bf5e438cf8ce168d432f8a58755ae12a6d24d49bccf4c1630a9426c46d550428

Analysis

max time kernel
150s
max time network
143s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/08/2026, 03:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Monochrome.exe
Size 15.3MB
Sample260811-eaxsssvfnf
SHA256 bf5e438cf8ce168d432f8a58755ae12a6d24d49bccf4c1630a9426c46d550428
MD5 a3573f4a8bc9cf297577736dc0dffdae
SHA1 69d9462af10ffd27918b7439a3cdb3f5df462ecf
SHA512 45feac9125792536a1caba0d69b76961cb5f442d69bb9a782b1a81b5ac1a60a4622e9efca03835eefdd2c75ea08d2ad66255b0c901d762c4fa96dd95966e4eda
SSDEEP 393216:a6BNhn/5daR30f+N538hzp75fxjh/hNw:a6BNhn/5daR30f+N538hN7Fz
TLSH
T10BF6E6217B5B99ACD09BC47483468A624A7130DB0B35B9FF44D492383F6ABF46F38359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Monochrome.exe

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
73	raw.githubusercontent.com
104	raw.githubusercontent.com

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 60 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-es.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-af.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-mn-cyrl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-be.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-de-ch-1901.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-sk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-cs.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-sv.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_1517232431\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-gl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-it.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-ka.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-tk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-et.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-hi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-or.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-uk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_1517232431\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-cu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-en-us.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-lv.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-mr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-nn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-as.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-kn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_920914998\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-de-1901.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-hy.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_920914998\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_1517232431\crl-set	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-fr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-la.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-ml.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-pa.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-sq.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-da.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-bg.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-cy.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-hu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-mul-ethi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-nb.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-hr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-lt.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-ru.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-sl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-te.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-eu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-ta.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-pt.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-en-gb.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-ga.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-bn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-de-1996.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-el.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-gu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-nl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-und-ethi.hyb	msedgewebview2.exe

Checks SCSI registry key(s) 3 TTPs 6 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\UpperFilters	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\UpperFilters	msedgewebview2.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4400	msedgewebview2.exe
4400	msedgewebview2.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
812	Process not Found
812	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
6056	msedgewebview2.exe
6056	msedgewebview2.exe
6056	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
4124	Monochrome.exe
4124	Monochrome.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
4124	Monochrome.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 4124 wrote to memory of 6056	4124	Monochrome.exe	89
PID 6056 wrote to memory of 4592	6056	msedgewebview2.exe	90
PID 6056 wrote to memory of 6076	6056	msedgewebview2.exe	91
PID 6056 wrote to memory of 6076	6056	msedgewebview2.exe	91
PID 6056 wrote to memory of 6076	6056	msedgewebview2.exe	91
PID 6056 wrote to memory of 6076	6056	msedgewebview2.exe	91
PID 6056 wrote to memory of 5940	6056	msedgewebview2.exe	92
PID 6056 wrote to memory of 1852	6056	msedgewebview2.exe	93
PID 6056 wrote to memory of 1852	6056	msedgewebview2.exe	93
PID 6056 wrote to memory of 1852	6056	msedgewebview2.exe	93
PID 6056 wrote to memory of 260	6056	msedgewebview2.exe	94
PID 6056 wrote to memory of 260	6056	msedgewebview2.exe	94
PID 6056 wrote to memory of 260	6056	msedgewebview2.exe	94
PID 6056 wrote to memory of 260	6056	msedgewebview2.exe	94
PID 6056 wrote to memory of 260	6056	msedgewebview2.exe	94
PID 6056 wrote to memory of 4556	6056	msedgewebview2.exe	95
PID 6056 wrote to memory of 4556	6056	msedgewebview2.exe	95
PID 6056 wrote to memory of 4556	6056	msedgewebview2.exe	95
PID 6056 wrote to memory of 4556	6056	msedgewebview2.exe	95
PID 6056 wrote to memory of 4556	6056	msedgewebview2.exe	95
PID 6056 wrote to memory of 4972	6056	msedgewebview2.exe	96
PID 6056 wrote to memory of 4972	6056	msedgewebview2.exe	96
PID 6056 wrote to memory of 4972	6056	msedgewebview2.exe	96
PID 6056 wrote to memory of 4972	6056	msedgewebview2.exe	96
PID 6056 wrote to memory of 4972	6056	msedgewebview2.exe	96
PID 6056 wrote to memory of 3436	6056	msedgewebview2.exe	100
PID 6056 wrote to memory of 3436	6056	msedgewebview2.exe	100
PID 6056 wrote to memory of 3436	6056	msedgewebview2.exe	100
PID 6056 wrote to memory of 1200	6056	msedgewebview2.exe	101
PID 6056 wrote to memory of 1200	6056	msedgewebview2.exe	101
PID 6056 wrote to memory of 1200	6056	msedgewebview2.exe	101
PID 6056 wrote to memory of 4400	6056	msedgewebview2.exe	102
PID 6056 wrote to memory of 3368	6056	msedgewebview2.exe	103
PID 6056 wrote to memory of 3368	6056	msedgewebview2.exe	103
PID 6056 wrote to memory of 3368	6056	msedgewebview2.exe	103

C:\Users\Admin\AppData\Local\Temp\Monochrome.exe
"C:\Users\Admin\AppData\Local\Temp\Monochrome.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4124
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4124.1860.6472996467820611005 /pfhostedapp:870a97eb6c3b09195a55cf14c69cffecd5066ec4
  2⤵
  - Drops file in Windows directory
  - Checks SCSI registry key(s)
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:6056
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView /prefetch:4 /pfhostedapp:870a97eb6c3b09195a55cf14c69cffecd5066ec4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x198,0x7ffcec115fd8,0x7ffcec115fe4,0x7ffcec115ff0
    3⤵
    PID:4592
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1804 --field-trial-handle=1808,i,2899431997281570008,14711197500289643348,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:870a97eb6c3b09195a55cf14c69cffecd5066ec4
    3⤵
    PID:6076
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2168 --field-trial-handle=1808,i,2899431997281570008,14711197500289643348,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:870a97eb6c3b09195a55cf14c69cffecd5066ec4
    3⤵
    PID:5940
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2316 --field-trial-handle=1808,i,2899431997281570008,14711197500289643348,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:870a97eb6c3b09195a55cf14c69cffecd5066ec4
    3⤵
    PID:1852
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=2900 --field-trial-handle=1808,i,2899431997281570008,14711197500289643348,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:870a97eb6c3b09195a55cf14c69cffecd5066ec4 /prefetch:1
    3⤵
    PID:260
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4472 --field-trial-handle=1808,i,2899431997281570008,14711197500289643348,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:870a97eb6c3b09195a55cf14c69cffecd5066ec4 /prefetch:1
    3⤵
    PID:4556
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=4708 --field-trial-handle=1808,i,2899431997281570008,14711197500289643348,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:870a97eb6c3b09195a55cf14c69cffecd5066ec4 /prefetch:1
    3⤵
    PID:4972
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=5032 --field-trial-handle=1808,i,2899431997281570008,14711197500289643348,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:870a97eb6c3b09195a55cf14c69cffecd5066ec4
    3⤵
    PID:3436
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2144 --field-trial-handle=1808,i,2899431997281570008,14711197500289643348,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:870a97eb6c3b09195a55cf14c69cffecd5066ec4
    3⤵
    PID:1200
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4464 --field-trial-handle=1808,i,2899431997281570008,14711197500289643348,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:870a97eb6c3b09195a55cf14c69cffecd5066ec4
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4400
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView" --webview-exe-name=Monochrome.exe --webview-exe-version=1.0.1 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4004 --field-trial-handle=1808,i,2899431997281570008,14711197500289643348,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:870a97eb6c3b09195a55cf14c69cffecd5066ec4
    3⤵
    PID:3368

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 4becf2d0bb00fac17cd7aa918ea45e34fdac2e2534db5cc1d24034abecf4edb2
MD5 ca3fb7c46e0079b19815213727ba1544
SHA1 1ce9644294955c9c7709b389475252e8cc5c6f9c
SHA512 047b5c13fc5428d96c56ae410132d0afdf0eb969c6b0b76c1eedcc93b1ce62f15b42ee05fed53256022651d1ebb888c88cc13887e404fda5bdb4917f445c25f8
TLSH
T184D012123A014534C02020332003710C0400DB1B41095508D438962D2A440540D06441
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 f0cdca4c4c3c1c5a944e269fda6d7f644241c9aa497b687c073c218c8145b9c6
MD5 8f3f72350cf2ea727deb7cdf4151b94b
SHA1 398ff9b1a8fa6d7b0171ef9ff158be77a3e6fa06
SHA512 133d982d1c3b9af91cf3a134cef77da5653342eefc54569b5de14209195b75a66917f52a1ad18b48fdd42bd41df688f27d6e49e650c979770d63a5357cb15209
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 312B
SHA256 4723fda2273885c77a4af3a1fb529d39b634f74176c024bdc6c06dcb40fe6a77
MD5 bec89c8c38ebd655f46c56a529554707
SHA1 6bf3406ecfb7df6a68fc014271ae1f32185f79bf
SHA512 8c1b18e226d0fee48382918ef74118a69ec1a837c7f2c94ecfcc4e78594db5dfec45fa6a2fb7bbc425ed4605469ffbbab2e55e5401a6f065d1504357239cabcb
TLSH
T186E05E69BC402042C7515A30C4C6D18639BEB52AF3673E73E334CC3EB4A1B50438A108
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a6d03.TMP

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5a6d03.TMP
Size 48B
SHA256 cf06c32ff24f219b426998f0984f81bfdb6f8cc8ee10bc2460e7d5e65ff95de0
MD5 97be5fd5ab167cadb3226cf9bfde77f5
SHA1 1a07299b5be238061eb26bdc7f10852d06400420
SHA512 d13acfeb555bdfda44f69b667b500a9dc72ae0fe5f0417a73d8e368e01cd56c676fa2fc819e6c5c94e34d7bdef89618536c004fd6b261d3e6bde7cf190dbe598
MD5 SHA1 SHA512

Submit Download

000001.dbtmp

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Extension Rules\000001.dbtmp
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Network\Network Persistent State
Size 5KB
SHA256 bf4734596a1b44574941d47b9a8e4aedeb9176e62135b477518d52f074895ff7
MD5 1af44bed9b609f6f6c0ce7c448fdbca0
SHA1 a5738ba1122ec772232df4c31008759acc03b6c7
SHA512 e7b89c6bb6fa36bd5ec5a6ea50868bad7243c9e7728eb5997f1ed5785bae92f5f1f772f5de7604a50314e058231686324e5626b06a9fa7bbf69c01eeabc16f55
SSDEEP 48:YALlU1sUfQWU5SDUf6UfDe5UflPUcW9LfUc83Ufp1xJzs/5zs/gMsmVMmsQi3sQu:DzCrnv56CdYG16IrVM6aZWlZnzoQDVd1
TLSH
T127B1CEB3C1E84A2DD81557F45A282F2BCD5E04291A5C3E6AC9D2EFAB93E1131E30174F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State~RFe5aab35.TMP

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Network\Network Persistent State~RFe5aab35.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Network\TransportSecurity
Size 858B
SHA256 afdc998ae8f1fc7d1d0cfdf698659ee7a5fc798e7252a8c4f72e09fe4006d9cf
MD5 93399a12eb9f66fe37acb7652ffb416a
SHA1 efb2d000d4be30fcc90464c96b0afef5520eec30
SHA512 2dfa3d5cc004c7d793ebeb55cd8c90e8a62499bb099c420dcc4b8d5493467272ca8585f0770d9aa988a444c20cd9e5fe729391466418e08501e633f90b867159
TLSH
T1711144E386BEF4AF5078097F1A207C456939A4310152B8F8EF93A23CB0C54E36B1249A
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Network\TransportSecurity
Size 858B
SHA256 cdfe7330a364b0f6b6ae83f3672a676bd909966bb43f3acbf4b1c7c1777c9556
MD5 f99a9ac925e684a7f252cd083dd67537
SHA1 8b641044155360ea5028ef01ebb89682b5c1f367
SHA512 211a9405cae890d283dcaa01361a2698d9981e032d08f61096111da55e81cf37e9e49b3f2c4d275c46a10b0e7a607fc0166c0ed0215c4a21ff084a656a5bfa2f
TLSH
T1351148E386FEF4AB5068097F0A207C45793AA8310156B8F8DF93913CB0D14E36B12496
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe59efd5.TMP

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Network\TransportSecurity~RFe59efd5.TMP
Size 188B
SHA256 c9b12f75ca250574035e2dd99b91ad8cc835e10a3f0d4e0f6d6e570ed4f4aadb
MD5 c1f815ebdc0aa3cc46777fe933c8495d
SHA1 d4d5540fc4786cd49e863968ec744818d0a676fa
SHA512 bea03b63a71e865460d2bd96f59d17f700d6551d50a6424d6488516975813bc77d7fccff50538d0013afda5b725576870726df313aa2c40064b8df63832a63ac
TLSH
T16EC022A200A9E17610BC06260AA06D486F36A0340043A4F8964386B891800A65103842
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Preferences
Size 6KB
SHA256 2a69b03250c350bb6c1a4342f07e886b9ee66650935ad11271fe1d007b38f3cb
MD5 2ae3af6ddb9867f2d6930c0726104dfb
SHA1 e826942504e41c8b54f8cce34c8d205aa4432eaf
SHA512 cac9a407f43cfcb7b777935ef1b1823cb394b127b624359868bd447768a576ca884d2932ecd691df9a13ba0409e979f95d2d0f7414c50fb3656633b7ccf06942
SSDEEP 96:stq/dbYonkb9Tk+Ico5h16Z4Js7/x+6Mhmuec6Ip1ejeVK+g0728XM1C7K:stSB5S8coZJsV+FuIpQj3y7G6K
TLSH
T18ED1B6426E24797B4CCBF108BA29BB13E3F9A07161D52E58EBF8452C04DB6DC630780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Preferences
Size 6KB
SHA256 a5ed1e6189c9d7458ab49b2a193446cc4ee5ab23c6f3c4094f0cd0a41794c1ab
MD5 56025bb07abe778090194b655e4aae22
SHA1 ecb3edacc0156c26dba3f19e36b15374af029d3c
SHA512 188d67ebd5679795c8e349ab89a9b36bbd5e455dc02395f34c6e2eb2eec6030102812b17440b42083973d52929606b10e753fdba9879f1e7095565b74909ac3c
SSDEEP 96:stq/dbYfGnkb9Tk+Ico5h16Z4Js7/x+6Mhmuec6Ip1ejeVK+gW28XM1C7K:stSBDS8coZJsV+FuIpQj3oG6K
TLSH
T1B4D1A6426A24797B4CCBF108BA29BB13E3F9A07161D52E59EBF8452C05DB6DC630780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe59f226.TMP

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Preferences~RFe59f226.TMP
Size 5KB
SHA256 b3fd30a31029e0e4d64661bc5ac95385cac6af9c04c6325285ef72c92528dfb8
MD5 21e9f6a43ae022b1cd8faef836dc5f86
SHA1 b67a28e7715f269d709fecda9154e59e543fcc6d
SHA512 33529818842aff26a7c415c0d12a88adc7fff41ce90e34d5c4c67256f3611f04f2af6e0c35a3f921098be8145cfeb4fbe7284629eee2eca9247fa71d25f01d86
SSDEEP 96:stq/dbYonkb9Tk9o5h16ZZs7/x+6MhmuecmjeVK+gI728XM1C7K:stSB5S2o+sV+Fij3m7G6K
TLSH
T1A7C185426E28797B4CCBF249BA257B02D2F9607221D52E58E7F8452C05DA5DC630790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\1ee254e7-6d03-43fd-8a9b-0db92c79c51d\index-dir\the-real-index
Size 72B
SHA256 e5129056d064d263d2c1e07026e3d3fd469905e6338241715c36d278374fad37
MD5 18c3b8fc01256108910886f073bac815
SHA1 6dd357a966d8842ce0cf1fa34e1f2e88d50f361a
SHA512 841c19e018468682534003da153edda1a0483a27e0544601fb4000ef639f613179ccffc9dbb24e0b089e66c74deed7c09dc1d518bb4c0bde2930eedd90d90826
TLSH
T156A002310B870801C18613B1545123C07611D8FA2616535590F6185C8CA9D71554D472
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a7d30.TMP

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\1ee254e7-6d03-43fd-8a9b-0db92c79c51d\index-dir\the-real-index~RFe5a7d30.TMP
Size 48B
SHA256 d964413f4d9feecc303f7b562507db5902543e5a8be8ee62683a7382ba1d3509
MD5 0f96373274464bbce42a35f6aaa84e03
SHA1 373cba742e59d3350cc70047e13f04fc73c7d20d
SHA512 89bcf6fd30ce9767a0988efa5c327ba14fe137aa7ba509dca94f190434cd90c4bbcd679dc5739e63d052c77eb496c226935c89c94e85a4d0e792fe3600a2f21a
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\28f3c423-4aa9-4936-bb2c-e01749de7a21\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\28f3c423-4aa9-4936-bb2c-e01749de7a21\index-dir\the-real-index
Size 120B
SHA256 cecb95a99753577fab8b5f77a3c9abcff3bb1afe8ea7514057b096f4f87cee46
MD5 7f26fb0c4656ed49cba728431550a038
SHA1 a69f23a70f75353f9c8ea0de3479d238bad00148
SHA512 065a4ba3407d84a2d389cf1a1569ae3255f3694ac8dc3f638f1a38c640a81cf12bf93d8af5f796d8b2e53fb6b23a73c785edca8dc3f81c265207b6449724dd17
TLSH
T174B01239910B030ADEC3537052810AA312102CD9374177578084048C545B28C1307488
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a6dfd.TMP

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\28f3c423-4aa9-4936-bb2c-e01749de7a21\index-dir\the-real-index~RFe5a6dfd.TMP
Size 48B
SHA256 1d24a0c48a4c2f45d01376107a0738223f61b949e9b5473facc950b768d195fc
MD5 b79d18074a42702c23734302b7d4e493
SHA1 5e13708c45590436ac22fc43ef5b0f95feec9470
SHA512 b845f791f73688ecc5c09d13ed6800be4fecb8a32f5372deabfbeb1ed48ca1365bdf514a5ee2f751c78edb064d98d56739caab19d31d74ebffc6d92ae623dd53
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\index.txt
Size 215B
SHA256 f623114d9eee3ac39d1def7357f5626070f283ad92497b10edae47ed632e2e23
MD5 c4e404ef4e40e332cf75731d45443c09
SHA1 42ce5f4a3c3449e05e2a5b84cc88e35c9bc162ab
SHA512 4a9c75dd083c7024927d447595f630b18a24632b8544df7667b945363cf9076a76562181415dac920ac1bff94808a47c1908d634347d72174da89dfbdcb2b90d
TLSH
T114D0227F25A34C319BC059C4E20CF28E54038C7C5884C80FF030B84218F23601E4EF40
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\index.txt
Size 210B
SHA256 03ef9afa6c929664a7696526570b105b9bd4615ac50941248c7ad9e9fceb765b
MD5 af4bf74ead1792155347e47e4f6e4e03
SHA1 1a967c8256099d9634523cde0aa4946fc67ef2d0
SHA512 37639b83837cf0ea6833ddb468e4dc112dcad4e47c1c202853b0e1edbba0a50a790be2fb50eb80218a8174c00640edd3d7c5f43b7959defe500acbc8ea1ce5d1
TLSH
T16CD0227F29A34C368AD05AC4E54CF24A5443847C6885D80FF0B0B8030CF23A01D0FF81
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a2ef1.TMP

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\CacheStorage\6ea8ef891ade69a4c5b9e8cdae7b4816f4bd28a0\index.txt~RFe5a2ef1.TMP
Size 149B
SHA256 04cc81a77d10125c995cf2e2fcdd1a5f542eeb95f90c042705b1228ceca08811
MD5 a61a8261cf6b359fec43a70af5efe622
SHA1 5299dd11aa94959e87fe3adb12591e1a6566618c
SHA512 ffb19b89de0388553a8e2a1349767dff8e54585f50f1f02936743e99a983203b5d7706c13aa33fbe7fd4821fdb7f62c8d688e72185cdf5639ce2f9392311e299
TLSH
T1FAC09BBF2451497567C059C5C45C669F65078C6D5D44DC1FF134BC5214F22214D1EF55
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 66c40b392e7015c602ad19f7f8fac41ed697d8bf84d9359dda3831f404d98ebe
MD5 97bfd9174fa834cd54fc039d4d54bbc0
SHA1 399aed32fe8f020838ef437d1633e50738a52835
SHA512 b7028167f134fd43bb39959c57f73671d8e42a81f45f1b84f3a0d2fda8a3b705d4cb9b25dbf8b2bfaefd85d91494120f0cd06274041c039fa35729071e203de5
TLSH
T173B01255208B1142CF0126F0664401983750EB13C2023A0345A061EBCC0318405110C1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a6d32.TMP

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a6d32.TMP
Size 48B
SHA256 efb187312d894a2221bde541bf885a271a9b2b7d96bcc9ec362481d92151071f
MD5 024224db0e38d867997590b4cf7d7d40
SHA1 6964f4bd2843ea6ec32ed1cdfdf8be5554b7e89b
SHA512 5691f4d8e4874567a2631f9ede6fc077650258e039f6ed878476607714070d546eff1be58f41213ee8d8e6051871568120265614afbdad2706f0ff0725157cdc
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Local State
Size 15KB
SHA256 73c7517928675fa0617dc2f3e571683d8c9cba0d442960b0ab7a223e7576b809
MD5 e2a6e6e993d5a0f6001aed9abaf4a394
SHA1 630b786e9206b46f59b51efcbf44bead2a8e68af
SHA512 0482bf7fb352a9f8e45a446ee93ee5ad632429973f5160e97efa3c98182f1f1f3012a523fb3ec59bb1ab9eebfae7f99792a9b72367df56c173506e70a0cc63f7
SSDEEP 384:B+aQikB+z/xvxjg/qhEwNBSQx0+mdmdZ9zl:M/UxvxjgC+qheQFl
TLSH
T13572AE2B95687E3395F7E6047D590B9BCBBC98F290827A744DAD6F0D06D72980302C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Local State
Size 2KB
SHA256 9667943349e818987c6fb3a5d893ab531bb29d7411eef02edb1e6b677ef82c50
MD5 24a752143d0e21f5c409d6fd7b321e92
SHA1 ab6e92138db4026c5852adbafe7926447a1021f9
SHA512 16c239fbf7cfcad90b3e4e4d212e1f88f1701ff27f7c23d8f56e8ed976139876d378f08c0091766ca6794bf2e7bd86e1b35fd94ff3fbc211ae37dbd78887c3a4
TLSH
T1195172B3B914A773C9F39608795B2F339F7950A2AA962F209ADC1B1C01D755C5301C36
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Local State
Size 3KB
SHA256 df74299dab4ac6e831348dfdc80bac40bf9e0cf11dca2635ca2b87695879f90b
MD5 5a9834e37aa2bffedd17a3da062149b7
SHA1 d47425ef7eabf23323ee16f6a50cd9622ea10c69
SHA512 42d41d00ab3ffa5db7f62d657a5f98fb27858ca1be76d752229a64ea2ae7e26f24b81f094cbe6ef5dcd4744b23c885f5bb66084ad12a127254d5e94596105479
TLSH
T1276184B7B974A6378DF3DA04B8862B26ABA95073E5C53F65CAEC0F0C01D729C1341C26
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe597209.TMP

Path C:\Users\Admin\AppData\Local\com.monochrome.music\EBWebView\Local State~RFe597209.TMP
Size 1KB
SHA256 bbf8eb950b899c846570fbdcf2c08c55eec0bb3aef506a9c73cf949565dc756f
MD5 1720297e53454976aa4e4f508a9d4e0b
SHA1 82bf582b53030e500631e3a4cab9520176cde0cd
SHA512 ac64e84a069d2e34bb50276fc8be0bdc7c04d8c4a15cdf3e78da3d8bbed0ed877d56aee56dd79a7ce3be72bdfe313648eeba4ba270220899d83c9f27245b5b5d
TLSH
T14E2162F2F5686B72EC92A24535676B7B5F3550B791515F00A5CD4A0D02E604C9626C32
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-bn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-bn.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-mr.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-mr.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping6056_2144115218\hyph-nn.hyb
Size 141KB
SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
MD5 f2d8fe158d5361fc1d4b794a7255835a
SHA1 6c8744fa70651f629ed887cb76b6bc1bed304af9
SHA512 946f4e41be624458b5e842a6241d43cd40369b2e0abc2cacf67d892b5f3d8a863a0e37e8120e11375b0bacb4651eedb8d324271d9a0c37527d4d54dd4905afab
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgY:p73HEUP8dsiinTThjy90VKY
TLSH
T1C1E319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/260-289-0x0000024C9E9A0000-0x0000024C9EA49000-memory.dmp

Download

memory/260-189-0x0000024C9E9A0000-0x0000024C9EA49000-memory.dmp

Download

memory/260-42-0x00007FFD0DE90000-0x00007FFD0DE91000-memory.dmp

Download

memory/260-362-0x0000024C9E9A0000-0x0000024C9EA49000-memory.dmp

Download

memory/260-373-0x0000024C9E9A0000-0x0000024C9EA49000-memory.dmp

Download

memory/1200-642-0x0000014CA0DF0000-0x0000014CA0E1F000-memory.dmp

Download

memory/3368-690-0x0000014202ED0000-0x0000014202EFF000-memory.dmp

Download

memory/3436-434-0x00007FFD0D480000-0x00007FFD0D481000-memory.dmp

Download

memory/3436-446-0x000001F54BDC0000-0x000001F54BDEF000-memory.dmp

Download

memory/3436-435-0x00007FFD0DF70000-0x00007FFD0DF71000-memory.dmp

Download

memory/4400-665-0x0000021984600000-0x0000021984601000-memory.dmp

Download

memory/4400-663-0x0000021984600000-0x0000021984601000-memory.dmp

Download

memory/4400-664-0x0000021984600000-0x0000021984601000-memory.dmp

Download

memory/4400-661-0x0000021984600000-0x0000021984601000-memory.dmp

Download

memory/4400-666-0x0000021984600000-0x0000021984601000-memory.dmp

Download

memory/4400-655-0x0000021984600000-0x0000021984601000-memory.dmp

Download

memory/4400-662-0x0000021984600000-0x0000021984601000-memory.dmp

Download

memory/4400-657-0x0000021984600000-0x0000021984601000-memory.dmp

Download

memory/4972-287-0x0000021BC14F0000-0x0000021BC1599000-memory.dmp

Download

memory/6076-26-0x00007FFD0DE90000-0x00007FFD0DE91000-memory.dmp

Download

memory/6076-255-0x000001778CDD0000-0x000001778CDD1000-memory.dmp

Download

memory/6076-250-0x000001778CD80000-0x000001778CD81000-memory.dmp

Download

memory/6076-197-0x0000017786480000-0x0000017786529000-memory.dmp

Download

memory/6076-253-0x000001778CDD0000-0x000001778CDD3000-memory.dmp

Download

memory/6076-254-0x000001778CD80000-0x000001778CD85000-memory.dmp

Download

memory/6076-248-0x000001778CD80000-0x000001778CD81000-memory.dmp

Download

memory/6076-249-0x000001778CDB0000-0x000001778CDB2000-memory.dmp

Download

memory/6076-251-0x000001778CDC0000-0x000001778CDC2000-memory.dmp

Download

memory/6076-258-0x000001778CDF0000-0x000001778CDF3000-memory.dmp

Download

memory/6076-259-0x000001778CDD0000-0x000001778CDD6000-memory.dmp

Download

memory/6076-256-0x000001778CDE0000-0x000001778CDE2000-memory.dmp

Download

memory/6076-188-0x0000017786480000-0x0000017786529000-memory.dmp

Download

memory/6076-288-0x0000017786480000-0x0000017786529000-memory.dmp

Download