Overview

overview

7

Static

static

3

meccha-cam....4.exe

windows10-2004-x64

7

meccha-cam....4.exe

windows11-ltsc_2024-x64

7

Analysis

  • user interaction
    yes
  • max time kernel
    155s
  • max time network
    172s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/07/2026, 08:45

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    meccha-camouflage-v1.6.0-beta.4.exe
  • Size 334.3MB
  • Sample260707-knvs9abs8q
  • SHA256 e33053e351e2c2a0bfe9da421e1195ce5eb868aa9b359fe8a8edf3404e3847c6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoverytrojan

Malware Config

Signatures

  • Executes dropped EXE 10 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
    defense_evasiontrojan
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Checks system information in the registry 2 TTPs 2 IoCs

    System information is often read in order to detect sandboxing environments.

  • Drops file in Windows directory 8 IoCs
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 12 IoCs
  • System policy modification 1 TTPs 1 IoCs
    defense_evasion

Processes

  • C:\Users\Admin\AppData\Local\Temp\meccha-camouflage-v1.6.0-beta.4.exe
    "C:\Users\Admin\AppData\Local\Temp\meccha-camouflage-v1.6.0-beta.4.exe"
    1⤵
    • Loads dropped DLL
    • Checks whether UAC is enabled
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3184
    • C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe
      "C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=meccha-camouflage-v1.6.0-beta.4.exe --webview-exe-version=1.0.0+7aa5efe9449eadba9922c6deda0d5845ab70284b --user-data-dir="C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --mojo-named-platform-channel-pipe=3184.5420.136979093203164856 /pfhostedapp:a40d4ffaea34af2cf8ee30810b91918b2fe59674
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks system information in the registry
      • Drops file in Windows directory
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of WriteProcessMemory
      • System policy modification
      PID:5288
      • C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe
        C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView /prefetch:4 /pfhostedapp:a40d4ffaea34af2cf8ee30810b91918b2fe59674 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=150.0.7871.47 --annotation=exe=C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=150.0.4078.48 --initial-client-data=0x180,0x184,0x188,0x15c,0x190,0x7ff936aedcf0,0x7ff936aedcfc,0x7ff936aedd08
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4476
      • C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe
        "C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView" --webview-exe-name=meccha-camouflage-v1.6.0-beta.4.exe --webview-exe-version=1.0.0+7aa5efe9449eadba9922c6deda0d5845ab70284b --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --startup-read-main-dll --metrics-shmem-handle=1596,i,3018978819382864106,4811904578801833665,262144 --field-trial-handle=1940,i,2485011967538766635,2595193212894010171,262144 --variations-seed-version --pseudonymization-salt-handle=1968,i,3219721248735023489,6129708358488258290,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1936 /prefetch:2 /pfhostedapp:a40d4ffaea34af2cf8ee30810b91918b2fe59674
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4484
      • C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe
        "C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView" --webview-exe-name=meccha-camouflage-v1.6.0-beta.4.exe --webview-exe-version=1.0.0+7aa5efe9449eadba9922c6deda0d5845ab70284b --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --startup-read-main-dll --metrics-shmem-handle=1848,i,3146122735621092073,16986689194397972805,524288 --field-trial-handle=1940,i,2485011967538766635,2595193212894010171,262144 --variations-seed-version --pseudonymization-salt-handle=1968,i,3219721248735023489,6129708358488258290,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=3936 /prefetch:11 /pfhostedapp:a40d4ffaea34af2cf8ee30810b91918b2fe59674
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2136
      • C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe
        "C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView" --webview-exe-name=meccha-camouflage-v1.6.0-beta.4.exe --webview-exe-version=1.0.0+7aa5efe9449eadba9922c6deda0d5845ab70284b --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--expose-gc --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --ssd-no-pressure-read-main-dll --metrics-shmem-handle=3364,i,4272452190156097933,6093248628272303161,2097152 --field-trial-handle=1940,i,2485011967538766635,2595193212894010171,262144 --variations-seed-version --pseudonymization-salt-handle=1968,i,3219721248735023489,6129708358488258290,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=4044 /pfhostedapp:a40d4ffaea34af2cf8ee30810b91918b2fe59674 /prefetch:1
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:548
      • C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe
        "C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView" --webview-exe-name=meccha-camouflage-v1.6.0-beta.4.exe --webview-exe-version=1.0.0+7aa5efe9449eadba9922c6deda0d5845ab70284b --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --startup-read-main-dll --metrics-shmem-handle=2344,i,7174991175179050645,7220317487798058015,524288 --field-trial-handle=1940,i,2485011967538766635,2595193212894010171,262144 --variations-seed-version --pseudonymization-salt-handle=1968,i,3219721248735023489,6129708358488258290,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3988 /prefetch:13 /pfhostedapp:a40d4ffaea34af2cf8ee30810b91918b2fe59674
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:5192
      • C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe
        "C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView" --webview-exe-name=meccha-camouflage-v1.6.0-beta.4.exe --webview-exe-version=1.0.0+7aa5efe9449eadba9922c6deda0d5845ab70284b --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --ssd-no-pressure-read-main-dll --metrics-shmem-handle=3652,i,16337453549219381948,6597641548789328030,524288 --field-trial-handle=1940,i,2485011967538766635,2595193212894010171,262144 --variations-seed-version --pseudonymization-salt-handle=1968,i,3219721248735023489,6129708358488258290,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=5008 /prefetch:14 /pfhostedapp:a40d4ffaea34af2cf8ee30810b91918b2fe59674
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:5364
      • C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe
        "C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView" --webview-exe-name=meccha-camouflage-v1.6.0-beta.4.exe --webview-exe-version=1.0.0+7aa5efe9449eadba9922c6deda0d5845ab70284b --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --skip-read-main-dll --metrics-shmem-handle=5016,i,4070343526095453891,14309838512513741844,524288 --field-trial-handle=1940,i,2485011967538766635,2595193212894010171,262144 --variations-seed-version --pseudonymization-salt-handle=1968,i,3219721248735023489,6129708358488258290,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4956 /prefetch:14 /pfhostedapp:a40d4ffaea34af2cf8ee30810b91918b2fe59674
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:5480
      • C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe
        "C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView" --webview-exe-name=meccha-camouflage-v1.6.0-beta.4.exe --webview-exe-version=1.0.0+7aa5efe9449eadba9922c6deda0d5845ab70284b --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --ssd-no-pressure-read-main-dll --metrics-shmem-handle=4928,i,6169226322766979907,3967168652405734777,524288 --field-trial-handle=1940,i,2485011967538766635,2595193212894010171,262144 --variations-seed-version --pseudonymization-salt-handle=1968,i,3219721248735023489,6129708358488258290,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=5008 /prefetch:14 /pfhostedapp:a40d4ffaea34af2cf8ee30810b91918b2fe59674
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:5796
      • C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe
        "C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView" --webview-exe-name=meccha-camouflage-v1.6.0-beta.4.exe --webview-exe-version=1.0.0+7aa5efe9449eadba9922c6deda0d5845ab70284b --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAQgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --skip-read-main-dll --metrics-shmem-handle=5008,i,1115343206438839061,4643524015074227942,262144 --field-trial-handle=1940,i,2485011967538766635,2595193212894010171,262144 --variations-seed-version --pseudonymization-salt-handle=1968,i,3219721248735023489,6129708358488258290,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=5044 /prefetch:10 /pfhostedapp:a40d4ffaea34af2cf8ee30810b91918b2fe59674
        3⤵
        • Executes dropped EXE
        PID:2884

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        crash-20260707-094830-743-3184-9c191d0383564d6e855ab37cae5d808b.json
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\diagnostics\crash-20260707-094830-743-3184-9c191d0383564d6e855ab37cae5d808b.json
        • Size 1KB
        • SHA256 e676fcf0d2d1010dfb4c7948123fc96110ba0f1da9dd0fa495b8e3ee50ccde54
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        crash-20260707-094908-812-3184-9d0c43a0b4204ed4bc7bdfb755df54ab.json
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\diagnostics\crash-20260707-094908-812-3184-9d0c43a0b4204ed4bc7bdfb755df54ab.json
        • Size 1KB
        • SHA256 14e3d0705a19ab235650b231fa4df5ad4a894b170b4ab1ab7b34a502a3d542fe
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        crash-20260707-094942-896-3184-a85f9131660d49ebb7073e21da37241f.json
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\diagnostics\crash-20260707-094942-896-3184-a85f9131660d49ebb7073e21da37241f.json
        • Size 1KB
        • SHA256 d3bc9a532d4b479f0cc4e3dfd77124ddbc0e8a88bb66990701fefb52a7e98f70
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        crash-20260707-094954-936-3184-502d85adae304f36aa95454f34045ebf.json
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\diagnostics\crash-20260707-094954-936-3184-502d85adae304f36aa95454f34045ebf.json
        • Size 1KB
        • SHA256 8aca8a1441215f8ac7db8f1bdf7d9ef32fb01730679c9104e2e9861cf31d2a60
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        crash-20260707-095006-935-3184-517a34e38a6b40b084e4d47ec9dd5d36.json
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\diagnostics\crash-20260707-095006-935-3184-517a34e38a6b40b084e4d47ec9dd5d36.json
        • Size 1KB
        • SHA256 316a9f5d7bf10b00793f89de89424d990a9d29c05f6a324f491d3b051a1b48b7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        startup-20260707-094806-3184.log
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\diagnostics\startup-20260707-094806-3184.log
        • Size 6KB
        • SHA256 817d47cec047c77cbee0f4a0c826157155621d072e94e37494ccf2fb676bf6c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        startup-20260707-094806-3184.log
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\diagnostics\startup-20260707-094806-3184.log
        • Size 1KB
        • SHA256 1c69650896fb8661c43bedfc43a52b60795e05f8bf16135ebfcf914efae4b71d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        EmbeddedBrowserWebView.dll
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\EBWebView\x64\EmbeddedBrowserWebView.dll
        • Size 8.5MB
        • SHA256 50cb4d7d3cdae662f9fa934a63c9becb3f3f5817768fff6b09ab6e21ec6bf298
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-US.pak
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\Locales\en-US.pak
        • Size 866KB
        • SHA256 450cf4bbab1bed620860598fdd14c0404cf3a0db867de249739aeba9b92f8fcb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        manifest.json
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\MEIPreload\manifest.json
        • Size 238B
        • SHA256 44844cf3dde6e80087ae0e6bf0d9326d7ef7d23326d24ac83af0850be26923d2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Advertising
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\Trust Protection Lists\Mu\Advertising
        • Size 19KB
        • SHA256 4b721b3f81b61a27f7e533b374b48a97226dafcb3f0a545e1b433b05768fa697
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Analytics
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\Trust Protection Lists\Mu\Analytics
        • Size 4KB
        • SHA256 faac13f0c919c6181a560f0ec71c8cbf99ff408e604c6bfddb75efd50fe5f469
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Content
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\Trust Protection Lists\Mu\Content
        • Size 4KB
        • SHA256 2289d8b38b2c6ed9de2ced9b564a5de4cc210d3f72669f115418e99ffed4ed81
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Cryptomining
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\Trust Protection Lists\Mu\Cryptomining
        • Size 668B
        • SHA256 1e92781e88ee786bf6d1d5cb71d467a92fe7f281f2d1e548524bf119d7ddc700
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Fingerprinting
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\Trust Protection Lists\Mu\Fingerprinting
        • Size 1KB
        • SHA256 c332fbfbb43dbc970b08834222ec731d35925b7de3d6b0890a54d1a307497298
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Other
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\Trust Protection Lists\Mu\Other
        • Size 34B
        • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
        • MD5 SHA1 SHA512
        Submit Download

        Social
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\Trust Protection Lists\Mu\Social
        • Size 754B
        • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Advertising
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\Trust Protection Lists\Sigma\Advertising
        • Size 20KB
        • SHA256 e0b69ec450c3c060a0beee9bde49c6a57c4e0c62f7f369220909e954c5946390
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        manifest.json
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\Trust Protection Lists\manifest.json
        • Size 132B
        • SHA256 18e9ece26c6a3771eab283c45d087b6e8f0b6ba18c496e96d352642100298bbe
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        manifest.json
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\WidevineCdm\manifest.json
        • Size 1001B
        • SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        dxcompiler.dll
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\dxcompiler.dll
        • Size 19.5MB
        • SHA256 0a0b274d5557abdf56bee9f9633e40979de5044e3aafd0aef7febb1b5fad8c2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icudtl.dat
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\icudtl.dat
        • Size 11.9MB
        • SHA256 4b6cba6ec35679598bb6a9e2b6e8871a38561bad8903cd6d1e37d2d2ec7e2318
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedge_100_percent.pak
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedge_100_percent.pak
        • Size 1.2MB
        • SHA256 cfb63ade334c827fbfc36d4b049cacf98822b566b193d47e3362876347188454
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedge_200_percent.pak
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedge_200_percent.pak
        • Size 1.9MB
        • SHA256 9a581c7386499a2920b2bb6f37959edbe55064048062b7e6c5536e0fcf0b86d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedge_elf.dll
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedge_elf.dll
        • Size 3.8MB
        • SHA256 150c4b8045ea3ee8bd9a1a8aa0475354f13609974fc45d5e426572ab19a2b753
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msedgewebview2.exe
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\msedgewebview2.exe
        • Size 4.2MB
        • SHA256 30428a9075e5706b5e4a77e324b4331326566cda027f49a8922089733c728859
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        oneauth.dll
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\oneauth.dll
        • Size 5.7MB
        • SHA256 df9367ab3611f6853579c67e15ceb0d210615a06f783fd4b9314bb95d7882d41
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resources.pak
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\package-assets\e2b6c67695e98c0a\webview2\resources.pak
        • Size 33.7MB
        • SHA256 d0b42548a82ebe353c0038a6e738bcc399f2eb7f76ac4fba5b0ff2977ba7aa60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        0668616f-ef58-4075-928c-1c03bc69d338.tmp
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\0668616f-ef58-4075-928c-1c03bc69d338.tmp
        • Size 1KB
        • SHA256 1ffe98f9b39e85960542e47af91e822071dc902a769927314f8f45e64764c343
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        settings.dat
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Crashpad\settings.dat
        • Size 288B
        • SHA256 2267466ab6141da41fd929a88751d125691c801b9fc6d0e081e8d086c25803b7
        • MD5 SHA1 SHA512
        Submit Download

        settings.dat
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Crashpad\settings.dat
        • Size 288B
        • SHA256 3bc88fbda2331e62b4cf422c2b7e7d14ec1bd59d7a90a60d7cfd3cb6f5aab5f3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        throttle_store.dat
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Crashpad\throttle_store.dat
        • Size 20B
        • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
        • MD5 SHA1 SHA512
        Submit Download

        1f6c3226-8060-4ae2-8fb0-65b9d2df8564.tmp
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Default\1f6c3226-8060-4ae2-8fb0-65b9d2df8564.tmp
        • Size 7KB
        • SHA256 e005e307fb92c7daa217372ba3f87907695d0bbc670cd10aa7cfafdf47f4a20b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        the-real-index
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Default\Code Cache\js\index-dir\the-real-index
        • Size 72B
        • SHA256 59f866009c76c7e8d088369bfefc018fad66251319f5bac4e8937a02da61bdfe
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        the-real-index
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Default\Code Cache\js\index-dir\the-real-index
        • Size 48B
        • SHA256 d1c3f0181144a6b272537646aaf91d595cb07749b5ca00bf12e4cbab15a8ff9a
        • MD5 SHA1 SHA512
        Submit Download

        MANIFEST-000001
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Default\Extension Rules\MANIFEST-000001
        • Size 41B
        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
        • MD5 SHA1 SHA512
        Submit Download

        47589a8b-e94b-4a1a-b419-fbc3a578290c.tmp
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Default\Network\47589a8b-e94b-4a1a-b419-fbc3a578290c.tmp
        • Size 2B
        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
        • MD5 SHA1 SHA512
        Submit Download

        Network Persistent State
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Default\Network\Network Persistent State
        • Size 301B
        • SHA256 311183bc2e35e511e032bf485bcaa13553e64cf2714d16c32d4333a5a9b772ae
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        c18749c7-beff-45af-ae9a-fb782291a592.tmp
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Default\Network\c18749c7-beff-45af-ae9a-fb782291a592.tmp
        • Size 59B
        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Preferences
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Default\Preferences
        • Size 7KB
        • SHA256 ab22380bcda69b5ce2f6bcebd193d7b49e5cfaf7f6af69cbb857e9f5fca566ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Preferences
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Default\Preferences
        • Size 7KB
        • SHA256 42af8993acefbabb84302056eb3d407a8ae6d8f1a21cd16029d262c86e7f0745
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Preferences
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Default\Preferences
        • Size 8KB
        • SHA256 b7ae35bda85e768cf3f5777b5ec05b1cfbc8bbf44c7bd7f679a0c82ca8269222
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        CURRENT
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Default\Site Characteristics Database\CURRENT
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512
        Submit Download

        Edge-Local-State-Tmp-82078cd7-95bb-49ed-aa12-b4ee063a1813.tmp
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Edge-Local-State-Tmp-82078cd7-95bb-49ed-aa12-b4ee063a1813.tmp
        • Size 5KB
        • SHA256 c065d9d8f14de8eb60eb49fd363edfe156ae88be87030369173aab57d7473f68
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        data_0
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\GrShaderCache\data_0
        • Size 8KB
        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        data_1
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\GrShaderCache\data_1
        • Size 264KB
        • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        data_2
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\GrShaderCache\data_2
        • Size 8KB
        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        data_3
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\GrShaderCache\data_3
        • Size 8KB
        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Local State
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Local State
        • Size 2KB
        • SHA256 8e3194c40016c044f82c2373053e4c620a7e37eb0554c425d54fa41343c23c99
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Local State
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Local State
        • Size 5KB
        • SHA256 beb24d80930ef880bd0021fac88ab52bd4eba3282819a311fff7c5c5eb295de4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Local State
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Local State
        • Size 2KB
        • SHA256 4502a1b1b3a1f9890c2ab360a3c062bc8a0ea9ffd9d854eefafb52150e6b5ffb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Local State
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\Local State
        • Size 4KB
        • SHA256 36bb91a49f4556b8da79eedff3eac05c2579779d045a9d6992e5833d9582f789
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metadata.json
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\component_crx_cache\metadata.json
        • Size 348B
        • SHA256 ba9ecfaf371f336f96d69880be9f35bcbb7efbc9b2e2c7e540b076eb477c1156
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        metadata.json
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\component_crx_cache\metadata.json
        • Size 124B
        • SHA256 5ae2e35c18f7871be55e60f665ec690a0f2561bd5d360c0081fe3490dd54acb3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        metadata.json
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\component_crx_cache\metadata.json
        • Size 236B
        • SHA256 fad2f7d861a65bba75cb0839e2f99414ba5c99a110d6f9880784e46a7f9b5645
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        metadata.json
        • Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0-beta.4\runtime\webview2-user-data\EBWebView\extensions_crx_cache\metadata.json
        • Size 13B
        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
        • MD5 SHA1 SHA512
        Submit Download

        MecchaCamouflage.Controller.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\MecchaCamouflage.Controller.dll
        • Size 151KB
        • SHA256 a17b67fba8630dd9615863cc8a59c812c8b3fa899e494e17395f5a6840009503
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MecchaCamouflage.Core.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\MecchaCamouflage.Core.dll
        • Size 96KB
        • SHA256 d6381a9620cd62839590b4079ac9f52d9f8f626473fb2cef4a6e7866ba7c193f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Win32.SystemEvents.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\Microsoft.Win32.SystemEvents.dll
        • Size 113KB
        • SHA256 4f128a65a31239ec084cc39d02a1a0e8cfca92a19032d282c071c09a9a41e4c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.Concurrent.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Collections.Concurrent.dll
        • Size 197KB
        • SHA256 0d1a713952d044f3f707a6d0b7b03bd64d410d4866d55cd0c172aea5c315387d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.NonGeneric.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Collections.NonGeneric.dll
        • Size 101KB
        • SHA256 79e04d080b8c3eb92bd75d3358939b2e0adf2cad2639654ccc3b9722dde2ba14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.Specialized.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Collections.Specialized.dll
        • Size 101KB
        • SHA256 5393620f914b78e5b40caa4d04bc5340fe5af5d23e288f1400d531cc9708fd75
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Collections.dll
        • Size 289KB
        • SHA256 e8a4b43005fff65121433b298659322410a69bc02bcf44b223f1ed282a3a0335
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.EventBasedAsync.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.ComponentModel.EventBasedAsync.dll
        • Size 45KB
        • SHA256 cb3d56e9f47d93ef5d71d9e4c5fbaf66d36d360d652772c82461154785329247
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.ComponentModel.Primitives.dll
        • Size 77KB
        • SHA256 cd2ba2cd76736c694e681b16b637bd6438d8bbda85017097efe4f3434ceaea3e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.TypeConverter.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.ComponentModel.TypeConverter.dll
        • Size 749KB
        • SHA256 2028ce8bddd7438ae07851921dba921c4bec2f2554038658aca4f9a58a24a16d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.ComponentModel.dll
        • Size 29KB
        • SHA256 aa146801ec84f20bdd0ba2f9114d868b8dc5723b75c7052d73dc16482eef7d4a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.Process.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Diagnostics.Process.dll
        • Size 321KB
        • SHA256 3e1e85eb09b1e7f23c5a26e40f725dfe95810e27b7d038fdfbf24664948de5d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Drawing.Common.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Drawing.Common.dll
        • Size 901KB
        • SHA256 565c21208548ec4d366b9b4c74d142f20acf5ea1c99b8aacdb5e07d6078908c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Drawing.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Drawing.Primitives.dll
        • Size 129KB
        • SHA256 f3433ee65bd917f3a7053db0c82b279e497b20d21e7315c30ae0ea7db7988679
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.IO.Pipelines.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.IO.Pipelines.dll
        • Size 185KB
        • SHA256 337f64b658e93192560bfb6f1a0debf152f02263c39aed68636181df48921086
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Linq.Parallel.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Linq.Parallel.dll
        • Size 757KB
        • SHA256 9f3559634e8f812d6571b1e1cfe8199e7356b92c211d333f62d604395466c3b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Linq.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Linq.dll
        • Size 681KB
        • SHA256 2142f1e852b8edbf8dceddb575177295dde02c8a368e716f0ca0c902d42bfe03
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Memory.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Memory.dll
        • Size 157KB
        • SHA256 8a9eb705fe5a69e936e49f86b507cbcb8dd1d2889f925485b5cd412deaa8dc50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.CoreLib.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Private.CoreLib.dll
        • Size 15.3MB
        • SHA256 dc1945de746f94987ec705a1f27d512abf72a41a1da37e414d1951e4e823037a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Uri.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Private.Uri.dll
        • Size 249KB
        • SHA256 5eba7dfb1d8a639c918ea182a15bd35256a11f9853003d39e7ad757ae08d4fca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Windows.Core.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Private.Windows.Core.dll
        • Size 1.8MB
        • SHA256 901887bf2ef710a98611271877e9e81c6f393906e3360d1386e3f512c538d585
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Windows.GdiPlus.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Private.Windows.GdiPlus.dll
        • Size 417KB
        • SHA256 5ff73fb9161809b831f7bdcf30526e3f88e248ad16d06e48c50c76b507e8b295
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.InteropServices.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Runtime.InteropServices.dll
        • Size 109KB
        • SHA256 96370a9241de81b737f80a582a05baaf20a5d4746f3cbe5cbdb387ffc5094d75
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Security.Cryptography.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Security.Cryptography.dll
        • Size 2.4MB
        • SHA256 56e43c3e486d790c64eeac87a5537dd1510b97830c87f062bc14eabbe82f95be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Text.Encodings.Web.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Text.Encodings.Web.dll
        • Size 121KB
        • SHA256 a4807681c163b2e62dec0f0ff1b288ae2392fec51a995bb479b16c29760ed023
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Text.Json.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Text.Json.dll
        • Size 1.8MB
        • SHA256 1d2e6b506ace3fd86cc9a914040fe309788d8210beec7bf8cbfb62cf67d5772d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Threading.Tasks.Parallel.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Threading.Tasks.Parallel.dll
        • Size 129KB
        • SHA256 d2d14c51694a018189e67ab4d1116982ba78e8d3418377d574713c2687194831
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Threading.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Threading.dll
        • Size 81KB
        • SHA256 89a81656b39f93950f4ab2882b7ea350892edd7b6074ad67179ecc73ca01a190
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Windows.Forms.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Windows.Forms.Primitives.dll
        • Size 3.5MB
        • SHA256 3fb4a95941e63ca12517a46a9c48448158028246173b1730b774ca9044e2bada
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Windows.Forms.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\System.Windows.Forms.dll
        • Size 13.1MB
        • SHA256 de94e4ca05769cc090fd7be09c5a3132327e26a91b34dbb02467433dec4a2184
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WebView2Loader.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0-beta.4\XMIaRO_q6uez\WebView2Loader.dll
        • Size 159KB
        • SHA256 12f7708910e1aac5cc9ac43603d122f1d2e770ae2651830a07ef8b3117f28c55
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/548-1339-0x00007FF958AD0000-0x00007FF958AD1000-memory.dmp
        Download

        memory/2884-1839-0x0000028C94560000-0x0000028C94561000-memory.dmp
        Download

        memory/2884-1845-0x0000028C94560000-0x0000028C94561000-memory.dmp
        Download

        memory/2884-1846-0x0000028C94560000-0x0000028C94561000-memory.dmp
        Download

        memory/2884-1849-0x0000028C94560000-0x0000028C94561000-memory.dmp
        Download

        memory/2884-1848-0x0000028C94560000-0x0000028C94561000-memory.dmp
        Download

        memory/2884-1847-0x0000028C94560000-0x0000028C94561000-memory.dmp
        Download

        memory/2884-1844-0x0000028C94560000-0x0000028C94561000-memory.dmp
        Download

        memory/2884-1837-0x0000028C94560000-0x0000028C94561000-memory.dmp
        Download

        memory/4484-1338-0x00007FF958AD0000-0x00007FF958AD1000-memory.dmp
        Download