1c114c343c1d235f38e678b669b9d480457f2d27bdf2c9f9c247e5e1aefae757

Analysis

max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 12:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mechakeys-installer.exe
Size 48.8MB
Sample240613-n77tpssapr
SHA256 1c114c343c1d235f38e678b669b9d480457f2d27bdf2c9f9c247e5e1aefae757
MD5 5850a82933689bafab9e641ccb6da20f
SHA1 2e46f46b7f55d7a81a2bcb1294c697550321e023
SHA512 2340b5eaa1ad292330ba7b0db9c985b724c7ecfc0e2239b850f87ed23215d6cba83d7bdc57832ec8aafbd1d1ad6be5f1658138870cad2e4fe01b6a0d46886e22
SSDEEP 786432:YgegzVdseahKyAzSD4ur1b7AC0lpDMSmuU+ZptaRHRK0/uhCOWIwtEjFmZ:YghhrKb0BT5muXtkHRKOOl4EG
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3665033694-1447845302-680750983-1000\Control Panel\International\Geo\Nation	MechaKeys.exe
Key value queried	\REGISTRY\USER\S-1-5-21-3665033694-1447845302-680750983-1000\Control Panel\International\Geo\Nation	MechaKeys.exe

Executes dropped EXE 6 IoCs

pid	Process
4320	MechaKeys.exe
5072	MechaKeys.exe
228	MechaKeys.exe
440	MechaKeys.exe
1600	MechaKeys.exe
3952	MechaKeys.exe

Loads dropped DLL 24 IoCs

pid	Process
1888	mechakeys-installer.exe
1888	mechakeys-installer.exe
1888	mechakeys-installer.exe
1888	mechakeys-installer.exe
1888	mechakeys-installer.exe
1888	mechakeys-installer.exe
1888	mechakeys-installer.exe
1888	mechakeys-installer.exe
1888	mechakeys-installer.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
5072	MechaKeys.exe
228	MechaKeys.exe
5072	MechaKeys.exe
5072	MechaKeys.exe
5072	MechaKeys.exe
440	MechaKeys.exe
1600	MechaKeys.exe
404	java.exe
3952	MechaKeys.exe
3952	MechaKeys.exe
3952	MechaKeys.exe
3952	MechaKeys.exe

Modifies file permissions 1 TTPs 1 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
4464	icacls.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 7 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	MechaKeys.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz	MechaKeys.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString	MechaKeys.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2	MechaKeys.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	MechaKeys.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	MechaKeys.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	MechaKeys.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3665033694-1447845302-680750983-1000\{FF803CAA-7928-4BBF-A2F5-87BF28759AE1}	MechaKeys.exe

Modifies system certificate store 2 TTPs 9 IoCs

evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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	MechaKeys.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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	MechaKeys.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 1900000001000000100000002aa1c05e2ae606f198c2c5e937c97aa2030000000100000014000000d1eb23a46d17d68fd92564c2f1f1601764d8e3491d00000001000000100000002e0d6875874a44c820912e85e964cfdb140000000100000014000000a0110a233e96f107ece2af29ef82a57fd030a4b40b000000010000001c0000005300650063007400690067006f002000280041004100410029000000620000000100000020000000d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef453000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b060105050703080f00000001000000140000003e8e6487f8fd27d322a269a71edaac5d57811286200000000100000036040000308204323082031aa003020102020101300d06092a864886f70d0101050500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3034303130313030303030305a170d3238313233313233353935395a307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c1841414120436572746966696361746520536572766963657330820122300d06092a864886f70d01010105000382010f003082010a0282010100be409df46ee1ea76871c4d45448ebe46c883069dc12afe181f8ee402faf3ab5d508a16310b9a06d0c57022cd492d5463ccb66e68460b53eacb4c24c0bc724eeaf115aef4549a120ac37ab23360e2da8955f32258f3dedccfef8386a28c944f9f68f29890468427c776bfe3cc352c8b5e07646582c048b0a891f9619f762050a891c766b5eb78620356f08a1a13ea31a31ea099fd38f6f62732586f07f56bb8fb142bafb7aaccd6635f738cda0599a838a8cb17783651ace99ef4783a8dcf0fd942e2980cab2f9f0e01deef9f9949f12ddfac744d1b98b547c5e529d1f99018c7629cbe83c7267b3e8a25c7c0dd9de6356810209d8fd8ded2c3849c0d5ee82fc90203010001a381c03081bd301d0603551d0e04160414a0110a233e96f107ece2af29ef82a57fd030a4b4300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff307b0603551d1f047430723038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c3036a034a0328630687474703a2f2f63726c2e636f6d6f646f2e6e65742f414141436572746966696361746553657276696365732e63726c300d06092a864886f70d010105050003820101000856fc02f09be8ffa4fad67bc64480ce4fc4c5f60058cca6b6bc1449680476e8e6ee5dec020f60d68d50184f264e01e3e6b0a5eebfbc745441bffdfc12b8c74f5af48960057f60b7054af3f6f1c2bfc4b97486b62d7d6bccd2f346dd2fc6e06ac3c334032c7d96dd5ac20ea70a99c1058bab0c2ff35c3acf6c37550987de53406c58effcb6ab656e04f61bdc3ce05a15c69ed9f15948302165036cece92173ec9b03a1e037ada015188ffaba02cea72ca910132cd4e50826ab229760f8905e74d4a29a53bdf2a968e0a26ec2d76cb1a30f9ebfeb68e756f2aef2e32b383a0981b56b85d7be2ded3f1ab7b263e2f5622c82d46a004150f139839f95e93696986e	MechaKeys.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 0f00000001000000140000000f6aad4c3fe04619cdc8b2bd655aa1a26042e6500b000000010000005400000053007400610072006600690065006c006400200043006c00610073007300200032002000430065007200740069006600690063006100740069006f006e00200041007500740068006f007200690074007900000053000000010000004800000030463021060b6086480186fd6d0107170330123010060a2b0601040182373c0101030200c03021060b6086480186fd6e0107170330123010060a2b0601040182373c0101030200c009000000010000002a000000302806082b0601050507030206082b0601050507030306082b0601050507030406082b060105050703016200000001000000200000001465fa205397b876faa6f0a9958e5590e40fcc7faa4fb7c2c8677521fb5fb658140000000100000014000000bf5fb7d1cedd1f86f45b55acdcd710c20ea988e71d000000010000001000000090c4f4233b006b7bfaa6adcd8f577d77030000000100000014000000ad7e1c28b064ef8f6003402014c3d0e3370eb58a2000000001000000130400003082040f308202f7a003020102020100300d06092a864886f70d01010505003068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479301e170d3034303632393137333931365a170d3334303632393137333931365a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f7269747930820120300d06092a864886f70d01010105000382010d00308201080282010100b732c8fee971a60485ad0c1164dfce4defc80318873fa1abfb3ca69ff0c3a1dad4d86e2b5390fb24a43e84f09ee85fece52744f528a63f7bdee02af0c8af532f9eca0501931e8f661c39a74dfa5ab673042566eb777fe759c64a99251454eb26c7f37f19d530708fafb0462affadeb29edd79faa0487a3d4f989a5345fdb43918236d9663cb1b8b982fd9c3a3e10c83bef0665667a9b19183dff71513c302e5fbe3d7773b25d066cc323569a2b8526921ca702b3e43f0daf087982b8363dea9cd335b3bc69caf5cc9de8fd648d1780336e5e4a5d99c91e87b49d1ac0d56e1335235edf9b5f3defd6f776c2ea3ebb780d1c42676b04d8f8d6da6f8bf244a001ab020103a381c53081c2301d0603551d0e04160414bf5fb7d1cedd1f86f45b55acdcd710c20ea988e73081920603551d2304818a3081878014bf5fb7d1cedd1f86f45b55acdcd710c20ea988e7a16ca46a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479820100300c0603551d13040530030101ff300d06092a864886f70d01010505000382010100059d3f889dd1c91a55a1ac69f3f359da9b01871a4f57a9a179092adbf72fb21eccc75e6ad88387a197ef49353e7706415862bf8e58b80a673fecb3dd21661fc954fa72cc3d4c40d881af779e837abba2c7f534178ed91140f4fc2c2a4d157fa7625d2e25d3000b201a1d68f917b8f4bd8bed2859dd4d168b1783c8b265c72d7aa5aabc53866ddd57a4caf820410b68f0f4fb74be565d7a79f5f91d85e32d95bef5719043cc8d1f9a000a8729e95522580023eae31243295b4708dd8c416a6506a8e521aa41b4952195b97dd134ab13d6adbcdce23d39cdbd3e7570a1185903c922b48f9cd55e2ad7a5b6d40a6df8b74011469a1f790e62bf0f97ece02f1f1794	MechaKeys.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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	MechaKeys.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349	MechaKeys.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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	MechaKeys.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25	MechaKeys.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A	MechaKeys.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1888	mechakeys-installer.exe
1888	mechakeys-installer.exe
1888	mechakeys-installer.exe
1888	mechakeys-installer.exe
1888	mechakeys-installer.exe
1888	mechakeys-installer.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeSecurityPrivilege	1888	mechakeys-installer.exe

Suspicious use of SetWindowsHookEx 62 IoCs

pid	Process
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
404	java.exe
404	java.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
404	java.exe
404	java.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
404	java.exe
404	java.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
404	java.exe
404	java.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
404	java.exe
404	java.exe
4320	MechaKeys.exe
4320	MechaKeys.exe
404	java.exe
404	java.exe

Suspicious use of WriteProcessMemory 54 IoCs

description	pid	Process	procid_target
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 5072	4320	MechaKeys.exe	98
PID 4320 wrote to memory of 228	4320	MechaKeys.exe	99
PID 4320 wrote to memory of 228	4320	MechaKeys.exe	99
PID 4320 wrote to memory of 4952	4320	MechaKeys.exe	100
PID 4320 wrote to memory of 4952	4320	MechaKeys.exe	100
PID 4952 wrote to memory of 4464	4952	java.exe	103
PID 4952 wrote to memory of 4464	4952	java.exe	103
PID 228 wrote to memory of 404	228	MechaKeys.exe	105
PID 228 wrote to memory of 404	228	MechaKeys.exe	105
PID 4320 wrote to memory of 440	4320	MechaKeys.exe	107
PID 4320 wrote to memory of 440	4320	MechaKeys.exe	107
PID 4320 wrote to memory of 1600	4320	MechaKeys.exe	108
PID 4320 wrote to memory of 1600	4320	MechaKeys.exe	108
PID 4320 wrote to memory of 3952	4320	MechaKeys.exe	109
PID 4320 wrote to memory of 3952	4320	MechaKeys.exe	109

C:\Users\Admin\AppData\Local\Temp\mechakeys-installer.exe
"C:\Users\Admin\AppData\Local\Temp\mechakeys-installer.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1888

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4440,i,8998666007764333392,14724298544432336038,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:8
1⤵
PID:3684

C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe
"C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe"
1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Modifies system certificate store
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4320
- C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe
  "C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe" --type=gpu-process --disable-features=SpareRendererForSitePerProcess --gpu-preferences=KAAAAAAAAACAAwAAAQAAAAAAAAAAAGAAAAAAAAEAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --use-gl=swiftshader-webgl --service-request-channel-token=13565769745842523310 --mojo-platform-channel-handle=1872 --ignored=" --type=renderer " /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:5072
- C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe
  "C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe" --type=renderer --disable-features=SpareRendererForSitePerProcess --service-pipe-token=6810128339814839023 --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app" --node-integration --no-sandbox --no-zygote --background-color=#fff --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=6810128339814839023 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2416 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of WriteProcessMemory
  PID:228
- - C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
    java -jar C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\gkm\lib\gkm.jar
    3⤵
    - Loads dropped DLL
    - Suspicious use of SetWindowsHookEx
    PID:404
- C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe
  java -version
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4952
- - C:\Windows\system32\icacls.exe
    C:\Windows\system32\icacls.exe C:\ProgramData\Oracle\Java\.oracle_jre_usage /grant "everyone":(OI)(CI)M
    3⤵
    - Modifies file permissions
    PID:4464
- C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe
  "C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe" --type=renderer --disable-features=SpareRendererForSitePerProcess --disable-gpu-compositing --service-pipe-token=1574922909417088441 --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app" --node-integration --no-sandbox --no-zygote --background-color=#fff --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=1574922909417088441 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2548 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:440
- C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe
  "C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe" --type=renderer --disable-features=SpareRendererForSitePerProcess --disable-gpu-compositing --service-pipe-token=971717786622421272 --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app" --node-integration --no-sandbox --no-zygote --background-color=#fff --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --service-request-channel-token=971717786622421272 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3748 /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1600
- C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe
  "C:\Users\Admin\AppData\Local\Programs\mecha-keys\MechaKeys.exe" --type=gpu-process --disable-features=SpareRendererForSitePerProcess --disable-gpu-sandbox --use-gl=disabled --gpu-preferences=KAAAAAAAAACAAwAAAQAAAAAAAAAAAGAAAAAAAAEAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --use-gl=swiftshader-webgl --service-request-channel-token=11636808570727797020 --mojo-platform-channel-handle=3928 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Modifies registry class
  PID:3952

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1400

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\chrome_100_percent.pak
Size 176KB
SHA256 971698362570b8e7dd79e9eed8aeb28443535053787e7b5e8bbf0cb477b5f99d
MD5 6bc3c299d9e24718c066edad063619b8
SHA1 65ae83f994992d032fbdd7544280f5cd5e240103
SHA512 99ddd1af09588b8bac7c293e3598db498f7279711ad691c80072987d55cfbe53651458a61e820d75f3bec04f119aab0f0e700a52c4b56cca2c0e3bacac19da90
SSDEEP 3072:Xzwe/KnKd6TAVuYinpx6PkZ7ach2w5+vfdYCJdx1+hejSpgKyp1IstEE:XzwAj6TAVu1jv3hx5c1YC7x1+QSryIsB
MD5 SHA1 SHA512 SSDEEP

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\chrome_200_percent.pak
Size 287KB
SHA256 7afe6e166dc44329e99c218b3f783c14ff0c67b036806d6a5247dbae694a649a
MD5 1cc200bc1a1c416a0f5b34d138c49d85
SHA1 777a70499eb27bda881104b581de1a242caf49b2
SHA512 31c4f06814ef4361a72e7bae264e754d4398d92ed5b2306ebed8625118655e8feda1df2f40c2f1a630ca2b62ee7fd34f3373203265835e791ebb90e0f979e0b1
SSDEEP 6144:DDQYaZMjXksICkoEkSCeYqev3Nz73QYV85u/oFwLoCozMT:Qfqj0o+ig5u/oFRFMT
MD5 SHA1 SHA512 SSDEEP

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\ffmpeg.dll
Size 2.0MB
SHA256 a70c01724f320e014939735d11241a7e321b0838b2137899885000e425edfc09
MD5 c23301f1e6c1f8116edfb55408cd7c2a
SHA1 b0f0a8af7576eba7fdd2509a4b138eac775df4bd
SHA512 8c35d695b02a4018ae35e72859bfd08eecdd0c5533253a14a4afaf61c3345c60119c47382b565fc36049f180c6d98f10d9429f1df996489e8522170df49a00d7
SSDEEP 49152:DLJX3yRs+g5rBFUZVzSwcQ/Vo2ioJLBVBYy72Erf48jykePkqy:DR36gBBFwV2l8Obfy
MD5 SHA1 SHA512 SSDEEP

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\icudtl.dat
Size 9.8MB
SHA256 33da1cdda18eaea52011d40ae9a610cac9f6466156e9803891ee77294607aee4
MD5 65c6337820fbe9bf2498a9395e3b20f2
SHA1 5cc62646e6c73b4be276d08719bc5e257af972bb
SHA512 4800f03577a46a98a4bd786dc37a380f4169540e243fdb7835e3146fba0d0e1d07a7e3ec8cd23566feb00d204d582d678698ae61db156339fe56229de0b267c9
SSDEEP 196608:g7UPty2ACLA2cliXUxR0jHz93Whl96p6VJQ:V12CLAZliXUxR0jHz93Whl96p6VJQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\locales\en-US.pak
Size 63KB
SHA256 52ece805cf288fdb16b60cf30ee0604583c1859d5986a7f5e42846eb5b83a7c2
MD5 542df8e581c306511d5f8a9463724b84
SHA1 f0a0f22300151cd39f67e17043ef9f79ba57faa2
SHA512 8577a4e2ee2078941816c816573bc1cfc296eaaa39ecb625783074bac47827fab3d2d0f757f528d1d556724388b15f0e10f1efb7ca1619db84fceca0471b41ef
SSDEEP 1536:P8xg0f7EphskDQVtrhF5sBaiSOqJedMKr6hw5a+fDggls/U:PQ7EphWCBbsw5lgglsM
MD5 SHA1 SHA512 SSDEEP

Submit Download

natives_blob.bin

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\natives_blob.bin
Size 81KB
SHA256 1cae202ada016cf455abf69d583524a1d37a1371ad4efdfac4baed07c6402bdd
MD5 e350965916554e65a47305a6ab27c2ba
SHA1 9d60e499a907811a3155e9a07f8645d6c83cb909
SHA512 c6044b769a00f887b573ad35a7f5b71f6134d2d596a54effa50710be2f528acefea53ae4a2847e16c1b4e56962d8b0fe24f1ea4a04bfe167514b0abddb4fb5a8
SSDEEP 1536:+bz4Oif2sMnL8gDpKD0rrr/4or06mGsY3csV3/EBSee0fHVvJ4TGD3zT+2xeiug5:+bz4Oif2sMHEBSx0fHVvOT6jTTeitwV8
MD5 SHA1 SHA512 SSDEEP

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources.pak
Size 8.1MB
SHA256 1f4826a8287d8763469d80e1f267c7152f5cd64ec038d157ff2a4c804803a3e6
MD5 e0f8112a2e84d3ba16d19c8db5b7d53c
SHA1 c7757266940442d133a20157f11fbffb6f131748
SHA512 ef9718ddfc582f06a61debfdf43def2b39040aa9ca93413b8c34c1e8474a754c3bf820c683a2b740f41179fe30ef69d6ded8d3118fd64ea1c02f8ea68d99cc47
SSDEEP 98304:y4zrffmg9HhT1SbS6J41hucH5/MYNc8wH:ykXmg9HhT1Se6Ehu05hNct
MD5 SHA1 SHA512 SSDEEP

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\main\index.js
Size 12KB
SHA256 0b64bdfabb91768bcb5beef48511f1f8ec3b8e35a43a1f9af98132c7ec887529
MD5 fb01dc29669a068ef6963fc1010d10e7
SHA1 923dfcaf03736a4dde608b4d830351d36fe84218
SHA512 6df610ffd1600b02711543a6f91e48f30e4deb8420fafee8ea261eae9f58061a585cd0d8e83f3896296ebe50269c39b8d809fc5c8d75c6e75526841b6f3915f6
SSDEEP 384:DKW+t7bHWKk8vnjULZCI6Lb0I9wx2i2NCCk:r+tPHWKk8PjU9CIob0Cwwi1Ck
MD5 SHA1 SHA512 SSDEEP

Submit Download

Minecraft-click.mp3

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_diggly\right\down\Minecraft-click.mp3
Size 13KB
SHA256 20f1cd5498081350c6e0e45b87efc75ec2d739e7da56c93ddf96110bf4a5d002
MD5 d1a480981d42af99e213e2019cf5170e
SHA1 ab1a0f12f20b59c007cf669601d217dd77e098c0
SHA512 847076a2121c367fdcdb8ac422e6572ebc169d20146eb03d4fd773126165716c1d9032185b921319596f6b2b0c2115d0f173282e0ea6a20295201f5a3dc8066a
SSDEEP 192:VtkiWpEp3RU5S39Qbj1ohwoiaVtLYco+YUUM6f:VOiWpEphU52Q/swoXrL3o+FUM6
MD5 SHA1 SHA512 SSDEEP

Submit Download

d1.mp3

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\down\d1.mp3
Size 2KB
SHA256 b484143ca70d0aed302a719ac1e8ca823c105ef53838bbe3972e6d72fe8db606
MD5 915107d201781b82f862f958a8ec33d4
SHA1 3bdd8cd9ba7f8898b226a76b08fcf3ce85abece8
SHA512 fa18fe92d0e8db7bd1055f3cc236a83f8f2346fde3c182dd1b16b646f127d4bc3fcba0db0d603fc291c8d024225794cfb5b26c29eeda4507a85de2eb20e72a95
MD5 SHA1 SHA512

Submit Download

d2.mp3

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\down\d2.mp3
Size 3KB
SHA256 ff42b65292f103034f67f603d4e851bdc3530ddc1fba342be5eaeb905633fbd6
MD5 0edf30d44443cbbf9f04a51d04852352
SHA1 ca1033a72e91ef429ecf189da2c6f3764af2d4c2
SHA512 5d21c775122b89006354776053406ad73e960679f1bb61790529bbd8926c48cb27468e76ac6a31b606ec090802262c9bf964897965cb3f5c1c8d33dec9aa5a22
MD5 SHA1 SHA512

Submit Download

d3.mp3

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\down\d3.mp3
Size 5KB
SHA256 b423c8c1113f043779482c1e047bd267eb1a3c07fb37597658997ba7033d8b1a
MD5 7cd6f299360b304682a74e4e6abe193d
SHA1 fa1fe87db23c4f1973b5fda6ee294e71f6ba1aa8
SHA512 bfdcd9bddeb60a034890de9e12d9d54ec40591600dade2a18ca97ff0df817b243132b19e1a4f52df4747e3be2d5d2f94d2ce1c3215191274ae978d2a7cdb9451
SSDEEP 96:tr5f66UuAMNst9F92L5mGEURsG7MqfMx5ipi/puaF32rHx:trxZHstTECURl7Mq0lX6
MD5 SHA1 SHA512 SSDEEP

Submit Download

d4.mp3

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\down\d4.mp3
Size 4KB
SHA256 ec5ee1969b0d22a3a3114b938148f85eb3b2b3de53af5dd628958b99e6b37af0
MD5 547cce0ee5804d6fe62b700ab3dbe34e
SHA1 d0c5d8dbf72fe10ddb4b640be1c0a10a58eff2b9
SHA512 92144cbe7c78885096db5cc9006b94e302d15efc93b216be5033a9349da55d48b04c1aaa569df116f0325023c591b2d45a3583e21073a71ef738132076eb774a
SSDEEP 96:t2Ky/Kob+sfj+h72fTOmcu2h45MnmJ8i2gokhhLx:t2vKob+5afaxuKnsp2S
MD5 SHA1 SHA512 SSDEEP

Submit Download

d5.mp3

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\down\d5.mp3
Size 5KB
SHA256 70dd43a482f21275be79fa6efe5a7958022a4db7c8f2e4716de0d55afbcf6677
MD5 43241d06862742794c0a166c48d98ce1
SHA1 79ca5d6d62bcac7308cbd98bbe821f6bc29fc17c
SHA512 cf2553769d042ad09e871834f40cb5936d9a23547e61a4329fd38962adbf3d9381d8104307a6ccbcbff21bbfb37e379419424a07cbe00470d2ec565f0532fe25
SSDEEP 96:thHcp//AZhDfnr9JIIv6LSGFa7aKdH0LN7vDN9MP51:thC//Anj3vMnOW7DvMPr
MD5 SHA1 SHA512 SSDEEP

Submit Download

u1.mp3

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\up\u1.mp3
Size 4KB
SHA256 35baf5f926853432b8069441672a0d4c3e08864a43647ea311b33b5ce471facf
MD5 827910e02283ee91a9110307892098f9
SHA1 62da26902530b172cf465dd30d337a9fe6269590
SHA512 95b64504dffe42fc663913abeb34e9846d4c056dbba1b7568cd70fc62f089f6a140c9d6b663f548c42bdba37098d47887f9406934c2e4ee34694b222a4c36982
SSDEEP 96:tE2W8gGXCCzl9JXdsz19V+N6ge/oiXAdbT:tdwCzlbdc1Q6/os+X
MD5 SHA1 SHA512 SSDEEP

Submit Download

u2.mp3

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\up\u2.mp3
Size 5KB
SHA256 24f56976b34fdc3f3afaf7b8fd7f0a9870b75f84628ce0b0cf821cc7bb226c91
MD5 26939b3b4383def78d9a538819a8a973
SHA1 688386ca24d246e4c90813f368673a7c531bd5f8
SHA512 d377c6f380d06c99c3041b4b1f7a7dc59f3e1b2b897beebaa563f190fb64fc9634f9c6fa5399b35e3411f829569fe4f3b555cf94a7acdc3cbb8a2d4c001c6ef9
SSDEEP 96:tKR0L7+ZM38EkfVds1DwQEfcvqkj+wdDYpvuILWHe3ahKQIn1wx:tS05ryPKwQEfcCkjFWvwe3aIQCs
MD5 SHA1 SHA512 SSDEEP

Submit Download

u3.mp3

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\up\u3.mp3
Size 6KB
SHA256 5b5ece8c01e767aeaf0397a51fbadb730f15e691c47526cbbd05c6bd85897988
MD5 da3d4c355a9bb59bc57f191a6b0ba923
SHA1 901591f4a7be21d0ef658122a8717131f18c5daf
SHA512 07c0f1a8ca21f4364b86762576921d7671094e9f7437e31507a9592ff90268fa6fa7af8f41397bbd14a0ac7f63208262e5de6b992758c5414ed9d06d714e6eb0
SSDEEP 192:ts11u/YM+Zl4tdXlR/I+irDEFS3khtM1WPfm3g:tuIYM+Zl4Xle+ib0hO1Yfm3g
MD5 SHA1 SHA512 SSDEEP

Submit Download

u4.mp3

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\up\u4.mp3
Size 6KB
SHA256 9dc70edc0f29afecdde56b7eceebbe52988dd1c15581e2688cd4cace2795ad17
MD5 9c0eb4c649a4a3d70e7b8eda9be493fe
SHA1 19ecd330cd5ea8c857316576f8492803a42bb6ef
SHA512 8ee480b9d08339bbf19c4df0a994715906ee307c96447cf797eda396df76eb1ee7d149bb7b87ab5126100fe435ac6cfa411335a5d7edcc59e6b96aeacf5dc083
SSDEEP 96:tKbRbS5n9w46IMI0WzfnkbxYyU38WlNJmB7rM4DP3HsEhHjxfvqsst+h8zs1x:tsE5n220Sfq+bSvDP331y+H
MD5 SHA1 SHA512 SSDEEP

Submit Download

u5.mp3

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\dist\renderer\_nuxt\src\renderer\assets\mousepack\mp_macbook\right\up\u5.mp3
Size 5KB
SHA256 bae65378e3975ed30efc4c006d197a0fe157efa54fc19668b1cf500686db36fa
MD5 4cbccddc09e0b63445b37e546d8e118a
SHA1 02f7c2fe38aa2b07936fbd0b5e453eb2c55ff102
SHA512 482d55bef50e2aa4bddede1113d7c17936c1449975f98d6e7b0d44e166ab78606f033426669779e38f3b63195a0e4f1e33384bae0c66d7b342f86e00a2507a97
SSDEEP 96:xGo12otegVhhBGflDUfdt+JOQS50AJuNmnXT1iQoXx3rpiefNlux:xGonEQhhBulDUfdtexd6PXJS3rgWL2
MD5 SHA1 SHA512 SSDEEP

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\@nodelib\fs.walk\LICENSE
Size 1KB
SHA256 9363d160bf41d46d83901a5d24fc3fe2094c2afc17b4a2378914b273977ee2de
MD5 580f1c3c6765fecfdb93bdf4e068d952
SHA1 5dc937a8eea3b2c0a0642549a96bd7ef5f5a851a
SHA512 925cb3b6d777eb613d8a7a455365f48e467e91a599f8f84311725f3207ee5832b00b87429b09466ddb030ac42358f52cb6cbacb36122cdcaa3799359b36429f4
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\@nodelib\fs.walk\out\types\index.js
Size 79B
SHA256 ef1f170ad28f2d870a474d2f96ae353d770fff5f20e642cd8f9b6f1d7742df13
MD5 24563705cc4bb54fccd88e52bc96c711
SHA1 871fa42907b821246de04785a532297500372fc7
SHA512 2ce8d2cf580623358fef5f4f8925d0c9943a657c2503c80048ca789bf16eacdb980bfc8aaaa50101a738e939926fcf2545500484dcad782c700ee206d8c6f9b9
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\array-union\index.js
Size 104B
SHA256 3f61bf9d59d79b08e038d7d2f84518175a3e53693bf5724aecae4985c9897cd3
MD5 562bd142e8dda5a62522befc997dc739
SHA1 724b8c46f000a118dcb13f05458d5dbfd88fa1bb
SHA512 2f5c82180b13f5b634c54a19d2191442c06283b0907609d3fe754ac0dcb569dc724d2354999045f9cac5e2efb69768d3a53f6f70210a1a826b77ccf16c9ed6d3
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\array-union\package.json
Size 495B
SHA256 07ed63c1ff3babb6c034956e16a672ef75701e7e80e76405532687669e06de60
MD5 2c5ade1d8510218fd99694ecd80be49f
SHA1 f0c134fa8b027ecf4a382df80830ca97e25b1d95
SHA512 15aa2e09b5a18d61a8f1a8b65d90ad25c979e35a811b466e40df79b6665b3f8ae64e67958c7610158633cb0b3c82f72c14bfbb73e97d5e90df22fd76c3e2a781
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\buffer-crc32\index.js
Size 4KB
SHA256 f673ad9729984769996849030def1cb0b8da721d492a3b9beedfe36dbc6be117
MD5 b4241c923be334c1ed2010e73e68a0fa
SHA1 e97332d01ec965e7ea41cc2f9fcb64b9f111a428
SHA512 b4e55102afa335f8e7e0521e76fce9f5075f0c123369b87420f241ab68420e07ee4cc3987793fd70c6d3e43e3846ad6707991c02f8d2c0e85d4ce285efc7ebed
SSDEEP 96:OTFgk175vrHbHTwjpXzlb6VK6JjMTm3Fx0lKA7AwmFSoS9n:CFgy5nEjpXzqKUjr3FpA7Af8n9n
MD5 SHA1 SHA512 SSDEEP

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\buffer-crc32\package.json
Size 770B
SHA256 f22b7893abd462180770931b6ff1055c7c6fe19cbb3695664bf19c6cd3d304a8
MD5 b9bffbd08c5f10afe17716a0b9875574
SHA1 0b6e166f843dec8e17ac5bf4ee112ba628440abf
SHA512 798173f4c0e21ceeef5565b94ad64b8195bd4af3b1d92eedf4a9a94980833b4a180b5250430fd681257241398042783059d1746a9f073d61ea18e2c4e5e9a86a
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\del\index.js
Size 2KB
SHA256 e0b89df8b2044dbf591de982331223fa4176b3853ed365e33136746a9848ac1f
MD5 df70e504df22652df872ebbf2a66f3db
SHA1 15c201bb312146f52863683722dbbdaaa851e76c
SHA512 61a944c6b14a41672873ca1ddb7151f7f75f915cf9c79f20e502cad443d4a067d650c0874ad29096c006fde083a45c16805538232ac6f06295a81ec3a6e8f286
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\del\package.json
Size 819B
SHA256 9e774f8fc1d4a41bd1ac80b8056ca97127ffc7c005f91aeac7ee18f950e829d5
MD5 80de1ea62c4174123d4c4fb0b31b5cb8
SHA1 0c76a7307846e2efe2fb3d3a2c729b4aea513421
SHA512 4126ca65622e77fa320362c61794569cd4f12594c81fdc071b1d03dc2de0b40e1032d37c0b2a31b80dfd1ba0ace1a222eaebed3e5bddd1b8d4a966685fe3519d
MD5 SHA1 SHA512

Submit Download

license

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\dir-glob\node_modules\path-type\license
Size 1KB
SHA256 48da2f39e100d4085767e94966b43f4fa95ff6a0698fba57ed460914e35f94a0
MD5 915042b5df33c31a6db2b37eadaa00e3
SHA1 5aaf48196ddd4d007a3067aa7f30303ca8e4b29c
SHA512 9c8b2def76ae5ffe4d636166bf9635d7abd69cdac4bf819a2145f7969646d39ae95c96364bc117f9fa544b98518c294233455d4f665af430c75d70798dd4ab13
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\electron-is-dev\index.js
Size 281B
SHA256 4b04baa5ad869bdf03929616d60259976bebfc910e01bb086cec729ab6dcf694
MD5 84402fab5f78e8252656ae68cb5a1616
SHA1 98fff1a8568fc3d1a3bca237609d9083c3f0135e
SHA512 9c55142890367fc4e9578494437604a553af73cbe47752e49328820fb573320efa0686337c9f717a381cf730f7d28aeb3f6228232b6b70a6e16b071b3846e961
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\electron-is-dev\package.json
Size 580B
SHA256 cd0128d6a7261f94f26f67bbe82eb055cb8a9f41a1503ac10054bc40c8ce8fc8
MD5 c4a87d51b939da7257e9f7493f3c73a3
SHA1 3c06a6c447469f7b7efe7acb2b0fbfa2eae32456
SHA512 dbf9e7f00a797dbe8196f344ebe25db06a206ede1756ef53f2ab3d5d7a207d5b6150fc0abee0788d0f6e291e9c6749e5eac6db59e90bc7b7141cc9342db196bf
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\end-of-stream\index.js
Size 2KB
SHA256 3e912df226ee90ee3edc5ff69cd3e8313fa1da13795e10fb0b0f05727bdabb58
MD5 2c81e5e7dae5854bdba5be8e0d5b4c79
SHA1 4764ab17a6f6138154139d0841fff7c351e69b6a
SHA512 d2fccc9e7cef57c295cc3a1701b9a64bdbc01ab5154f857a548249c8bdeb9857b4bc93853ecb05f7163de6b34600f621d7e885bd773015d7c8a11110887e5f2c
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\end-of-stream\package.json
Size 589B
SHA256 cde5f41d6f1f53b3a475cb0441e3272d656205996b7a12871722e16a631676f4
MD5 6df442374914bf66c3d6cfec4254a6d3
SHA1 a1e6a2e2f7524c3db3027c43c2df5f2a1af5fc52
SHA512 edc33048325eb2f7adb6ad45b97a78143109b39abd860ec854ab6279e729d2820e501ae7aed3ec077891f8b203047a32d0d8203f48cf6f28364efaf0064a20bb
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\index.js
Size 4KB
SHA256 1073ca8196d3c9ae51b0de41df9d7c347957c8501d0749d852b4994789cddd78
MD5 f36b02b098d9fb1aa70cefdaca6d7e1a
SHA1 79f6ff49b1cc05f72658b961aa46a2280d7677d2
SHA512 39c243df6f064de58f8c25ed6a107d72aa3058ceb242dd156fdedc6e1b8696fccbf6b648c5e815c5e59638ece65ebf37866900cea29e726cd2d01e487d752ccc
SSDEEP 96:LHUtesRu0RL6dFe3iPrwlPeQUdoTyoBihiKCsK+5yCmannUqE:L8eUu0gFTUlPeQUdoGoB+J3K+5ybanna
MD5 SHA1 SHA512 SSDEEP

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\node_modules\debug\package.json
Size 879B
SHA256 f17d437896828c0c922744a43791b7f6f2af55058546b5a18f65e0ac90ef5fcc
MD5 4d9c2d89c6bfa98fc24938074fe2939e
SHA1 30e58a4f0c22b0c2fee662102419a83338f2deb8
SHA512 2b71b71fb1bff92f8c1e9abfb2e396247c67b88a0127093fec418f82a0bad79fc81142f92e0d1a2f8d7ec139ab0653ff5410e8770254e726637f57d8b1fa2e2f
MD5 SHA1 SHA512

Submit Download

common.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\node_modules\debug\src\common.js
Size 5KB
SHA256 a869a6402de5270d7b9d41849e432e24b409c27f9171f7dbd910b0af26eec456
MD5 3149add0f26fbf21db18925c4fc4ac80
SHA1 8b01da5db7cc6eab79e2b2a3fb4304469b726aeb
SHA512 280793bb855a5d6d93bef07887ad99068322e160e4ce2d78f75dd3b9fb0e5f72ccf56c0d842f4e102573f21badd69ae97910cb3387e2803704a4217689e36835
SSDEEP 96:2HJpRVChTGqMddd+j9WYvhxCBwWiLewAMHXS8KRNmteJEj/wau2TL9L7Hd:ZhUddwxWYvhxCuT3ShRNmteJaYau2X91
MD5 SHA1 SHA512 SSDEEP

Submit Download

node.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\node_modules\debug\src\node.js
Size 4KB
SHA256 325ef853b9b77da990ee685a6cf915a03c8db652eb863e777f273654bd5e56d5
MD5 022881df4a2d137c0f0fb83e84592155
SHA1 659316f1d1ef8539fa6023fb9cf5e8160b6159ea
SHA512 834074b374733233f8818e8789fb3e1fb2758fc2202afab914cd913e22c5802a1aece2558227bae0dfd72b502cc231ae0c88bcd5d82c9ea2a1df6c4844d814ee
SSDEEP 96:pOYeMOqXfS8JvQIr0Wj7/aFAJ4X/msLttu7c4aRobSfMmGgX+1xVBqX/rLI:RXlQiHaZttu7c4aRwSfpGXHVBa/rLI
MD5 SHA1 SHA512 SSDEEP

Submit Download

buffer-stream.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\node_modules\get-stream\buffer-stream.js
Size 894B
SHA256 74502372f3e457ae4d05546c47b4fd88c8df6ed8eb6166b6feb8bec1798ec6dc
MD5 b8824799bfecfa545b32119b318378bd
SHA1 1a493be2ef86273c899c06d21a06095b217aef85
SHA512 1eb56f3e48f82ca0eb37663cb629a39f3c20ebabd1f5693f6591ee80bb9a0a91de2456c3d152e1326807c32b5d45865e77272f702a86170fddcadddfcdde8c28
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\node_modules\get-stream\index.js
Size 1KB
SHA256 80626386e94017e8950ab75791da258c1165867e49187ebf8c9f77b3e1da4478
MD5 583837c67688d77fce56cbe847e23ae7
SHA1 5ea97ea9f8be269fdeb57eb7a4634ecf955db051
SHA512 c93bedbd6945d3d85755c1188048caacb1eefc6033f5a0d1f2db241f15f9a874afcba5e3da3a7a8fc96074aefe22b18bd762607988d8978864f58d6abbbfbadb
MD5 SHA1 SHA512

Submit Download

license

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\node_modules\get-stream\license
Size 1KB
SHA256 5c932d88256b4ab958f64a856fa48e8bd1f55bc1d96b8149c65689e0c61789d3
MD5 d5f2a6dd0192dcc7c833e50bb9017337
SHA1 80674912e3033be358331910ba27d5812369c2fc
SHA512 d1f336ff272bc6b96dc9a04a7d0ef8f02936dd594f514060340478ee575fe01d55fc7a174df5814a4faf72c8462b012998eca7bb898e3f9a3e87205fb9135af2
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\node_modules\get-stream\package.json
Size 664B
SHA256 e45d6a34fd8770bc9d54716fb35a8a79fbdc4b6acde300d09a66d49f944835e5
MD5 2ffee8b2d190f6a9bd4f7b11e25d2a38
SHA1 4a9a74a0a2e17049368086881814037f4e484fc0
SHA512 6ce7d794fe06ad394ba0276df24a8d30abec659bed2d959025b376e5ff68388c1f7baa22c1cf29344a26c98d14d09430edbbf4d0aca4aba8c1d56e7f6a844ae3
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\extract-zip\package.json
Size 1KB
SHA256 2331b88523762ce207c089eb90f15ec328c6e7a43b7503ac9d4cd57bf6b821c4
MD5 1c3325ff3e395fd625409e658e58b2ac
SHA1 68f0ab7bed8017ed2a90236c9dc8d4e7866d841a
SHA512 924e5cb0058d185c3817cadaf97432392df9604c643ca51e6390017f2b0d1d8fa3d8f1469b3917c29952538393b04577c09dcab8a220c4d5097f5b8bf230fc4a
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\fast-glob\out\index.js
Size 2KB
SHA256 c27abfff9f2b8f73c26dbc913a5a64082a03d2efe3a8da4afe17893fc29cc663
MD5 516531cb5f028627bcb8982b4404ffdc
SHA1 09db48e2ca3b51f1b0ceb738e2ee73adbcb5246a
SHA512 f20608d1ef043a9b50de34627cde01f6675bce624f3ef7f3d0874a3e99e4487c079c0e7028f80b07e30c96ea32366e4a2cae7e35b376bc508f93ad6486401c08
MD5 SHA1 SHA512

Submit Download

tasks.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\fast-glob\out\managers\tasks.js
Size 3KB
SHA256 2d8bccfd6808c02f9f654ec95ff9fbdb01d2bfbc381c8c4046456b32e16afa7d
MD5 7a8f04fa41c1981674543888ff518149
SHA1 ef3d7dbb3674a512770ee8309fbc94039f81b94b
SHA512 e4ef23a617bf5c1e424a507899bb31755512ccfdec377f1516760179901f17083695562f570e4db90a71a0d455116cc1caeb66b46d95b8b598d93a0a75e62714
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\fast-glob\out\utils\index.js
Size 613B
SHA256 96c3fd8780812822c222e15334e4f8f1e2a6fd60d08fc350f539841777d88fe7
MD5 7ae4c8e0e235942575c247ae944fef35
SHA1 507e66febeb16e8a1a33cad08fb22c5e58fc0fe0
SHA512 dbb9c422aa5177237b8ea2a4e2c5d707adb614d23c7baaf112c0651ec181ae2999bf2a2599fbc586825ef2077f1583f136c8238899d1e1f188e7efb680868a25
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\fast-glob\package.json
Size 1KB
SHA256 30471de0ef27983d5fe32d3607026525bde4ba608bccd5b3d6272d411a5e5e64
MD5 fecfd2ab5e4902a326006ce731bb0cf1
SHA1 af412b7de05cee70cd803e810751c5433c13e39c
SHA512 e737c0f5b506b0d624377892aff03066bc9cf69feb83544009d56c635689a58bac16c36103c94c400fb191b490ffb09068e4d3449076922b6793dd28011be479
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\fd-slicer\index.js
Size 7KB
SHA256 05f02afe3e105f97af8c5c6c1b29dc388d7ff71c9801c1495a13dc34dbe115f0
MD5 dd275f95a66b1a229447c0c88ff83a04
SHA1 0160f77af38a20a212fa2aa4b15d48036763b486
SHA512 3045bd4761f90f0468cdd029056bbe73a4e0918ee7a53a78a674f642ddb5d5e3fed4764d4ccea387e4c03bf63c5b50b8b81769b4f03898b5f8796178be0d73b6
SSDEEP 192:Ts1xk3p+YrPEEsex7wlXgj61yds053drr1OMwY0aPrmuRMRK5+Qy1QHyc9EUDIQt:YY3p18MbsK3hwMzt8QWK
MD5 SHA1 SHA512 SSDEEP

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\fd-slicer\package.json
Size 693B
SHA256 1c6df15b15afcf16928c84a153653093f2f31da0d2839e07190aff01c0cf01ac
MD5 66658ea6fb14f7b4725a97297eae209a
SHA1 665ac1eb0410231d39eefc4adb4b32af92ceab92
SHA512 f546d457fb6216a63ce97af7682ff55716ff50b007db5960a41cf0209375ad0884895d7f29926a81546c02a89d9912d548cf8bec300639f2e5578b5ea3bf081e
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\folder-hash\node_modules\debug\src\index.js
Size 314B
SHA256 aa127ff1752b7d9c7415c5c7bb6994d9aa722b81bcbcab4bd48316b013d23bf3
MD5 d6c53f5a0dd8f256d91210ad530a2f3e
SHA1 0f4ce3b10eff761f099ac75593f7e05b149ae695
SHA512 4faa874d9d862ffc921528742c4f1fe8a9b22a358760f6e93fcef138523575329a801ce9659ed8e96b02b73e581b3e99d91973e22981b358ffb5e43103a536c2
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\globby\index.js
Size 4KB
SHA256 9c37ce30d79622339821a3e47c945b496a2493a9e6db704b3f9e8a19af418fe5
MD5 6c2c6780deeff3ee5da4fc0156259097
SHA1 19025f7691bcd5d3df4043f2e86b5f99c2c57aea
SHA512 73f2d16ffb019d4e81d6dd11d14620e4d5e207b2b30fbf128908801ba8dd844d556f646985c4aea03d946b30d526aaf2b1d984a6cb9dbff467274024a8574acb
SSDEEP 96:OlSSHrS0ebhjqTqlJEccTJFHDJgUEDxQNHpq0nxTLh7Dxb2DiLC2Dxb2qRn+x9Zb:F5el7JZnxpUxscZig
MD5 SHA1 SHA512 SSDEEP

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\globby\package.json
Size 876B
SHA256 995419903127e0e9e3352f8013de1d6a89044a9753ea333a37077d029798b565
MD5 96c0addda58c0152d2d8ffa4df4f2d52
SHA1 5832785dd8ec751c425a90b4a6dd1ed31cff0089
SHA512 1148d31c7a24cccc36504f3d1e59f63663a3a18a53d20a1f18ab58da5a4f3b599cf9adba5aa515a88e64c939d09b708e387854d62d35394e8ece0daae63bfe82
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\merge2\index.js
Size 3KB
SHA256 15a54c244f6591f3a744ea3e26f3484fd3ecd0975734639aa535b5af9a3edade
MD5 35d2978019e96cd7ab6f732918d64eb3
SHA1 ad80c35745c87c842494078cfa8da55cae9d1201
SHA512 7e910f1a53da3704b78341ab47fcf9af81219fff34fde3d189ac2983cfc10255f128164af2fc00dc4f5915a238b2747742acbf489a0d0c64512ea07bb843c1e4
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\merge2\package.json
Size 637B
SHA256 202129ba22e9acef65008e10e6ed11c2e55e1ba2badb14edcc5c8ace6991f744
MD5 61b9520cb8f6dcb106b0805b7cc4c19c
SHA1 d17e55690a046c58626411fffe57256849459d41
SHA512 5dfd6f2180091252bd67ceba4758b8eb4abda8c8f3cce9e74ecd45923cbb0f139e94d302e50a6d9c5c37e20e9bbf76327c5c4be9f1e7f2fe02407cf14ebf47c0
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\ms\index.js
Size 2KB
SHA256 55986972f5f3c9446f876c576e1cd30fd4f04cd26527efbb5ad834637c740e4c
MD5 fddcc2097091479666d0865c176d6615
SHA1 55f9b3a7d4cfbf68b19ccd0d698aa86483dd4694
SHA512 252644169a9398527927b69a2f19c6578bd62dcd180b94984d991939f53bf4e77ca687e840db42f7dba3b37124a5e3f3eda83535e75491bbe6ca440a7149913f
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\ms\package.json
Size 607B
SHA256 461fae62c3ca9832c2584a73d4c94986123f448b08cd6a5b11173accde3af3a3
MD5 c0fcdac41c74631d862f2e14a6bcfe6a
SHA1 70460f5bc544326bf3c5c5933dd39a41a6163efa
SHA512 5359e996a371aca8af3722633fb479b7365b8817645e41ab195d94a5b59185876b80a8881870842ad7df251eae5f32c8da0004f6cdc9942ecbbf6305516d9d82
MD5 SHA1 SHA512

Submit Download

once.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\once\once.js
Size 935B
SHA256 3db73e347ecbdbafdf8d0db85145c877e133f5372e767360ef90c09f70ac5103
MD5 d1d6962324348ad89bf780a233952c61
SHA1 f78c8cb8d754261b59d03e867f329c2ffdefae45
SHA512 9d9667f080e1534260c68a57aaf1d1db368bd03d8c998d4b5dd3df68dde1889e237bb735d73d29d65bda50c05bf87cc3637ce504bc885e32d2c908d706f3dc9f
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\once\package.json
Size 578B
SHA256 20dc231a8de8c78c9e6507e0b8bc8ce995f9a9fe24ce0be4d79566643f4eaceb
MD5 5a97b6112c1dd412e62716bcfd35e67b
SHA1 27fcc63b1daf6ce773c76149ed1ba16bdb3f6d28
SHA512 c92ae77ade8200476d63c32a0cbce687dbccded977227b5343cad57818b46527c9ba8910c23b2ea3888963c6bc590afcb4b2946d53f8c1ff18e1f62f1f8c783e
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\pend\index.js
Size 1KB
SHA256 4b991290680d9027dd786493c6e816900355956d88afb6ae4d97b5ac5a3ee0f5
MD5 51cdd3c93701ca33381fabda25149a99
SHA1 4b98d801dfcfa16cb4c2f66930704db959e8efc7
SHA512 7b5c4b4d2f7daef6e99038dc37859fedd4b059340cac258cea62b0af54d16ffd67e117d028cd34cc4f22742674a583da98a5760f72e867a64494d064b1a74b5d
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\pend\package.json
Size 404B
SHA256 29db2d35f2a8412a6e480894f9705004424c0181b3524fa7b10b7d639da781b8
MD5 b41a498760e4a7c219027b1251849186
SHA1 bda25639e3a73e5074c37485d4009e30d9c0b586
SHA512 3d4481be20a3e4f35bd0a98745a7ec5c8de6b343c5eee01acc9a4874c6f6848504e3068861afc62fadc4746a968a4d888ecb8012d57515337cea297a35d33062
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\pump\index.js
Size 2KB
SHA256 60ae01725219c69e086e0cfe6a6da1f94a9bafcfbf528460b6e04b7b6d983165
MD5 9c2361a467ecc8bdc786062b892524df
SHA1 0e7454e620e2482b0311a99789505fc24c60f2cd
SHA512 27058a7d101c2a09329862f74377e70e7c561d3adcf77f29bd38f1a05204f31bf139291a2f6e66006407156c53a0ce988570188a343326b7b2e80346e5eab2e3
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\pump\package.json
Size 524B
SHA256 369d6e7b32e83acc278b3d409c43ff39b600ade2a09b6f247478845bc465c09b
MD5 ca72ebf903466241b191a18be7f78012
SHA1 7fb0e4fd09fab4a73cee8130395115c31e3c6a9a
SHA512 a7b6e5b5dda90b16cb4216bad42712759c87288519db288d05e750ed28edcedd49b042c6644065689599a84bbfa49d25749f7adf6f3e81bb346d294826c69335
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\semver\LICENSE
Size 765B
SHA256 4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b
MD5 82703a69f6d7411dde679954c2fd9dca
SHA1 bb408e929caeb1731945b2ba54bc337edb87cc66
SHA512 3fa748e59fb3af0c5293530844faa9606d9271836489d2c8013417779d10cc180187f5e670477f9ec77d341e0ef64eab7dcfb876c6390f027bc6f869a12d0f46
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\tar-stream\node_modules\safe-buffer\index.js
Size 1KB
SHA256 d58af21cb0518864d0c505742d1af71e5b5e1f142f4c0f27353aa0f431a616d4
MD5 b1622ff2944ba3f13a1cf6fbcf0f9e3f
SHA1 f67b8decb99eed068f28c9ae56df08c21bf4c33d
SHA512 600b49f49832ee51ffd8f6c99616387d93bb1fc2afee71d2066f982e39080a1508999ef2e2bf714d5f6adabaa8b72d3c5cdb445c8c36b67064dd76b377b7f889
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\tar-stream\node_modules\safe-buffer\package.json
Size 523B
SHA256 145306d510d4d255192e3838bcb0ab028274febe52cd4acd4a42d0f7ba381da6
MD5 711a5121057bf0a7453c8b57328f3f6e
SHA1 1f062f5e5e4ac075ec2578f6d9dcfbfb82b36270
SHA512 6e75e0308add68b3ba9c524107d1ba03af899bc26ef4f173fd458a8cc151c487311e5f555db28ecc8a7b81b72b3059028d55825980f973879427cca4f1993650
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\wrappy\package.json
Size 554B
SHA256 841d35178b0e513ffb9c6a4710cd559efe0bf81d140447fe583a75baa523aa38
MD5 71803f8c6175dae1fff06aa06606b8a3
SHA1 8a0450786e78b37ae536e0c2beb52a12dfab3c58
SHA512 fc29dd79ac3250e33cbd3967301731d1b29c0125314c1aa1ace73af0754e7fcaf25641a4368a5e2d8857b4bf37643ffefff0600ef467f2ec63a718377b6a1c34
MD5 SHA1 SHA512

Submit Download

wrappy.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\wrappy\wrappy.js
Size 905B
SHA256 153453c4d84a3c2f13589c37055a7daff61d48475dcce554f7eedad15fc7b3e5
MD5 04a65e1669dc90fa11c900693c1974b1
SHA1 7d5c1c908664b3df4a9b72400a126652ba0dd905
SHA512 621895dcb5779c3827ad29c216af816d0c99686b1f18ee45ae844da67be1909ae24e1fbd11a09bef27f6f8143fcd39dbf74d2839a30c871dfc98e2c905dff46b
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\yauzl\index.js
Size 32KB
SHA256 583c4554718cbaee5189d0e28dbd7480a0766e785304e3bcd2acad80b2cb6497
MD5 3f7db1e6ecb8e2f75c1f53512c4eb100
SHA1 2ba7b220b596a27da81c2bc1330ed8bab7567e3a
SHA512 d6c6a5f83e1fb1131fb4525eb2c35b66d054e32a99b6940140e3bdf911c44897b0dc0a169fb440b54da1cacda87762fe242543d13a8a41da91c7faf84d063b59
SSDEEP 768:UCNhlFwbB/CYgpDn37Y6eoBeoB7541EUokh:UCNWqbr41EKh
MD5 SHA1 SHA512 SSDEEP

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\node_modules\yauzl\package.json
Size 612B
SHA256 a72ea38e2a7354fe95860ac0e0c899a40f3f4e10483dd3cb62dcf99a1473e3bb
MD5 a8e12d22820d491e443609db84b176d7
SHA1 4ecf8d21752fa746f4079b5ba4b80aa08ed00f98
SHA512 c2162f04f602efdd5e814dc33b3bca680892495021eaea10ad27fe5e8f955a2c3ae0ceb37be0af3ce914c844ac4d5ad0921646000afbedf47cdc4f2726c609b7
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\app\package.json
Size 1KB
SHA256 e16df9b5799b6a282414b0fdfeb4e72041de5283eb403a0888824cf6b41e5b3b
MD5 55c4bc2fe7f5bdb659206d18294a97d4
SHA1 8053fa0fed04d3f9daabca232ac75837fa08e2db
SHA512 8f706be23c3bd642e98e38a8dbb0d13a9ec55478a42d8872d4298bb62763174ad781d0faea9ba4291d0ec98b3bb25189a20d7cc4dd012715a86bdf2cb2c53c9f
MD5 SHA1 SHA512

Submit Download

electron.asar

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\resources\electron.asar
Size 289KB
SHA256 dcb9dc03a005a6103df7d91876082fb85a5a82d27f4fe352c3aae641019dc2d5
MD5 883cd446e81382b9141198e5d1417d9f
SHA1 ba96df0bc43c5ba21ebfae112c350e0c063be877
SHA512 d1bdd51cb36bac03d91e7448e96e9a4f2ffbc7c97867c43fb01cd8720bdb3f75b99aafcefdb72caa270ee8946e11906dcee9977ec6aa9dbec7e34d08769ec54c
SSDEEP 6144:ZWnuFWi5WvZbk0zn+gUT+W+w3nlXhVcJopvisV/d543GR:j+kvcJo/n43a
MD5 SHA1 SHA512 SSDEEP

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Programs\mecha-keys\v8_context_snapshot.bin
Size 672KB
SHA256 48b67d949d11961434bc2e738e7afee9d8bed80380f8a32ae6c281ca32cbd76a
MD5 672ea3db0155a4fafdf701d92349a3ce
SHA1 a819f43c28779e5560268880d001732f3fc9da27
SHA512 5c07cd9fc34897181a63aa3719be686f6e7ac56fc59df9b955f026af2d2eb5dc30942ffe1df09ec1d876bbca4c0f41b7dfaeb19a191e4823394836d90d387a0c
SSDEEP 6144:FKQHPn6csSLzk+/WxhsJWNsqb0iYm9c/h2g+GSoxoLpM:FK06Ik+/EVK0bQpIG9a9M
MD5 SHA1 SHA512 SSDEEP

Submit Download

SpiderBanner.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdD9A8.tmp\SpiderBanner.dll
Size 9KB
SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
MD5 17309e33b596ba3a5693b4d3e85cf8d7
SHA1 7d361836cf53df42021c7f2b148aec9458818c01
SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
MD5 SHA1 SHA512 SSDEEP

Submit Download

StdUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdD9A8.tmp\StdUtils.dll
Size 100KB
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdD9A8.tmp\System.dll
Size 12KB
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
MD5 SHA1 SHA512 SSDEEP

Submit Download

WinShell.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdD9A8.tmp\WinShell.dll
Size 3KB
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
MD5 SHA1 SHA512

Submit Download

nsProcess.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdD9A8.tmp\nsProcess.dll
Size 4KB
SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
MD5 f0438a894f3a7e01a4aae8d1b5dd0289
SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
MD5 SHA1 SHA512 SSDEEP

Submit Download

nsis7z.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdD9A8.tmp\nsis7z.dll
Size 424KB
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
MD5 SHA1 SHA512 SSDEEP

Submit Download

000002.dbtmp

Path C:\Users\Admin\AppData\Roaming\mecha-keys\000002.dbtmp
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

829b8447-1e5d-46d5-883d-e781a0271742.tmp

Path C:\Users\Admin\AppData\Roaming\mecha-keys\829b8447-1e5d-46d5-883d-e781a0271742.tmp
Size 257B
SHA256 06674823a5c06ab95df260ff8f608baee7250b569901350efab0ebbbc8888e67
MD5 d9ab63d37e2a70b92256b17590885e79
SHA1 fd80fab21c59c8c628532d0a8235a5fff010ee6c
SHA512 603a39a86fd6e194fe27fb9b65db0bf94e362d7b17d5d6ebeedb6fad159b636e8ff8b8f7e00fe7d2c3b41452165e540aa68d2148bc8b285438da230f6f286134
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\mecha-keys\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Roaming\mecha-keys\Code Cache\js\index-dir\temp-index
Size 72B
SHA256 057458ef2804f7725a522d50701ddff80d598a735ce87b9045a369f282b2ed7e
MD5 49b2373ebbf1d4f41aaf17cbc6c9c150
SHA1 33f2d4412ce3f8fa4466d2398ace791e4236a62b
SHA512 56942ba3348bd27143581449f21277e18aaa27884b96461d17e92b7f90f0c3c2eee7e6f9c8e81dcd7fddc7381ccbd907284371a1034b9a24e3048db050a6b774
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe58536a.TMP

Path C:\Users\Admin\AppData\Roaming\mecha-keys\Code Cache\js\index-dir\the-real-index~RFe58536a.TMP
Size 48B
SHA256 db34725afe134c05107777cd078a00ab286f60ef08d148f7bbef94add00a673d
MD5 463880cc2d6c6d516952e9070d0cae1b
SHA1 7d0235984d8628d174752386d8b1dfea3ced7bb8
SHA512 aed873e6df95a3485ae297da206e2a0cfdecef4330c1ebb25da1f90f054c0c76d3e89e70a3f4976bfb79a5194f20c3bfb1842adf44893cf2991f763fe113ae13
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\mecha-keys\Local Storage\leveldb\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State~RFe591330.TMP

Path C:\Users\Admin\AppData\Roaming\mecha-keys\Network Persistent State~RFe591330.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
MD5 SHA1 SHA512

Submit Download

memory/404-3197-0x0000000065E40000-0x0000000065E55000-memory.dmp

Download

memory/404-3183-0x0000000065E40000-0x0000000065E55000-memory.dmp

Download

memory/404-3178-0x00000141C7F90000-0x00000141C7F91000-memory.dmp

Download

memory/404-3217-0x0000000065E40000-0x0000000065E55000-memory.dmp

Download

memory/404-3219-0x0000000065E40000-0x0000000065E55000-memory.dmp

Download

memory/4952-3146-0x000002E96EEF0000-0x000002E96EEF1000-memory.dmp

Download

memory/5072-3182-0x00000229D8120000-0x00000229D8150000-memory.dmp

Download

memory/5072-3088-0x00007FFD174E0000-0x00007FFD174E1000-memory.dmp

Download