e1e752b8f0ffe01d013c9635a3c3dbf9dc673bd5684ad75bed3192b2faaf8a07

Analysis

user interaction
yes
max time kernel
45s
max time network
51s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/07/2026, 22:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
meccha-camouflage-v1.6.0.exe
Size 52.9MB
Sample260716-2tpb4afv9j
SHA256 e1e752b8f0ffe01d013c9635a3c3dbf9dc673bd5684ad75bed3192b2faaf8a07
MD5 368adc2b9a7b934a1e56967571a629ea
SHA1 cc58bfbb89c18bfd7d488e1b64f470c5bd019463
SHA512 d4afbf89d39f4d1bf9f9572fac68a103986a4223f55c98cfc5ae2d691ee897313c771f2477f54843555b2eb3ef91eb63234528520b7970fb3f3ecf873023d3ea
SSDEEP 1572864:wvKZvG7mctRbAEk5KM0BW84OQf0IM8IRhCya7VND+:wvKAvn9p9Q86IRhE7VND+
TLSH
T12EC71256E2FD00E8D4BBC0B8CA5B4527EBB23455133067EB26A48A652F37BE15E7D310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery trojan

Malware Config

Signatures

Loads dropped DLL 38 IoCs

pid	Process
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	meccha-camouflage-v1.6.0.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2380	msedge.exe
1596	msedge.exe

Checks processor information in registry 2 TTPs 3 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Winword.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	Winword.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	Winword.exe

Enumerates system info in registry 2 TTPs 12 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	Winword.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	Winword.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	Winword.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134287160065801432"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{B9B018DD-6E2C-4BD7-AE1F-CDC17DA3B87B}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-189034102-168398478-1159367937-1000\{9988C7F0-70BC-41C3-BC10-6FA589D24838}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-189034102-168398478-1159367937-1000_Classes\Local Settings	OpenWith.exe

Suspicious behavior: AddClipboardFormatListener 2 IoCs

pid	Process
2788	Winword.exe
2788	Winword.exe

Suspicious behavior: EnumeratesProcesses 9 IoCs

pid	Process
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe
5320	meccha-camouflage-v1.6.0.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3328	msedgewebview2.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe
1240	msedge.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5320	meccha-camouflage-v1.6.0.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
1240	msedge.exe
1240	msedge.exe

Suspicious use of SetWindowsHookEx 7 IoCs

pid	Process
5976	OpenWith.exe
2788	Winword.exe
2788	Winword.exe
2788	Winword.exe
2788	Winword.exe
2788	Winword.exe
2788	Winword.exe

Suspicious use of WriteProcessMemory 59 IoCs

description	pid	Process	procid_target
PID 5320 wrote to memory of 3328	5320	meccha-camouflage-v1.6.0.exe	89
PID 3328 wrote to memory of 5504	3328	msedgewebview2.exe	90
PID 3328 wrote to memory of 4112	3328	msedgewebview2.exe	91
PID 3328 wrote to memory of 4112	3328	msedgewebview2.exe	91
PID 3328 wrote to memory of 4112	3328	msedgewebview2.exe	91
PID 3328 wrote to memory of 4112	3328	msedgewebview2.exe	91
PID 3328 wrote to memory of 3872	3328	msedgewebview2.exe	92
PID 3328 wrote to memory of 4504	3328	msedgewebview2.exe	93
PID 3328 wrote to memory of 4504	3328	msedgewebview2.exe	93
PID 3328 wrote to memory of 4504	3328	msedgewebview2.exe	93
PID 3328 wrote to memory of 5908	3328	msedgewebview2.exe	94
PID 3328 wrote to memory of 5908	3328	msedgewebview2.exe	94
PID 3328 wrote to memory of 5908	3328	msedgewebview2.exe	94
PID 3328 wrote to memory of 5908	3328	msedgewebview2.exe	94
PID 3328 wrote to memory of 5908	3328	msedgewebview2.exe	94
PID 1240 wrote to memory of 964	1240	msedge.exe	97
PID 1240 wrote to memory of 2380	1240	msedge.exe	98
PID 1240 wrote to memory of 3000	1240	msedge.exe	99
PID 1240 wrote to memory of 3000	1240	msedge.exe	99
PID 1240 wrote to memory of 3000	1240	msedge.exe	99
PID 1240 wrote to memory of 6136	1240	msedge.exe	100
PID 1240 wrote to memory of 6136	1240	msedge.exe	100
PID 1240 wrote to memory of 6004	1240	msedge.exe	102
PID 1240 wrote to memory of 6004	1240	msedge.exe	102
PID 1240 wrote to memory of 6004	1240	msedge.exe	102
PID 1240 wrote to memory of 5084	1240	msedge.exe	103
PID 1240 wrote to memory of 5084	1240	msedge.exe	103
PID 1240 wrote to memory of 5084	1240	msedge.exe	103
PID 1240 wrote to memory of 2848	1240	msedge.exe	104
PID 1240 wrote to memory of 2848	1240	msedge.exe	104
PID 1240 wrote to memory of 2848	1240	msedge.exe	104
PID 1240 wrote to memory of 4872	1240	msedge.exe	125
PID 1240 wrote to memory of 4872	1240	msedge.exe	125
PID 1240 wrote to memory of 4872	1240	msedge.exe	125
PID 1240 wrote to memory of 2528	1240	msedge.exe	107
PID 1240 wrote to memory of 2528	1240	msedge.exe	107
PID 1240 wrote to memory of 2744	1240	msedge.exe	108
PID 1240 wrote to memory of 2744	1240	msedge.exe	108
PID 1240 wrote to memory of 3940	1240	msedge.exe	109
PID 1240 wrote to memory of 3940	1240	msedge.exe	109
PID 1240 wrote to memory of 4928	1240	msedge.exe	111
PID 1240 wrote to memory of 5212	1240	msedge.exe	112
PID 1240 wrote to memory of 5212	1240	msedge.exe	112
PID 1240 wrote to memory of 364	1240	msedge.exe	115
PID 3760 wrote to memory of 2548	3760	msedge.exe	116
PID 3760 wrote to memory of 1596	3760	msedge.exe	117
PID 3760 wrote to memory of 412	3760	msedge.exe	118
PID 3760 wrote to memory of 412	3760	msedge.exe	118
PID 3760 wrote to memory of 412	3760	msedge.exe	118
PID 3760 wrote to memory of 3200	3760	msedge.exe	119
PID 3760 wrote to memory of 3200	3760	msedge.exe	119
PID 3760 wrote to memory of 3848	3760	msedge.exe	122
PID 3760 wrote to memory of 4116	3760	msedge.exe	123
PID 3760 wrote to memory of 4116	3760	msedge.exe	123
PID 3760 wrote to memory of 1876	3760	msedge.exe	124
PID 3760 wrote to memory of 1876	3760	msedge.exe	124
PID 3760 wrote to memory of 4872	3760	msedge.exe	125
PID 3760 wrote to memory of 4872	3760	msedge.exe	125
PID 5976 wrote to memory of 2788	5976	OpenWith.exe	129

C:\Users\Admin\AppData\Local\Temp\meccha-camouflage-v1.6.0.exe
"C:\Users\Admin\AppData\Local\Temp\meccha-camouflage-v1.6.0.exe"
1⤵
- Loads dropped DLL
- Checks whether UAC is enabled
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:5320
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=meccha-camouflage-v1.6.0.exe --webview-exe-version=1.0.0+062617767283b592c9fc2164ae8f3fb21d92244c --user-data-dir="C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=5320.4824.14433950714253093920 /pfhostedapp:6b2b8a067dbbe2973a9e4e8d8b174bdb60adb39d
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:3328
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView /prefetch:4 /pfhostedapp:6b2b8a067dbbe2973a9e4e8d8b174bdb60adb39d --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ff987a15fd8,0x7ff987a15fe4,0x7ff987a15ff0
    3⤵
    PID:5504
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView" --webview-exe-name=meccha-camouflage-v1.6.0.exe --webview-exe-version=1.0.0+062617767283b592c9fc2164ae8f3fb21d92244c --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1800 --field-trial-handle=1804,i,591381324670624782,1039022535733336329,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:6b2b8a067dbbe2973a9e4e8d8b174bdb60adb39d
    3⤵
    PID:4112
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView" --webview-exe-name=meccha-camouflage-v1.6.0.exe --webview-exe-version=1.0.0+062617767283b592c9fc2164ae8f3fb21d92244c --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2172 --field-trial-handle=1804,i,591381324670624782,1039022535733336329,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:6b2b8a067dbbe2973a9e4e8d8b174bdb60adb39d
    3⤵
    PID:3872
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView" --webview-exe-name=meccha-camouflage-v1.6.0.exe --webview-exe-version=1.0.0+062617767283b592c9fc2164ae8f3fb21d92244c --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2284 --field-trial-handle=1804,i,591381324670624782,1039022535733336329,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:6b2b8a067dbbe2973a9e4e8d8b174bdb60adb39d
    3⤵
    PID:4504
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView" --webview-exe-name=meccha-camouflage-v1.6.0.exe --webview-exe-version=1.0.0+062617767283b592c9fc2164ae8f3fb21d92244c --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3648 --field-trial-handle=1804,i,591381324670624782,1039022535733336329,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:6b2b8a067dbbe2973a9e4e8d8b174bdb60adb39d /prefetch:1
    3⤵
    PID:5908

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:780

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\Desktop\ProtectSend.xht
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x318,0x7ff98dd5c188,0x7ff98dd5c194,0x7ff98dd5c1a0
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2136,i,8912553131876866157,9632698526819758197,524288 --field-trial-handle=2344,i,12774477305899268322,17842804903127615075,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1956,i,13339586582053075324,8626553332167097456,262144 --field-trial-handle=2344,i,12774477305899268322,17842804903127615075,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2688,i,17477188744271208361,18411518338010924613,524288 --field-trial-handle=2344,i,12774477305899268322,17842804903127615075,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:13
  2⤵
  PID:6136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,15756198522636391788,17322109910128541863,2097152 --field-trial-handle=2344,i,12774477305899268322,17842804903127615075,262144 --variations-seed-version --mojo-platform-channel-handle=3828 /prefetch:1
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3592,i,910978140341414500,9841642876897027637,2097152 --field-trial-handle=2344,i,12774477305899268322,17842804903127615075,262144 --variations-seed-version --mojo-platform-channel-handle=3832 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,8827630600773202671,12937306304308400839,2097152 --field-trial-handle=2344,i,12774477305899268322,17842804903127615075,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:1
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,17136251612144298369,9804246730127594670,2097152 --field-trial-handle=2344,i,12774477305899268322,17842804903127615075,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:9
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3912,i,15878815011532745236,8835740669171371219,524288 --field-trial-handle=2344,i,12774477305899268322,17842804903127615075,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:14
  2⤵
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,16637924071068913971,6449039892434835133,524288 --field-trial-handle=2344,i,12774477305899268322,17842804903127615075,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,18379836767395196699,10232486127105822743,524288 --field-trial-handle=2344,i,12774477305899268322,17842804903127615075,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:14
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,8463975345230845447,16604091892642839544,524288 --field-trial-handle=2344,i,12774477305899268322,17842804903127615075,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:14
  2⤵
  PID:5684
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,8463975345230845447,16604091892642839544,524288 --field-trial-handle=2344,i,12774477305899268322,17842804903127615075,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:14
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6280,i,14358780817123802778,12728001370431370996,524288 --field-trial-handle=2344,i,12774477305899268322,17842804903127615075,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:14
  2⤵
  PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  PID:364

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5776

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x268,0x26c,0x270,0x264,0x288,0x7ff98dd5c188,0x7ff98dd5c194,0x7ff98dd5c1a0
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2172,i,4568199641167549968,17974961767853272122,524288 --field-trial-handle=2468,i,11972271945198845598,17845890353164515960,262144 --variations-seed-version --mojo-platform-channel-handle=2516 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1968,i,16496915629632150284,1697290364327031692,262144 --field-trial-handle=2468,i,11972271945198845598,17845890353164515960,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:2
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2672,i,10855520340911330502,10478694183992660124,524288 --field-trial-handle=2468,i,11972271945198845598,17845890353164515960,262144 --variations-seed-version --mojo-platform-channel-handle=2704 /prefetch:13
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,6474013816099109959,1432612367383333871,524288 --field-trial-handle=2468,i,11972271945198845598,17845890353164515960,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:14
  2⤵
  PID:352
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,6474013816099109959,1432612367383333871,524288 --field-trial-handle=2468,i,11972271945198845598,17845890353164515960,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:14
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4404,i,9072942622883021108,5877260339923177815,524288 --field-trial-handle=2468,i,11972271945198845598,17845890353164515960,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:14
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4888,i,9304658403260005303,12072596937000664579,524288 --field-trial-handle=2468,i,11972271945198845598,17845890353164515960,262144 --variations-seed-version --mojo-platform-channel-handle=4880 /prefetch:14
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4872,i,11763327714447116706,15444558459315921577,524288 --field-trial-handle=2468,i,11972271945198845598,17845890353164515960,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:14
  2⤵
  PID:4872

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6092

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:5976
- C:\Program Files\Microsoft Office\root\Office16\Winword.exe
  "C:\Program Files\Microsoft Office\root\Office16\Winword.exe" /n "C:\Users\Admin\Desktop\OptimizeRegister.emz"
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Suspicious behavior: AddClipboardFormatListener
  - Suspicious use of SetWindowsHookEx
  PID:2788

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

startup-20260716-235307-5320.log

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0\diagnostics\startup-20260716-235307-5320.log
Size 1KB
SHA256 0f62ca82d856f5f1b5208fb9b900b3c16ae43a56b49c326d52c3ca21c65a940f
MD5 ed9789ef11812ff8836b2b5bb12b1d32
SHA1 739cf7f71f82957413b8d4b45af2f96bc2d0708e
SHA512 e03f6fec488398a197c9edd7ac73dc029898560ec7f3a710a2533931f5564fd2a416b1c5452d6654bc894fbdac809b9c6672a13604692997afcc4894407ebc56
TLSH
T1FD2107A10476C18A1C479643B8987B5DE2AEA446F70E2574EB625E092399C0FED83A43
MD5 SHA1 SHA512 TLSH

Submit Download

startup-20260716-235307-5320.log

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0\diagnostics\startup-20260716-235307-5320.log
Size 2KB
SHA256 fb5c04942ed50d9aca39f5a4fd9eec42ca26c1ae311de70680935680b0c0ead5
MD5 9f267f14c05308016dc83a877b9a698b
SHA1 5f145a45e844b2d11cc6c6c07cc586220b6f8ea6
SHA512 bbaee6c89c3a19e9ae6073b468060edff7fdabe4c9f59022deb5d6036227f4cd39b8c2f380fe4457b728b06359913c73c0dc3887681e8a41d9151d47d2b3c7ad
TLSH
T1AF517D220C72D04518579A53F8943F5DF3AAE046F64E2574FB726E0E238C80FFA87A56
MD5 SHA1 SHA512 TLSH

Submit Download

startup-20260716-235307-5320.log

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0\diagnostics\startup-20260716-235307-5320.log
Size 5KB
SHA256 dd0b5398d63fc0a97036695625cfa709c46e4c3c527f857280299fefdf6b3ea8
MD5 2b923edd9693e667f189e4d70a07f6e8
SHA1 268f371fb11f4970ab57337d83cb58cac2a89555
SHA512 7643c1aba9122da6e0faec870420a3f0e4d5de89d6ed9f223c6fdae48b5dfe054ef54fb535ad10f52c95af36eeb1ff9f422d0563a3aa21c151b03bfa084ed4d8
SSDEEP 96:Kz/tGVlKiYSiLiWlR5C6Q07iYs6iYeQmiY/HY2FYS8YcPsYQuYk5h/593m1Vz8:suoLKN5QDQYhYQsYtYk/593m1Vo
TLSH
T113C1132109329051189789A3F8947F5DF2BBF046B61E2470FBB26A0E37CD91FD58BB46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.js

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0\runtime\package-assets\81da269f703d999c\web\app.js
Size 25KB
SHA256 6d9bbc917212d93c13ddf9001413b70f466c8862f6894787b166788968c57050
MD5 0fc1c523c3ac9362fe1b7e6da8375745
SHA1 d157e15d34f3bc42e34102529df2bb90ce454a67
SHA512 d59123c49d5a2d520df5ac5ff2195b9320943686edbcdeb6412b4c29c8013a15d18e659293b3aa7baf6ae2ebe2798e402e5b1e1d745a103bb538a5e8b9f9440e
SSDEEP 384:z5niWsHuN9K1J4G6G1JPESQZNQY2fL1Jsf3FnUd9HiuORAd3ivipOM7/5wK:zTsONg1J4GtJ5sNd2a3VW4DK
TLSH
T131C286EAB0611C3A4672A3BDBB5BD245FE3709235101D359B5AC84D81FBF42481E6FD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D-DIN-Bold.otf

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0\runtime\package-assets\81da269f703d999c\web\fonts\d-din\D-DIN-Bold.otf
Size 58KB
SHA256 b0f96a3730041605b139ca2d15e29a36c55e49058ba2b72ee4d09b5e4ca210c1
MD5 c352e7b670254267d30d47bc3a52b3b2
SHA1 32103eb67b9636f4cf1844e16da6a858ba81c4a0
SHA512 a84c908dd5bfe0cffbdcf4b6d2226e635f3d79cc23dbc0ed8d2c3daedd9c8568977988635bc3783710513f946d629cb939195346d49eebae5dbdd3c6b5dede93
SSDEEP 1536:rntrk49E57CmCf+piWDFt0jIQiEHsfLUxIgt/QO5cVWWWh1:u9CY8jIQZHsfLQt4Iz
TLSH
T19E4360035ECE7104DDE4663A82BD4EA34BB3ADDC4D38978B06C119464FF9E618B2477A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D-DIN.otf

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0\runtime\package-assets\81da269f703d999c\web\fonts\d-din\D-DIN.otf
Size 58KB
SHA256 6d67834e2a76646c456c087ce42a6bd6b6b0c85c88dd9918618a8b4c563c2bdf
MD5 d68d8669232a9e8215831889eba83db1
SHA1 0d6fe7372c3e23d6b20dd139f7ad60302e4a8c9e
SHA512 fca4f8f813692f377a87943d3a22d21843ee679f6ad518952387eecd9b3589046984364265c715170bf682be8c9543a4c67981778e47eb14b81a40a674949de4
SSDEEP 1536:Mntrk4VOX+LK/rGVLs/eFNi1cMMwbqIEWBLPuq8Nl+f9:ZAKrGa2MMwu6a0
TLSH
T19B4371035ECE7544DDF5663A42BE4EA34BB3ADCC1C38968B02D119464FF8EA1872477A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon.ico

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0\runtime\package-assets\81da269f703d999c\web\icon.ico
Size 229KB
SHA256 9b63a917b64449e1780b0271e8d2c54f56c5db9b853f14cb599cf23f978f3b1e
MD5 7e526acb970b2b913cedd2b2d59fdf4e
SHA1 fc731e43988dce2377496d0600f53a93de2e5aff
SHA512 9da93a70f3fdf93c12d2880ae9edf4c0482bd6f67284c422a28562d2ae301cbd6b66d7722bdbedba1a1ed88841aeab4d8753b4eed0a79cecca1485ecdb2f05a8
SSDEEP 3072:sedqimAaxHoSaxtoR8HFUOBy7U5XsYkjT06V:m/ACH9ax66HFUFI5XXkB
TLSH
T14034F1013758D96DC280D57D2D65C0E94B29AC684CB61923BBA0BF7F7A34324AE1E3DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0\runtime\package-assets\81da269f703d999c\web\index.html
Size 11KB
SHA256 80dde2fe5ec92c370056e230b33161a17b1986198add0b1b947361905f1bff8f
MD5 7f0b03e06fd599356c0903923eeb9276
SHA1 164758ae26e1f37207bdce5fc238e5a946d80948
SHA512 2737a4b66ec5d4ebc0330c07b560556a726b9d0fd380b984a716060ee15dcdc185c7b59fcc12719da6bf5c33c67d687de0c8af5efa9e1b6afe001178902e15a2
SSDEEP 192:paplC6nvAK2ot6GHbsDsARAbGakP4a33LatyEbq5:E5BQwa+S
TLSH
T1E842AD3460E41826817386D999D0EB43FA94D103C38595A871BC27F71FF7CE0A99B9AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

styles.css

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\versions\v1.6.0\runtime\package-assets\81da269f703d999c\web\styles.css
Size 11KB
SHA256 c4d76e1b3b135c24c50c8460c94e529a0cce55b071b1cc9ff52b1612b1e46dfe
MD5 47ea3809636def93e011dc6fb6e66539
SHA1 960fe2a70721fa490f0974822bbb5cad49c99332
SHA512 f89e7ba909be9500469c5861d93edbcf85ab9f61db3c2242e4d62776378dfdd7f42126fd34dc3c3a8e4a9751abc8c891ecd988de0c20c260d9d1cac5428559ab
SSDEEP 192:MMESeJnk5oiblJYrYAbil4T+VT6l1mTY52spLDSjL4moyTcAL:peIPxzH
TLSH
T1B2326558D235E2765F37EFB8FB9A4A19F79460608E01039EBFE4004A16C52BD9532ECD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 1771a4321e0e9b5276d5424564cf5f92c6a081d582c75a5c2d88e8ceafd87f08
MD5 8f5228b3453bda087b6a166d67af36b0
SHA1 4f5c3639e0a1db385a2c353acc68927fd1a91d78
SHA512 8d35dc2702f996c40328ccceb9c87424d603a040378bb384199fdb1558dea84485097aeb40ad11c6ea14df5d21fac34ce070d3f542c5c12c454132cf14e042b1
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 7a349d5532da964594e02c851073d32377ae036a5044fd05a3e7999c99d9ac85
MD5 14ea68777d6150d569421a53fb0a8ba6
SHA1 f05172a08c63064d0d6d116cf107e2610525148f
SHA512 053559b4cfd23b69ca88f3a3b88e85761d7825a17930cfedd898c1a098a2603dc648decea0a27b956a919acc37de8244993bfef9a1cceb130dd33d16b520c85e
TLSH
T170D0123673014234C01021730002650C0640D51B410A9241A528859E3E144A00913841
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 222c15bb3a260f4e57480da4eb8980dce42850e63342fa5837dae81ce6cc9ed2
MD5 ac5f5310d3ce901c5e3b5193a206627b
SHA1 c24198b96c90624c17bc8e848ff695de2f8239c8
SHA512 aa5f5c984ca0506f53b6c4f5e400a6ef8f94c8dc06c3f9538633e21345c23018764118730e074b560aa2ea1d5f3c17a3bd675b40b50c8feaa2ea394e6456d35b
TLSH
T19CA0025B01918043E52453B025D241917A6AA930C7024ACD84E88C7C9C91340C20D051
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59b52d.TMP

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe59b52d.TMP
Size 48B
SHA256 1ddfc109e0fc3901942ccb042e4cda54d6aeabebee5587f9b4225d4c05c5390d
MD5 7a510a19077e585588e86c3daa6d1339
SHA1 4eb87ddc8541151db0a77b3879b265ee89256e9f
SHA512 51767dca9afbb33e492ebf2a582b41603d56540cab275946b1aeba547e22f707e4eaa4ded1d07ebfe5c7d98c13cdf1e3c56d131f5b0d8aed186d1b44ce8a77fa
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView\Default\DawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView\Default\DawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView\Default\DawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView\Default\DawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView\Default\Extension Rules\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView\Local State
Size 2KB
SHA256 7bd2db937d734dd03ff30cf4d7cebf03530c923c7e7564313ae8a82e1a8f7640
MD5 13e3334924ef23a93c80aaeeab9949db
SHA1 c4e801818686c5f8c1af1605f8cddc231ef43945
SHA512 6693db5d94b05fca6bb635d96790f7560cde92dd623416058122ce4f3cc088336c4a33eeb1af4f809b7718ea6599ea0ce49433c83001c0711a3b7b44a33ba9c1
TLSH
T11951B37368586A3699E6960679463F63CFB961B3AB831F60AADC1B0C01C784C2347C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView\Local State
Size 3KB
SHA256 8a232ad0ad5af90f82762d033947a60d8f25505d775dc511a09ed4888b42c410
MD5 95035840a83a242d33e7aeaf580abe28
SHA1 684a6c00b33cc2c24e0ef29d8ffd3415bef72e7f
SHA512 68e62fe43f167acc4c82d44f3088947cb3fce62cea84f86a8b1efd58e2980ba3a7418fff3de1ee352fb4bfd932e265d65c5ba2dff9e182fb7d305d586b2be15f
TLSH
T16771957669A4A9375DE29A0678862F17E7E45137E6C26FA0D6EC0F0C01C72881343C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView\Local State
Size 15KB
SHA256 8562e5eab10ecc2ffdb989bffb63d171a8e403d76249abc6850166a00920b3e1
MD5 c189a9f77e2f6a1d6e88a9e9413d8c8a
SHA1 dd531fe5f8f2fd663b8c0d5b218517cf6e854287
SHA512 dcbff2d757445254b5c28b0ff017cc73f868f203c32799d6b7c5f9abfd5d8dada3fc51dc863775797634d69c0f6b52286695cab988b28c3363ad5c410b82822b
SSDEEP 384:hsrv+89zHqlDNP9oid33NBSwh6PRDmisdtkN8:Orv+4UNbd3EJmis7kN8
TLSH
T14F72AE33A87C76339DB69806F4866F177BBC61A792C24FA0D6985B8C41CB4C92307D13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe59a399.TMP

Path C:\Users\Admin\AppData\Local\MecchaCamouflage\webview2-user-data\EBWebView\Local State~RFe59a399.TMP
Size 1KB
SHA256 9c9b9e3e7beff68e47d98341b515efa5b757d9eb713adf54769e1fcf89c4a0e2
MD5 ce05308d7bac9b3196f81a3da317dab3
SHA1 3ac1fd24921455f212443c226660637dcb1cc882
SHA512 9c2ebe51b685a1db5c9cdf5521b407b11b4e2c78b3c2be937b87ae183ce6e1bb1bbae7935241bc87df4c40e7b7e91ca5e9141d0a9a2905c9b5c0980694a7851c
TLSH
T1A23174B2D9942A31AC8A61073142BFAB9FA0117793424E4076CC560D03D744C626FC33
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 48d3b9080742202c79778d023e431fcc9dbb75da5473efc4c2feddf5d50a023d
MD5 9d1e1b879d76ee0b081c993c6c5670fb
SHA1 c0b47dd15b507f1f5ef32118509b3c3cf38b1354
SHA512 90b246ea006332823753d3c699e50aeddb6b3d412bca725d09726d6dace2d07f09c413174d612af0f3e5f77d3834e0de0ccebacbe7476cdc7a10388bbb15ceeb
TLSH
T1DAD097603D086824C28330303180D3123BA22260AA28C6041020F12ECC30181639E08F
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ffe13798c5910685872d371e84c30baa9eefaaa5db1419603eb30d473d7b2e37
MD5 03c111f9396889c77f6d9883c5df333f
SHA1 be65300843096dba92c5695fd35e2dffcbb7eb0a
SHA512 a77dfe3b48fcb72648f1adfafbf0d0fcd4d88690dcf41609a03e1d6b645d1336b6e322931b2205673283b920d20ed0225c6aa320a83a2d3a410771f18d120c19
TLSH
T1B1D09BD079145D78C4C1353231A773155A516435865C46481151F3BACD65141667E59D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7add6572365d752d8c3a090b9a256c43e3c5ff716f29ed7aa3c53dc57a08ba60
MD5 0da70f521ac5aee3489abf6e3eb4e375
SHA1 0f3cd9919820116ecc86bab93f4712c08485dc56
SHA512 a9cddd04863b2ac842fe4f91265c19a41d8b7442be8f07a91747705beca52c1e1d563e3c46cf68e1b73606695624f13ca69a8246653c2535d0684ced42c37d33
TLSH
T182D09BD479045D78C4C1353231A673155A616435DA5C46481051F3AACD65141667F5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6fb1480ad12b08150f9b3ac124b733d8b2ac0bf9ed197c5f88e07cab78b86522
MD5 384a8c1042d427c714ffe16fa52e91c7
SHA1 7a932055d18c874c97c0b79eb358ec465858df92
SHA512 22a166b0d57153347b7fc6a5052a4e2e6cf1e3676148f4e06de17bd2224d5b80c8801cdd82f838aa262888191a3401946d43ad110e8b83824c41680e77363d7a
TLSH
T15CD097603D08B9E4C084203121A013006A211062AA69430C2010E51ECC34082B3AE9DF
MD5 SHA1 SHA512 TLSH

Submit Download

750f106f-f1e5-4a9a-8e83-b86a44984d7a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\750f106f-f1e5-4a9a-8e83-b86a44984d7a.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5d3d2dbf0eb8944d342b06bca3043628897638762043c16c299179fb426b6cf0
MD5 7245f179da4b88765d75ff8f82977662
SHA1 3b8d844e64caff2c2a7b08dc15155303ef4260f8
SHA512 47042f8dea067827a40469762b3d4efa482da760a2beda7c74b4e18ac98629965b76ce08963f7760ffdc417e2f58eb6691a6aa16d11984d01aa77e8ada36a874
TLSH
T1FD5162F143212BD3E7E7597D69F2D0AE36F1C4E2E0832A110C659E3C6643F0824D119B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 75153423e786f8111749c69e28fc726bd2f5f6b79b7c7c053a68ec3aadcbd0fb
MD5 f3a09bf1d4f2bc8ce60ad09f452c8f33
SHA1 9793ce35802a20b1a6053b1205b58cad09b12c76
SHA512 4b7f8f0e801a0179baf6eaa7b29c628d002efb2d68f21efda4d226843a5fdeca8634de35a6a61dbe98b969ad2b1e7e8bb48a3df9b67e63620e952cab3b287a63
TLSH
T1E141CFF3C7E8963D8A0195F4BB142E1BCE1D0915432C3D5AC5E4AE1BA3E2471E14099F
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 173944b4cfe7291c06073d0427afdfcdec3056f3dc60bc72a164d12ae809b6ec
MD5 de0b040727a7837c8567a65097554dfb
SHA1 1915b9538111cbb8d8eda3f06af982503eee1299
SHA512 ad22d444a415a3bbfd5a881f155d6a5dca593613e9ece7fc0423e429b6819364ef6dfca09b840684df375cae87f1e1a9cb9a4cf74b32c2d3636c5a17a90a108b
SSDEEP 192:sxRgRwCi/fhs4kWpVd4/HZMszoA8p4m/g6+WNIYJHivGBIgtJ:sxRghi/fhsVWvd4/5MdH/5ING3
TLSH
T1FA42B7166928A93B9CCBE21DFF657F53D2F91433A1902E44A7FC8A1C05E76DD120380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 b99fee0a322f0f6acbaac27c54867f5ee39f371bc8cf7eb9913acbca3299853c
MD5 349e5326c5be05078633b0c6fa9deb28
SHA1 67d8e02f1dd8467288ee55348895d42bb54ae154
SHA512 17db2253222436e899c95bdf2748b8b4b8424a765d805b006511669509b4058b22ce587dfd3b3f804e8347f202c2af177cf5fbaefa0f662958d563c4dd7e6655
SSDEEP 192:sxRLRwCi/fhs3WpVd4/8bN5szoA8p4m/g6+WNIYJHivgBIgtJ:sxRLhi/fhs3Wvd4/85dH/5INQ3
TLSH
T10142A6166928A93B9CC7E21DFF65BF53D6F91036A5911E48A7FC8A1C01E7ADD120380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 b6bfcac2f33f71040f0834ea49855b7a56afaf9615f3324add1c27db6bd19e66
MD5 3eb8c94d22a33fb00c5a244da50f1b92
SHA1 93979a5355cd28bf8b4c13d689ebb1259110830e
SHA512 ccb00cb257708a543fb59bf9afdfd78a97bf49a61f18f3cbc240a2332cfa02b6e39d76cf7815a2cc5cd0ebfdb3298070e86540b2664971a800ef0e797b4cc31a
SSDEEP 192:sxRLRwCi/fhslWpVd4/HZMszoA8p4m/g6+WNIYJHivGBIgtJ:sxRLhi/fhslWvd4/5MdH/5ING3
TLSH
T1AA42B7166928A93B9CCBE21DFF657F53D2F91433A1912E48A7FC8A1C05E76DD120380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 55cb4ac4480e8eeb4a45e5e1cc2cb757998d0e11008b7c0cc30e2269004dfcac
MD5 841579ce52350d6bdd21b008bc20e281
SHA1 40e639be618584cb7ecd0ab8ee95c69dd190385b
SHA512 57d3bb677be08d31a57d3419cff062754c489ed3c230c46f6019c218ad05c2c65065df6dc79a8de3f1c99f9a94c85577969a4dcd57dd60dcef183d8bc7108c0f
SSDEEP 768:dofA3j7pLuL7AxWgg+fJJ8F1+UoAYDCx9Tuqh0VfUC9xbog/OV0131/ronh:dofA3VE7AxWgg+fJJu1ja7l1snh
TLSH
T144C2EA3B640CCF7E4F804ADDEC19BA9B6D6802CB9698CD9047FE951C02C6BEE51164DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 917a7b236a25e08ef6a50ceeadf8ed5133373f414347592a5fa3fe7cab5c6b53
MD5 5ce11c4aae308fa6e6003d727c47219d
SHA1 628a5f5a940052c8c6f6c7a5d37a3302933d2105
SHA512 d367eb2b544e7d2e4112b6b40b19a9653bca86489cc4c64b847e3db58a1a06285660f047e26bbfe95da64dae96abf5de4ee0f905985f171b6afff6263821dfbc
SSDEEP 96:KRQh0gS+yoW2r7gooK4tgaocII7aglHN6zn9Xr/WzoWgv/K4ugR/cVtgDSP2K08X:CQh0gS+y/2rEostgaHII7aglHN6zn9Xo
TLSH
T184912341313B4241387D664C92F89D2BD7C3B4E63455A82B7BE816F54F6AE024EFC8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e7aef3a8-d574-4f34-a57d-5e1991c1d2ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e7aef3a8-d574-4f34-a57d-5e1991c1d2ea.tmp
Size 414B
SHA256 f598bba86973cb106a1fc4006027b56a298d870d1d110b5b2538de1c405ed4ae
MD5 f4b5a13aaea622af86c2100dc423d2c1
SHA1 7974b040866a3915ee02ff79fb4541c98172efa4
SHA512 18ba87d3eb031bf146943a601bf28e1e61956fa18df98733bb33507e09933f6c6cd00845780e37e8bdd6c8201a32399bc34533fc8b24943b219357541afd4ca4
TLSH
T102E02BABC931AC3708FD1758B9544B46E754174B2B428D0F373D82088FB437A46CA85C
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 2a4712ac86bde294b4ffc5da2f88eb834263f7bb188e8d512c612c7196ff1f5e
MD5 42b7e6274c6ff6fe1c41d1279991d761
SHA1 e2ecf6f4679b5f3c06f1d50f09bdc95ceb1c5209
SHA512 240397c96fc8627aa513a454db23f23a1bdbf67d2d633f711a33f377e81e1b5aebd44fa2be76c9d0c9fc43ffd55864a51df0a03e3cc0c3fc7dfee90e9f663743
SSDEEP 384:n6tNn/s3n9Sf38Nbv3XKRH6OQSGozRfY9bYUkW0xQPlLJQXmIkdP9IimIMWEfMbT:6j+9g3+KRaQ3iJIWNHXmTWTbc+0lb9MT
TLSH
T18FF2C0319CAA8E379CE786D9710F7A5AAFE80173C5C81D88C9DD6F4D018765C035B82B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 13fb6ddf059a833da192d52eba9a15425285c8df1bb237fab3dc4c4dec5bf9c3
MD5 e591555e74d9a2ba83970d4df7e12f37
SHA1 d13b86d4ffb1377294e14f8c6877b49eb2a922ec
SHA512 13a18b9c6f506377b2dd34672074de068fab0c1d33c008c026f17e3cfb34a1dd331435ed66a678ecb593c972179dd2e89af75fa79663ff3f9666530a20c923a7
SSDEEP 768:arv+4UNbdM3ylqiJJNHXmTWTbc+/meVH1SvyZ:absb+3f8eWn1OEH1dZ
TLSH
T1A103CF329CF99E37ADFB9688704BB6573EB8116385C80A84C9D97B4E428754D070BD2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 45KB
SHA256 892eb576fe9a9d66f0d70e4dd2575cc90ab7d611b52e3bba309a8465ad057e98
MD5 efc1eb0639d426a7dfec254b2def71f4
SHA1 8911a97d61e85a653ab23d81517221ce5535770e
SHA512 75c6a13c376679ffa0f9bf31001ae961c515d9efbaace93fec287112c929426cea5ecb2c8e6aae0818fef899d1ce0f46e08c15b7985759e27aeacb027986572f
SSDEEP 768:Brv+4UNbdq34KRaU3iJItNHXmTWTbc+Hu8KRZxjhKb9M2j:Bbsb03bRddbeWn1O8KPxNKb+2j
TLSH
T18B23AF3D9CA95A3F9DFE7B48700E69266EA81177D1F80584CBD92B4DC17744CF306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

7067f945-222a-4426-8223-661194b87049.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7067f945-222a-4426-8223-661194b87049.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

MecchaCamouflage.Controller.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\MecchaCamouflage.Controller.dll
Size 202KB
SHA256 ee3131d5eca267f3d43566d5ee388ad8a3f202fb218dbb1bc0b6ef002d999895
MD5 26528647f42861d52057f1b17981fc52
SHA1 ecb19a55093da797eafa2293911d6027c15c748e
SHA512 db16e8847b4740572bc05654bbb744f8f0f0348189f618e12603bd50734749edfea28c5674ecf1f45c6baf4551b66cba9a2a567e6773af4eefa34803c5a2d6a3
SSDEEP 3072:ZC/4TbJzzuEM2lCmnjEW3Y9g5NTROodEAzhWlMz7b:Z1bJzzuEVBjEkplso+Av
TLSH
T19614099063F80A1AE2FF5F39A0712029877BF54BB436D7AD4E8064DE1963F4098257B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MecchaCamouflage.Core.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\MecchaCamouflage.Core.dll
Size 106KB
SHA256 f8e5396a5dfef92290046aafc920b3f01d19e5505d9e772f2147fed95340b217
MD5 8f3c078ebe088f92aa59e9d14fd730c7
SHA1 69db740cdf779dbb114ead3ad32f8e9bcfc5044d
SHA512 4ff4e056f946b69803fad584ca3279a7286cb9b77de1dc12f1bd4b8dcac2a927df40c9198104d898580271a46a975baf3ef8b612696fd8d7c1f79b67cc67a3d8
SSDEEP 1536:+0DF9K8Kzdght1av0ACom8EMMLcGqGYdCbeHrfk+1tXon4+Tw1Qunn9Tl8GT:XDXKZghtC0Au7+dQ6rfk+1tX6TK9T5
TLSH
T1A7B3D728E1680E7BDAE9457A6C61460236A4911B5D01F25CBB4C52FD1FEFB2F04B923F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Win32.SystemEvents.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\Microsoft.Win32.SystemEvents.dll
Size 113KB
SHA256 4f128a65a31239ec084cc39d02a1a0e8cfca92a19032d282c071c09a9a41e4c9
MD5 04543734bfb1c9acc0e7555138bd9219
SHA1 63349cf7741aa076b95ba26fb6a8885fd7451412
SHA512 423f02ed39ca1a3152668304f31317855b18ead316ccbe3cff7be6a7849d6fa3c25973fdf805f126be716ef3edcd2fd004283bfc623a26a5c2846fede9641a11
SSDEEP 1536:2Om54+Lgak1gY1E9LejL2TdZsWhdff1TbUcBIJ6eYKzW:2XOazNQLGYWhdf9SJ6eXS
TLSH
T159B30B1173E80214F5FB6E36A9B35911893BB8926B31EBAF0085059D0E72FC5FA75363
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.Concurrent.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Collections.Concurrent.dll
Size 197KB
SHA256 0d1a713952d044f3f707a6d0b7b03bd64d410d4866d55cd0c172aea5c315387d
MD5 f0d9e863ee694fe08963276e4b65d079
SHA1 58a2debcd44a4f35c435920b4336c9b49332c851
SHA512 5798b4ea849db6fab112ca4d62f8f80fb047a5f7efb06aac72e8a66eb201cde404a06daa04700a1eae0f5702bc424b60bd9118188e6f09d35f857a95c5d6eb46
SSDEEP 3072:BeXh2hKGy5SZDZpWVH57LqVJ76qINhymYQraEN7Azg902ikFcPKgq2AR3kM:wh2Ny5kU276qGc2MKT2ARh
TLSH
T165146B2663CC031FE9AFC93A95A745B1E33399571316D2CB10E9A1481EA77C17EBE123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.Immutable.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Collections.Immutable.dll
Size 925KB
SHA256 f1bf4d036baf22580ced0afcd1512d1582e9990edad9ad50e83a0a5870330a29
MD5 00b2ade9fd94a5bb5bfca5951bb01145
SHA1 7b1e3c21237b74b4ca1e61d0b024b399f3832c53
SHA512 9f2738a26068b2f98b41f5df48db55a4653f0ddcbf7e095de30035036f555280de439e046db3024240548e9a23b18847acfe017527f124fbc7bc10558c1cc2de
SSDEEP 24576:XZ4MYY0/F1ez3Xg82Pgle7sd/Antav7m+8BUm/8L2lqJqF4MHVtvdKUbMhpVXia/:C+8um/8L2lqYHDsZ
TLSH
T1A7155B19E38C0B93C63F87FBD55392D6D65184160331D9CB249AF6AE2FE37C1AA3A015
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.NonGeneric.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Collections.NonGeneric.dll
Size 101KB
SHA256 79e04d080b8c3eb92bd75d3358939b2e0adf2cad2639654ccc3b9722dde2ba14
MD5 1c74e702a5c77c4710dacfc72a1ee1e5
SHA1 b88e3593edd6d458f4f082fd4f7daae29575f818
SHA512 f2e9e923662d806db9f234c3cb2de3347a584286c4d0bd5a83ad62333dae28be88dfcadfabcc2a0bc0ee192eeac0568d7b81a71898810e4c5f1ac72d717b6b64
SSDEEP 1536:1WfCtoofN5YHiXJ3+IOj4mwsxmDagF79Jj51RlLHLFXbgDyRszqw:1htoofycJ3+Hwskm0LRljLFXqesV
TLSH
T1D4A33929B39C0722CAAAA2BDD1578406E270F5E36712D6DF1408548E1FA7BC9C7F3167
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.Specialized.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Collections.Specialized.dll
Size 101KB
SHA256 5393620f914b78e5b40caa4d04bc5340fe5af5d23e288f1400d531cc9708fd75
MD5 9a705e956558a0c0d223baf122bb7ed5
SHA1 1f80705c15c7880a49e624bafa635314702611ba
SHA512 78e3a7998157c40096696c3d035f8ea3acf22c3b8a26f69c21039cc5762431017c2eea61bd85f2966c72f05f974149de11f04193d7ae9532f7c4d18c1620543e
SSDEEP 1536:d7hipnR0Eo1u7oNfE3A0Jivc9EywNSeNYtDwrLXzlzh:dcpnRKggMtTeNYtDwrLX51
TLSH
T180A3392873888B25CB7E92FC85A38A42E770F1D31352E6CF194AD4495E97BC0867716F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Collections.dll
Size 289KB
SHA256 e8a4b43005fff65121433b298659322410a69bc02bcf44b223f1ed282a3a0335
MD5 1f447a406e577155f654fb498a4fc38d
SHA1 5558d11e0cbbf8ed598cf6b2bff4b8eb70333d69
SHA512 8e40f0354c3da7e2e0f0ce5f318e161d7e8aa9d3a8c50101c8ff705b86cc902e19d37a22784d02b8160c324b9b12c9709767b881f3713d4f37a090eff5e86a5e
SSDEEP 6144:itH4TsjvCSCDLEFCL8ph2wqXh0PPHkbtXk:i0UvCS8qCL9wqxsHkbtU
TLSH
T15854392873CC2711FDBE41BAE693C042E3798052435092EB46BDF6519F9BFD12ABB425
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.EventBasedAsync.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.ComponentModel.EventBasedAsync.dll
Size 45KB
SHA256 cb3d56e9f47d93ef5d71d9e4c5fbaf66d36d360d652772c82461154785329247
MD5 a8c9d33fbc69bd6df232377f4a75e599
SHA1 cfe0657b7efd7993e44d2faa39add71e2d95af7e
SHA512 8fa7e1bc3204d7c8f0143e8f6159aea2a53b3eddcdc50aad3062de2d1604189493805a9f1071aee12ea2297ffdaee4de7407446130f200e2a62cd29c8f8257a0
SSDEEP 384:yWvXwWlB/HvdWBFEWbsSwZoc8amRqkgVCJQmXDX6O88+aEZ4j5wVgNF8K8Egk1LQ:L/yKoz4k58IVhb8EX2lfe9zho
TLSH
T10F236B71439C4621FA674B7CC2A28A12DAF8FACA9742D6CF1454D20D2FE33D5873256D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.Primitives.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.ComponentModel.Primitives.dll
Size 77KB
SHA256 cd2ba2cd76736c694e681b16b637bd6438d8bbda85017097efe4f3434ceaea3e
MD5 8b0ae42f38afa1fe9223e5abb2793c3a
SHA1 463b95ffe555d49e1626dd48dfb0cd02f8fc3915
SHA512 527a8d45c72c5799c4c9f743bbae100198a7690c29cd83fe0fd1cca96b06a9c1a953727130c3755019f4d13290fa3f5d4c69afc4026e64ab0c385a78318e59b0
SSDEEP 1536:wO59l747h4qjUzMJVLvrYu2nC+i5t5tzI:wel747h4BIrLvr52C+iltc
TLSH
T1F2734A1813E8431AEBAD567C96B39910D570F5931723D9CF85A0D90E2F8FBC1F271A2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.TypeConverter.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.ComponentModel.TypeConverter.dll
Size 749KB
SHA256 2028ce8bddd7438ae07851921dba921c4bec2f2554038658aca4f9a58a24a16d
MD5 414ef23ff3f296c9d88ac6147033492d
SHA1 e7b6e52b9560db24e8603738c51fdbfeddcfc6d0
SHA512 3805252c2486bb9bd967585ecc8192628682433fe60e569039d4acaaaec374bf92cb0a334ff4bda3ff08699a2de531b4ee4f091a2c2621d1558e74d2481edcef
SSDEEP 12288:zbqXigwW9OUBBzVjl8lULw/SrFuu/Gr+/KXDAD4Tq0WbW5wm54K+4rBvq+ITYNnl:s9bbzVR8ll/08u/Gr+/KXD4mq0Wbx4rX
TLSH
T1F2F47B18EBC8AA26D6BF827EC6230512D171D983A335C2CB2584DD951FDB7C1A3B1772
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.ComponentModel.dll
Size 29KB
SHA256 aa146801ec84f20bdd0ba2f9114d868b8dc5723b75c7052d73dc16482eef7d4a
MD5 5572eeef7413073dbd5054dcbc8fa7e1
SHA1 14edc2a4e275d81a435633b6fa06026676d31610
SHA512 077bfa020f71c39645fcf7b138fadf876ab5bbf7895040dea0e78af351b7b23f2f16e86a41bea2b647e59355e1fc7b049a990084d6a371b2443b7671ab196c1f
SSDEEP 192:OW4w1W5B0s9ByJ8d+ASx47xY9FWF+GBTBWsea8WPyYpIfgtUX01k9z3AyGnAFX:OW4w1W5B0sg6+14lYmlN8YytR9zjGAFX
TLSH
T1E8D25CE387688603DD9A1DB05AACDA433D3CA3CA9E03C6570285F6091D937C8AF3153E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.Process.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Diagnostics.Process.dll
Size 321KB
SHA256 3e1e85eb09b1e7f23c5a26e40f725dfe95810e27b7d038fdfbf24664948de5d3
MD5 4dabd3b114c2317e7d1b87c0e3948efc
SHA1 6b4627ab495b6b68b82debb4f6f0f3ba3db05e38
SHA512 03adb9a244a15d59b743b3a012cf4f77140eed04a889c06e8f58ddb2b7c94a5de66096818d532ba7bf3eddafa7a0fe3f92e7772439b727074c54d1cd742bd1f4
SSDEEP 6144:7rTnBsJOyjlS+LeRqWwxov9jb3bG1PjdlCOmiHn4LFH:7rrBAOyjYqeROxhIQHn4ZH
TLSH
T131648E24AB88850DFFAD82788467C402E1BDB443378DD7DB4A54D9992F7B7C2A7311B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.StackTrace.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Diagnostics.StackTrace.dll
Size 41KB
SHA256 12fc06aa3e24fd2d68792d67fd0de4f33eea209851d626a3e6598ff71ef93e77
MD5 f6d614db75a848f276e761ac3d1e883e
SHA1 434d96847aa6b4dd875a26c043c732a49275af14
SHA512 3606123c1dcba0977c4778ec3b76806c7cf5f137147a669ed177523b6522b3e7c803699228908af471c078499a222c75cc21d53f284c62a312a592ecc63e281f
SSDEEP 768:13A0ixYeWbBZTT8jnf1Cbo4mlFWnJlfe9zj:13A00YeWVZTT8L1h4mGCzj
TLSH
T1E9137D5297A0E223DC9A4574BDF1DD02287DDBC90762AFD31A8DED1E4C53BC0AA3112D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Drawing.Common.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Drawing.Common.dll
Size 901KB
SHA256 565c21208548ec4d366b9b4c74d142f20acf5ea1c99b8aacdb5e07d6078908c7
MD5 f7571ab2dd836db100dfa13ef8395e50
SHA1 e629873470d783f2be47a62a0dedbd6c634c8151
SHA512 d24ef276b58b1889c156e165b111d21771359acb89aaf7ecfa2c5123cc8d919e42b2b61430c4931fcae3bdfa3fae68281c457ab9020e0e30c3fc5e04d8630f1c
SSDEEP 24576:rwgq8eIV5Q9lw4eqK/AkWLQ3VDzNQVTYHgpr:rwl8/V5Q9lw4RkW0zNQVTLZ
TLSH
T1B8157D67A3C40A2FE62EC6F9D15B8C12D532E0469B22D2CB8584DD393F47BD2DA37152
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Drawing.Primitives.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Drawing.Primitives.dll
Size 129KB
SHA256 f3433ee65bd917f3a7053db0c82b279e497b20d21e7315c30ae0ea7db7988679
MD5 670e6127031f27638d42053f7245ae04
SHA1 2f4f7cbb7cbb6cb63a2cebf59063ecabc8245f48
SHA512 8a3e94a99aaa411bd50b325b8a928c85947801be3273b3d69ef32d19048d8d2bdbd1cfa2ceb90b90d789e8f5f9c1935e3aabddf3a042e76bcae52d86ad4bfb67
SSDEEP 1536:e4+1J7BoJLA2C4g951reQBl5v4fiBSgEAazQApxVrtaC2REdlupmFNSzBd:eDJ7BopA2C4ggUoiBJp6qREOUjST
TLSH
T124D34B6EF71489A8DE7D627C22975577CE3AF1860312D0DF8485448CAF12BD8F6B10BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.IO.Pipelines.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.IO.Pipelines.dll
Size 185KB
SHA256 337f64b658e93192560bfb6f1a0debf152f02263c39aed68636181df48921086
MD5 c939ee8254a64e5ece008f735df21eba
SHA1 811aa101a9245e9071b1efeb7d4a506f94cbb3c1
SHA512 c9d8b18561e925175f29d77762cd6d6a037173e3aa35ea6f9583a33853978aaddf8895dee4cf3c3c2ff552e983c67b238be76829ab6944a1b6b2b0a1f002986f
SSDEEP 3072:dyK6LU/ceAxlUrbgf3blyX4bgN0xmRBewipNrh//klxW2xAklF8X8:b5/dAGgsewaXSxW2xzlF8s
TLSH
T1D3047C5AD39C0713DA5F85BCC1A346529BF394A65702F2CB048AE8842E977C1FE3E563
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Linq.Parallel.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Linq.Parallel.dll
Size 757KB
SHA256 9f3559634e8f812d6571b1e1cfe8199e7356b92c211d333f62d604395466c3b9
MD5 c27aa8ec0e7ff7076a08834e739dda4a
SHA1 51a5673b4868bc30f605bd7571e161b46a96078f
SHA512 2778b23c30e6b7aef17be96bd6ef07218fbc9eade33dc2305986f0c4954d3e60e6b830b88821eaf617c00b4d6af25355b485fee8dd405db53378acc4a3da3630
SSDEEP 12288:s0f3CmqcRZnb0kGJqTfj2M/slozOVBqGCnrkJ83+yZ:jPCmqOBlPPUlozOVBxCAJ8uA
TLSH
T187F46C25A38806D1E17F92BEDA1B1502EAA155A35356C0C78CC9FEF5BFC3BD1B23A111
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Linq.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Linq.dll
Size 681KB
SHA256 2142f1e852b8edbf8dceddb575177295dde02c8a368e716f0ca0c902d42bfe03
MD5 2dc1d1a2e7e44d9f81e04031f6497258
SHA1 8eb75d7e6202a7c3b5d123a0fdbf6432e49a742c
SHA512 8a76fbdce69ffc695cea1d6ca042778190d1f2d9105033650216b4d1ceda35bee5d76f32b109139c16d97ce8345520dee70f8a07ff6a0685fee99692572faae6
SSDEEP 12288:XS15IvfEbReykb2SNb5iTy2Nt9N7u3esZ1:XSs6R7kb2SNbgPjK3esz
TLSH
T150E45C28E39CCB22C62E4A7BB5235135D26153D26792C9CB964CED442FE3BC1667D32C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Memory.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Memory.dll
Size 157KB
SHA256 8a9eb705fe5a69e936e49f86b507cbcb8dd1d2889f925485b5cd412deaa8dc50
MD5 f48a82560bdceed6ef7f26fae2a4a23f
SHA1 25bd4cab17db2bdca8be19f14845a6f6923cf5aa
SHA512 0139ec502a81e60e74a64773a3486712ba382f005f62a33842643f9ab0fa215c2d34355ecb6f5f19cb5b6df13849157342e6d1a19faa2b6d8f7c2e36f4229f9e
SSDEEP 3072:Ufbfv1/38BoVRXZ1isc8JyyKhpwaGrpXki4T/huSPW:Gd38Cby3vwaGraiw5uD
TLSH
T1A1F34A1BD3980257DA2FD6BA8796C202EF336101D711A1CB48D4DA44AF53BE1BF72936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.CoreLib.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Private.CoreLib.dll
Size 15.3MB
SHA256 dc1945de746f94987ec705a1f27d512abf72a41a1da37e414d1951e4e823037a
MD5 8a6b9cbebda6f726747597eabde0184a
SHA1 5c42d5ebd4ebc75a4ec714fe45a254615b46220b
SHA512 ebf3c87799aa9b142942021765ee11a10c02e74b0c1baac566350733d5b4d3a37892b9b72b9f796a8888ea4caf7fb005c48e1c0a8ce9091aed6c3af85bad3913
SSDEEP 196608:cziLlj8Z8UumVmGDg8rL6OzOH0qrpiTd93mRFX:SiLlIZ8UlVQ8rLVOH0qrgTTWX
TLSH
T17AF69E10E3C59F46E13ED37D816382AAD970F8525B16E6CB0099DA4D3F23BC5523B7A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.Uri.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Private.Uri.dll
Size 249KB
SHA256 5eba7dfb1d8a639c918ea182a15bd35256a11f9853003d39e7ad757ae08d4fca
MD5 60d9d03d27c6fb62574f1979f167c5cf
SHA1 2f86c3da1f046b524cd518e9b3ee51ecb28f0b87
SHA512 b8df18d37591f269d74756374ab04d173bd3f267d8c26e1184f58adff84a3c795388632224b1d16dfc33315d39d5d18cebfd4f038191893fbda81aa3d5b9d5b0
SSDEEP 6144:VEiNow00kgnYGFr76LGZxJyjMjPhArX+AVSP3m/3tpeB9pSzF17K3O2djHMYYMpn:8IhtCmC2+HtGD
TLSH
T175447D1BB3D40D6AFB2EC3BD8693C593E272B1965305E7DB07B490912E133C06A79993
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.Windows.Core.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Private.Windows.Core.dll
Size 1.8MB
SHA256 901887bf2ef710a98611271877e9e81c6f393906e3360d1386e3f512c538d585
MD5 d624c5fd8c482d7b7487c28ad1770cc2
SHA1 44d66c2985abb65a05a216402888f022112089f0
SHA512 4abdcbab44315d5844d6461b705ea9ec66f13c8ece14d8fa7943347667788d2fa04c94f8f708c6fc955155e5a8083be15734fa793ec0fccdcdf0ed34c67a1d61
SSDEEP 24576:B0to0A7oZmRHAvW9X6KPucrhitiFz1CssoOaGK+4h1IuqxHlOv:XbqmRHOW9X6KPucLiPAGK+4h1Xqw
TLSH
T1C9954B14BE4A7BA9F92B89745063055081706E4713F2EBD700C9F4D86A26BC3DFBF1A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.Windows.GdiPlus.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Private.Windows.GdiPlus.dll
Size 417KB
SHA256 5ff73fb9161809b831f7bdcf30526e3f88e248ad16d06e48c50c76b507e8b295
MD5 a0c6529e13aec3acc6244f9d46ad9e46
SHA1 e883d71873bc7f8b2ab2467fac34ca08a562c06a
SHA512 a47ffa65fe3c337b89bd4bd27ed1e9ca17989993cb378ca475d84cdc7fd2051847bd88491420a98f4d2d88e57fef9ce5cbea0cbd42f43f4ab950ae00fd13a38f
SSDEEP 3072:KKAkfLDeWrCnzh7I6PUIOlTcJa3E+IX88ZdITRuXo8VxIkOy86hx238aO8nT+DOE:joWy92+kasQ6T13HLX5W
TLSH
T15694A62177011529FB2BCE7D868A9901C2607D66B792E9C742C14DCA7B73FC7E336682
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Reflection.Metadata.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Reflection.Metadata.dll
Size 1.1MB
SHA256 03bcaa6abdec4bb0194689e41fb9c8bd07e4eb098421bba60d19d2134691a265
MD5 9a9db83fd3d168240a25733ddf2d1172
SHA1 5491bc2c1ed9396015a20f9c7b4ff7bb35efe078
SHA512 3e17eb09966fc7fe90b51ccbf5f6d344830e124455acbf7d87ca79ed3f16087ea42fdf8f2d81e3b9027a900c353b8b15bc49f001057a8cfb5a41355dc82612e3
SSDEEP 24576:jtemc3Akzm1IeOm5Pdl0PmGOmGuL2b38qMUFT:0mc3Akzm1IuAPmGOmGu9w
TLSH
T17A358D3173944727C23E83FDC4A74926D621A8165332E7CF5548AA2B2DB37C35B369A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Runtime.InteropServices.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Runtime.InteropServices.dll
Size 109KB
SHA256 96370a9241de81b737f80a582a05baaf20a5d4746f3cbe5cbdb387ffc5094d75
MD5 7fdd8b1597ab6f962a1df63a80cb29d6
SHA1 1af64d92b50dfd4cb59c4c3835fce1fdafd9eb0d
SHA512 f05e2a8a7cf2432917e871c839522b0678e1eb46479fd754831964d2de3fa985045d73f1da4ef4fae0faa78277e920a9f110ba0cde50c1b60971d2cfbda49bc1
SSDEEP 1536:bOMIQtNQMAZNBKTerzicKDq5t4udNY/w2yVvO1ug494RHPeF20gkeozP6R:bO7iNQMAlKTVC2udNY42ypwuGmctozs
TLSH
T1A9B34A107B98863ACA9A47389C335D448DB3FEC69322E6CF8184C49D0FD77C466757A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Security.Cryptography.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Security.Cryptography.dll
Size 2.4MB
SHA256 56e43c3e486d790c64eeac87a5537dd1510b97830c87f062bc14eabbe82f95be
MD5 cb6078b8fa666efdea127f58036569e7
SHA1 5646e3db6bd70d89c0f72b7d00e5a7a1d7fc8fea
SHA512 fa4180d6a99b6d8d1335ac401f6baf3450b3ed961e7729fd7aa721f4b51c3eef7d6e712c03256e08c39dbc3324c51e8b27ef4272bc560469439d93bc7cacde4c
SSDEEP 49152:y+9iPVdpQ+nlM82RPOmtx/VBmNDx+62tZDzM:D989ll+Y
TLSH
T13BC57C04B3C4064AD1AEDAFEC1174956D5B0F44693C29BEF46C9CE482FA37C2977226B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Encodings.Web.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Text.Encodings.Web.dll
Size 121KB
SHA256 a4807681c163b2e62dec0f0ff1b288ae2392fec51a995bb479b16c29760ed023
MD5 b189c4bf270c0947b0a308fad4f28af2
SHA1 62ff0c899386d8a8871d16d1bd728dbacfa68c26
SHA512 284e07a28af75be2cc1e9b90ac27a9c59a20e6e6501b0d64eaa09074d005322632673394dba4e7eb3e564129e5427caa6e5c3b3d995e9a13f88037aa52dac17f
SSDEEP 1536:sBBXw069EXMJSoPO0P/LNss/5XgYSud1GhJ98/XGkni/DjPze:sBNn69WcOsNsK7X1GjWX5irjPi
TLSH
T135C32811B3888A98C7294274E7938172D9B9BFF5431293C70964390E1FF27E9AE3E157
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Json.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Text.Json.dll
Size 1.8MB
SHA256 1d2e6b506ace3fd86cc9a914040fe309788d8210beec7bf8cbfb62cf67d5772d
MD5 877166cfb7bfab117cdfe60cd6719377
SHA1 7343b939256edea63fee4c5d13b901f7413f9eaa
SHA512 69ac16cfcf3ad77c9b8fef158aaecaa42ecf2786f2a2ae5877d1f44eb1d204806dfd6d0e04243e046fdc41a357c9f7dc1711f59e309742152fd1199d2b2569de
SSDEEP 24576:qNdFDmf3ZyEyxRDcwPZQygwQsU+ORIdKSR3mmdB79v9Emfs:4FyI/lQwQsUBRIdKSFHPkmfs
TLSH
T106957C21E3C4462BC56FC67EC2178223D761A522531287CBAC58ED893F43FD1DB725AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Threading.Tasks.Parallel.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Threading.Tasks.Parallel.dll
Size 129KB
SHA256 d2d14c51694a018189e67ab4d1116982ba78e8d3418377d574713c2687194831
MD5 2e84fab16e92253d7b6e9ab774c0da63
SHA1 ad417d1ef83a3d345ecd8186bdaf248045add443
SHA512 46b9d9cc18a499943899ee8c4646173ff7525973bf7928a4036178089b2ee31186bf7a12dbbab030090429d88cb6c83cf50f0b955cdbd3d4d3fa7a1c46e988aa
SSDEEP 3072:igJ7ueWjJZReLvk730zJixnOfKog9nEH9MTX:T1a1Uk73jOxH9Mb
TLSH
T1F5D38C10B3D80B06DA5F8A39A663AD42DAB3D4930341D5CF488DD28C2FC37CAB6B7955
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Threading.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Threading.dll
Size 81KB
SHA256 89a81656b39f93950f4ab2882b7ea350892edd7b6074ad67179ecc73ca01a190
MD5 0c8980583f761322ba7730d2bb269369
SHA1 c80118cd9b408f3f4c0b8e8b7d4e97bd037e6e02
SHA512 29b668fe5cfb9bb88b61b59df6b77a7f7cfbbe56a644f4b7655eb9af84adcec78cbcd7e47127d1d6f96d37f2399300a51273525ea550a50fb887b0053ed06181
SSDEEP 1536:mBYlwVPH8OyQwXeisjb9REd5bvF9o6zion7qzg:m2lcH8OxwXdsf9REHrF9o6Gone8
TLSH
T17A835B11B3E8090AF67B17B9D9B35905D072FEE22B01D6CF4069D10D2FA7BC096B126B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Windows.Forms.Primitives.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Windows.Forms.Primitives.dll
Size 3.5MB
SHA256 3fb4a95941e63ca12517a46a9c48448158028246173b1730b774ca9044e2bada
MD5 152d66156e6d0bf2b89b120974e994dd
SHA1 4c178489f712a971023fa5534b68d18434d67d4c
SHA512 d387dc4ca0b90f431610e2ed06fc5d0980fd46829099ae2c1d7230cd0ec9935c2ff4b807f5a99637325d5864209f1358915e8c9b92e1bcf195837920d4618248
SSDEEP 24576:2hN5gpPMo52hrVkkNeTqfNmt2+yzxHPxAz44j9YnTqIna+L+yb0XuGPqYo4DgdQT:25gN2h5kPEc3yvloXuGPqYo4wHc
TLSH
T164F5081513841F1BFE2ECA3A8695854092A0BC9BB702F6C355C059A67E73FE3F27D192
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Windows.Forms.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\System.Windows.Forms.dll
Size 13.1MB
SHA256 de94e4ca05769cc090fd7be09c5a3132327e26a91b34dbb02467433dec4a2184
MD5 c0ad17cea940fbaa52ccb4b60e02ec5f
SHA1 5ae4344d65bc1a2e9562f95da07840e4eb5f89b1
SHA512 a78982689ebb3488b0f78920e5b8f191ce326bb284542b0745255cf1788924ee25510728b03e998b3dad23de13df65f78d7801f6ceb28495b38771e34d166e21
SSDEEP 98304:PtrOulZ6UE84df0Ln3DPIO3VaUUKUvd3vEtUBLNxoEF:95a0TzPIO3VaUUKUvd3vNBYU
TLSH
T123D6295262DCBD95D2398278F37343E1E7ACDC168321D2CF0A90BD152A7AA8379363D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\WebView2Loader.dll
Size 159KB
SHA256 12f7708910e1aac5cc9ac43603d122f1d2e770ae2651830a07ef8b3117f28c55
MD5 e08c7255be2fe5b2c0991b3161589181
SHA1 6bbfea42b7fbe29fbd830f09e754f027f69f2a50
SHA512 65b620065c0fcd6ed51066d18b40129b26c90d7908ffc6d579ae72204573ca49ca39ab0cf4d1205e85de35988f055cd4be3c9270159b8dc4907be366df49bf7d
SSDEEP 3072:VT3DhbXErY+deJmnFA5fYFvfBBY11U9yTT3nkFEtJYDUWycML:jUrNOWFCYFvfBuFncEtJNWM
TLSH
T15EF34B4773E500BBE177C27889674A46E776B8111B60AAEF03A443791F23BD0AE3D761
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

meccha-camouflage.dll

Path C:\Users\Admin\AppData\Local\Temp\.net\meccha-camouflage-v1.6.0\4FpgtF730LjK\meccha-camouflage.dll
Size 9.5MB
SHA256 d6d4fe82261c4e01f880b8d3fe69b71fff4b94a8e6f7a0294ad90762256d5df8
MD5 ed95c6093f6f4d92113b481808ce5b84
SHA1 7495fcb73b6254c61f7f6f5d460924cc1479599b
SHA512 419658472be6a559cf086fe8394b734413dc37ab126f656eb6f3b71c345572c8e6f09e00739e3be983643cb29172ed2e4bf7e4e9318925c1951ceed4bcafc1b8
SSDEEP 98304:NwUDIyVVOkarAqyp/im8p3yggORx2d9Luhx:+Akl+K4ds
TLSH
T17AA61926E5002C98E4E9D03A99AF778220F1359B4DF4BC1A735D0E0D5F7E62D1A7A70B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b8472a74-2b6d-4eef-b65c-ffe2b6042e9f.tmp

Path C:\Users\Admin\AppData\Local\Temp\b8472a74-2b6d-4eef-b65c-ffe2b6042e9f.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3760_1344581738\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2788-1180-0x00007FF96CD60000-0x00007FF96CD70000-memory.dmp

Download

memory/2788-1182-0x00007FF96AA70000-0x00007FF96AA80000-memory.dmp

Download

memory/2788-1177-0x00007FF96CD60000-0x00007FF96CD70000-memory.dmp

Download

memory/2788-1179-0x00007FF96CD60000-0x00007FF96CD70000-memory.dmp

Download

memory/2788-1181-0x00007FF96CD60000-0x00007FF96CD70000-memory.dmp

Download

memory/2788-1221-0x00007FF96CD60000-0x00007FF96CD70000-memory.dmp

Download

memory/2788-1178-0x00007FF96CD60000-0x00007FF96CD70000-memory.dmp

Download

memory/2788-1222-0x00007FF96CD60000-0x00007FF96CD70000-memory.dmp

Download

memory/2788-1183-0x00007FF96AA70000-0x00007FF96AA80000-memory.dmp

Download

memory/2788-1223-0x00007FF96CD60000-0x00007FF96CD70000-memory.dmp

Download

memory/2788-1224-0x00007FF96CD60000-0x00007FF96CD70000-memory.dmp

Download

memory/4112-452-0x00007FF9ABD90000-0x00007FF9ABD91000-memory.dmp

Download

memory/5908-547-0x00007FF9ABD90000-0x00007FF9ABD91000-memory.dmp

Download

memory/5908-773-0x0000023ACFA30000-0x0000023ACFAA4000-memory.dmp

Download