java.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname ServerManagerForMinecraft.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MCServerManager-win-Setup.exe - Checks processor information in registry 2 TTPs 13 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision java.exe Key queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor java.exe Key enumerated \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor java.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz java.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision jcmd.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 java.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\ java.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier java.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString java.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier java.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 jcmd.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision jcmd.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 jcmd.exe - Suspicious behavior: EnumeratesProcesses 51 IoCs
pid Process 4992 MCServerManager-win-Setup.exe 4992 MCServerManager-win-Setup.exe 3080 ServerManagerForMinecraft.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 4964 java.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe - Suspicious use of AdjustPrivilegeToken 6 IoCs
description pid Process Token: SeDebugPrivilege 1720 ServerManagerForMinecraft.exe Token: SeDebugPrivilege 3080 ServerManagerForMinecraft.exe Token: SeBackupPrivilege 4964 java.exe Token: SeBackupPrivilege 4964 java.exe Token: SeSecurityPrivilege 4964 java.exe Token: SeDebugPrivilege 4964 java.exe - Suspicious use of FindShellTrayWindow 7 IoCs
pid Process 4992 MCServerManager-win-Setup.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe - Suspicious use of SendNotifyMessage 5 IoCs
pid Process 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe 3080 ServerManagerForMinecraft.exe - Suspicious use of WriteProcessMemory 19 IoCs
description pid Process procid_target PID 4992 wrote to memory of 1720 4992 MCServerManager-win-Setup.exe 87 PID 4992 wrote to memory of 3080 4992 MCServerManager-win-Setup.exe 90 PID 3080 wrote to memory of 3000 3080 ServerManagerForMinecraft.exe 94 PID 3080 wrote to memory of 4640 3080 ServerManagerForMinecraft.exe 97 PID 3080 wrote to memory of 4596 3080 ServerManagerForMinecraft.exe 99 PID 3080 wrote to memory of 4648 3080 ServerManagerForMinecraft.exe 105 PID 3080 wrote to memory of 4436 3080 ServerManagerForMinecraft.exe 107 PID 3080 wrote to memory of 2240 3080 ServerManagerForMinecraft.exe 109 PID 3080 wrote to memory of 5092 3080 ServerManagerForMinecraft.exe 111 PID 3080 wrote to memory of 1772 3080 ServerManagerForMinecraft.exe 113 PID 3080 wrote to memory of 3672 3080 ServerManagerForMinecraft.exe 115 PID 3080 wrote to memory of 4964 3080 ServerManagerForMinecraft.exe 117 PID 3080 wrote to memory of 420 3080 ServerManagerForMinecraft.exe 123 PID 420 wrote to memory of 4964 420 jcmd.exe 117 PID 420 wrote to memory of 4964 420 jcmd.exe 117 PID 3080 wrote to memory of 2100 3080 ServerManagerForMinecraft.exe 126 PID 2100 wrote to memory of 4964 2100 jcmd.exe 117 PID 2100 wrote to memory of 4964 2100 jcmd.exe 117 PID 3080 wrote to memory of 1680 3080 ServerManagerForMinecraft.exe 128
Processes
-
C:\Users\Admin\AppData\Local\Temp\MCServerManager-win-Setup.exe"C:\Users\Admin\AppData\Local\Temp\MCServerManager-win-Setup.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4992 -
C:\Users\Admin\AppData\Local\MCServerManager\current\ServerManagerForMinecraft.exe"C:\Users\Admin\AppData\Local\MCServerManager\current\ServerManagerForMinecraft.exe" --veloapp-install 4.1.02⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
PID:1720
-
-
C:\Users\Admin\AppData\Local\MCServerManager\current\ServerManagerForMinecraft.exe"C:\Users\Admin\AppData\Local\MCServerManager\current\ServerManagerForMinecraft.exe"2⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3080 -
C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe"C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe" -version3⤵PID:3000
-
-
C:\Program Files\Java\jdk-1.8\bin\java.exe"C:\Program Files\Java\jdk-1.8\bin\java.exe" -version3⤵PID:4640
-
-
C:\Program Files\Java\jre-1.8\bin\java.exe"C:\Program Files\Java\jre-1.8\bin\java.exe" -version3⤵PID:4596
-
-
C:\Windows\SYSTEM32\netsh.exe"netsh" advfirewall firewall show rule name="MC Server Manager (Minecraft Java)"3⤵
- Modifies Windows Firewall
- Event Triggered Execution: Netsh Helper DLL
PID:4648
-
-
C:\Windows\SYSTEM32\netsh.exe"netsh" advfirewall firewall show rule name="MC Server Manager (Minecraft Java)"3⤵
- Modifies Windows Firewall
- Event Triggered Execution: Netsh Helper DLL
PID:4436
-
-
C:\Windows\SYSTEM32\netsh.exe"netsh" advfirewall firewall show rule name="MC Server Manager (Minecraft Bedrock)"3⤵
- Modifies Windows Firewall
- Event Triggered Execution: Netsh Helper DLL
PID:2240
-
-
C:\Windows\System32\netsh.exe"C:\Windows\System32\netsh.exe" -f "C:\Users\Admin\AppData\Roaming\MCServerManager\firewall-rules.netsh"3⤵
- Event Triggered Execution: Netsh Helper DLL
PID:5092
-
-
C:\Windows\SYSTEM32\netsh.exe"netsh" advfirewall firewall show rule name="MC Server Manager (Minecraft Java)"3⤵
- Modifies Windows Firewall
- Event Triggered Execution: Netsh Helper DLL
PID:1772
-
-
C:\Windows\SYSTEM32\netsh.exe"netsh" advfirewall firewall show rule name="MC Server Manager (Minecraft Bedrock)"3⤵
- Modifies Windows Firewall
- Event Triggered Execution: Netsh Helper DLL
PID:3672
-
-
C:\Users\Admin\AppData\Roaming\MCServerManager\Java\jdk-25\bin\java.exe"C:\Users\Admin\AppData\Roaming\MCServerManager\Java\jdk-25\bin\java.exe" -Xms1024M -Xmx6144M -Dfile.encoding=UTF-8 -Dsun.stdout.encoding=UTF-8 -Dsun.stderr.encoding=UTF-8 --enable-native-access=ALL-UNNAMED -XX:+UseG1GC -XX:+ParallelRefProcEnabled -XX:MaxGCPauseMillis=200 -XX:+UnlockExperimentalVMOptions -XX:+DisableExplicitGC -XX:G1NewSizePercent=30 -XX:G1MaxNewSizePercent=40 -XX:G1HeapRegionSize=8M -XX:G1ReservePercent=20 -XX:G1HeapWastePercent=5 -XX:G1MixedGCCountTarget=4 -XX:InitiatingHeapOccupancyPercent=15 -XX:G1MixedGCLiveThresholdPercent=90 -XX:G1RSetUpdatingPauseTimePercent=5 -XX:SurvivorRatio=32 -XX:+PerfDisableSharedMem -XX:MaxTenuringThreshold=1 -jar "C:\Users\Admin\AppData\Roaming\MCServerManager\Servers\test\server.jar" nogui3⤵
- Checks computer location settings
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4964
-
-
C:\Users\Admin\AppData\Roaming\MCServerManager\Java\jdk-25\bin\jcmd.exe"C:\Users\Admin\AppData\Roaming\MCServerManager\Java\jdk-25\bin\jcmd.exe" 4964 GC.heap_info3⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of WriteProcessMemory
PID:420
-
-
C:\Users\Admin\AppData\Roaming\MCServerManager\Java\jdk-25\bin\jcmd.exe"C:\Users\Admin\AppData\Roaming\MCServerManager\Java\jdk-25\bin\jcmd.exe" 4964 GC.heap_info3⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of WriteProcessMemory
PID:2100
-
-
C:\Users\Admin\AppData\Roaming\MCServerManager\Java\jdk-25\bin\jcmd.exe"C:\Users\Admin\AppData\Roaming\MCServerManager\Java\jdk-25\bin\jcmd.exe" 4964 GC.heap_info3⤵
- Executes dropped EXE
PID:1680
-
-
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵PID:4088
Network
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\DirectWriteForwarder.dll
- Size 470KB
- SHA256 cc7a5409a37eed77a7ed5185620a733255492974bdb270745e0489d55a6b7823
- MD5 c9b644be064391cba5a45848ec9c5ed0
- SHA1 5cd0b96928fb915578232a47e12db7955780f23f
- SHA512 b2a8aeb500cb079d8637ab857086e15ddb6ce4995521c82a07b1038db8ccf3a9ed76ccd0448045997852531e9996aa07cb873ff67937386955702fa59c74d2f1
- SSDEEP 12288:DghPaNTfOf8JGy4fT4Lrl+Rc3Fq8Evtr9:0xaJfOfrJor7Fqxtr9
- TLSH T13BA48E25B7C82663F81D86BA8357C162D630E9F25703E3C3C64186662D2F7C5D73B6A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\Mcsm.Core.dll
- Size 1.8MB
- SHA256 dc153d6b18484de4ced0b22fa2397a132a68539b088fb3e11aae2ebfdd0c483c
- MD5 3ef6d38da5a8bb85f5ed0fbae4a1f81a
- SHA1 4690a2707eb67ae0389ff98b6eef41de9ae53ae3
- SHA512 0eba77db703d83ff72d941f4d3020b8e4248846e08186c6860814092591e01426aeb16c0dace493cb774ee0f95667e0fa391f87c711ec207f8375de9a2328903
- SSDEEP 24576:V4z4dWfMqC6qy0EuM2Bb71W/eedd21rqX9s9swlPmen3mYnb6:V4IWUGj0EuxHOSr+p3en3hnb6
- TLSH T1F6956B8177E44B66E1FF1B7AE030016943BAFA43F6E0E30E174AA05A2DB634D5D25367
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\Microsoft.Win32.Primitives.dll
- Size 15KB
- SHA256 2ac29370b9734bfd2fac7ea4037d759e81b61b5863dfd416baffc2d60a8079a7
- MD5 f0d06ce755b0e9bae40ee371bfb8ff32
- SHA1 fc0941ee7899bef6e9480165a44ff27be4982347
- SHA512 135dc668481722714ed44b307eb3a011b663b21daa0b13582419b28e65a27dec6cb2061fc52f1e7ecf2341e881ac10e4abbcdb50bd4966c6b84ec4c9c796460b
- SSDEEP 384:6jX23MOfHTY1WhPSpWU/hljHRN7nR9zQfOAD:CXUfHTYdDjR9zC
- TLSH T1AC725BD1D77C4243ECA75EB096B8D9833D3D27C74A009A2B0595FA481CA3781DF35A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\NuGet.Versioning.dll
- Size 63KB
- SHA256 bfcba996b3fc59fbee4d67ae42cc86acae455cbe55119216cda2b84b4457256f
- MD5 a4d494c769cf531a65dacc7f650a401d
- SHA1 abbc940997344fb8b97214752c7077831d8368f2
- SHA512 f4dec1fcf52d5ee91e358f8a28e47236d3616c0b45bd948d93b1ee75602be3d061280712c1b6eb75811a3a1aab704444fc636a837fe785e4df8530ecd77062dc
- SSDEEP 1536:J2gC9A6r+R5JP7Y0YCrZNyzbrwJGIQCePQEdkz1:4HLW/f1G8ePc5
- TLSH T127536B2993AC4716C7DE1A74F1B421225BFAD7C97643DB4E2C4CE2E72E533C44A206B6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\PresentationCore.dll
- Size 7.9MB
- SHA256 183905d574ad301fa8625cf971a0cf95b60fa5ab15167d9e9995a9322edef5d6
- MD5 adc65c6c62129a75cd574595d78220fe
- SHA1 543f59a9475ed8614b91a55caece73d9f50b0843
- SHA512 1fcc10f4106e95d927174589f7263fa7ba814ac1ae420bfea67a8089500552d3dc2c09acfb2ba36ac35fb7a8b0640ebb5cfdc9d06e845ccdc443382e6ae0e877
- SSDEEP 196608:pJKwa+ynJqSCqa6SCc/4blNr+0s5PFxb0yNhQeTekiY/:pJKUgJCg0RhQeTtX/
- TLSH T101868D18E3C94E25D23F85BDD2A34142F9B0A063571192CB386DDB1B2F93BD1AA77163
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\PresentationFramework.dll
- Size 15.1MB
- SHA256 3af6d3f0471d1b366975fe29fa181ece7d2e65892a03b593439f733ad045c22a
- MD5 323d5cf2e900599b738f5272101b12b7
- SHA1 ba8bd9f9544564563ba85e3545807b6212d5e284
- SHA512 1a8bef21eeaf755df8bf0db9c75b71e9a19bd91f41a55f514c31b3dcbb836ff42e42aeccf6b0a003be854749532a7f88aca6fa72a434f473b8c39a91f7298686
- SSDEEP 196608:O6p3bu7ljBxsHJVOd72ZCzkgr/erKHvAtwcfgMbgDI:ZkljBxsjOd72Ze3PAtw4
- TLSH T13CF67D19E3D84A05D37EC1BF82632102E5F5F8B6937285DF0527DA492F83FC1A676262
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\ServerManagerForMinecraft.deps.json
- Size 41KB
- SHA256 9ef0b4dab6a57c307c0d88d9efeca5f028cbfb75fc56a36b1a9a19cc9b10e662
- MD5 497095240c5af8a89f5403a6105ec068
- SHA1 ff270a8e9a96b404a86b0ffbd6683240d1055fb5
- SHA512 136304c696e9a4e593ad91717b5a6819c737f363e710ea71e3315a5f5f7fce077ea2dd77a25348ca3e9680941ca36f9c336597f1044d7d6c5de7343806d9000e
- SSDEEP 384:Xmr60a2MPYK7pv6Yg1m/HnfnNsXndUWsWqzF447PjjWNNOBoj:Xt8sLFNbjAH
- TLSH T1D613AF66D8500DBB093653B638794668E2A5032F3086184EB5BC2C2EDF77F7B1365B38
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\ServerManagerForMinecraft.dll
- Size 4.2MB
- SHA256 4af3748e5a4af9a649de439bc1992a78641fd813747a07154903a7e07e4f7a35
- MD5 3ed0da6bdb147ec5c67a6ad727eb6003
- SHA1 c37b365c17667cceb4f5fab72248dfbcfa37f3e1
- SHA512 b5b6b5a5206ef2779046157f56081ca0b7ec45caa2a1bddfbc63ff9a8f38cb374503d779fdddb8c7a4bd3a09afc4b524440bd3473fc43b1fb96e75b8a4eac1db
- SSDEEP 49152:HYvFNe4OC9RdC4IWBy6fLprdd0UeKen3hnb6Ly3OkuCQQ4jh9JhkbV3:HCseWE
- TLSH T13B265A0992E8463BD5FE0373B42207227379ED435350F30D4B6BA12F19DA39A4E7969E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\ServerManagerForMinecraft.exe
- Size 191KB
- SHA256 e7a6a3cf3f10bc161f4fa45f51faf998a83bb69b69d02ca46386265d820f19ea
- MD5 05888f221307e42cbb29bbc2f53b293f
- SHA1 50930bdd5c964c388e725e94d20846881d8aa0c9
- SHA512 454e2ae98d9d606b918a5e27571680e145cb097430f1f26b6e7ae3846f32401932334819e3ddad2bd9983ce611ab8cbaf0ad165c51b3ece474813d9e172a1aea
- SSDEEP 3072:4XwANETcQt1Onb5RHrfqDQXFn4dePYseJwmI82jT6Jbd3mmxEivAY:WlxnlRLfyQXN4XDM8A+A
- TLSH T19B145C13A69C11BEE1B3D679C9924941FB7278594BB1A6CF03504EBA0F77BD09E39302
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\ServerManagerForMinecraft.runtimeconfig.json
- Size 594B
- SHA256 cac2cca737b345020dcbb9df2eda4e68ecff23315f0bdcbd36bda5bd6549d811
- MD5 754f51d323f1a04b19bef08255d6dee0
- SHA1 32895301e43a56dc16d5307f92120ae06556c1fa
- SHA512 8c5179eb1edf43ecefb2ec8f4be3d6e3df9f7b74e5bab7d60cbc056fde97da72ddfe4150cb54171bde6dde1945d1b9a6d32941f17aac3b5d32428e73613db13e
- TLSH T1D7F05069C9142D7708B5737ED525D0C2FB30532F11142D8A75FC180C6FB76B51121F85
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Collections.NonGeneric.dll
- Size 102KB
- SHA256 b88f9c3ca6815b91061596e615df54ee5eb34cccef70245883a358f9f3090bf5
- MD5 82313f954042863991cac760b31be360
- SHA1 59ae81baff4af1d6fd1f29747d60463f0d8df64d
- SHA512 3e7755467e73c8055443665ef833bfb0fac3e5ad6c76deeaac00aabc140c0527ad60d91ad67e0b95fa3a5d6e1f60bfdd460226c30f7714c4281cfea6425b0eb5
- SSDEEP 1536:uxp8toofN5YHixJ3+IOj4mwsxmDagF79Jj51RlLHLFFbNDy2cCzK:u4toofyGJ3+Hwskm0LRljLFFJxTG
- TLSH T1DCA33829B39C0722CAAAA2BDD1578446E270F5E36312D6DF1408588E1FA7BC5C7F3167
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Collections.dll
- Size 290KB
- SHA256 4dcfa26ab7a4983f2b7095d90180e6d1a669269f1ab7fdeb653553a8d778a034
- MD5 7b833045ee0bf723697aaecae405e6e0
- SHA1 f4e65fa5d5a72f7b0462f2399815607be4c7e6aa
- SHA512 caaa75b04343f287718c8205f570900c699bb4b614ebb0c547a0692eff7a5fc11a653423354b91d3e5ede103d05e6047b79e2116327de3e793bab3b2db6e21c3
- SSDEEP 3072:SmpTxSw2kSfDGfKqyNxPul4hvLz8xTliuNts5mEpKuxJ6ClmpNJI7Upo3fFHnbGw:ytye4L3zFqmlvZFL8ph2wb0/eLei
- TLSH T164544A2873888710FDBF41BAE693C026E27D9053835492CB46BDFA505FDBBC16BBA115
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.ComponentModel.Primitives.dll
- Size 78KB
- SHA256 74a39a79e9e3782322aad1cd82d6299bac54f0a6bf60584560e00f60452cc746
- MD5 3e8016ce831e6b54a50b32dd99e73b01
- SHA1 f449b3578c9561b8eee0bf1e8adf3dfe4d050f2b
- SHA512 42c1903903fb4a7dc9905354f3fb2ec532b645d7bf82342aed201d4b176d0ed8edda4e2ab143cf8723cb8f881fe9db6bfcd2af591ecb322ddd994c0504ff65d4
- SSDEEP 1536:wHV9l7O7h4qjUzMJVLvrYu2nC1pNMtCL2zCu:wfl7O7h4BIrLvr52C1pNv2Ou
- TLSH T14B733A1813E80319EAAD567C96B39910D574F5971323D9CF46A0DA0E2F8F7C2F231A3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Diagnostics.Debug.dll
- Size 15KB
- SHA256 cddcfd9d0d18f5ec9a5359eee558b96ca7e559509ec7f5e361198b2f076e68bf
- MD5 2336d8f21a688b0445fde19362521abf
- SHA1 c75c924af468d575e12cf6f3b7f0448381c0c528
- SHA512 517eacf768648eb3c28f247aa4ea40e1ef28b85f9d6b23d4470458ffa6261ce715185ab3ce0fadf13659849d082bbdc24d3fac660ae406eb9214892be1711e2d
- SSDEEP 192:4GW5x9nTW2zmWfZWQhFJtvUmmnoHnhWgN7acWEQuzlgnKug8X01k9z3AJJNEBa:7w9nTW2zmWf/hljHRN7sAl8BR9zGJSa
- TLSH T171724AA29BAC4203EDA71EB093B8D9937C3DA3C75D109A6B05E1FA461C13744EF3562C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Diagnostics.Process.dll
- Size 322KB
- SHA256 ea51de08264f67cb31a6b1aa9cf00dd23bfbc38bd3355804fbbb21b0a766aa3b
- MD5 7912f29b45619dfee6efe0ede4bef00f
- SHA1 44fcb9b66bdc3bb5b3d6b54db926de5182657439
- SHA512 3e962d8435dda526bf29d1543c89775522460f8225fb920acceebb8718a6ab97a2686bcf3a77b6bb277727b974ad76590bac2c707a0d36b974edf4aa0910ee68
- SSDEEP 6144:eSqd9G+Lyi03hlS+LeRqJvlv9jb3bG1PjdlTO+Vv1v:eVTGM103hYqeRUiNzv1v
- TLSH T1BE649E24AB880509FF6E537C8053D402E27DB4927385EBCB4250D9992FEB7C2D77A267
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Linq.dll
- Size 682KB
- SHA256 049166628925a15b7cb7ff7ba4c952e2eac09da9a29b156d6a3bc1d1a32d3e84
- MD5 954fd7774acd80891a4dc84d840fe7e4
- SHA1 7871b017088e22821571d2e16ef2b560c6927cc0
- SHA512 932054453f0c76c91d322bbc27a1f9e7edb2c41ea1bf486394e0ebe63425e4828c4776e965896ee5236e6e3fe29133c6d28375be68f2d00de754ff68c7e71ae0
- SSDEEP 6144:CAR80QvDF1crwSRCeeaeDzjcLFEAVS9rQGAHhek5mGvXYjGGxkhCQisVjztQAlq8:dkbFXkBnGAckcZkhCQvRC6p/XCZ3esg
- TLSH T188E46D28E38C8A26C6FF427ED5235225D6B155924352E8CB844EFE482FF3BC16679734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Memory.dll
- Size 158KB
- SHA256 21a17ae4ee7e14e54347696500910bd233cdb08007447f744bb19da2e2310a2e
- MD5 07a3e87634dff8170461825618c7336f
- SHA1 0c603a6eefd028611e6aacae9379f9bf2b3e74dd
- SHA512 8b0069ba50f61dbdacf0e3121e0f95761949a675ac190ecd2e2659f70856cc604f0b816b2ab4fede17388b47cea6415f26505592d41deb19b50ac8bcd93a41ea
- SSDEEP 3072:QIbo/fgBjoVRXwpgpw74pwaGrpXMKf4T/hd7KWn:EfgBMA7AwaGrLfw5d7V
- TLSH T1CFF35A1BD3980297D92FDABA8716C602DF336051D701A2CB48E4DA492F53BD2BF73526
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Private.CoreLib.dll
- Size 15.3MB
- SHA256 0ccec5e150fe6cf43d1f04f9365a5cf2c99f43f501410475340d088b32d48748
- MD5 9378b156991e78a8032a42a305f51791
- SHA1 f04fa78ec8f3cb40a9b2d54821b65a3af55f1354
- SHA512 e0d59c29444173617d2cc3f45ea20e3ce7b101369850295491e1a11bf6394a75d861f9fe53e7df465c4129f29753a6beef27dfee33dd64b1ab5143d53709f65f
- SSDEEP 196608:K/HfKJSkxBIMOUB1Mb/7TNKh0OH01YXlcgUE7DNsP2uOmC:K/HQvSUBI/7TNlOH01YXlj57p1r
- TLSH T101F69D10E3C88F46E17E86BDC173C267E979F882532796C705A4DA483F23BC5663B661
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Private.Uri.dll
- Size 250KB
- SHA256 392097e1bcd61974db2a085a43db5f57b82f3b2e295db471a30407c4026e0c3b
- MD5 71ccaab7ac9573868bf4dcbe4488ef51
- SHA1 c3befb0ba955fae565b5cd0c505680da51ba4864
- SHA512 4fff205942ccd6f5c20e809cd32566b8d536fb2e3eb324c76199864c7902910f7f9d52ad6191fca1f1edf063aa1d2e30efd0e22cdb40644ef8131fff7748c8bb
- SSDEEP 6144:tSE77ZozgnYGFr76LGZxJyjMjPhArX+AVSP3m/3tpeB9pSzF17K3O2djHMYYMpSs:ttthtT522+HtG1
- TLSH T1F2448D2BF3D81D2AFB2EC27D8A93C152D231B1525301E3DB0AB995953F533D05A3A693
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Private.Xml.Linq.dll
- Size 382KB
- SHA256 dbe4ddf972a6918299673e6f43af9d365e9784a8e40035ba7afdc7cba5527db7
- MD5 ca8f857d080e50904c6dcb660097e608
- SHA1 9fb86483a0ad5f8ea68c4652585c061e59f48393
- SHA512 280ec6bd2fe367d8574e93fdc13f3efea83238444d580862ce2d27a28e916200dda06cbf17506bfb5f76670787b3d1687298f42ec48737f94c9beaf7b4272906
- SSDEEP 6144:uhZAmdDR1xfMwzFDSa522f8tIzkUhLiVCCbYK6j0:uhSmdN1xpfmIzkUAVXp
- TLSH T1D3844A24E3C80A12DF6F91BCC152C612E1B1E19203D6D6CB8438EBD65E9F7C9967316B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Private.Xml.dll
- Size 7.4MB
- SHA256 3c866e68c0b3eacd69851ca65e1633488dd5ed2d10233e51026d93522a9e3e56
- MD5 adf33f2099f759ae1dfcc0607cf0661f
- SHA1 f9f37ef10ef62bd67fd392692392eb6c62cb242a
- SHA512 ee5cef561b1f44139370a5be0e322f0ddef4ae915a5752356412ae55087591f0c1d6a442df17e009023ae70c79218a52219fe8df2c56564d22e2f2eadf2dd606
- SSDEEP 98304:umfHayx34DpJzkxzRL15TSJqjfAjLzZv0ELP:Hfx2JzkxzxTSAIftvLr
- TLSH T143767C14B3C40A1AD36FC67D92238211E6F9B4531796DACF0498EEC12F97BC18A3657B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Runtime.CompilerServices.VisualC.dll
- Size 30KB
- SHA256 0a087afdf85723e622c97bdc3f08accaea2fe6af23f1e84c75064607dd3a8dc7
- MD5 335fdeae5243a595b08f1f668a774cb5
- SHA1 6a0d6309d31d3d019a9ff2944a83d1f37989151c
- SHA512 5675fb91c592e1b27a4f082711140e87fe3ba28286ee603c994b25eabb41d709af862688794698983f0028a2dfe0f148b77c1c8b216817cd9ac7f5138c514741
- SSDEEP 384:4WscLWWClpvaVT/hljHRN7ZM3gP3U0R9zeu3:B5gapDjZc49zT3
- TLSH T146D25B729BACC317EE671D319AF9E7432D38A3D56B4256DB10A8F2056C627C09B30734
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Runtime.Extensions.dll
- Size 17KB
- SHA256 fb5c3a7854ab0fa57c89f0dc16f8a6f756bfb9297a5037b04def73fca39b033f
- MD5 46a060ef4bb1c0d534fccb246013f55a
- SHA1 91a97afdce5a916ca5b200b125ad4c9e962aca6a
- SHA512 b7faec82254c809c6868689b1b803dcdcae7df759f48f18ad4d5e7c46087925d0f2edc8797a5089c063681ffbcd42974b25b814333de7fb4e4b36ef64fee6b8a
- SSDEEP 384:Yu/E9x+0FgW8mNWvL/hljHRN7xfQq/R9zZmb:Yp9F/4LDjxfQU9zZA
- TLSH T1E0822AA28F9C9203DD675FB0EAB6E9422DBC77C25D71956A068AF5091C63384DB3133C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Runtime.InteropServices.dll
- Size 110KB
- SHA256 62b6669d9970f333ca66c45a5a2e6084ea1e87540c49e8ec0c1f19910fda207d
- MD5 a9ff8b7e76d9a81ec7b210f81f009023
- SHA1 8a960a9de68fd87f76c87c51b049339059ff27a7
- SHA512 12d9589ff8f4a3e22d477ff78860e673fda9142587d19cea0a579af79872fad56931960d1b4792beed1803fb76fff6825d80a89796fc4eddfe409e54d41d8f97
- SSDEEP 1536:qndsQtNQMArNBKTerzicKDq5t4udNY/w2yVvOQugL94RHPmF20gFFza:qnCiNQMAbKTVC2udNY42ypNur2cve
- TLSH T116B34A207B98863ACA5A47389C336D448DB3FAC69322E6CF8584C49D0FD77C067757A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Runtime.dll
- Size 44KB
- SHA256 c5839cad9c86b59c75475bd2cd13cdfa3eab3c6a74e6ad9041c5bb82a91d57b1
- MD5 dc51e520a1a2cecbe08180e9050116fb
- SHA1 d09cc2e6094fc5487660342653f186a194f06852
- SHA512 9d34484d0146dcadc3e696210bdafc53c4f7b6d54955e20e41338fa4254d82e40042406664e0b4e542fe2a981634ed7101c894f78baa8d53380cf195f57a9b75
- SSDEEP 768:UAShN9Yzl50v4boRiPYVbugVJ6P3DDjrwGOrF9zRhH:UAmN9Yzl50v4boRS06P3TryLz3H
- TLSH T15813D5A1ED689233CDCB93B29CB3A0801EF673C244764875556FD73624ABB49523633D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Text.Encoding.Extensions.dll
- Size 15KB
- SHA256 60d75d0b3467b637e8fc3cf7f56f40e64cc38022bbddebba80ef3a39fac2932f
- MD5 28bb482c550e672c4a0bddf42871c75d
- SHA1 fb1df52aef415b4c9789e34730f9a458d9cf76d5
- SHA512 df110c2b62e12f74bb48a559af36eeae22e591c3a26861c724dfa44ea14359c14c33701245bc21befab3c4d69124c8021715773777906da9c96138a4540e2fff
- SSDEEP 192:7YmXhp7jpxmDW6yJWNFMZWQhFJtvUmmnoHnhWgN7acWyU3fY8u27X01k9z3AYOUo:zRB/mDW6yJWNi/hljHRN7QAo7R9zYUMn
- TLSH T1FF724AE28F684143ED675E7096BCEA823D3C67C65D50A66B05D6F6451CA3384EF30A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Threading.Thread.dll
- Size 15KB
- SHA256 4c98643005da343011cf2b70a168223173f0df597f11fece0acc1355d3617257
- MD5 3b1accce3ee220570f366e71f2c888e9
- SHA1 e4d1a6dcf232cc5c9587eb282576849487efd7b3
- SHA512 7c0064fe8f3a5837803a9f8504594e732d177b2364b7524bc60f446a17d10afe974136c31510aa221c541bd91dd27609945afe6cf52e18136758d5e44524f1e6
- SSDEEP 384:xTz2E2UVKo6Wc87WU/hljHRN799MS+R9zJYa:xP+mlDDj/5i9zWa
- TLSH T116725CE28B5C5243ED571E7082B9EA833D7EB7C69950866F0591F6491C67384EF30A3C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Threading.dll
- Size 82KB
- SHA256 9faa4d24cf6a8782aa77215b03bda1108f5ffc60dbf825bf8988d901b5d87a41
- MD5 57982fb7ffb6fc09d2c1f177fb8153fa
- SHA1 1dece4fdd85266f3abd8dac58a24ec6797a8dd45
- SHA512 39b2e9f980b684a97e2f0337af42894f203e32d6441372632c416623eb55d0ae0c7b7207d12c49274387ccf07e42e9bb5583f8bdaa2f941d48e6972f8ba16861
- SSDEEP 1536:k13lwVxH8OyQwXeisjb9RJd5baF9o6zionTgz0:kRlOH8OxwXdsf9RJH+F9o6Gon0Q
- TLSH T1A8835B11B3E8090AF67B17B9D6B35905C172FAE62701D6CF4069D20D2F67BC096B126B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Xaml.dll
- Size 1.3MB
- SHA256 781b3852cbf086e5389968601087a2c9cbc3184375fb8b68ecca243dd0e06f82
- MD5 6b672f4f2a3479cd708bd2e7109d32b5
- SHA1 a696b426234bc5be6c78a6457a4953a6462f8067
- SHA512 a36ca3182fdccaf2a1413c443363c2ad4126a4b87426fdeefde6b6d14de9baaccc7d6c448b3bf1871399950ed12b4b7fd225bcd9bc1daa50f3d8e5e15fd0f403
- SSDEEP 24576:c/sc7vpWUVYFzBzhJsHf0xOL0nsfr1ALiDvQbT0vjS+Hafta:2fCFzBzhJsGsfrhvQbT01z
- TLSH T1AA556B2463E88615D7BB82BFD1938122D6F590531362C6CF8405EE6D2FD77C3AB72262
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Xml.ReaderWriter.dll
- Size 21KB
- SHA256 dbde2bf651ef0420bc5c2b26a19a141f10003d6cb3f6456a75c2fae9a827d463
- MD5 febfc766066ab0187176b369604b6447
- SHA1 31f8e4e932b0af5e462c74995ca04c0993651c07
- SHA512 9f8eaf6777918d5de57e235a1bbbd787bea2e85f7fdb7770eac524504c90b3a2e48c588468d0e34cb92790646ca4b0c8fec293aab5b1e6127f3c7e50d6fe518e
- SSDEEP 384:Db125qkxK67ex4FCS/XW1FAWe/hljHRN7as6l8BR9zGJbv:DhKLh/UIDjas59zu
- TLSH T17DA208A1CEA4CE03EDAB7B71C69FD5C37FF46292207187769591E50B4852380AB37319
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\System.Xml.XDocument.dll
- Size 15KB
- SHA256 c6c40f525b4de181cf86ef2c75c7ba3a38edb5676932556bb1fb32eb9032bd28
- MD5 f8ef749c1d168458869e0d36d784b183
- SHA1 fea912833796da51675f63225475a5d6bd0c9459
- SHA512 968ef26b486b3594cba4069d94e8a2a3bf9fc1bb56f819f8daaf1641bbb6576373d17fada772a4c04bd5d670359e24aa3d271c65ee001fb2774e8c27c17d9194
- SSDEEP 192:wG7xmrW/WdWBhE1WgVuAwmbxHnhWgN7a0WaAT9jz5j4HsX01k9z3ApT33KY:fVmrW/WdWBiPDHRN77yR9z+T331
- TLSH T16C725AD586684243EFE75F7066E9D6037EBC63D66920C23A1580F5861C63BC4DB3072D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\Velopack.dll
- Size 268KB
- SHA256 bde31bef4aa010ac2efa23d120d06ff7ea61b256a6f6eee0d295501aa7d3bd7b
- MD5 2be80cab6291127aaad53052def2d322
- SHA1 0ddd83bebafef03f54609fe139452d713faba984
- SHA512 6ced14634e8c778b7612ebf21a104138239feb27145d0d806c1bd3d95f6d75db46220a18093c94246ee9738777fd58273e52c21dc579fa389b336352d46579bf
- SSDEEP 3072:CYldpZZSr3Vsd5oVH4FxXKW8GSfuvxVlmCQ243FYj+fg7248xrhwp1ED:CYlLSDIyVHCXKDNUxVlhQE8rJY
- TLSH T1DD446D0063F48325E2AF1BB9F87424058AB7FA43F97ED76E148498ED2D227818D51B77
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\WindowsBase.dll
- Size 2.1MB
- SHA256 5623c6fbdf1a2104a88f66c654b8a5ee836d47dfb1223f3f3c9d4ccca307c9e0
- MD5 180bafef312bedd2ae98a90868cccb06
- SHA1 c5534cdcadea5ed4a1e46efac23c0c7274942259
- SHA512 b96152318f8eff8dc5fd1120695c31f38e968ec11331ea70df8e3c568a020bdee2d030c3965945ceb189da6efe345a3abfb17c6e4b786f9b9166d9e70f3b40a1
- SSDEEP 24576:RmfXf1vpCb8ZvoX9OPIA9wxc/rYd1/Yph4R+uyqaiRSvMV:RgfvCAeOPIowxMWmh1uyecy
- TLSH T103A55A2473D84726CE7A82B9A6739112E577F457031ACBCF1809C62D2F97BC087762B6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\clrjit.dll
- Size 2.0MB
- SHA256 a570cf82e47b74847821da210410bf7959a4fe5d421e9d74c20f95ade54f8dca
- MD5 b88c83506cb50127cd118953253458d5
- SHA1 a50e86dbab87b6ae018a72c74cdd3c95ac8f291c
- SHA512 0973c138feeefb9bb6b99d7688a91b27efe4e59aa30483fe415806646ce7fe2655acc7e27aa419424be6ae43d67281e6d3ec4aef91a87d733272c432e1a923aa
- SSDEEP 49152:YjBpJoCkwWkofEuHROzOhvVMTsCYqhQA6TkLPKE+MgcXX4trA/ZFem8pST34F:YioWkcEuHROzOxVMTsCYwQA6SKE+vEU3
- TLSH T18BA5AF47A3B900FCD46F9634C6174A0BEBB2B80523719FDF42F04A556F23BA22A6D715
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\coreclr.dll
- Size 4.4MB
- SHA256 eeca161055e8f6547c51348acaeb106c43ed661cbd24aee92510d2d36d475edd
- MD5 24e5c6ac3d2441e23d4496ed913714f1
- SHA1 bca71c81d348fdf8d7ebf1e88485eaa802844066
- SHA512 7a46e7916fbf1b53506a318e85959c0df9e5ea2be4388d52f49225c7f8ae8bce2fd2b5967362c1216fe8756b5521e437dd9cf203ca7c50a59271da99387630cb
- SSDEEP 49152:xGq8/G0ezNxIwqR1JjWqx+3HvQXb7b7b7b7b+7b7b7b7b7E/QXYbWdkSl7IlVLPt:3TxKjTk/hCDPTwK71k+
- TLSH T14E268E1AB2BD40DCD4F6D1B8C6E74917FAB134491338EBEB026086651F23BE16A3E355
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\hostfxr.dll
- Size 371KB
- SHA256 4dd83895ffada7fd873b0cc70335d993ed821a68d954b8cbfffd4f1483f81c90
- MD5 dd3ad05cda1fe15263252f8c50453936
- SHA1 0c83b7cc98b01ad39876c71b43570927492b0d94
- SHA512 4f9f0bba2d39cc90685ae9e89401efd3fbbf4ebdd7a1836e8c0c49760e976b58b8c23cbf68df24e76beadfeec27a0dc533b1ee9acbd64a173944e28fbce6b3a0
- SSDEEP 6144:mnlXfjNj8mbXaLKEEfFn+GosECbMiycfhJAqg+FCK5ZoDNsZHewy/Un2AU8sunxk:mDaWYbafzAaBym1xpy
- TLSH T1B2841916D3E8057CF0B79678DAB29901EB727C494BB0E5DF139098A51E73BD08A39723
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\hostpolicy.dll
- Size 370KB
- SHA256 3e0bdef9416a0c798b304b636f1bfabf469198016af10b9d6a769ff0c9eec76f
- MD5 f85d3044a3c5f791844eaa561e553a3c
- SHA1 4d3a0900a9cd15e8a1ac51e0f589c644d06020c7
- SHA512 d5fd87cbeef3451537be045eddd15d88c0a2f8bd413ed1cccc43627faa830c89c89d409d2e8668dc9222a02f65e8016fcb1419e714bfcc858ea45e583c99f4d2
- SSDEEP 6144:Q9e9EvPeP4w9x9cI0HUsBCSwHaB5bVOLikGAQa9K/4FnbZAnHvuOnwVKIAH5F9ub:QUEePPSRRsSwUfxuxFfuD1g
- TLSH T1A1843916E6EC007CF0B7D679CAB28901EB727C4947B195DF139099AA1E73BD09E39312
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\netstandard.dll
- Size 98KB
- SHA256 4922ed9efb749c604bdb18f777627ecd104a2f02d78064120a81f5f055fd7ee3
- MD5 44d03444344b5291d6b6d7dae9cdcaf8
- SHA1 8e15e267e213ac6f0235a44ca3aaf45bb0bbd6af
- SHA512 f1d852801acf82e63e378e211e876df549c4aad4cc972cc9a90abb4d1621d0d128120fbdd1d9466e85baad663a62b74637651101a10c9eb4dc10ee169b7c629b
- SSDEEP 1536:NLrFLbuCbYdYZ5B4bgDHsPdIpuSE5L3Hkcz964fP3z1:RRaddY54bgDUAgkQPp
- TLSH T144A3E520AD1897B3CDCF9B79EDB39AC107F6A3C505761FB56488815B92CBB804236397
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\sq.version
- Size 525B
- SHA256 c6d0520b950affff73163f4afb2bfaf8a4c712ba2fd3634bad80669a5b1b2ef7
- MD5 884e069445d66fb941fb66f993199f2c
- SHA1 bc8f70e71a22e5c56fccb3fbbb13f58c4c458c4d
- SHA512 4445f53a85d3be85f2b9fc6f10ee4e881074d00ce61d7d9afc6384cbb0beea3d5a62a17ad91d293485f312db6b3291602ea610aefda3069e1cd146d06fa0113d
- TLSH T109F05046DB0CFE43454A6727FC8A41059FFBA97F10C14490D6844C3E12CA1CF4F26441
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\MCServerManager\current\vcruntime140_cor3.dll
- Size 121KB
- SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
- MD5 6ca4edb2b52ec46c7fca3fd372ca6c00
- SHA1 3d2998a27d164dd7cc3bc7d3eca08acf89a0ee42
- SHA512 bda93ff2c306c82f1942ebd538f5c77ba593e3e20792159b2a2f5ebd086c524f6c6bd3de5ad722c71ff7d832d0149608289929e9b23f7858ebb960dbb3422f5f
- SSDEEP 3072:ltkenID0f6aifkHWBXjG/Iuecbfmg4DCUil:YWSIHWBXjGlecbfYmN
- TLSH T1E4C36C42B2B401FBD16ED174C2A6AE23FB76B84547209BDF07A58A640F53BE06D3D345
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna8115299803256717109.dll
- Size 267KB
- SHA256 5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023
- MD5 2d2475f1f026dd54e9f3e787ae4f81da
- SHA1 27ff882ac271db547aee520b38e3ba9aa91e136c
- SHA512 07ef110d202d51f096a8b474d25c66b93b16af8b2ecdbf3ab23138273a0771c94dda6426fb644d43dd26cf53924f37821dca4c539d889d435185fff2198b3e76
- SSDEEP 6144:cZkI0LRMj+xkFxdHuGL0x65sz7QZBx4Cp+slm/mgye4:cZX095x65sz7iP42
- TLSH T1BC441917A7B648E5E9B7C03D44236A16F6B178294320EBEB47844A531F73BE09B3E750
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\Java\jdk-25.0.4.1+1\conf\security\policy\unlimited\default_US_export.policy
- Size 146B
- SHA256 758b930a526fc670ab7537f8c26321527050a31f5f42149a2dda623c56a0a1a9
- MD5 1a08ffdf0bc871296c8d698fb22f542a
- SHA1 f3f974d3f6245c50804dcc47173aa29d4d7f0e2c
- SHA512 4cfca5b10cd7addcff887c8f3621d2fbec1b5632436326377b0ce5af1ae3e8b68ac5a743ca6082fc79991b8eec703a6e1dfd5b896153407ad72327753222fdb3
- TLSH T178C02B07BB17D0F800D0EF4617B57916B1701E89B0A1121CFA00C2A41EDC6108330394
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\Java\jdk-25.0.4.1+1\legal\java.datatransfer\ADDITIONAL_LICENSE_INFO
- Size 49B
- SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
- MD5 19c9d1d2aad61ce9cb8fb7f20ef1ca98
- SHA1 2db86ab706d9b73feeb51a904be03b63bee92baf
- SHA512 7ec63b59d8f87a42689f544c2e8e7700da5d8720b37b41216cbd1372c47b1bc3b892020f0dd3a44a05f2a7c07471ff484e4165427f1a9cad0d2393840cd94e5b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\Java\jdk-25.0.4.1+1\legal\java.datatransfer\ASSEMBLY_EXCEPTION
- Size 44B
- SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
- MD5 7caf4cdbb99569deb047c20f1aad47c4
- SHA1 24e7497426d27fe3c17774242883ccbed8f54b4d
- SHA512 a1435e6f1e4e9285476a0e7bc3b4f645bbafb01b41798a2450390e16b18b242531f346373e01d568f6cc052932a3256e491a65e8b94b118069853f2b0c8cd619
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\Java\jdk-25.0.4.1+1\legal\java.datatransfer\LICENSE
- Size 33B
- SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
- MD5 16989bab922811e28b64ac30449a5d05
- SHA1 51ab20e8c19ee570bf6c496ec7346b7cf17bd04a
- SHA512 86571f127a6755a7339a9ed06e458c8dc5898e528de89e369a13c183711831af0646474986bae6573bc5155058d5f38348d6bfdeb3fd9318e98e0bf7916e6608
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\Java\jdk-25\bin\jcmd.exe
- Size 23KB
- SHA256 a9e64854c83bdc17fcebfe52dd9b56ebbce768f42d08fe706b8ef4bbdada4cc2
- MD5 1a517cb9706ae61904617b2ddaaf8ad4
- SHA1 1da601e0ec04425f7c2d16756fa537188981199b
- SHA512 2ae5a4915f533faeff9693f7c7b14c75105296e5c0fe9e7602e2a1d019f46808660f58c530abf9a9ad6b41e755b120e845fb12cc229b8297339f5c051b661218
- SSDEEP 384:G4DwdoXFdyFpW75AwNyEIYi2mL4/y8RbIIvZghYTHW/i:G4UdVF0756YiDLk5uIv36i
- TLSH T18CB28E67CD940C89EF4B95B0B4E5121BF9B1B16AAED1D3CB63A8C0281F503C13B992DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\Servers\test\ops.json
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\Servers\test\server.properties
- Size 433B
- SHA256 3ac8be96d16ebd399fce9302b1bbbdcb3cb97bece497bb10db2a2513eb543587
- MD5 d92281cde3a950c4c87fd5a0e4602e42
- SHA1 301dc2ee0c259ea67840fba4d7436f17f81d8e7a
- SHA512 0023c1316111ff574910e37957811b7f3c624dae764a574944323912f585d57f58b40076dc25d5da460edb6e4f6b7a0f56fddf22b01736d6742cf770603f260a
- TLSH T1C4E0A3C1FEF5B1BD41DD8323095BB44A335C4654F03A21DCF51C6327379AC4C150541A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\Servers\test\versions\26.3\server-26.3.jar
- Size 25.4MB
- SHA256 a362163eec5d1612d520772bc16e5b39c09e3b234fdc045f56bf544284ee8ae6
- MD5 f496678ab7f5326abb3616cd79fce069
- SHA1 cc3964451a3b32a0488110d5e3e6ad8d75fe6a66
- SHA512 fa5e00bd910f531be6d356b61e75973c21286d9d6cfefd18128511a52eae49434b13baff1360bce0d69ed3c12c6de674aafc9b1a34a395d96aa6ee772da56efc
- SSDEEP 393216:isXAOtDdOqZS1UOWYHUSzceF3DjnemvfdmGUtuYPaL:isXvdOqZmU0fzBFTjneYcjcY8
- TLSH T1FC47E024B9EFEAD5E43FD6368264A012D42EDBBF9C0922CF716449097EF94C423839D5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\Servers\test\world\data\minecraft\custom_boss_events.dat
- Size 48B
- SHA256 49937c8cea10110c1a760809c5537145cbdabc5405c8c456563e750c4cf592e0
- MD5 063bb72ed26ea493560165aa9fe200f9
- SHA1 3b44ad112968bcc2582b8f38c956b3eb1f474f68
- SHA512 f3410fb1829c15134beabdc133972e6245b623727ce9ef5f74ddacaff5c3fdd4b7632a7374b13354621711b3c89984bb296755d26607d66535e987aa26db806c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\Servers\test\world\level.dat
- Size 400B
- SHA256 7ef071a4b7d28e0964b56cf99ef35dffaa795cbac1244030cab18d0929e3b0ad
- MD5 d406abc0a72f185242bcb1dfc6ed6e6a
- SHA1 52d42717a345a678bcb7d3e00d9814bcec1f6111
- SHA512 3a66b86a9cf186d41ef09d22c40eac203bd09ab9799d3e7896a0d089054592840b3d174f2027e888c8cb5b074657c43b5705de018d6dcc7c2d889c6e58f2eb81
- TLSH T1B6E0F134E60B420BFE3A4830A1C9688FC9EE28050C4E237805C14180B17A6A8303692D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\Servers\test\world\level.dat
- Size 386B
- SHA256 4f3c2f2ddc7a8fdfbfe19ceedbab0bff1ba6c1ad72f28e656ab2ff34b9c29380
- MD5 986779f1ba19ff5f46deb8e329a2422a
- SHA1 b49a4cca8ee2f4019279e8fb8ba8b1c16f68cd15
- SHA512 3379f2e550985029ac1d1319f664e1fb5e94aecfe23dd169f772524952ba3dd764f30a5273d8d5360ecfbeba8125b093c2ed0199d3f4aa95e4e71d497e0ae7a1
- TLSH T106E0F171920B32E8DDAD0BF035B8801BD33EEF961F8F08B4C604BE415204454E850836
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\app-settings.json
- Size 810B
- SHA256 860c095da94d195e25278892124f8f9ff20b0613a6160c16823bd56006ea12ad
- MD5 81a7463406992648d1eb6cc58693b5e4
- SHA1 feaa185193bb1856b3da76ef99ed4392dff456c7
- SHA512 88716130ffb398f753ffc6b3113a07db99bf6f3c05ace06ce25b97ebe6ecd7136b05d1b39a7f6a6caf4e3d22f317c0349e083b08e02c1b11b6bd1d99e1b46fee
- TLSH T1BE016D118D3205FF59F6220C481983D66B056FAB62300C5FB2BF5E0D5775C29721ABE1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\app-settings.json
- Size 771B
- SHA256 6b98d400b21a784ba80180f20e48470d723afe9b95d2af4fb99b0ac3e7830df5
- MD5 dfd64ef9a79627479cc9a2533472f7cb
- SHA1 14961cecd349458b648be40cab8bac8b0542be70
- SHA512 09558eaf55e9e6613324a59230ed23b0b02afec6661de7bd5da9f8463039d2d78e50459c59215c68beaa4ac862f4850ed41ca0a4f1ee68513f8ce40a62bd6af7
- TLSH T1140128119D3109FE19F6220C491983D25F09AFA763304C6BB2BF5D0D57758287256BE1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\app-settings.json
- Size 810B
- SHA256 d9137d2fb0093e7d75347baf7ddff1c87b08a6b49b14bfa19feea2f8f150851e
- MD5 3d7bea0ba75e8ba2ad79e6cb84c68f54
- SHA1 a6ccbd50b9b23587367c0518a4f10eabb91a2301
- SHA512 41545f169747bb50897627961f43a4b1501b45ea9fa564c2abbaa680b88a3c4f6cc04696955913fba73b8e7be8261cbfb4150f706f43bb213312f45cde786d62
- TLSH T13A016D118D3209FF59F6220C481983D66B056FAB63300C5BB2BF5E0D5775C29721ABE1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\logs\app-2026-10-22_23-56-51.log
- Size 1KB
- SHA256 589a40a3e4c020cef6e59a1ed9102f3863799192c20bada5646a134bbc9268bf
- MD5 2d21f14a360da1c5fb3d9ede09906d87
- SHA1 97c818697d4e39ea5276ada49d8eb26ff4e7271b
- SHA512 b84557732330e07fdd60f7e463f6a9082291eabb641d3178e79f8bea6c45eb33502c02f3de054aa526a19b5fcbf1412133d34b10821d391853ce3b4e51d44959
- TLSH T1BD11DF434DEE869B753B529FEB739DDD8AA6CB89BEDCB70C8384400F75A101B6781021
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\logs\app-2026-10-22_23-56-51.log
- Size 1KB
- SHA256 ff7adaf06e8f4bded72f0e5cd37c7655aeba1d4f7165e94464baee54b9edc959
- MD5 695e25a7930e5c2b93f6616b497431f9
- SHA1 db1605d54505ea54d5545aeed508cdd0fb04f0b4
- SHA512 b686eac9fae3057f0db61b94da6469b4ddbad680a8686184372e07b88f6d5bd3039cc5a60de818fc50f843ed622ff68e356e2b3809c32696235e141709af8454
- TLSH T1CE31154B8DEBC69B712711ABFF235DCDDAA68B857ECC721C93C8410FB4A111B5351821
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\logs\app-2026-10-22_23-56-51.log
- Size 2KB
- SHA256 b8dbca3c1ecd099a4c19788d9cad983f4ef58c5e937013fb41ce6cc48d70be4d
- MD5 3f3bc72f20620d950aef860b8b0356cd
- SHA1 9335fad3701e35de613f4b8da6cf262b0ebca815
- SHA512 603c1c3e2e0f71427720052df8c8f75eb40aefdb82858a0d5e09b9d034a620857347a795f7f08513c01f8ffa77399f9c93e181d37ebe1584068fc26ba485e5b7
- TLSH T11351674789EBC6AB7167026EFF235CDD8AA687857ECCB31883C9410FB46150B9356522
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\logs\app-2026-10-22_23-56-51.log
- Size 4KB
- SHA256 772e9866f2cec0c6e45370010a6ba787ad34a98d803877351a577513cec1383c
- MD5 1c0b73ebc38448fd51728783687f1ed4
- SHA1 583c0e40ae7c45074abb52d9c8b947548f3adf26
- SHA512 069f2539f19af72789228043bd50226358bd06191aa4f41004a6302362b1f1708454ee26ca96c1c0ba7d7b577fcc1c10d857b36dcc4a7a708d858fec3a4ae693
- SSDEEP 96:oGmUZqprQrtX2s5Ms7s40XNwMU0qLu85rQpsEHs3sgM0Hs7EMfQZuHs2FHs70MUn:i/ms4r3u8p0Duk
- TLSH T1EF91AB078DEBC6AB712712AFEB236CDACBA587857FDDB618C3C9450F74A041E9301429
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\servers.json.tmp-190ff730
- Size 3KB
- SHA256 c9a655cd88dd768fddec0ff77f9da9a0d2070d988313b3916999529805ce842d
- MD5 a4be71b3cd6cff0297b98858830c27b8
- SHA1 05fab7829e7b86a7747bfe8bcbef129871f74e61
- SHA512 a0af80941da5ba77d0be16c6723b135ef443041520719c271b75726c681fecc7f2bc6f5f12edb3e6800fe458214a0155c8cccf774c91d7d52fbfb64416c3de9e
- TLSH T1E871A032E819DEBE69785668E1349647EB44C32F3290081FFA7C4D8D1FB2635A251A16
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\MCServerManager\servers.json.tmp-a82be20a
- Size 3KB
- SHA256 a9fdb424db45b26c5154be1bf5ea1cb9647382af76247e29c5457cd2282e74ad
- MD5 87f4dd522e4065e87b75bc843e6aba9f
- SHA1 97ddc525a3ddced068b153f0251e22ae8b47c845
- SHA512 a0cc4b898d1ef85560dd67b2b253ea78f36fe4aa1861ea5645ae2ef6c1aa492954550c39024214cc83c4df2f54d217c7d7dedeb742b2708fb9a198a11af929a9
- TLSH T17771AF32E819DEFE69785668E1349647EB44C32F32D0081FFA7C4D8D1FB2634A251A22
- MD5 SHA1 SHA512 TLSH