Analysis
- max time kernel
148s - max time network
143s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
- submitted
12/08/2026, 02:52
General
- Target Debug كرت فضي/Debug (2)/Debug/Melanchall.DryWetMidi.xml
- Size 2.1MB
- Sample260812-dcrtwstygx
- SHA256 f2da1cb18492541cf59455162ce2bdfdba18a98d7a0a8089c5912b6a1ff08446
Malware Config
Signatures
Processes
-
C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE"C:\Program Files\Microsoft Office\Root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLED.EXE" /verb open "C:\Users\Admin\AppData\Local\Temp\Debug كرت فضي\Debug (2)\Debug\Melanchall.DryWetMidi.xml"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4196-2-0x00007FFD19D80000-0x00007FFD19D90000-memory.dmp
memory/4196-5-0x00007FFD59C40000-0x00007FFD59EA3000-memory.dmp
memory/4196-8-0x00007FFD59C40000-0x00007FFD59EA3000-memory.dmp
memory/4196-9-0x00007FFD59C40000-0x00007FFD59EA3000-memory.dmp
memory/4196-4-0x00007FFD19D80000-0x00007FFD19D90000-memory.dmp
memory/4196-7-0x00007FFD59C40000-0x00007FFD59EA3000-memory.dmp
memory/4196-6-0x00007FFD19D80000-0x00007FFD19D90000-memory.dmp
memory/4196-11-0x00007FFD59C40000-0x00007FFD59EA3000-memory.dmp
memory/4196-12-0x00007FFD59C40000-0x00007FFD59EA3000-memory.dmp
memory/4196-14-0x00007FFD59C40000-0x00007FFD59EA3000-memory.dmp
memory/4196-13-0x00007FFD59C40000-0x00007FFD59EA3000-memory.dmp
memory/4196-10-0x00007FFD59C40000-0x00007FFD59EA3000-memory.dmp
memory/4196-1-0x00007FFD19D80000-0x00007FFD19D90000-memory.dmp
memory/4196-0-0x00007FFD19D80000-0x00007FFD19D90000-memory.dmp
memory/4196-3-0x00007FFD59D9F000-0x00007FFD59DA0000-memory.dmp
memory/4196-15-0x00007FFD19D80000-0x00007FFD19D90000-memory.dmp
memory/4196-18-0x00007FFD19D80000-0x00007FFD19D90000-memory.dmp
memory/4196-17-0x00007FFD19D80000-0x00007FFD19D90000-memory.dmp
memory/4196-16-0x00007FFD19D80000-0x00007FFD19D90000-memory.dmp
memory/4196-19-0x00007FFD59C40000-0x00007FFD59EA3000-memory.dmp