EchoTrail

Msty 1.9.2

by CloudStack, LLCinstaller signed by Ashok GelalValid

Sources: observed in the EchoTrail lab on Windows 11 on November 13, 2026.

The install

Installer
msty_x64.exe
Installer type
nsis
Installed through
a type-detected silent switch
Install directory
C:\Users\lab\AppData\Local\Programs
Launched
Msty.exe
Windows
Windows 11
Date
November 13, 2026
Executables dropped
120

installer sha256 dd5ff1833894f7b1422ff576477e4bb5081c0410dd9015661c234d8e3e05d2b1

The lab used Msty for 3 minutes, changed a setting, then rebooted and watched what came back.

On screen

Frames from the lab session, cropped to Msty's own windows.

Msty 1.9.2: First window
First window. Msty welcome screen is shown with options Setup Local AI and Add Remote Model Provider, and no Edge overlay is visible now.
Msty 1.9.2: Main window
Main window. Msty welcome screen is shown after the Settings dialog was closed, with a Settings tooltip near the gear icon.
Msty 1.9.2: Settings
Settings. Msty Settings dialog is open on the General tab with language, RTL, chat title and rendering engine options.
Msty 1.9.2: Worth a look
Worth a look. A Microsoft Edge first-run 'Make Microsoft Edge your own' theme window is shown over the Msty window, with a Continue button.
Msty 1.9.2: Worth a look
Worth a look. A Microsoft Edge first-run overlay 'Get to your favorite sites faster' is shown above the Msty window, with unchecked site options and a Continue button.
Msty 1.9.2: Worth a look
Worth a look. An Edge first-run screen titled 'Sign in to sync your browsing data' is shown over the Msty window, offering Sign in or Continue without signing in.
Msty 1.9.2: Worth a look
Worth a look. An Edge first-run sign-in screen appears over the Msty window, offering Sign in or Continue without signing in; the harness refused the latter earlier.

What it dropped

Executables

  • installer.exesigned by CN=Ashok Gelal, O=Ashok Gelal, L=Powell, S=Ohio, C=US, PostalCode=43065Valid
    C:\Users\lab\AppData\Local\msty-updater\installer.exe
    sha256 dd5ff1833894f7b1422ff576477e4bb5081c0410dd9015661c234d8e3e05d2b1
  • msty.exesigned by CN=Ashok Gelal, O=Ashok Gelal, L=Powell, S=Ohio, C=US, PostalCode=43065Validran during the lab session
    C:\Users\lab\AppData\Local\Programs\Msty\Msty.exe
    sha256 a730a6e86a52994e5116ba0f85a837962007a56296abdd65d50b4e3f3bbbe9ea
  • electron.exe
    C:\Users\lab\AppData\Local\Programs\Msty\resources\app.asar.unpacked\node_modules\electron\dist\electron.exe
    sha256 a9a02dadcd68abd31d4ade50d54fe0e5399229008858dd4f667b9b9d659ba1c1
  • msty-local.exesigned by CN=Ashok Gelal, O=Ashok Gelal, L=Powell, S=Ohio, C=US, PostalCode=43065Validran during the lab session
    C:\Users\lab\AppData\Roaming\Msty\msty-local.exe
    sha256 b32c051778333146486dc640fc04b54051b1237d942e9bd71e68e5e6dcd194d1
  • esbuild.exe
    C:\Users\lab\AppData\Local\Programs\Msty\resources\app.asar.unpacked\node_modules\@nuxt\fonts\node_modules\@esbuild\win32-x64\esbuild.exe
    sha256 53ad5d1c5a1f57836bd16c786d7fcf4f57e4d07b7c78c7bde0d4c71271432e4c
  • esbuild.exe
    C:\Users\lab\AppData\Local\Programs\Msty\resources\app.asar.unpacked\node_modules\@esbuild\win32-x64\esbuild.exe
    sha256 88814951689fa117bbac79e0c252e1d67aa5830cf14514a3e73cbe5541cff6b9
  • libglesv2.dllNotSigned
    C:\Users\lab\AppData\Local\Programs\Msty\libGLESv2.dll
    sha256 586a04652de1a392e8f0c4cc69ece9b7370be4953b9fa4019d09207578324e42
  • libglesv2.dllNotSigned
    C:\Users\lab\AppData\Local\Programs\Msty\resources\app.asar.unpacked\node_modules\electron\dist\libGLESv2.dll
    sha256 586a04652de1a392e8f0c4cc69ece9b7370be4953b9fa4019d09207578324e42
  • vk_swiftshader.dllNotSigned
    C:\Users\lab\AppData\Local\Programs\Msty\vk_swiftshader.dll
    sha256 809f1914bee43aeb4bc45259893cbd50bdb4c2c54f4381e9ead2cffc048268f6
  • vk_swiftshader.dllNotSigned
    C:\Users\lab\AppData\Local\Programs\Msty\resources\app.asar.unpacked\node_modules\electron\dist\vk_swiftshader.dll
    sha256 809f1914bee43aeb4bc45259893cbd50bdb4c2c54f4381e9ead2cffc048268f6
  • d3dcompiler_47.dllsigned by CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USValid
    C:\Users\lab\AppData\Local\Programs\Msty\d3dcompiler_47.dll
    sha256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
  • d3dcompiler_47.dllsigned by CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=USValid
    C:\Users\lab\AppData\Local\Programs\Msty\resources\app.asar.unpacked\node_modules\electron\dist\d3dcompiler_47.dll
    sha256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
  • ffmpeg.dllNotSigned
    C:\Users\lab\AppData\Local\Programs\Msty\ffmpeg.dll
    sha256 cd0ccc24489532a6c6e977ea4d25250d9850a395b51c46f90b47ed21ef8044ba
  • ffmpeg.dllNotSigned
    C:\Users\lab\AppData\Local\Programs\Msty\resources\app.asar.unpacked\node_modules\electron\dist\ffmpeg.dll
    sha256 cd0ccc24489532a6c6e977ea4d25250d9850a395b51c46f90b47ed21ef8044ba

What it talked to

Destinations

  • 104.21.77.176:443asked by msty.exe2 connections