Analysis

  • user interaction
    yes
  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    11/08/2026, 03:44

General

  • Target
    Monochrome_1.0.1_x64-setup.exe
  • Size 3.5MB
  • Sample260811-eaxsssvfnf
  • SHA256 8b30316ef6b94603fbaad0af4bbed95ecd9dfca27cf0979024b8a1db433a085c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 7 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 1 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Drops file in Program Files directory 11 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 4 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: LoadsDriver 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 3 IoCs
  • Suspicious use of SendNotifyMessage 3 IoCs
  • Suspicious use of WriteProcessMemory 35 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Monochrome_1.0.1_x64-setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Monochrome_1.0.1_x64-setup.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1836
    • C:\Users\Admin\AppData\Local\Monochrome\Monochrome.exe
      "C:\Users\Admin\AppData\Local\Monochrome\Monochrome.exe"
      2⤵
      • Executes dropped EXE
      • Checks whether UAC is enabled
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:2800
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=2800.2160.9301757205164717285
        3⤵
        • Drops file in Program Files directory
        • Checks SCSI registry key(s)
        • Enumerates system info in registry
        • Modifies data under HKEY_USERS
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of WriteProcessMemory
        PID:2848
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffbf475b078,0x7ffbf475b084,0x7ffbf475b090
          4⤵
            PID:3940
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1740,i,1391162826291053143,14519616643879692988,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1724 /prefetch:2
            4⤵
              PID:1988
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2056,i,1391162826291053143,14519616643879692988,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2068 /prefetch:3
              4⤵
                PID:1588
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2324,i,1391162826291053143,14519616643879692988,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:8
                4⤵
                  PID:3780
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3668,i,1391162826291053143,14519616643879692988,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
                  4⤵
                    PID:396
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3876,i,1391162826291053143,14519616643879692988,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
                    4⤵
                      PID:2416
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3968,i,1391162826291053143,14519616643879692988,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
                      4⤵
                        PID:748
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4244,i,1391162826291053143,14519616643879692988,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
                        4⤵
                          PID:756
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4596,i,1391162826291053143,14519616643879692988,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3904 /prefetch:1
                          4⤵
                            PID:1948
                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=4148,i,1391162826291053143,14519616643879692988,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3960 /prefetch:1
                            4⤵
                              PID:1616
                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4120,i,1391162826291053143,14519616643879692988,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
                              4⤵
                                PID:3528
                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4480,i,1391162826291053143,14519616643879692988,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:8
                                4⤵
                                  PID:3604
                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4156,i,1391162826291053143,14519616643879692988,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:8
                                  4⤵
                                    PID:5000
                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4184,i,1391162826291053143,14519616643879692988,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=752 /prefetch:8
                                    4⤵
                                      PID:2572
                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=3860,i,1391162826291053143,14519616643879692988,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
                                      4⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:2488

                              Network

                                    MITRE ATT&CK Enterprise v16

                                    Replay Monitor

                                    Loading Replay Monitor...

                                    Downloads

                                    manifest.fingerprint

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2848_1841833421\manifest.fingerprint
                                    • Size 66B
                                    • SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
                                    • MD5 SHA1 SHA512 TLSH

                                    manifest.json

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2848_1841833421\manifest.json
                                    • Size 135B
                                    • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                                    • MD5 SHA1 SHA512 TLSH

                                    manifest.json

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2848_7062623\manifest.json
                                    • Size 113B
                                    • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                    • MD5 SHA1 SHA512 TLSH

                                    manifest.json

                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2848_870141223\manifest.json
                                    • Size 102B
                                    • SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
                                    • MD5 SHA1 SHA512 TLSH

                                    Monochrome.exe

                                    • Path C:\Users\Admin\AppData\Local\Monochrome\Monochrome.exe
                                    • Size 15.3MB
                                    • SHA256 bf5e438cf8ce168d432f8a58755ae12a6d24d49bccf4c1630a9426c46d550428
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    System.dll

                                    • Path C:\Users\Admin\AppData\Local\Temp\nsh176D.tmp\System.dll
                                    • Size 12KB
                                    • SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    modern-wizard.bmp

                                    • Path C:\Users\Admin\AppData\Local\Temp\nsh176D.tmp\modern-wizard.bmp
                                    • Size 25KB
                                    • SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    nsDialogs.dll

                                    • Path C:\Users\Admin\AppData\Local\Temp\nsh176D.tmp\nsDialogs.dll
                                    • Size 9KB
                                    • SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    nsis_tauri_utils.dll

                                    • Path C:\Users\Admin\AppData\Local\Temp\nsh176D.tmp\nsis_tauri_utils.dll
                                    • Size 33KB
                                    • SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    protocols.json

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
                                    • Size 3KB
                                    • SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
                                    • MD5 SHA1 SHA512 TLSH

                                    crl-set

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\CertificateRevocation\6498.2025.9.4\crl-set
                                    • Size 22KB
                                    • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    settings.dat

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Crashpad\settings.dat
                                    • Size 280B
                                    • SHA256 852da7156338948908fcac3945ae46b1f5dce141d718815f90cea162044bbaba
                                    • MD5 SHA1 SHA512 TLSH

                                    settings.dat

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Crashpad\settings.dat
                                    • Size 280B
                                    • SHA256 cebcbccc4ae21480188be389db87a5c009e6bfddb7af206b0ca71b6f498160a6
                                    • MD5 SHA1 SHA512

                                    throttle_store.dat

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Crashpad\throttle_store.dat
                                    • Size 20B
                                    • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                                    • MD5 SHA1 SHA512

                                    f_000009

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Cache\Cache_Data\f_000009
                                    • Size 49KB
                                    • SHA256 1d2118bf3fce6cf890491e8ab8458063b2afcc75011a29e1cbf07518e8469918
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_00000b

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Cache\Cache_Data\f_00000b
                                    • Size 2.2MB
                                    • SHA256 c5514bd67065263fa7a8d2feaeca143eabe9c03c102fb036df989aac2397b724
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_00000e

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Cache\Cache_Data\f_00000e
                                    • Size 48KB
                                    • SHA256 9df553f266758404829f907bb11a7168865d7dd69bb44631e3b035bf0b5364dd
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_000029

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Cache\Cache_Data\f_000029
                                    • Size 1024KB
                                    • SHA256 b76dff60600a57b1c6c76411a7bf39a7e2851573f5426ee3bbf8b84558e479be
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_00002a

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Cache\Cache_Data\f_00002a
                                    • Size 1024KB
                                    • SHA256 cbe87e883ca8aa4ee878d780c65d039d5c5943432e97ec81e4c7d4a7b06f9fd3
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    f_00003b

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Cache\Cache_Data\f_00003b
                                    • Size 37KB
                                    • SHA256 b335267cff7e2578f7bec80cb542e720dc848aa41d9f628ab994e7236b11072b
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    the-real-index

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                    • Size 48B
                                    • SHA256 625e9adf9b4ae180bd3ebe6cbe5d7e362281ed7eaaf88697176bf3f577e54db1
                                    • MD5 SHA1 SHA512

                                    the-real-index

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                                    • Size 408B
                                    • SHA256 9d386cca2e3ccaeb9b451f20c3b12c05224a75be2ccced343124c0234bcdcef6
                                    • MD5 SHA1 SHA512 TLSH

                                    data_0

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\DawnWebGPUCache\data_0
                                    • Size 8KB
                                    • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                    • MD5 SHA1 SHA512 SSDEEP

                                    data_1

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\DawnWebGPUCache\data_1
                                    • Size 264KB
                                    • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                    • MD5 SHA1 SHA512 SSDEEP

                                    data_2

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\DawnWebGPUCache\data_2
                                    • Size 8KB
                                    • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                    • MD5 SHA1 SHA512 SSDEEP

                                    data_3

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\DawnWebGPUCache\data_3
                                    • Size 8KB
                                    • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                    • MD5 SHA1 SHA512 SSDEEP

                                    MANIFEST-000001

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Extension Rules\MANIFEST-000001
                                    • Size 41B
                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                    • MD5 SHA1 SHA512

                                    000003.log

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\IndexedDB\https_monochrome.tf_0.indexeddb.leveldb\000003.log
                                    • Size 76KB
                                    • SHA256 d0dd8c28bf54fbfe85a20ecf9f5870174c09a2d33a0963c18e87ca1f93abb21a
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    LOG

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\IndexedDB\https_monochrome.tf_0.indexeddb.leveldb\LOG
                                    • Size 359B
                                    • SHA256 19f55c414b97177c749c28400ea3a262c10e0c98751abb6312a0fcef4d689123
                                    • MD5 SHA1 SHA512 TLSH

                                    MANIFEST-000001

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\IndexedDB\https_monochrome.tf_0.indexeddb.leveldb\MANIFEST-000001
                                    • Size 23B
                                    • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                    • MD5 SHA1 SHA512

                                    Network Persistent State

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Network\Network Persistent State
                                    • Size 7KB
                                    • SHA256 3f05a1ec6d6f3bab24fee7bedcff2a4da0104e7ba03704c03524c09fd8b01a28
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    Network Persistent State~RFe5962f6.TMP

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Network\Network Persistent State~RFe5962f6.TMP
                                    • Size 59B
                                    • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                    • MD5 SHA1 SHA512 TLSH

                                    SCT Auditing Pending Reports

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Network\SCT Auditing Pending Reports
                                    • Size 2B
                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                    • MD5 SHA1 SHA512

                                    TransportSecurity

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Network\TransportSecurity
                                    • Size 856B
                                    • SHA256 071ae576ee31d1ffe097af26d5edf8457fbcdedfa4a4a7340589e1ac9465aa32
                                    • MD5 SHA1 SHA512 TLSH

                                    TransportSecurity

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Network\TransportSecurity
                                    • Size 858B
                                    • SHA256 7833b4fe1982d3223eafae1e797132bb5d06a84750ee8caf3f2a6e40b1e8f61a
                                    • MD5 SHA1 SHA512 TLSH

                                    TransportSecurity

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Network\TransportSecurity
                                    • Size 858B
                                    • SHA256 affb5d6837618b2c77d97d37c1d261b80e57c7e167a480553800eff65dd86364
                                    • MD5 SHA1 SHA512 TLSH

                                    TransportSecurity~RFe58a19a.TMP

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Network\TransportSecurity~RFe58a19a.TMP
                                    • Size 690B
                                    • SHA256 db8fa9c960e591aa4fba6ee8a2fcfc5501fc8f0aaefc6b728bcf32ee79bd84c0
                                    • MD5 SHA1 SHA512 TLSH

                                    Preferences

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Preferences
                                    • Size 7KB
                                    • SHA256 9254cd7c9854ee9a6a84a14911d9fd2a46ab7864b40a0a77920914647fea7ec1
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    Preferences

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Preferences
                                    • Size 6KB
                                    • SHA256 abe4d4986868a15fb07b22971194a305621bb397de5e05dff5dc2c09d5b3c663
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    Preferences~RFe589bce.TMP

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Preferences~RFe589bce.TMP
                                    • Size 6KB
                                    • SHA256 0a300221f459b338d0ebaf89c0e00e9a5b81b125837649722ae3e3c8eb7ae181
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    index

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\05e593d4-0ab2-42a9-b57e-7139c9503735\index
                                    • Size 24B
                                    • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                    • MD5 SHA1 SHA512

                                    the-real-index

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\05e593d4-0ab2-42a9-b57e-7139c9503735\index-dir\the-real-index
                                    • Size 120B
                                    • SHA256 ed92e2104fbba77554bf0833712238c72eb9a42d6dee8ee76a0165fd30489433
                                    • MD5 SHA1 SHA512 TLSH

                                    the-real-index~RFe58d06a.TMP

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\05e593d4-0ab2-42a9-b57e-7139c9503735\index-dir\the-real-index~RFe58d06a.TMP
                                    • Size 48B
                                    • SHA256 17abfc92a50f627d27a9652b71fb907421289c9aa204c9271a23626c8fe3617b
                                    • MD5 SHA1 SHA512

                                    the-real-index

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\638b7ea5-bcd3-4225-aa55-d576fe19d5d9\index-dir\the-real-index
                                    • Size 1KB
                                    • SHA256 6898084e790e485a301f8da90b05bdd46639eec56a227bdfd606fe66d51902fb
                                    • MD5 SHA1 SHA512 TLSH

                                    the-real-index~RFe5906ec.TMP

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\638b7ea5-bcd3-4225-aa55-d576fe19d5d9\index-dir\the-real-index~RFe5906ec.TMP
                                    • Size 48B
                                    • SHA256 b2ccdcb4cc962616028e05af0273db685c073016d7726d799ea4b38d4a511c60
                                    • MD5 SHA1 SHA512

                                    the-real-index

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\65ea15a9-365f-43dd-8c5c-344d14ac9fce\index-dir\the-real-index
                                    • Size 72B
                                    • SHA256 ec2a98ab2cce1c2b88933b5de17501c8f9d8b39c076a15c9ba0e31d46d69c680
                                    • MD5 SHA1 SHA512 TLSH

                                    the-real-index~RFe58d3e5.TMP

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\65ea15a9-365f-43dd-8c5c-344d14ac9fce\index-dir\the-real-index~RFe58d3e5.TMP
                                    • Size 48B
                                    • SHA256 6c002168e96f508019f01bae8e05c8adb7e5870287d9d4aa9afc1a843761529a
                                    • MD5 SHA1 SHA512

                                    index.txt

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\index.txt
                                    • Size 261B
                                    • SHA256 8661661ba3009a33da46e2642acc46e8834591aa0478704487d89067d3253416
                                    • MD5 SHA1 SHA512 TLSH

                                    index.txt

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\index.txt
                                    • Size 206B
                                    • SHA256 e0c4300b0c6ad09e2cf007d048641fb3fe7cf332a6c9217f6920947cde55d210
                                    • MD5 SHA1 SHA512 TLSH

                                    index.txt

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\index.txt
                                    • Size 256B
                                    • SHA256 72c6f20e76a505cfabb2f0d7a8e19e48cbdeda57bd817a4408d6c4e9b6a5a11b
                                    • MD5 SHA1 SHA512 TLSH

                                    index.txt~RFe5885a6.TMP

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\index.txt~RFe5885a6.TMP
                                    • Size 149B
                                    • SHA256 d7d6967bee94bec2f4ad4d89bf7a8471f98e2cc616475d15459d99c23e096d63
                                    • MD5 SHA1 SHA512 TLSH

                                    the-real-index

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                    • Size 120B
                                    • SHA256 a4939f48cd0492d3755f8a167e3767aa9a684c7e1a399e006efa2dc8821bdd5a
                                    • MD5 SHA1 SHA512 TLSH

                                    the-real-index~RFe58ce57.TMP

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58ce57.TMP
                                    • Size 48B
                                    • SHA256 9abadcc325a7cad07fa08d3f870a15818813a5ae099e8c241a47747dd9a4386a
                                    • MD5 SHA1 SHA512

                                    CURRENT

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Sync Data\LevelDB\CURRENT
                                    • Size 16B
                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                    • MD5 SHA1 SHA512

                                    Local State

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Local State
                                    • Size 1KB
                                    • SHA256 2e813c306bacd9729c9147de340baf9b4355549b2d345f092c58bc2ff02c9f81
                                    • MD5 SHA1 SHA512 TLSH

                                    Local State

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Local State
                                    • Size 2KB
                                    • SHA256 6d6b46953291efc15dfbc66f68672ac7683303ff73fbdfcdc457a2edac66be4e
                                    • MD5 SHA1 SHA512 TLSH

                                    Local State

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Local State
                                    • Size 3KB
                                    • SHA256 6a4678b6609ee27eb7906b245fdeb32c840f227f7bf8a06245723673d88582fb
                                    • MD5 SHA1 SHA512 TLSH

                                    Local State

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Local State
                                    • Size 16KB
                                    • SHA256 7f22c250289210a18549cc5b732e28972cbc7dcbdc4293d4f1439dee4b3c5b2a
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    Local State

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Local State
                                    • Size 4KB
                                    • SHA256 07b8523a274dcde35cb5989422d661e55ef354bb351c4540f8f46fe996496499
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    Local State~RFe584b4c.TMP

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Local State~RFe584b4c.TMP
                                    • Size 1KB
                                    • SHA256 bde2db2c35e0db372b9f5ef4f067298bd78c755fd4fff38ccf81980f0fc22bc6
                                    • MD5 SHA1 SHA512 TLSH

                                    crs.pb

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\PKIMetadata\46.0.0.0\crs.pb
                                    • Size 233KB
                                    • SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    ct_config.pb

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\PKIMetadata\46.0.0.0\ct_config.pb
                                    • Size 16KB
                                    • SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    kp_pinslist.pb

                                    • Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\PKIMetadata\46.0.0.0\kp_pinslist.pb
                                    • Size 10KB
                                    • SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                    memory/396-197-0x00007FFC107A0000-0x00007FFC107A1000-memory.dmp

                                    memory/396-397-0x0000016148930000-0x000001614899B000-memory.dmp

                                    memory/748-367-0x0000012CAF8D0000-0x0000012CAF93B000-memory.dmp

                                    memory/756-403-0x000001AEAC260000-0x000001AEAC2CB000-memory.dmp

                                    memory/1616-640-0x00000114AD330000-0x00000114AD39B000-memory.dmp

                                    memory/1988-620-0x00000299A07A0000-0x00000299A07A3000-memory.dmp

                                    memory/1988-621-0x00000299A0730000-0x00000299A0735000-memory.dmp

                                    memory/1988-76-0x00007FFC107A0000-0x00007FFC107A1000-memory.dmp

                                    memory/1988-618-0x00000299A0790000-0x00000299A0792000-memory.dmp

                                    memory/1988-617-0x00000299A0730000-0x00000299A0731000-memory.dmp

                                    memory/1988-616-0x00000299A0780000-0x00000299A0782000-memory.dmp

                                    memory/1988-615-0x00000299A0730000-0x00000299A0731000-memory.dmp

                                    memory/1988-623-0x00000299A07B0000-0x00000299A07B2000-memory.dmp

                                    memory/1988-622-0x00000299A07A0000-0x00000299A07A1000-memory.dmp

                                    memory/1988-625-0x00000299A07C0000-0x00000299A07C3000-memory.dmp

                                    memory/1988-626-0x00000299A07A0000-0x00000299A07A6000-memory.dmp

                                    memory/2416-322-0x000001E251360000-0x000001E2513CB000-memory.dmp

                                    memory/2488-1114-0x000001640AE70000-0x000001640AE71000-memory.dmp

                                    memory/2488-1116-0x000001640AE70000-0x000001640AE71000-memory.dmp

                                    memory/2488-1115-0x000001640AE70000-0x000001640AE71000-memory.dmp

                                    memory/2488-1120-0x000001640AE70000-0x000001640AE71000-memory.dmp

                                    memory/2488-1123-0x000001640AE70000-0x000001640AE71000-memory.dmp

                                    memory/2488-1126-0x000001640AE70000-0x000001640AE71000-memory.dmp

                                    memory/2488-1125-0x000001640AE70000-0x000001640AE71000-memory.dmp

                                    memory/2488-1124-0x000001640AE70000-0x000001640AE71000-memory.dmp

                                    memory/2488-1122-0x000001640AE70000-0x000001640AE71000-memory.dmp

                                    memory/2488-1121-0x000001640AE70000-0x000001640AE71000-memory.dmp

                                    memory/3780-150-0x00007FFC107A0000-0x00007FFC107A1000-memory.dmp

                                    memory/3780-151-0x00007FFC11980000-0x00007FFC11981000-memory.dmp