b233d7baa7c98f318836ebba49ce647530711f2130337f0aede13a3aac3fddd7

Analysis

user interaction
yes
max time kernel
149s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 01:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MechvibesDx_0.3.0_x64-setup.exe
Size 62.7MB
Sample260804-b56gmsel71
SHA256 b233d7baa7c98f318836ebba49ce647530711f2130337f0aede13a3aac3fddd7
MD5 2cd8e3cc37ca1ad75b8d263c2f521f2b
SHA1 d1185f2ae275e3dd5d1d642b14d826b10f896daa
SHA512 526df1a5b0b4e2ac7a0e73988dc36e734ee56e08d53f596207aa868d2162591e2ca251d4dd8019d44f1c430d08446c0b48574bbc2ebfa800f8c1ae7baedccb6e
SSDEEP 786432:TcQ20kTxRaXhf/zyEDoYKboCc/oK7l6vInW2oOh8J/mG6qGa+M:TeP4XQ3k4IW2CU3b3M
TLSH
T1B0E7E114BB4B696DF51AC07483864662DA7138CE0B3479FF68D966742F77AF02F38608
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery trojan

Malware Config

Signatures

Executes dropped EXE 3 IoCs

pid	Process
1296	mechvibes-dx.exe
360	mechvibes-dx.exe
1300	mechvibes-dx.exe

Loads dropped DLL 3 IoCs

pid	Process
2072	MechvibesDx_0.3.0_x64-setup.exe
2072	MechvibesDx_0.3.0_x64-setup.exe
2072	MechvibesDx_0.3.0_x64-setup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 3 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	mechvibes-dx.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	mechvibes-dx.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	mechvibes-dx.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MechvibesDx_0.3.0_x64-setup.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2072	MechvibesDx_0.3.0_x64-setup.exe
2072	MechvibesDx_0.3.0_x64-setup.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4732	msedgewebview2.exe
1816	msedgewebview2.exe
4484	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
1296	mechvibes-dx.exe
360	mechvibes-dx.exe
1300	mechvibes-dx.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1296	mechvibes-dx.exe
1296	mechvibes-dx.exe
360	mechvibes-dx.exe
360	mechvibes-dx.exe
1300	mechvibes-dx.exe
1300	mechvibes-dx.exe

Suspicious use of WriteProcessMemory 33 IoCs

description	pid	Process	procid_target
PID 1296 wrote to memory of 4732	1296	mechvibes-dx.exe	102
PID 4732 wrote to memory of 4052	4732	msedgewebview2.exe	103
PID 4732 wrote to memory of 2972	4732	msedgewebview2.exe	104
PID 4732 wrote to memory of 2972	4732	msedgewebview2.exe	104
PID 4732 wrote to memory of 2972	4732	msedgewebview2.exe	104
PID 4732 wrote to memory of 3516	4732	msedgewebview2.exe	105
PID 4732 wrote to memory of 4696	4732	msedgewebview2.exe	106
PID 4732 wrote to memory of 4696	4732	msedgewebview2.exe	106
PID 4732 wrote to memory of 2176	4732	msedgewebview2.exe	107
PID 4732 wrote to memory of 2176	4732	msedgewebview2.exe	107
PID 4732 wrote to memory of 2176	4732	msedgewebview2.exe	107
PID 360 wrote to memory of 1816	360	mechvibes-dx.exe	114
PID 1816 wrote to memory of 2420	1816	msedgewebview2.exe	115
PID 1816 wrote to memory of 2308	1816	msedgewebview2.exe	116
PID 1816 wrote to memory of 2308	1816	msedgewebview2.exe	116
PID 1816 wrote to memory of 2308	1816	msedgewebview2.exe	116
PID 1816 wrote to memory of 4888	1816	msedgewebview2.exe	117
PID 1816 wrote to memory of 4788	1816	msedgewebview2.exe	118
PID 1816 wrote to memory of 4788	1816	msedgewebview2.exe	118
PID 1816 wrote to memory of 1132	1816	msedgewebview2.exe	119
PID 1816 wrote to memory of 1132	1816	msedgewebview2.exe	119
PID 1816 wrote to memory of 1132	1816	msedgewebview2.exe	119
PID 1300 wrote to memory of 4484	1300	mechvibes-dx.exe	124
PID 4484 wrote to memory of 2768	4484	msedgewebview2.exe	125
PID 4484 wrote to memory of 4228	4484	msedgewebview2.exe	127
PID 4484 wrote to memory of 4228	4484	msedgewebview2.exe	127
PID 4484 wrote to memory of 4228	4484	msedgewebview2.exe	127
PID 4484 wrote to memory of 3772	4484	msedgewebview2.exe	128
PID 4484 wrote to memory of 1072	4484	msedgewebview2.exe	129
PID 4484 wrote to memory of 1072	4484	msedgewebview2.exe	129
PID 4484 wrote to memory of 4908	4484	msedgewebview2.exe	130
PID 4484 wrote to memory of 4908	4484	msedgewebview2.exe	130
PID 4484 wrote to memory of 4908	4484	msedgewebview2.exe	130

C:\Users\Admin\AppData\Local\Temp\MechvibesDx_0.3.0_x64-setup.exe
"C:\Users\Admin\AppData\Local\Temp\MechvibesDx_0.3.0_x64-setup.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:2072

C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe
"C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe"
1⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1296
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=mechvibes-dx.exe --user-data-dir="C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=1296.1976.9048817248444562509
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4732
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x178,0x17c,0x180,0x154,0x188,0x7ffc0e07b078,0x7ffc0e07b084,0x7ffc0e07b090
    3⤵
    PID:4052
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView" --webview-exe-name=mechvibes-dx.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1768,i,6311923714448604443,1664565661966145030,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1732 /prefetch:2
    3⤵
    PID:2972
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView" --webview-exe-name=mechvibes-dx.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1400,i,6311923714448604443,1664565661966145030,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1912 /prefetch:3
    3⤵
    PID:3516
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView" --webview-exe-name=mechvibes-dx.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1780,i,6311923714448604443,1664565661966145030,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:8
    3⤵
    PID:4696
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView" --webview-exe-name=mechvibes-dx.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3628,i,6311923714448604443,1664565661966145030,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
    3⤵
    PID:2176

C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe
"C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe"
1⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:360
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=mechvibes-dx.exe --user-data-dir="C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=360.1608.15399144423477241698
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:1816
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x174,0x7ffc0e07b078,0x7ffc0e07b084,0x7ffc0e07b090
    3⤵
    PID:2420
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView" --webview-exe-name=mechvibes-dx.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1820,i,14150510328530364854,9887850216062783719,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1816 /prefetch:2
    3⤵
    PID:2308
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView" --webview-exe-name=mechvibes-dx.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1896,i,14150510328530364854,9887850216062783719,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
    3⤵
    PID:4888
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView" --webview-exe-name=mechvibes-dx.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2356,i,14150510328530364854,9887850216062783719,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:8
    3⤵
    PID:4788
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView" --webview-exe-name=mechvibes-dx.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3532,i,14150510328530364854,9887850216062783719,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
    3⤵
    PID:1132

C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe
"C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe"
1⤵
- Executes dropped EXE
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1300
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=mechvibes-dx.exe --user-data-dir="C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=1300.1664.7655290552550944621
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4484
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ffc0e07b078,0x7ffc0e07b084,0x7ffc0e07b090
    3⤵
    PID:2768
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView" --webview-exe-name=mechvibes-dx.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1812,i,2771490788635005837,519063630614730202,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1808 /prefetch:2
    3⤵
    PID:4228
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView" --webview-exe-name=mechvibes-dx.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2084,i,2771490788635005837,519063630614730202,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:3
    3⤵
    PID:3772
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView" --webview-exe-name=mechvibes-dx.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2308,i,2771490788635005837,519063630614730202,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:8
    3⤵
    PID:1072
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView" --webview-exe-name=mechvibes-dx.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3496,i,2771490788635005837,519063630614730202,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
    3⤵
    PID:4908

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

config.json

Path C:\Users\Admin\AppData\Local\MechvibesDx\data\config.json
Size 1KB
SHA256 bc48cc2374cc7b6617db5f9271848cabd4a17f9fb02255bc5db26ddba66e1730
MD5 da5b7bf3d07a4945dbc498f4da00275f
SHA1 b53ba09ff312dad6f242dfd306dfa2834a71c8da
SHA512 8a65a2e9a06ba0be3377d55eb5f746985201e67a3ab802a65902e808476f88985eac1a51718704f4ff00dd1b771999c9f213b40da3fa5973a40aba4b7c5d56ff
TLSH
T14A312930C0645CFB32D7C17C45BD8293121889079A147FA5B35B949C2B8F77B51B7AD5
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\MechvibesDx\data\manifest.json
Size 961B
SHA256 d088c4e5a258411612c7a496dc1878c5e05c5257712db0d468ae1677673683ce
MD5 c09054d2d9d4ab48f447ee68ab307f15
SHA1 80d89a0e9a67f495ea78b2eb45ec123c90d0c852
SHA512 013124214067882925c8dc1766e01c8e9feb4a9e9e8d2d3a5fcfed26d65d35f7a1177e01b325c20034e6a627ecd8ec5f0adad9f33175f8a5387e6de40edef3d7
TLSH
T10C11E220F0A7EE97788E453A197E1A479178146F6DC82E087241454C0F8E53F687BD3A
MD5 SHA1 SHA512 TLSH

Submit Download

mechvibes-dx.exe

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe
Size 15.8MB
SHA256 84c7ae138ff0f6612c07795cdd51d8b1fa87c25437fcece1fcd7c18385921724
MD5 9a0fcc4f2caf67c5426583f43374430e
SHA1 79354c7959fed7e101e08ecadb794efcd45ab45f
SHA512 40e0fdda0436655dcf7fb03a0629a933e94ad1be4328db260fe357d58ce75975d2d42d711358af2d6849c299201b99b62762899e9ffeefe2b0c35bf1b533667d
SSDEEP 98304:Esoe15CrjJEzExgIsUo5+j+AY5gwMsxqmW1kb3Nh6XaWszakETLcQAN37Npmd:Esj2E4xPDokjXJk7zakFmd
TLSH
T1ACF619257B4FA9ADC11AC470838646B25A7134CB0B35B9FF44D586783FA9AF42E3C718
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 d8b79c00096d3adefd9e1e3fc618c2e18539a8687ea2f3fc388d595f88f5047e
MD5 57d149997548dab87db5cc02ba4b36ab
SHA1 2d3357dfb790191e24370d9f1b1c648a755d2ab9
SHA512 51c132328c3735bc314e7845601aee763d8fb6311782e105fa63ffd80e55fd0ade997081c759b6674195d37ab9dfad160d17440f56f9b52d0e99eac90d235792
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 30d9716ea34924120c7bbf226d7bc8c3af1b16ed98faa0b6ea4a023528900743
MD5 c7ea1615fbd6bb89113b63420c49a154
SHA1 94d74596053772d265cc84a83308cfcf73c0b03c
SHA512 1ffdc904136d1c6a6db39efd9ffebff232b8ab389035db5b7bdef8b189bc6822cb39da62367596dfcc13bcf00e1e89f55fb2bcce1dd4c90c81bbfdb9e07a2dc0
TLSH
T145D022233322BB38C02030338283B38C0C02C20F800AC003A83CCB2E3F088A00F038E2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 175f98ed0532111a3e233d286c145140bb9e99e3edb5d8226be21829b30f30f1
MD5 9a5e5f3d4cd0e6f03e40f884158b127c
SHA1 abd63c902746b2bf0f99acfaa9f150f5547561ed
SHA512 f8017ecc2e72caccb17f533beef79571b766bcb381967a9eb2a3ef6c76e0a1aa4ad3cf8ae25d70dd42d7629c7d2e033fbdbd1d6ffae723c3bfb7a2d457fc5b9c
TLSH
T164D0241337117334C01031334101734C0D01C00F4105C103543CC73D3F054504F034D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 a75fb97ca38bc87ea5e6872a5a732344541a881ad2a41443729249a4bf99a4f8
MD5 714fee482f62ab529dad82ceb9e107bc
SHA1 cd012a641d3464cc7cf93105b274a57a65cedd5d
SHA512 489a8645324437b4bdbb86cd7dc5e14d190b4a202424306b591cb9130e738df377ebcc78c3de8b28398437d4d5e79f1c1070abb9a277847f23204d8be0241e63
TLSH
T171D011223322A238C02030328202A2882802C00F880A8002A82CCA2E3A088A00E038A2
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 468456974fd86b33647942820dce7284879acfab9e9e6eca008e1fdcf9006fb5
MD5 d1f604157b0745a40453afb93a6caa42
SHA1 3d5d77429b03674ebb0ba34d925ba1b09310df5e
SHA512 0644ce93724a57dedd8aec208e5a038e323a1b9871d5046d58a87c60479626693e6c8f25b7c7f7b60fd35aac133d2e660ecbd8f8d579ad1fc6703ae117a485a0
SSDEEP 3:MsFl/ll+l:/FE
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 63c1a7e5a7815c3bcdfe5b26e78f31ac691ffb780ff51eea4faaef52d4b2e738
MD5 f4e028cd95083851798792408bf77c7b
SHA1 30388a712b6c36094b4477ddb810502c69d72130
SHA512 4110faa82b3c3fa61c145a5b3a59b04b4e12901d5211782649ece1f5a30fe7b5497f39118882fc593814edd0baacb8922118db2e365ccf7a5d9229f0b2d5f338
SSDEEP 3:MsEllllkEthXllkl2zE/lPlvl:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Cache\Cache_Data\index
Size 256KB
SHA256 5816d20d35531efae0d53ad0dd29548d16dee68d219d30649f47cfa9ec3dea22
MD5 48745f7170fb525587c01eded4f8bde2
SHA1 8ebe0ee978f5bb8cc16238091188d5dd505e85a7
SHA512 4ddc254633352eec3eca2c48806144cce6c7628e6473b3b2302d8fa8098fa699327e6a27196520bd2e7d804e83d15cc6dc1322c4e5ad64c9778d1757e4762cdc
SSDEEP 3:LstlNllkll/l8gP:LsX3lEt8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Code Cache\js\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 f0b462f660a304830d8254ada811f8b9b116308108c7395ad38e6aab2360a515
MD5 9d260afe48f792e4c1a4f7c42eeec911
SHA1 d35fc97501bad5d94b14ba2db2d6db98713f6aba
SHA512 4dcd5ef403303a28a4bc2ab7d3fadbc68a16f51a0589e1427446dbd6febb67d07ce57b8ef1548ee61233fdf65ec0f3e98de1799809cb3a6a578f115d58d4c1d7
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Favicons
Size 20KB
SHA256 46b5ecada4edb2585f87953f7847aefc938be2404b9d9455c772b97295b7b1cb
MD5 babd43551f1b29eb82e221460676126a
SHA1 e9bff307613a14b35830893bdb6d1ecc931b425d
SHA512 5ab681c170dbd1d374bd66edd02cbe21272819ef7389ad1e886bcba112deb91eb68fa930747986da5ca794881939570013e38edd9f8e6f718f7d202e74a82f41
SSDEEP 24:LLipxh0GY/l1rWR1PmCx9fZjsBX+T6UwcE85fBmI:UBmw6fU1zBmI
TLSH
T1C292EE075E383407DBA10E7D366B18768E3FE26C5FA29C94347410618CF9482D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\History
Size 184KB
SHA256 3e24b40563b11049e123cddac355f39dd85c04d54e3c3597064e525f522253dd
MD5 53eea4318438e57c09d314a6f997adfb
SHA1 8de956b98fbd3e9441ab97fa0f7d8ae4b854e2d2
SHA512 1449f2f02489a26ea1768e6240ae6d0a30e489a3c9a72d7f6929c4a9d8b85aaaebe360c22cdc897181af30210cc6af6540adec71b1929eb0b51a6886e43e95c9
SSDEEP 96:HBup/uJmyloejzH+bF+UIYysX0fxQp97DEHt/DfLjLqL/VibgI4VgNr2jWRk/E0v:HBuwnH+bF+UI3iWGVDWN3qL/zVgZQW3S
TLSH
T1DB040C5E5F243612CDBD913668E745B3987DF02F8B2366C66C6204B1CEE2652B02C5BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
MD5 4203aba60fd9de5b4232fc624db3f817
SHA1 1f07dfc552d6b509c83c36cb05986007ce29e250
SHA512 6240f8ef505e093f0ea99306adfa90969b3de094cde08b61076bd2c737763c0815108f532ec17e766fe15f9b1bcb9d82096f799ef04d50c3ce2305d8247bfeb1
SSDEEP 24:TL33lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:TL31DtX5nDOvyKDhU1cSB
TLSH
T15EF2469BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 e2c458e6d2a247ab17d3a43ccfb83227eebd09e4b2cf254566ab5f4c17b10d58
MD5 2e3398052683b09bfda36ef1a7923271
SHA1 a7a150f6354cd6f0f5c5385219432c518e52c628
SHA512 94e596a5a0007557b4e97adc4050b30ad447e765d45dc7044455832208e28e4395a6481d8171aa9d10424cf3f9875b6493ed891a34a3dd1d90dc33dac3a4b16e
SSDEEP 96:stU050Dm7bDDffOdZ8i0oEUkQtQqm/7qx+WVHMSm+uecof+pPOXdQjl+gTqfj8K8:stU0Kwf4Z8pF0Qn/S+Wik+pPqdEVAYK8
TLSH
T1C3E1DC065E68B97B4CC7E61CBA36BB52D2FA102271C40E58EBFC892C45E56CD630790F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 7c2bc534f4fac8ece864d99f3ccac0d036fa292509e36a4c9a597fd675da7cc7
MD5 db39c530dccf1d87beba9509fe2f869f
SHA1 daac5c3c510bd22cea213f25f49b2019c091e38b
SHA512 560199b860d2afd514b45d97c8d471ab1ceef919c5846cca61d09cc580148319c6fc8cdedce109f75c4726cdf1f0900eeab1eca6ee559e8a4bc55ef300093319
SSDEEP 192:stU0KHf4Z8pF0Cu/S+WikCO+AQdEtYAqK8:stlKHPNu/VfdAQ+Z58
TLSH
T127D1C9065E68797B4CC7E61CBA36BB42D2FA102275C10E58EFFC892C45E56CD6307A0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 6901514589d6061a695eeacccb61fdf0eb63fd0b60a189e7504018b54d8acf01
MD5 8da8d49af1d7b6f05674bf581c6b0778
SHA1 f4776d9824abc9ca80ba7b07b7c7da13d714af59
SHA512 a59a61c7c8d7e1d0c347d4fcc577c5ae1f8fa29d41740a45cbaa7675139932096f1e847672ec671c530e9a21f50c8577c50f9e592ce9b9499d3668ca02ad4ffd
SSDEEP 96:stU050DmIb9DffOdZ8i0oE/kQtUm/7qx+WVHMSm+uecof+P11idQjl+gMQqfgKEB:stU0K3f4Z8pFj9/S+Wik+P1wdELAgK8
TLSH
T1E8D1B9065E68797B4CC7E21CBE35BB52D2FA106161D50E58EBFCC62C09E96CD630B90B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Safe Browsing Cookies

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Safe Browsing Network\Safe Browsing Cookies
Size 20KB
SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
MD5 a156bfab7f06800d5287d4616d6f8733
SHA1 8f365ec4db582dc519774dcbbfcc8001dd37b512
SHA512 6c8eeab3ae6fb0d5be7758cca521665b216f31aed1aeeeaf121c99dc9f0192b385de0da36e94f90dd4a9bbbac6be2c5a55d2f284a24ccb7dec2c5302fb9b027c
SSDEEP 24:TLekLbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T66LopFMatSaw/auUOt8B
TLSH
T101928A4E5F346220C0F44B36EDD189672F7C212CD3A72699DE1420F3DE929ABF1095AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 f685a2ad2fbca0d3e2daa6f0bbcd3f5886deede2fa32205a8d03b5df2df860c1
MD5 9e8a7aa18accda55554c9904423194e6
SHA1 72cbc1423500016ef094cee79e65fee4ed6f373c
SHA512 d7572b0e4969212b6b26468e25a8ad6a646eba8f7b57e76ad132b40e9877a6531afeb4ad90fc0b39c3b6e391b89ebf66f6b0f1c2cd27e2b42fb5ca14c41c928c
SSDEEP 96:HlLilPlf/ROoKOpkF5d15iS7sMaTEv9V5h5pg5+eeZNc2cmSKqIUfjLkD5:HAlWGBK9l3NcdmSnpLLkD5
TLSH
T167D1B6A34568D578AF485BEADC397FCACDA640CF98D58C1696D1C44C07C2EFC21CA8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 7beaccfdee776f12a6ea663815aad361c5bdfd09d9648c5755d474063f9c40c0
MD5 11328f278f49be15d89abf91e8b66c42
SHA1 b82b9a56df8da2f14853ac4108d28c3b7815135e
SHA512 41ad554534993c88f1cb40e5419698e09c1a9c624817a96a0ecce6cea2624527dc2ca69b0426514ac5e42d3a2a948d8df1824c76367c63d723157c4e4a2cab67
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
MD5 b581f0ff8f8aa3371ae47b48c95329e8
SHA1 4f588efadf3675f3526cbe762c50eb8e79d9f2e5
SHA512 e0a79452acb39838afea8ce34e05c7e5cde68f2a786fe4423ddf2588fc6047339e8e4c3140d7e0447f938b2266f52b9ddbdcc0f40c495d833b47b3f27d7996de
SSDEEP 24:TL6xgJhPwMuz6G0ZestjteX4yNQeYlv+1b3IeNS6+6Uwg89oIPq81fBG:TFOIy4m1b3fbUdSo2qSB
TLSH
T16513AA0F1E187551D1BD0235E9E64E6B2E7E204C9B8369D125F01AF24DE251C9D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Site Characteristics Database\000003.log
Size 40B
SHA256 f096bc366a931fba656bdcd77b24af15a5f29fc53281a727c79f82c608ecfab8
MD5 148079685e25097536785f4536af014b
SHA1 c5ff5b1b69487a9dd4d244d11bbafa91708c1a41
SHA512 c2556034ea51abfbc172eb62ff11f5ac45c317f84f39d4b9e3ddbd0190da6ef7fa03fe63631b97ab806430442974a07f8e81b5f7dc52d9f2fcdc669adca8d91f
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Site Characteristics Database\LOG
Size 353B
SHA256 043ea0699b8912007add2435dc88474c34829ef98535628c8daedb5878ecc0de
MD5 495d030d433aa8d30dccc19062f48100
SHA1 8165fe60e424c7ce6f3d6542533484d7cae03391
SHA512 6b2b282aebd10e5e6fd765ce7526c27e7b3f131d367a26fc8ccd56120aee3e0558fbef5bb78198a4fb1e9a8171b2d0683f1a6ef517c7b58462ad1d3d64141edb
TLSH
T151E09220668AC5AA058748AF9D75974B8676700AFDDD12291D3D9B04210F404F687651
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Sync Data\LevelDB\000003.log
Size 46B
SHA256 a2ca52e34b6138624ac2dd20349cde28482143b837db40a7f0fbda023077c26a
MD5 90881c9c26f29fca29815a08ba858544
SHA1 06fee974987b91d82c2839a4bb12991fa99e1bdd
SHA512 15f7f8197b4fc46c4c5c2570fb1f6dd73cb125f9ee53dfa67f5a0d944543c5347bdab5cce95e91dd6c948c9023e23c7f9d76cff990e623178c92f8d49150a625
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Sync Data\LevelDB\LOG
Size 329B
SHA256 c09f3acb00c14e90fd0b895cc4b289966c05c2cb6bc8ab02aaf37f3ead694000
MD5 47b3f55497d8ac5855ebf9937cab8677
SHA1 d4fd69513c95b68d21d04a8d88617640394b60f1
SHA512 03e339cc1bd3531bd3ac83a6beaf4b36fd645e72680482456fde8fc56aa2885b2a533001ccc03e6963908ed91e9a288f8831d51d6395a40abbec590116ea98e1
TLSH
T105E0206155C6C1F508C384EB4DB44B4BC6B4740BBFCD334D4A2D4E04200B004F695692
MD5 SHA1 SHA512 TLSH

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Visited Links
Size 128KB
SHA256 3cac014703df1741cfd91ed8ea036b83f711c3bcfddf1ca4f8006c2618893161
MD5 88d1eef2190051e6a3c0c1851c87278e
SHA1 9dcfafcf65570b9438357c042665d52c6a4bb427
SHA512 6436585415e7007c57a9f7f3aaa7a39b3c6898099279e68aa6d1925d3fbdd920ac495ce1ae5948c712d7a15fc610abf2286ab6944c70482f698cdb0a19c5d9b2
SSDEEP 3:ImtVu54RXI1t:IiVuyXI1
MD5 SHA1 SHA512 SSDEEP

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\Web Data
Size 216KB
SHA256 2a7b3bb5ac287c4d5fd81c76626b1e8e15f32f34d2b37738fdc98fa6ad43baaf
MD5 4ebc7325aec489f53e4635ea414d14a5
SHA1 c85641375cd9bd4a26922883598a02e8861a6bec
SHA512 a2ad8a907e9d3405fefc533ef4ae65fcb32615914163af646c6af02a412df1d3a2250d0ec8e04ab5d04b6d8453122d43d97aa3340358fe5e7c748e9e2117fb74
SSDEEP 192:njQLsS6Xuv9PhDnLUMjA03VpQYouZtuQKIqJZWTVTdhsrV0dwe:nEL3CuvrDnwMjA0FpQY5Z0QKIqJE6K
TLSH
T14924440A7B746001EDA6E9721CB080771D3C61AD8F22E6826DB254694DF6853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\shared_proto_db\LOG
Size 325B
SHA256 dc883c07dd22887f725d02e0f5a0409160300d90bb7ba5f548a353b797cb31af
MD5 34620f9d74aee22a19d06bc542afc2d9
SHA1 8a3459a17e1f5b5d722fb04d048a8ec8f4c16201
SHA512 23427dc2e81de027845f94c9a9cd37222ed97536ceb72a7079b9ad10f73e8e0674f78ca3015af7054e50bfa1e350f1d021bc4d82481d3cac24c5916e9904028b
TLSH
T10CE08601B98AC4EF159748EB5C75478BC779340BFDEC166D5D29DE0C104B018FB86653
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\shared_proto_db\metadata\000003.log
Size 450B
SHA256 ebe6a720b3fc6d3e97675d365175e745e72ddd99ddbf73cdf67bfcd0a2d7b6ad
MD5 1a0025eb46def944eeb70d4f449ddea2
SHA1 44afcd0f8bfd99e4c6c913ddc95c7612692d480c
SHA512 eac3d8c1122de9bd9b50ce4220473113d3e2d30a2ef8129ad6a3c79b5f807bceeb1bdc4f3cd886ad67d88ef268701fc5dfb45d87854a1868fc646128912f0511
TLSH
T1DAF0861AF760C048D00956B66076EB215375E4124FF8ED0F483654252F777291D4B7D1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Default\shared_proto_db\metadata\LOG
Size 343B
SHA256 b3d00d2a43325d3206250641397e050debb6b96f4f79eafd4d02645236c0ebbc
MD5 ae6e9ba7499cf99aa8f21a5529b21eac
SHA1 d0c04a5640abb37a20c809d34e4d624a3ec386ea
SHA512 08a61325f7190e19a823ce67a81bf2851b61cc2dc2c4873367505f1f30ebf56e2dca4cf44ec5a940b4ccd29f58f70227345df9be91a9bdcdf2f3cb82cc8704eb
TLSH
T122E04F00B98AC4EB059348EB5CB5478B8769340BBEAC1B6E4D29DE08144F008FA8A653
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Last Version
Size 14B
SHA256 06205ebe5acf3073d12a4ac419377a3449e6d6b5fa7fa2b1c4201f007c4ddd91
MD5 96fb5f155aee0f8cd88274656c58ca83
SHA1 1fe86d9df188b0f86ae2d8da8f7c1ef663258baf
SHA512 fee0061ef23ef3fc35d050501b47db921f490c2aec2a016304c9f27228d3ecf7df9641fd681d9babd275ffd3dbd20e33e38fa5bf583c2852ffcd4b04bedf015c
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Local State
Size 4KB
SHA256 d235d02b2dfd062c54f30f01be73c1f97d054e3f9c696d24b26f90bc844a67f4
MD5 606d0c5e0df047e244750d8f5d4b418c
SHA1 99602cd26b527e64a87477b21af6cfd166ac168f
SHA512 fbee01555619d4074783c4f89b24c35d3008907a580fbc2b672e87fee6df4a67a92562c09169b7a019d0048edafa197ff2bfae9d794f51442a92071655bb4080
SSDEEP 96:zuXh3NkCEBHfWhs2p428Frh/cInURLl8DotoN5XmDKBDZC661ZbWlLmiwlpa:zWh3NbvIloiDUaQaDZ7lLP9
TLSH
T155919526A5B4BA374DF2D949B8453B07A9E15023D4D46FA9D9EC0F0C02EB3EC1342D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Local State
Size 4KB
SHA256 21afcf59f5083362e68d0878aa326a7a2ce9fa7fd311935a83127d0e7bfa5afe
MD5 4d5a3745c4f4abe6f656e21e2fb90ca5
SHA1 80ff559f2e66c6faa50a24af36d589fe4748750e
SHA512 e595b21d533f5701f21d416ea47e8c81975ef32a7d33e73f85bbcbaa6672fe46c5b6888218918c7e6cc9b351a4bfc797ed0d3e050d3426a513a0376e708f5c25
SSDEEP 96:zuX0NkCELfWhs2pu8Frh/cInURLl8DotoN5XrDFBDZC661ZbWlLmlgrpa:zW0Nb1toiDUav7DZ7lLQ3
TLSH
T15F918226A4B4BA374CF2D949B8453B07BAE05023C4D46FA9D9EC1F0C02EB3D81342D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Local State
Size 4KB
SHA256 9ea7d28e484abbe17194c1a165100f7705ccf658849b2637e6df135405f19cff
MD5 14cf837f64106f869fe761d2017a558c
SHA1 7c3362125e35d406627397c66f9fe2fc5569b194
SHA512 c60cb9158790914ec09e34195f037045d311e77057f137695260606a51025758751739067b01912abe217acaf2b4f110d645d0c70c6d30f46ee9a753bc6b51c2
SSDEEP 96:zuXeNkCEdfWhs2px8Frh/cInURLl8DotoN5XWDQBDZC661ZbWlLmlmXApa:zWeNbLyoiDUagUDZ7lLQKV
TLSH
T1B7919426A5B4BA774CF2D549B8493B07A9E05023D4D46FA9D9ED0F0C42EB3EC1342D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Local State
Size 1KB
SHA256 26fd4f34d1f4d5b1b9b64539dd13b9052cf12a2aefc2faa9c60e78400140be8c
MD5 d9d3f304a87caed6928bbd840d107842
SHA1 18846762ae2eec45c8bb4404329fdf7ef1ea340b
SHA512 d671355d8b62dd63026774a7e6b2275b8f73a73ae1938774a1ebc8376f921611810b14b774046c2609e6b2749f3b165b0fb1f302318efce29cdf64bfb1d593a6
TLSH
T1733185B2F4E07F729CA19545F159F79B2CB0102AC0504E48E6EE9A1C02F72ECE527D27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Local State
Size 2KB
SHA256 4f341f947e6bfa05a41515ba98aff73207437f0ee147a360e2b5671646fcc8cc
MD5 d4f4d0f50394ee392d76d531c1edb967
SHA1 18ddf71f5823efbe777f9f603db864a998217a27
SHA512 4a4f630dea33fb710bea1b9bc5ead717f4babf02f9b366c7b6713f9222f94d37cfb5849a2b319ecce7b805c08fe28cc8d0e25a6ed43f069f4fa4431023d15efe
TLSH
T1B851C773B894BB7389F28544B8497B17ADB1516585A02F60D9ED1F0C02FB2EC6302D27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Local State
Size 3KB
SHA256 fd10c0ea49f596d751dbb5a0a6024ec9e3692f76acfb5ea53ac874848998f750
MD5 b6e2cdacad3c5b8bf60e0d293ba479bc
SHA1 c03736f2da0266687d81bd85fb523ec81c71490c
SHA512 3f37d4c4cbf43906b54a304f2b6776d9117ea7e16d33ce835294cbaed963a4e80961b79aa9929a09fb7dc27198634b61898b2f8ccf5705923ef571f0af47fa33
TLSH
T1D271A636B9A4BA374DF29944B8897B06B6E15127D4D03FA5D9EC1F0C02EB3D82342D17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Local State
Size 4KB
SHA256 8926c8da06200c2b52cdc168fdf860e445b2f0e64c3a2315cf818b1d460dfaa1
MD5 4111ec1fe0c8109599a647248bb81e27
SHA1 1c7fb86b36f794a4d523990bb77ed3588250cc0f
SHA512 6d0e3ba9a0baa27ce3821aa7bb96f7cb4a28fdc61d625b0258b92e24947e8ac0dcb85a492d2bccae548bc78cd57c30551e9a19d55c63a0847e35df20e2712711
SSDEEP 96:zuXh3NkCEBHfWhs2p428Frh/cInURoDotoN5XoDKBDZC661ZbWlLmTTJlpa:zWh3NbvIlooDUauaDZ7lLuE
TLSH
T1DC918326A5B4BA374DF2D949B8453B07A9E05027C4D46FA9D9EC0F0C02EB3D81342D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Local State
Size 4KB
SHA256 8d4516133bba6b50ac1c6222a433f09bc145b73ccb17bfc2fbda880850a82cfc
MD5 69b5b069d83ad2db31f569a90f015b24
SHA1 c9d287c01fff59d5eed368704fc6c5a3f8fd5b6f
SHA512 d2a3919f5c52893152c6cd051258a09d82b7bda19177c6ec13a22fbffbbbeae5bc69c5b767a70306dfc6c22f6dd2b769d0c6a1e2f5aad91ebe3e7198ae91aab6
SSDEEP 96:zuXh3NkCEBHfWhs2p428Frh/cInURoDotoN5XoDKBDZC661ZbWlLmTwlpa:zWh3NbvIlooDUauaDZ7lLu9
TLSH
T1B0918426A5B4BA334DF2D949B8453B07A9E05027D4D46FA9D9EC0F0C02EB3DC1342D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Local State
Size 4KB
SHA256 373d58102add7729800696d7468f15dc28af9199bd76bbcf4241f5b30a1f78fd
MD5 32aa8fd04232ad5c9e7b4c06223c5441
SHA1 beacf73e7e33c90eb84f74f9a6e522ffaba0bd4b
SHA512 5954dacafc4144259c05b738c4e910c983ee315fddeff9b6cb9be6565e3d1731f39d52db27a4b9a36cb085602b6fffef2227a5c202a42ad8e970d5bdaabbc56a
SSDEEP 96:zuXeNkCEdfWhs2px8Frh/cInURLl8DotoN5XlDQBDZC661ZbWlLmioXApa:zWeNbLyoiDUadUDZ7lLPgV
TLSH
T166919426A5B4BA774CF2D549B8493B07A9E05023D4D46FA9D9ED0F0C42EB3EC1342D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe597bdd.TMP

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Local State~RFe597bdd.TMP
Size 1KB
SHA256 dd5e0716cc876160f49e1983ac17130318c38978d9354e93026ac2fdf2afe6e2
MD5 220f090bd938ccecfe5e624bbcd6cfd6
SHA1 18955f4e6339ce52d31147671719ee72f264e402
SHA512 ae519447934d4787aff1c65f1ec2a3750182ec3ff78e655c2450600afcf8afd42a18639d14535a326144121fca4ae489068a09b50f549e4a4b8f161d7cca443f
TLSH
T15A217273E0E47B72A8905440F115F78F1CA0502980104E08E5EE561902F72ECD223D23
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\ShaderCache\index
Size 256KB
SHA256 fa198783377ce1b038a9201d50feedd8d5fd943037275faf975c5da329b4c6dd
MD5 206ab88c2467ac58854837f037b45223
SHA1 7b73092370c05b85ff0e672378f8481d46469161
SHA512 22cee90f384a7a1e12cc7c1f1e6bfd8168a808d361e4df4321b24d174ec5e244fa057995291fabe0ad37f6e6c1e7d9c04a0f372f52cc8322a39223ecb0697c4f
SSDEEP 3:LsOllllklkXl6Klll:LsUlP6K/
TLSH
T19944040503405005C70103704040C3D05354C0441555C307001555145C03FC44F41041
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\MechvibesDx\mechvibes-dx.exe.WebView2\EBWebView\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn4B3E.tmp\System.dll
Size 12KB
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
TLSH
T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsn4B3E.tmp\modern-wizard.bmp
Size 25KB
SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn4B3E.tmp\nsDialogs.dll
Size 9KB
SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
MD5 6c3f8c94d0727894d706940a8a980543
SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
TLSH
T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsn4B3E.tmp\nsis_tauri_utils.dll
Size 29KB
SHA256 5ef1f010f9a8be4ffe0913616f6c54acf403ee0b83d994821ae4b6716ec1d266
MD5 c5bd51b72a0de24a183585da36a160c7
SHA1 f99a50209a345185a84d34d0e5f66d04c75ff52f
SHA512 1349027b08c7f82e17f572e035f224a46f33f0a410526cf471b22a74b7904b54d1befb5ea7f23c90079605d4663f1207b8c81a45e218801533d48b6602a93dbc
SSDEEP 768:jnvg/4R1C7063G5I1CabuqcFKpnq0jdhK7W+q:jvu4RM2WCqYMX/
TLSH
T139D23818FDC83EBAD6DF1172281C4A6E559FC8080754CEABD3B15E62D4A63722EE510F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2176-310-0x00007FFC2B5A0000-0x00007FFC2B5A1000-memory.dmp

Download

memory/2972-205-0x00007FFC2B5A0000-0x00007FFC2B5A1000-memory.dmp

Download

memory/4696-280-0x00007FFC2A900000-0x00007FFC2A901000-memory.dmp

Download

memory/4696-261-0x00007FFC2ACB0000-0x00007FFC2ACB1000-memory.dmp

Download