1c114c343c1d235f38e678b669b9d480457f2d27bdf2c9f9c247e5e1aefae757

Analysis

max time kernel
321s
max time network
349s
platform
windows10-2004_x64
resource
win10v2004-20230915-es
resource tags

arch:x64arch:x86image:win10v2004-20230915-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
14/10/2023, 00:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

mechakeys-installer.exe
Size

48.8MB
MD5

5850a82933689bafab9e641ccb6da20f
SHA1

2e46f46b7f55d7a81a2bcb1294c697550321e023
SHA256

1c114c343c1d235f38e678b669b9d480457f2d27bdf2c9f9c247e5e1aefae757
SHA512

2340b5eaa1ad292330ba7b0db9c985b724c7ecfc0e2239b850f87ed23215d6cba83d7bdc57832ec8aafbd1d1ad6be5f1658138870cad2e4fe01b6a0d46886e22
SSDEEP

786432:YgegzVdseahKyAzSD4ur1b7AC0lpDMSmuU+ZptaRHRK0/uhCOWIwtEjFmZ:YghhrKb0BT5muXtkHRKOOl4EG

Score

7^/10

discovery

Malware Config

Signatures

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1574508946-349927670-1185736483-1000\Control Panel\International\Geo\Nation	MechaKeys.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1574508946-349927670-1185736483-1000\Control Panel\International\Geo\Nation	MechaKeys.exe

Executes dropped EXE 6 IoCs

pid	Process
3196	MechaKeys.exe
4376	MechaKeys.exe
2744	MechaKeys.exe
4736	MechaKeys.exe
3344	MechaKeys.exe
756	MechaKeys.exe

Loads dropped DLL 24 IoCs

pid	Process
1756	mechakeys-installer.exe
1756	mechakeys-installer.exe
1756	mechakeys-installer.exe
1756	mechakeys-installer.exe
1756	mechakeys-installer.exe
1756	mechakeys-installer.exe
1756	mechakeys-installer.exe
1756	mechakeys-installer.exe
1756	mechakeys-installer.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
4376	MechaKeys.exe
2744	MechaKeys.exe
4376	MechaKeys.exe
4376	MechaKeys.exe
4376	MechaKeys.exe
4736	MechaKeys.exe
3344	MechaKeys.exe
756	MechaKeys.exe
756	MechaKeys.exe
756	MechaKeys.exe
756	MechaKeys.exe
3740	java.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 7 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	MechaKeys.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	MechaKeys.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	MechaKeys.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	MechaKeys.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz	MechaKeys.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString	MechaKeys.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2	MechaKeys.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1574508946-349927670-1185736483-1000\{651A9630-47BB-4B6D-A128-4925F02BDC37}	MechaKeys.exe

Modifies system certificate store 2 TTPs 3 IoCs

evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25	MechaKeys.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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	MechaKeys.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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	MechaKeys.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1756	mechakeys-installer.exe
1756	mechakeys-installer.exe
1756	mechakeys-installer.exe
1756	mechakeys-installer.exe
1756	mechakeys-installer.exe
1756	mechakeys-installer.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeSecurityPrivilege	1756	mechakeys-installer.exe

Suspicious use of SetWindowsHookEx 64 IoCs

pid	Process
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe
3196	MechaKeys.exe

Suspicious use of WriteProcessMemory 52 IoCs

description	pid	Process	procid_target
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 4376	3196	MechaKeys.exe	103
PID 3196 wrote to memory of 2744	3196	MechaKeys.exe	105
PID 3196 wrote to memory of 2744	3196	MechaKeys.exe	105
PID 3196 wrote to memory of 1952	3196	MechaKeys.exe	106
PID 3196 wrote to memory of 1952	3196	MechaKeys.exe	106
PID 2744 wrote to memory of 3740	2744	MechaKeys.exe	112
PID 2744 wrote to memory of 3740	2744	MechaKeys.exe	112
PID 3196 wrote to memory of 4736	3196	MechaKeys.exe	114
PID 3196 wrote to memory of 4736	3196	MechaKeys.exe	114
PID 3196 wrote to memory of 3344	3196	MechaKeys.exe	115
PID 3196 wrote to memory of 3344	3196	MechaKeys.exe	115
PID 3196 wrote to memory of 756	3196	MechaKeys.exe	116
PID 3196 wrote to memory of 756	3196	MechaKeys.exe	116

C:\Users\Admin\AppData\Local\Temp\mechakeys-installer.exe
"C:\Users\Admin\AppData\Local\Temp\mechakeys-installer.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1756

C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe
"C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe"
1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Modifies system certificate store
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3196
- C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe
  "C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe" --type=gpu-process --disable-features=SpareRendererForSitePerProcess --gpu-preferences=KAAAAAAAAACAAwAAAQAAAAAAAAAAAGAAAAAAAAEAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --use-gl=swiftshader-webgl --service-request-channel-token=6880711424577466128 --mojo-platform-channel-handle=1804 --ignored=" --type=renderer " /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4376
- C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe
  "C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe" --type=renderer --disable-features=SpareRendererForSitePerProcess --service-pipe-token=6917896033511945840 --lang=es --app-path="C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app" --node-integration --no-sandbox --no-zygote --background-color=#fff --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=6917896033511945840 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2424 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of WriteProcessMemory
  PID:2744
- - C:\ProgramData\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\gkm\lib\gkm.jar
    3⤵
    - Loads dropped DLL
    PID:3740
- C:\ProgramData\Oracle\Java\javapath\java.exe
  java -version
  2⤵
  PID:1952
- C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe
  "C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe" --type=renderer --disable-features=SpareRendererForSitePerProcess --disable-gpu-compositing --service-pipe-token=2986778156632492172 --lang=es --app-path="C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app" --node-integration --no-sandbox --no-zygote --background-color=#fff --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=2986778156632492172 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4736
- C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe
  "C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe" --type=renderer --disable-features=SpareRendererForSitePerProcess --disable-gpu-compositing --service-pipe-token=18398164949140230165 --lang=es --app-path="C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app" --node-integration --no-sandbox --no-zygote --background-color=#fff --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=18398164949140230165 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3748 /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3344
- C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe
  "C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe" --type=gpu-process --disable-features=SpareRendererForSitePerProcess --disable-gpu-sandbox --use-gl=disabled --gpu-preferences=KAAAAAAAAACAAwAAAQAAAAAAAAAAAGAAAAAAAAEAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --use-gl=swiftshader-webgl --service-request-channel-token=12931741829464280347 --mojo-platform-channel-handle=4056 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Modifies registry class
  PID:756

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4424

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe

Filesize
93.2MB

MD5
548f7da01b82b556650387401120e530

SHA1
346271f66de1462ea962aa95b247d205560c97c3

SHA256
a3b2d3fa5821b77217877af9d964f72dd4e92604f1f33287c22e1e9da3f3e4cf

SHA512
a243d1e4522880184ff7af3dd818f689a895e765e73bf7693425ed925a3df1e4a8bfd6827c252dd116023da7926a2875bfe2f17cfc2b653c1d77ac9151a17acd

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe

Filesize
93.2MB

MD5
548f7da01b82b556650387401120e530

SHA1
346271f66de1462ea962aa95b247d205560c97c3

SHA256
a3b2d3fa5821b77217877af9d964f72dd4e92604f1f33287c22e1e9da3f3e4cf

SHA512
a243d1e4522880184ff7af3dd818f689a895e765e73bf7693425ed925a3df1e4a8bfd6827c252dd116023da7926a2875bfe2f17cfc2b653c1d77ac9151a17acd

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe

Filesize
93.2MB

MD5
548f7da01b82b556650387401120e530

SHA1
346271f66de1462ea962aa95b247d205560c97c3

SHA256
a3b2d3fa5821b77217877af9d964f72dd4e92604f1f33287c22e1e9da3f3e4cf

SHA512
a243d1e4522880184ff7af3dd818f689a895e765e73bf7693425ed925a3df1e4a8bfd6827c252dd116023da7926a2875bfe2f17cfc2b653c1d77ac9151a17acd

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\chrome_100_percent.pak

Filesize
176KB

MD5
6bc3c299d9e24718c066edad063619b8

SHA1
65ae83f994992d032fbdd7544280f5cd5e240103

SHA256
971698362570b8e7dd79e9eed8aeb28443535053787e7b5e8bbf0cb477b5f99d

SHA512
99ddd1af09588b8bac7c293e3598db498f7279711ad691c80072987d55cfbe53651458a61e820d75f3bec04f119aab0f0e700a52c4b56cca2c0e3bacac19da90

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\chrome_200_percent.pak

Filesize
287KB

MD5
1cc200bc1a1c416a0f5b34d138c49d85

SHA1
777a70499eb27bda881104b581de1a242caf49b2

SHA256
7afe6e166dc44329e99c218b3f783c14ff0c67b036806d6a5247dbae694a649a

SHA512
31c4f06814ef4361a72e7bae264e754d4398d92ed5b2306ebed8625118655e8feda1df2f40c2f1a630ca2b62ee7fd34f3373203265835e791ebb90e0f979e0b1

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\ffmpeg.dll

Filesize
2.0MB

MD5
c23301f1e6c1f8116edfb55408cd7c2a

SHA1
b0f0a8af7576eba7fdd2509a4b138eac775df4bd

SHA256
a70c01724f320e014939735d11241a7e321b0838b2137899885000e425edfc09

SHA512
8c35d695b02a4018ae35e72859bfd08eecdd0c5533253a14a4afaf61c3345c60119c47382b565fc36049f180c6d98f10d9429f1df996489e8522170df49a00d7

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\ffmpeg.dll

Filesize
2.0MB

MD5
c23301f1e6c1f8116edfb55408cd7c2a

SHA1
b0f0a8af7576eba7fdd2509a4b138eac775df4bd

SHA256
a70c01724f320e014939735d11241a7e321b0838b2137899885000e425edfc09

SHA512
8c35d695b02a4018ae35e72859bfd08eecdd0c5533253a14a4afaf61c3345c60119c47382b565fc36049f180c6d98f10d9429f1df996489e8522170df49a00d7

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\icudtl.dat

Filesize
9.8MB

MD5
65c6337820fbe9bf2498a9395e3b20f2

SHA1
5cc62646e6c73b4be276d08719bc5e257af972bb

SHA256
33da1cdda18eaea52011d40ae9a610cac9f6466156e9803891ee77294607aee4

SHA512
4800f03577a46a98a4bd786dc37a380f4169540e243fdb7835e3146fba0d0e1d07a7e3ec8cd23566feb00d204d582d678698ae61db156339fe56229de0b267c9

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\locales\es.pak

Filesize
75KB

MD5
a3ae928cb59a28d3aec3b3e4ee894385

SHA1
4c2faddfca41934a52d5b3537b0718cd72ffc7e0

SHA256
bd25868d881aeb52c180a5b23c4cbf0d9f6fa4c473a1ff1aad09518e6f53b526

SHA512
723633c46d91128c1c59b843df536134bd178df5a24a2920b6de8c49f8f895c7c07076bf805eac06e7979a6ec23a32b31caf1b66f2c3a204bd9c1915632bca35

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\natives_blob.bin

Filesize
81KB

MD5
e350965916554e65a47305a6ab27c2ba

SHA1
9d60e499a907811a3155e9a07f8645d6c83cb909

SHA256
1cae202ada016cf455abf69d583524a1d37a1371ad4efdfac4baed07c6402bdd

SHA512
c6044b769a00f887b573ad35a7f5b71f6134d2d596a54effa50710be2f528acefea53ae4a2847e16c1b4e56962d8b0fe24f1ea4a04bfe167514b0abddb4fb5a8

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources.pak

Filesize
8.1MB

MD5
e0f8112a2e84d3ba16d19c8db5b7d53c

SHA1
c7757266940442d133a20157f11fbffb6f131748

SHA256
1f4826a8287d8763469d80e1f267c7152f5cd64ec038d157ff2a4c804803a3e6

SHA512
ef9718ddfc582f06a61debfdf43def2b39040aa9ca93413b8c34c1e8474a754c3bf820c683a2b740f41179fe30ef69d6ded8d3118fd64ea1c02f8ea68d99cc47

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\main\index.js

Filesize
12KB

MD5
fb01dc29669a068ef6963fc1010d10e7

SHA1
923dfcaf03736a4dde608b4d830351d36fe84218

SHA256
0b64bdfabb91768bcb5beef48511f1f8ec3b8e35a43a1f9af98132c7ec887529

SHA512
6df610ffd1600b02711543a6f91e48f30e4deb8420fafee8ea261eae9f58061a585cd0d8e83f3896296ebe50269c39b8d809fc5c8d75c6e75526841b6f3915f6

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_diggly\right\down\Minecraft-click.mp3

Filesize
13KB

MD5
d1a480981d42af99e213e2019cf5170e

SHA1
ab1a0f12f20b59c007cf669601d217dd77e098c0

SHA256
20f1cd5498081350c6e0e45b87efc75ec2d739e7da56c93ddf96110bf4a5d002

SHA512
847076a2121c367fdcdb8ac422e6572ebc169d20146eb03d4fd773126165716c1d9032185b921319596f6b2b0c2115d0f173282e0ea6a20295201f5a3dc8066a

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\down\d1.mp3

Filesize
2KB

MD5
915107d201781b82f862f958a8ec33d4

SHA1
3bdd8cd9ba7f8898b226a76b08fcf3ce85abece8

SHA256
b484143ca70d0aed302a719ac1e8ca823c105ef53838bbe3972e6d72fe8db606

SHA512
fa18fe92d0e8db7bd1055f3cc236a83f8f2346fde3c182dd1b16b646f127d4bc3fcba0db0d603fc291c8d024225794cfb5b26c29eeda4507a85de2eb20e72a95

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\down\d2.mp3

Filesize
3KB

MD5
0edf30d44443cbbf9f04a51d04852352

SHA1
ca1033a72e91ef429ecf189da2c6f3764af2d4c2

SHA256
ff42b65292f103034f67f603d4e851bdc3530ddc1fba342be5eaeb905633fbd6

SHA512
5d21c775122b89006354776053406ad73e960679f1bb61790529bbd8926c48cb27468e76ac6a31b606ec090802262c9bf964897965cb3f5c1c8d33dec9aa5a22

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\down\d3.mp3

Filesize
5KB

MD5
7cd6f299360b304682a74e4e6abe193d

SHA1
fa1fe87db23c4f1973b5fda6ee294e71f6ba1aa8

SHA256
b423c8c1113f043779482c1e047bd267eb1a3c07fb37597658997ba7033d8b1a

SHA512
bfdcd9bddeb60a034890de9e12d9d54ec40591600dade2a18ca97ff0df817b243132b19e1a4f52df4747e3be2d5d2f94d2ce1c3215191274ae978d2a7cdb9451

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\down\d4.mp3

Filesize
4KB

MD5
547cce0ee5804d6fe62b700ab3dbe34e

SHA1
d0c5d8dbf72fe10ddb4b640be1c0a10a58eff2b9

SHA256
ec5ee1969b0d22a3a3114b938148f85eb3b2b3de53af5dd628958b99e6b37af0

SHA512
92144cbe7c78885096db5cc9006b94e302d15efc93b216be5033a9349da55d48b04c1aaa569df116f0325023c591b2d45a3583e21073a71ef738132076eb774a

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\down\d5.mp3

Filesize
5KB

MD5
43241d06862742794c0a166c48d98ce1

SHA1
79ca5d6d62bcac7308cbd98bbe821f6bc29fc17c

SHA256
70dd43a482f21275be79fa6efe5a7958022a4db7c8f2e4716de0d55afbcf6677

SHA512
cf2553769d042ad09e871834f40cb5936d9a23547e61a4329fd38962adbf3d9381d8104307a6ccbcbff21bbfb37e379419424a07cbe00470d2ec565f0532fe25

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\up\u1.mp3

Filesize
4KB

MD5
827910e02283ee91a9110307892098f9

SHA1
62da26902530b172cf465dd30d337a9fe6269590

SHA256
35baf5f926853432b8069441672a0d4c3e08864a43647ea311b33b5ce471facf

SHA512
95b64504dffe42fc663913abeb34e9846d4c056dbba1b7568cd70fc62f089f6a140c9d6b663f548c42bdba37098d47887f9406934c2e4ee34694b222a4c36982

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\up\u2.mp3

Filesize
5KB

MD5
26939b3b4383def78d9a538819a8a973

SHA1
688386ca24d246e4c90813f368673a7c531bd5f8

SHA256
24f56976b34fdc3f3afaf7b8fd7f0a9870b75f84628ce0b0cf821cc7bb226c91

SHA512
d377c6f380d06c99c3041b4b1f7a7dc59f3e1b2b897beebaa563f190fb64fc9634f9c6fa5399b35e3411f829569fe4f3b555cf94a7acdc3cbb8a2d4c001c6ef9

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\up\u3.mp3

Filesize
6KB

MD5
da3d4c355a9bb59bc57f191a6b0ba923

SHA1
901591f4a7be21d0ef658122a8717131f18c5daf

SHA256
5b5ece8c01e767aeaf0397a51fbadb730f15e691c47526cbbd05c6bd85897988

SHA512
07c0f1a8ca21f4364b86762576921d7671094e9f7437e31507a9592ff90268fa6fa7af8f41397bbd14a0ac7f63208262e5de6b992758c5414ed9d06d714e6eb0

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\up\u4.mp3

Filesize
6KB

MD5
9c0eb4c649a4a3d70e7b8eda9be493fe

SHA1
19ecd330cd5ea8c857316576f8492803a42bb6ef

SHA256
9dc70edc0f29afecdde56b7eceebbe52988dd1c15581e2688cd4cace2795ad17

SHA512
8ee480b9d08339bbf19c4df0a994715906ee307c96447cf797eda396df76eb1ee7d149bb7b87ab5126100fe435ac6cfa411335a5d7edcc59e6b96aeacf5dc083

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\up\u5.mp3

Filesize
5KB

MD5
4cbccddc09e0b63445b37e546d8e118a

SHA1
02f7c2fe38aa2b07936fbd0b5e453eb2c55ff102

SHA256
bae65378e3975ed30efc4c006d197a0fe157efa54fc19668b1cf500686db36fa

SHA512
482d55bef50e2aa4bddede1113d7c17936c1449975f98d6e7b0d44e166ab78606f033426669779e38f3b63195a0e4f1e33384bae0c66d7b342f86e00a2507a97

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\@nodelib\fs.walk\LICENSE

Filesize
1KB

MD5
580f1c3c6765fecfdb93bdf4e068d952

SHA1
5dc937a8eea3b2c0a0642549a96bd7ef5f5a851a

SHA256
9363d160bf41d46d83901a5d24fc3fe2094c2afc17b4a2378914b273977ee2de

SHA512
925cb3b6d777eb613d8a7a455365f48e467e91a599f8f84311725f3207ee5832b00b87429b09466ddb030ac42358f52cb6cbacb36122cdcaa3799359b36429f4

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\@nodelib\fs.walk\out\types\index.js

Filesize
79B

MD5
24563705cc4bb54fccd88e52bc96c711

SHA1
871fa42907b821246de04785a532297500372fc7

SHA256
ef1f170ad28f2d870a474d2f96ae353d770fff5f20e642cd8f9b6f1d7742df13

SHA512
2ce8d2cf580623358fef5f4f8925d0c9943a657c2503c80048ca789bf16eacdb980bfc8aaaa50101a738e939926fcf2545500484dcad782c700ee206d8c6f9b9

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\array-union\index.js

Filesize
104B

MD5
562bd142e8dda5a62522befc997dc739

SHA1
724b8c46f000a118dcb13f05458d5dbfd88fa1bb

SHA256
3f61bf9d59d79b08e038d7d2f84518175a3e53693bf5724aecae4985c9897cd3

SHA512
2f5c82180b13f5b634c54a19d2191442c06283b0907609d3fe754ac0dcb569dc724d2354999045f9cac5e2efb69768d3a53f6f70210a1a826b77ccf16c9ed6d3

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\array-union\package.json

Filesize
495B

MD5
2c5ade1d8510218fd99694ecd80be49f

SHA1
f0c134fa8b027ecf4a382df80830ca97e25b1d95

SHA256
07ed63c1ff3babb6c034956e16a672ef75701e7e80e76405532687669e06de60

SHA512
15aa2e09b5a18d61a8f1a8b65d90ad25c979e35a811b466e40df79b6665b3f8ae64e67958c7610158633cb0b3c82f72c14bfbb73e97d5e90df22fd76c3e2a781

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\buffer-crc32\index.js

Filesize
4KB

MD5
b4241c923be334c1ed2010e73e68a0fa

SHA1
e97332d01ec965e7ea41cc2f9fcb64b9f111a428

SHA256
f673ad9729984769996849030def1cb0b8da721d492a3b9beedfe36dbc6be117

SHA512
b4e55102afa335f8e7e0521e76fce9f5075f0c123369b87420f241ab68420e07ee4cc3987793fd70c6d3e43e3846ad6707991c02f8d2c0e85d4ce285efc7ebed

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\buffer-crc32\package.json

Filesize
770B

MD5
b9bffbd08c5f10afe17716a0b9875574

SHA1
0b6e166f843dec8e17ac5bf4ee112ba628440abf

SHA256
f22b7893abd462180770931b6ff1055c7c6fe19cbb3695664bf19c6cd3d304a8

SHA512
798173f4c0e21ceeef5565b94ad64b8195bd4af3b1d92eedf4a9a94980833b4a180b5250430fd681257241398042783059d1746a9f073d61ea18e2c4e5e9a86a

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\del\index.js

Filesize
2KB

MD5
df70e504df22652df872ebbf2a66f3db

SHA1
15c201bb312146f52863683722dbbdaaa851e76c

SHA256
e0b89df8b2044dbf591de982331223fa4176b3853ed365e33136746a9848ac1f

SHA512
61a944c6b14a41672873ca1ddb7151f7f75f915cf9c79f20e502cad443d4a067d650c0874ad29096c006fde083a45c16805538232ac6f06295a81ec3a6e8f286

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\del\package.json

Filesize
819B

MD5
80de1ea62c4174123d4c4fb0b31b5cb8

SHA1
0c76a7307846e2efe2fb3d3a2c729b4aea513421

SHA256
9e774f8fc1d4a41bd1ac80b8056ca97127ffc7c005f91aeac7ee18f950e829d5

SHA512
4126ca65622e77fa320362c61794569cd4f12594c81fdc071b1d03dc2de0b40e1032d37c0b2a31b80dfd1ba0ace1a222eaebed3e5bddd1b8d4a966685fe3519d

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\dir-glob\node_modules\path-type\license

Filesize
1KB

MD5
915042b5df33c31a6db2b37eadaa00e3

SHA1
5aaf48196ddd4d007a3067aa7f30303ca8e4b29c

SHA256
48da2f39e100d4085767e94966b43f4fa95ff6a0698fba57ed460914e35f94a0

SHA512
9c8b2def76ae5ffe4d636166bf9635d7abd69cdac4bf819a2145f7969646d39ae95c96364bc117f9fa544b98518c294233455d4f665af430c75d70798dd4ab13

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\electron-is-dev\index.js

Filesize
281B

MD5
84402fab5f78e8252656ae68cb5a1616

SHA1
98fff1a8568fc3d1a3bca237609d9083c3f0135e

SHA256
4b04baa5ad869bdf03929616d60259976bebfc910e01bb086cec729ab6dcf694

SHA512
9c55142890367fc4e9578494437604a553af73cbe47752e49328820fb573320efa0686337c9f717a381cf730f7d28aeb3f6228232b6b70a6e16b071b3846e961

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\electron-is-dev\package.json

Filesize
580B

MD5
c4a87d51b939da7257e9f7493f3c73a3

SHA1
3c06a6c447469f7b7efe7acb2b0fbfa2eae32456

SHA256
cd0128d6a7261f94f26f67bbe82eb055cb8a9f41a1503ac10054bc40c8ce8fc8

SHA512
dbf9e7f00a797dbe8196f344ebe25db06a206ede1756ef53f2ab3d5d7a207d5b6150fc0abee0788d0f6e291e9c6749e5eac6db59e90bc7b7141cc9342db196bf

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\end-of-stream\index.js

Filesize
2KB

MD5
2c81e5e7dae5854bdba5be8e0d5b4c79

SHA1
4764ab17a6f6138154139d0841fff7c351e69b6a

SHA256
3e912df226ee90ee3edc5ff69cd3e8313fa1da13795e10fb0b0f05727bdabb58

SHA512
d2fccc9e7cef57c295cc3a1701b9a64bdbc01ab5154f857a548249c8bdeb9857b4bc93853ecb05f7163de6b34600f621d7e885bd773015d7c8a11110887e5f2c

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\end-of-stream\package.json

Filesize
589B

MD5
6df442374914bf66c3d6cfec4254a6d3

SHA1
a1e6a2e2f7524c3db3027c43c2df5f2a1af5fc52

SHA256
cde5f41d6f1f53b3a475cb0441e3272d656205996b7a12871722e16a631676f4

SHA512
edc33048325eb2f7adb6ad45b97a78143109b39abd860ec854ab6279e729d2820e501ae7aed3ec077891f8b203047a32d0d8203f48cf6f28364efaf0064a20bb

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\index.js

Filesize
4KB

MD5
f36b02b098d9fb1aa70cefdaca6d7e1a

SHA1
79f6ff49b1cc05f72658b961aa46a2280d7677d2

SHA256
1073ca8196d3c9ae51b0de41df9d7c347957c8501d0749d852b4994789cddd78

SHA512
39c243df6f064de58f8c25ed6a107d72aa3058ceb242dd156fdedc6e1b8696fccbf6b648c5e815c5e59638ece65ebf37866900cea29e726cd2d01e487d752ccc

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\node_modules\debug\package.json

Filesize
879B

MD5
4d9c2d89c6bfa98fc24938074fe2939e

SHA1
30e58a4f0c22b0c2fee662102419a83338f2deb8

SHA256
f17d437896828c0c922744a43791b7f6f2af55058546b5a18f65e0ac90ef5fcc

SHA512
2b71b71fb1bff92f8c1e9abfb2e396247c67b88a0127093fec418f82a0bad79fc81142f92e0d1a2f8d7ec139ab0653ff5410e8770254e726637f57d8b1fa2e2f

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\node_modules\debug\src\common.js

Filesize
5KB

MD5
3149add0f26fbf21db18925c4fc4ac80

SHA1
8b01da5db7cc6eab79e2b2a3fb4304469b726aeb

SHA256
a869a6402de5270d7b9d41849e432e24b409c27f9171f7dbd910b0af26eec456

SHA512
280793bb855a5d6d93bef07887ad99068322e160e4ce2d78f75dd3b9fb0e5f72ccf56c0d842f4e102573f21badd69ae97910cb3387e2803704a4217689e36835

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\node_modules\debug\src\index.js

Filesize
314B

MD5
d6c53f5a0dd8f256d91210ad530a2f3e

SHA1
0f4ce3b10eff761f099ac75593f7e05b149ae695

SHA256
aa127ff1752b7d9c7415c5c7bb6994d9aa722b81bcbcab4bd48316b013d23bf3

SHA512
4faa874d9d862ffc921528742c4f1fe8a9b22a358760f6e93fcef138523575329a801ce9659ed8e96b02b73e581b3e99d91973e22981b358ffb5e43103a536c2

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\node_modules\debug\src\node.js

Filesize
4KB

MD5
022881df4a2d137c0f0fb83e84592155

SHA1
659316f1d1ef8539fa6023fb9cf5e8160b6159ea

SHA256
325ef853b9b77da990ee685a6cf915a03c8db652eb863e777f273654bd5e56d5

SHA512
834074b374733233f8818e8789fb3e1fb2758fc2202afab914cd913e22c5802a1aece2558227bae0dfd72b502cc231ae0c88bcd5d82c9ea2a1df6c4844d814ee

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\node_modules\get-stream\buffer-stream.js

Filesize
894B

MD5
b8824799bfecfa545b32119b318378bd

SHA1
1a493be2ef86273c899c06d21a06095b217aef85

SHA256
74502372f3e457ae4d05546c47b4fd88c8df6ed8eb6166b6feb8bec1798ec6dc

SHA512
1eb56f3e48f82ca0eb37663cb629a39f3c20ebabd1f5693f6591ee80bb9a0a91de2456c3d152e1326807c32b5d45865e77272f702a86170fddcadddfcdde8c28

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\node_modules\get-stream\index.js

Filesize
1KB

MD5
583837c67688d77fce56cbe847e23ae7

SHA1
5ea97ea9f8be269fdeb57eb7a4634ecf955db051

SHA256
80626386e94017e8950ab75791da258c1165867e49187ebf8c9f77b3e1da4478

SHA512
c93bedbd6945d3d85755c1188048caacb1eefc6033f5a0d1f2db241f15f9a874afcba5e3da3a7a8fc96074aefe22b18bd762607988d8978864f58d6abbbfbadb

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\node_modules\get-stream\license

Filesize
1KB

MD5
d5f2a6dd0192dcc7c833e50bb9017337

SHA1
80674912e3033be358331910ba27d5812369c2fc

SHA256
5c932d88256b4ab958f64a856fa48e8bd1f55bc1d96b8149c65689e0c61789d3

SHA512
d1f336ff272bc6b96dc9a04a7d0ef8f02936dd594f514060340478ee575fe01d55fc7a174df5814a4faf72c8462b012998eca7bb898e3f9a3e87205fb9135af2

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\node_modules\get-stream\package.json

Filesize
664B

MD5
2ffee8b2d190f6a9bd4f7b11e25d2a38

SHA1
4a9a74a0a2e17049368086881814037f4e484fc0

SHA256
e45d6a34fd8770bc9d54716fb35a8a79fbdc4b6acde300d09a66d49f944835e5

SHA512
6ce7d794fe06ad394ba0276df24a8d30abec659bed2d959025b376e5ff68388c1f7baa22c1cf29344a26c98d14d09430edbbf4d0aca4aba8c1d56e7f6a844ae3

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\package.json

Filesize
1KB

MD5
1c3325ff3e395fd625409e658e58b2ac

SHA1
68f0ab7bed8017ed2a90236c9dc8d4e7866d841a

SHA256
2331b88523762ce207c089eb90f15ec328c6e7a43b7503ac9d4cd57bf6b821c4

SHA512
924e5cb0058d185c3817cadaf97432392df9604c643ca51e6390017f2b0d1d8fa3d8f1469b3917c29952538393b04577c09dcab8a220c4d5097f5b8bf230fc4a

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\fast-glob\out\index.js

Filesize
2KB

MD5
516531cb5f028627bcb8982b4404ffdc

SHA1
09db48e2ca3b51f1b0ceb738e2ee73adbcb5246a

SHA256
c27abfff9f2b8f73c26dbc913a5a64082a03d2efe3a8da4afe17893fc29cc663

SHA512
f20608d1ef043a9b50de34627cde01f6675bce624f3ef7f3d0874a3e99e4487c079c0e7028f80b07e30c96ea32366e4a2cae7e35b376bc508f93ad6486401c08

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\fast-glob\out\managers\tasks.js

Filesize
3KB

MD5
7a8f04fa41c1981674543888ff518149

SHA1
ef3d7dbb3674a512770ee8309fbc94039f81b94b

SHA256
2d8bccfd6808c02f9f654ec95ff9fbdb01d2bfbc381c8c4046456b32e16afa7d

SHA512
e4ef23a617bf5c1e424a507899bb31755512ccfdec377f1516760179901f17083695562f570e4db90a71a0d455116cc1caeb66b46d95b8b598d93a0a75e62714

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\fast-glob\out\utils\index.js

Filesize
613B

MD5
7ae4c8e0e235942575c247ae944fef35

SHA1
507e66febeb16e8a1a33cad08fb22c5e58fc0fe0

SHA256
96c3fd8780812822c222e15334e4f8f1e2a6fd60d08fc350f539841777d88fe7

SHA512
dbb9c422aa5177237b8ea2a4e2c5d707adb614d23c7baaf112c0651ec181ae2999bf2a2599fbc586825ef2077f1583f136c8238899d1e1f188e7efb680868a25

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\fast-glob\package.json

Filesize
1KB

MD5
fecfd2ab5e4902a326006ce731bb0cf1

SHA1
af412b7de05cee70cd803e810751c5433c13e39c

SHA256
30471de0ef27983d5fe32d3607026525bde4ba608bccd5b3d6272d411a5e5e64

SHA512
e737c0f5b506b0d624377892aff03066bc9cf69feb83544009d56c635689a58bac16c36103c94c400fb191b490ffb09068e4d3449076922b6793dd28011be479

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\fd-slicer\index.js

Filesize
7KB

MD5
dd275f95a66b1a229447c0c88ff83a04

SHA1
0160f77af38a20a212fa2aa4b15d48036763b486

SHA256
05f02afe3e105f97af8c5c6c1b29dc388d7ff71c9801c1495a13dc34dbe115f0

SHA512
3045bd4761f90f0468cdd029056bbe73a4e0918ee7a53a78a674f642ddb5d5e3fed4764d4ccea387e4c03bf63c5b50b8b81769b4f03898b5f8796178be0d73b6

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\fd-slicer\package.json

Filesize
693B

MD5
66658ea6fb14f7b4725a97297eae209a

SHA1
665ac1eb0410231d39eefc4adb4b32af92ceab92

SHA256
1c6df15b15afcf16928c84a153653093f2f31da0d2839e07190aff01c0cf01ac

SHA512
f546d457fb6216a63ce97af7682ff55716ff50b007db5960a41cf0209375ad0884895d7f29926a81546c02a89d9912d548cf8bec300639f2e5578b5ea3bf081e

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\folder-hash\node_modules\debug\src\index.js

Filesize
314B

MD5
d6c53f5a0dd8f256d91210ad530a2f3e

SHA1
0f4ce3b10eff761f099ac75593f7e05b149ae695

SHA256
aa127ff1752b7d9c7415c5c7bb6994d9aa722b81bcbcab4bd48316b013d23bf3

SHA512
4faa874d9d862ffc921528742c4f1fe8a9b22a358760f6e93fcef138523575329a801ce9659ed8e96b02b73e581b3e99d91973e22981b358ffb5e43103a536c2

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\globby\index.js

Filesize
4KB

MD5
6c2c6780deeff3ee5da4fc0156259097

SHA1
19025f7691bcd5d3df4043f2e86b5f99c2c57aea

SHA256
9c37ce30d79622339821a3e47c945b496a2493a9e6db704b3f9e8a19af418fe5

SHA512
73f2d16ffb019d4e81d6dd11d14620e4d5e207b2b30fbf128908801ba8dd844d556f646985c4aea03d946b30d526aaf2b1d984a6cb9dbff467274024a8574acb

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\globby\package.json

Filesize
876B

MD5
96c0addda58c0152d2d8ffa4df4f2d52

SHA1
5832785dd8ec751c425a90b4a6dd1ed31cff0089

SHA256
995419903127e0e9e3352f8013de1d6a89044a9753ea333a37077d029798b565

SHA512
1148d31c7a24cccc36504f3d1e59f63663a3a18a53d20a1f18ab58da5a4f3b599cf9adba5aa515a88e64c939d09b708e387854d62d35394e8ece0daae63bfe82

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\merge2\index.js

Filesize
3KB

MD5
35d2978019e96cd7ab6f732918d64eb3

SHA1
ad80c35745c87c842494078cfa8da55cae9d1201

SHA256
15a54c244f6591f3a744ea3e26f3484fd3ecd0975734639aa535b5af9a3edade

SHA512
7e910f1a53da3704b78341ab47fcf9af81219fff34fde3d189ac2983cfc10255f128164af2fc00dc4f5915a238b2747742acbf489a0d0c64512ea07bb843c1e4

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\merge2\package.json

Filesize
637B

MD5
61b9520cb8f6dcb106b0805b7cc4c19c

SHA1
d17e55690a046c58626411fffe57256849459d41

SHA256
202129ba22e9acef65008e10e6ed11c2e55e1ba2badb14edcc5c8ace6991f744

SHA512
5dfd6f2180091252bd67ceba4758b8eb4abda8c8f3cce9e74ecd45923cbb0f139e94d302e50a6d9c5c37e20e9bbf76327c5c4be9f1e7f2fe02407cf14ebf47c0

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\ms\index.js

Filesize
2KB

MD5
fddcc2097091479666d0865c176d6615

SHA1
55f9b3a7d4cfbf68b19ccd0d698aa86483dd4694

SHA256
55986972f5f3c9446f876c576e1cd30fd4f04cd26527efbb5ad834637c740e4c

SHA512
252644169a9398527927b69a2f19c6578bd62dcd180b94984d991939f53bf4e77ca687e840db42f7dba3b37124a5e3f3eda83535e75491bbe6ca440a7149913f

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\ms\package.json

Filesize
607B

MD5
c0fcdac41c74631d862f2e14a6bcfe6a

SHA1
70460f5bc544326bf3c5c5933dd39a41a6163efa

SHA256
461fae62c3ca9832c2584a73d4c94986123f448b08cd6a5b11173accde3af3a3

SHA512
5359e996a371aca8af3722633fb479b7365b8817645e41ab195d94a5b59185876b80a8881870842ad7df251eae5f32c8da0004f6cdc9942ecbbf6305516d9d82

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\once\once.js

Filesize
935B

MD5
d1d6962324348ad89bf780a233952c61

SHA1
f78c8cb8d754261b59d03e867f329c2ffdefae45

SHA256
3db73e347ecbdbafdf8d0db85145c877e133f5372e767360ef90c09f70ac5103

SHA512
9d9667f080e1534260c68a57aaf1d1db368bd03d8c998d4b5dd3df68dde1889e237bb735d73d29d65bda50c05bf87cc3637ce504bc885e32d2c908d706f3dc9f

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\once\package.json

Filesize
578B

MD5
5a97b6112c1dd412e62716bcfd35e67b

SHA1
27fcc63b1daf6ce773c76149ed1ba16bdb3f6d28

SHA256
20dc231a8de8c78c9e6507e0b8bc8ce995f9a9fe24ce0be4d79566643f4eaceb

SHA512
c92ae77ade8200476d63c32a0cbce687dbccded977227b5343cad57818b46527c9ba8910c23b2ea3888963c6bc590afcb4b2946d53f8c1ff18e1f62f1f8c783e

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\pend\index.js

Filesize
1KB

MD5
51cdd3c93701ca33381fabda25149a99

SHA1
4b98d801dfcfa16cb4c2f66930704db959e8efc7

SHA256
4b991290680d9027dd786493c6e816900355956d88afb6ae4d97b5ac5a3ee0f5

SHA512
7b5c4b4d2f7daef6e99038dc37859fedd4b059340cac258cea62b0af54d16ffd67e117d028cd34cc4f22742674a583da98a5760f72e867a64494d064b1a74b5d

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\pend\package.json

Filesize
404B

MD5
b41a498760e4a7c219027b1251849186

SHA1
bda25639e3a73e5074c37485d4009e30d9c0b586

SHA256
29db2d35f2a8412a6e480894f9705004424c0181b3524fa7b10b7d639da781b8

SHA512
3d4481be20a3e4f35bd0a98745a7ec5c8de6b343c5eee01acc9a4874c6f6848504e3068861afc62fadc4746a968a4d888ecb8012d57515337cea297a35d33062

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\pump\index.js

Filesize
2KB

MD5
9c2361a467ecc8bdc786062b892524df

SHA1
0e7454e620e2482b0311a99789505fc24c60f2cd

SHA256
60ae01725219c69e086e0cfe6a6da1f94a9bafcfbf528460b6e04b7b6d983165

SHA512
27058a7d101c2a09329862f74377e70e7c561d3adcf77f29bd38f1a05204f31bf139291a2f6e66006407156c53a0ce988570188a343326b7b2e80346e5eab2e3

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\pump\package.json

Filesize
524B

MD5
ca72ebf903466241b191a18be7f78012

SHA1
7fb0e4fd09fab4a73cee8130395115c31e3c6a9a

SHA256
369d6e7b32e83acc278b3d409c43ff39b600ade2a09b6f247478845bc465c09b

SHA512
a7b6e5b5dda90b16cb4216bad42712759c87288519db288d05e750ed28edcedd49b042c6644065689599a84bbfa49d25749f7adf6f3e81bb346d294826c69335

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\semver\LICENSE

Filesize
765B

MD5
82703a69f6d7411dde679954c2fd9dca

SHA1
bb408e929caeb1731945b2ba54bc337edb87cc66

SHA256
4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b

SHA512
3fa748e59fb3af0c5293530844faa9606d9271836489d2c8013417779d10cc180187f5e670477f9ec77d341e0ef64eab7dcfb876c6390f027bc6f869a12d0f46

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\tar-stream\node_modules\safe-buffer\index.js

Filesize
1KB

MD5
b1622ff2944ba3f13a1cf6fbcf0f9e3f

SHA1
f67b8decb99eed068f28c9ae56df08c21bf4c33d

SHA256
d58af21cb0518864d0c505742d1af71e5b5e1f142f4c0f27353aa0f431a616d4

SHA512
600b49f49832ee51ffd8f6c99616387d93bb1fc2afee71d2066f982e39080a1508999ef2e2bf714d5f6adabaa8b72d3c5cdb445c8c36b67064dd76b377b7f889

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\tar-stream\node_modules\safe-buffer\package.json

Filesize
523B

MD5
711a5121057bf0a7453c8b57328f3f6e

SHA1
1f062f5e5e4ac075ec2578f6d9dcfbfb82b36270

SHA256
145306d510d4d255192e3838bcb0ab028274febe52cd4acd4a42d0f7ba381da6

SHA512
6e75e0308add68b3ba9c524107d1ba03af899bc26ef4f173fd458a8cc151c487311e5f555db28ecc8a7b81b72b3059028d55825980f973879427cca4f1993650

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\wrappy\package.json

Filesize
554B

MD5
71803f8c6175dae1fff06aa06606b8a3

SHA1
8a0450786e78b37ae536e0c2beb52a12dfab3c58

SHA256
841d35178b0e513ffb9c6a4710cd559efe0bf81d140447fe583a75baa523aa38

SHA512
fc29dd79ac3250e33cbd3967301731d1b29c0125314c1aa1ace73af0754e7fcaf25641a4368a5e2d8857b4bf37643ffefff0600ef467f2ec63a718377b6a1c34

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\wrappy\wrappy.js

Filesize
905B

MD5
04a65e1669dc90fa11c900693c1974b1

SHA1
7d5c1c908664b3df4a9b72400a126652ba0dd905

SHA256
153453c4d84a3c2f13589c37055a7daff61d48475dcce554f7eedad15fc7b3e5

SHA512
621895dcb5779c3827ad29c216af816d0c99686b1f18ee45ae844da67be1909ae24e1fbd11a09bef27f6f8143fcd39dbf74d2839a30c871dfc98e2c905dff46b

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\yauzl\index.js

Filesize
32KB

MD5
3f7db1e6ecb8e2f75c1f53512c4eb100

SHA1
2ba7b220b596a27da81c2bc1330ed8bab7567e3a

SHA256
583c4554718cbaee5189d0e28dbd7480a0766e785304e3bcd2acad80b2cb6497

SHA512
d6c6a5f83e1fb1131fb4525eb2c35b66d054e32a99b6940140e3bdf911c44897b0dc0a169fb440b54da1cacda87762fe242543d13a8a41da91c7faf84d063b59

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\yauzl\package.json

Filesize
612B

MD5
a8e12d22820d491e443609db84b176d7

SHA1
4ecf8d21752fa746f4079b5ba4b80aa08ed00f98

SHA256
a72ea38e2a7354fe95860ac0e0c899a40f3f4e10483dd3cb62dcf99a1473e3bb

SHA512
c2162f04f602efdd5e814dc33b3bca680892495021eaea10ad27fe5e8f955a2c3ae0ceb37be0af3ce914c844ac4d5ad0921646000afbedf47cdc4f2726c609b7

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\package.json

Filesize
1KB

MD5
55c4bc2fe7f5bdb659206d18294a97d4

SHA1
8053fa0fed04d3f9daabca232ac75837fa08e2db

SHA256
e16df9b5799b6a282414b0fdfeb4e72041de5283eb403a0888824cf6b41e5b3b

SHA512
8f706be23c3bd642e98e38a8dbb0d13a9ec55478a42d8872d4298bb62763174ad781d0faea9ba4291d0ec98b3bb25189a20d7cc4dd012715a86bdf2cb2c53c9f

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\electron.asar

Filesize
289KB

MD5
883cd446e81382b9141198e5d1417d9f

SHA1
ba96df0bc43c5ba21ebfae112c350e0c063be877

SHA256
dcb9dc03a005a6103df7d91876082fb85a5a82d27f4fe352c3aae641019dc2d5

SHA512
d1bdd51cb36bac03d91e7448e96e9a4f2ffbc7c97867c43fb01cd8720bdb3f75b99aafcefdb72caa270ee8946e11906dcee9977ec6aa9dbec7e34d08769ec54c

Download Submit
C:\Users\Admin\AppData\Local\Programs\mecha-keys\v8_context_snapshot.bin

Filesize
672KB

MD5
672ea3db0155a4fafdf701d92349a3ce

SHA1
a819f43c28779e5560268880d001732f3fc9da27

SHA256
48b67d949d11961434bc2e738e7afee9d8bed80380f8a32ae6c281ca32cbd76a

SHA512
5c07cd9fc34897181a63aa3719be686f6e7ac56fc59df9b955f026af2d2eb5dc30942ffe1df09ec1d876bbca4c0f41b7dfaeb19a191e4823394836d90d387a0c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst8B9D.tmp\SpiderBanner.dll

Filesize
9KB

MD5
17309e33b596ba3a5693b4d3e85cf8d7

SHA1
7d361836cf53df42021c7f2b148aec9458818c01

SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst8B9D.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst8B9D.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst8B9D.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst8B9D.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst8B9D.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst8B9D.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst8B9D.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst8B9D.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst8B9D.tmp\nsProcess.dll

Filesize
4KB

MD5
f0438a894f3a7e01a4aae8d1b5dd0289

SHA1
b058e3fcfb7b550041da16bf10d8837024c38bf6

SHA256
30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

SHA512
f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst8B9D.tmp\nsProcess.dll

Filesize
4KB

MD5
f0438a894f3a7e01a4aae8d1b5dd0289

SHA1
b058e3fcfb7b550041da16bf10d8837024c38bf6

SHA256
30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

SHA512
f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nst8B9D.tmp\nsis7z.dll

Filesize
424KB

MD5
80e44ce4895304c6a3a831310fbf8cd0

SHA1
36bd49ae21c460be5753a904b4501f1abca53508

SHA256
b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

SHA512
c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

Download Submit
C:\Users\Admin\AppData\Roaming\mecha-keys\000002.dbtmp

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Roaming\mecha-keys\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Roaming\mecha-keys\Code Cache\js\index-dir\temp-index

Filesize
72B

MD5
6cafc629a79eb39fe4eb3dcefa07b612

SHA1
7c4dc0ca876e1e60b2df2b83b5843b35a140d3c2

SHA256
b11810d37b420fdcd9cf67f9b7a5482b6cd1fff957d60a560ef3930535e04dff

SHA512
852e13a1b30c246410e5903ca0239440507981e7b09bd10507ed396719a4a5745f51138285e20fe76e7711f66d2b2c78e976e636d66c50df3fbffbfbe1edf6a8

Download Submit
C:\Users\Admin\AppData\Roaming\mecha-keys\Code Cache\js\index-dir\the-real-index~RFe5c260e.TMP

Filesize
48B

MD5
93309aa3ddf21b9868a397652bef4749

SHA1
55905c0c338100b725551d30dd1d23d9343803b7

SHA256
b3f8115d4d08ced453e77c663addfcc91e1c1d945f193cde2ad422e42a96dfc6

SHA512
e4b060099a722429945894ec102ef291deeed3d16e8529d19e9ba6c9c1e65f2742eec8f28ce0ef8e24279cfb3c27911ba887e1ed5d3346d1b19895fd8761d18c

Download Submit
C:\Users\Admin\AppData\Roaming\mecha-keys\Local Storage\leveldb\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Roaming\mecha-keys\Network Persistent State~RFe5cdea0.TMP

Filesize
59B

MD5
2800881c775077e1c4b6e06bf4676de4

SHA1
2873631068c8b3b9495638c865915be822442c8b

SHA256
226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

SHA512
e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

Download Submit
C:\Users\Admin\AppData\Roaming\mecha-keys\a1082a90-a8f2-4892-93fd-93d113db1e83.tmp

Filesize
261B

MD5
5b6f18b2062c58f6c2da46a6b6531afd

SHA1
1b8c83ae55c2453d72642bce74e6cae05cf4263a

SHA256
2e72df71d8568cf316637fd5ea2966017e5ea30492aceb6b8bcc2abf387a46d4

SHA512
42c8e52d626f36dec82199509021ee408dd32a5fd0dd95ecd201c8149777543146f50b7a1e5fbbf524931c2f078c8c380ae56b3912d986a7e560f23bfeb73993

Download Submit
memory/1952-3187-0x00000000020E0000-0x00000000020E1000-memory.dmp

Filesize
4KB

Download
memory/1952-3155-0x00000000024B0000-0x00000000034B0000-memory.dmp

Filesize
16.0MB

Download
memory/1952-3159-0x00000000024B0000-0x00000000034B0000-memory.dmp

Filesize
16.0MB

Download
memory/3740-3158-0x00000000030B0000-0x00000000040B0000-memory.dmp

Filesize
16.0MB

Download
memory/3740-3189-0x0000000001460000-0x0000000001461000-memory.dmp

Filesize
4KB

Download
memory/3740-3154-0x00000000030B0000-0x00000000040B0000-memory.dmp

Filesize
16.0MB

Download
memory/3740-3207-0x0000000001460000-0x0000000001461000-memory.dmp

Filesize
4KB

Download
memory/3740-3210-0x0000000065E40000-0x0000000065E55000-memory.dmp

Filesize
84KB

Download
memory/3740-3211-0x0000000065E40000-0x0000000065E55000-memory.dmp

Filesize
84KB

Download
memory/4376-3088-0x00007FFABD730000-0x00007FFABD731000-memory.dmp

Filesize
4KB

Download