189a50ed4062f06ae3c217af6ce570c8865e745e075316b6e5188d2d945e3fa7

Analysis

max time kernel
150s
max time network
142s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 11:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-03_78a208538e82a0ff3908a6da92ee29ae_elex_glassworm_remcos_stop_tobfy.exe
Size 10.5MB
Sample260804-ncf3havsct
SHA256 189a50ed4062f06ae3c217af6ce570c8865e745e075316b6e5188d2d945e3fa7
MD5 78a208538e82a0ff3908a6da92ee29ae
SHA1 5b6deef1780373b6d0c4f874b8e0c8fff5193f03
SHA512 a1fe2b37a03955440b2be3ce5e7ae6765b2cc3e5404c73f6331641d3a2135e13e5fe3f9e1bfb03fb494fcc02c6601f593f554f69ab9ce4f88e8342c9ddf92506
SSDEEP 98304:+zuydx/MH3D8GynF9S7dCcz31dI3tarxWpYF2Sc694X0KsDDRcbrk:+xUXD89FaPprxEYTcO4qDDm/k
TLSH
T157B69E02F7E540A4E4E72AB0987B76259A3ABE0A47F4C1FF96547D0EAE327C15870353
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-03_78a208538e82a0ff3908a6da92ee29ae_elex_glassworm_remcos_stop_tobfy.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\hardware\description\system\CentralProcessor\0	2026-08-03_78a208538e82a0ff3908a6da92ee29ae_elex_glassworm_remcos_stop_tobfy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	2026-08-03_78a208538e82a0ff3908a6da92ee29ae_elex_glassworm_remcos_stop_tobfy.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3464	2026-08-03_78a208538e82a0ff3908a6da92ee29ae_elex_glassworm_remcos_stop_tobfy.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3464	2026-08-03_78a208538e82a0ff3908a6da92ee29ae_elex_glassworm_remcos_stop_tobfy.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-03_78a208538e82a0ff3908a6da92ee29ae_elex_glassworm_remcos_stop_tobfy.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-03_78a208538e82a0ff3908a6da92ee29ae_elex_glassworm_remcos_stop_tobfy.exe"
1⤵
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
PID:3464

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

PS4.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\PS4.dat
Size 484B
SHA256 de0cbf678226d04528cdfe667217eb5e24833e169a818c4d633771acfc274a1b
MD5 5eecf5c5045b9f6df7920d8002dbe901
SHA1 393138a461474bccbcafc3745a752b5f183ad8c9
SHA512 3e4eb313813268a75556a7a76c845f1c77c2b643455fdfaba7b7f856d4ceb62fe390e024b3051a28226fb2847b91e9788a479042c621b273f97aced24c91fb44
TLSH
T19EF09E676C08546358842432C77A7A3D14208C7CF789CDAA8DEBCC5CE976540003C10E
MD5 SHA1 SHA512 TLSH

Submit Download

YouTube%20-%20Vertical%20Video%20%284%3A5%29.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\YouTube%20-%20Vertical%20Video%20%284%3A5%29.dat
Size 484B
SHA256 3ba76ccb0380fde1793571938bf455f70906977f174295ba81f2992ff9ef01e6
MD5 986dae1f2d8c538709acbe392d115cb5
SHA1 b964fb14fbe257ad1cdba140a4117164f9e7f8e3
SHA512 2ebb1e8fcedf764f142117eae7b5f5c8ef137e3ff4157285dec1885897ac7241d039eb6b3c94986db88a83d0687f17052644c61c89aaf1017a4fb6482b35db0f
TLSH
T14AF09E67AC0854726C846432C63A792D1520CC7CF785CDB98DEBCD5CE9B6800007C10E
MD5 SHA1 SHA512 TLSH

Submit Download

YouTube%201440p%20%282K%29.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\YouTube%201440p%20%282K%29.dat
Size 483B
SHA256 d9083c33c460165687bf9402dfb3068fd096fd956e33cd9303b2d29f06684709
MD5 4885ffe9da2d96661bf27a0e5898cac8
SHA1 6df1b3e7e8776ada563a0c3b14032239b8d46390
SHA512 dd9958fffdfdaf8ee00ddcb35495b45e03e93664f5437099d882ca315724ec9574d63d881c280e1600b0aa08542048fb32e99e931c8c3d2bedbd73e3ff1bcd0f
TLSH
T174F02E676D0855626C846536C73A793E14208D7CF795CDB98DEBCD5CE976541003C14E
MD5 SHA1 SHA512 TLSH

Submit Download

YouTube%202160p%20%284K%29.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\YouTube%202160p%20%284K%29.dat
Size 483B
SHA256 97d09214d6d22f649d7c27a9ef49fc40a4d7b6aab698282062e9cf07ab468444
MD5 ee49e3f82d40b9186643e4fcd39582b8
SHA1 c2b2cb6d3144483b5b7e9a26dd37c9b1be74e315
SHA512 bc2b0adc37f5850f6c43ace19d65820fcd43d803f67b95bb0454ed5280e3bd4e8821d6675f50474c5f547d2fecb63481672dbadec8091825341875c610c9ed71
TLSH
T1DAF09EA76C0815625C842432C63A793E14208C7CFB89CDB98DEBCD5CE976540003C14E
MD5 SHA1 SHA512 TLSH

Submit Download

YouTube%20720p.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\YouTube%20720p.dat
Size 482B
SHA256 2d94adbaf849e40d46ec02632c7025bd53a158bd0732d7e302be2e56da8557d0
MD5 b53a1851ee6a504a5b3450d1f1e18db4
SHA1 35ec235ccb19ec4080243c6bbc26442d67d5b0a5
SHA512 725f5bb8f7237a0b10f86ada0ff987ac0506fb4f49517af8a40d298c8caea4ae21b6f4c7621a43fa14a4792388a91c1ab34b735e8301be724927598b48079866
TLSH
T1D3F09E676C0854626C842432C63A7A2E14308C7CF795CDA98DEBCD5CE9B6401003C14E
MD5 SHA1 SHA512 TLSH

Submit Download

Default.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\Default.dat
Size 483B
SHA256 3ebab07816a054e2a63d47088bc396cb35ab56f9c514e9246fded7aab2e061fa
MD5 d8a1d13b6a709284f4b6f03944c5a777
SHA1 92b682c0feb24ff7eff26b37179e84714dc48d7d
SHA512 00a23f21cc7bca0de880dc3c8d8fe43cb668765587d7348c381816c64400da15b63a65114aa7b07ca1ad1a576937469c8987cb0c0282077688497921e36fbb43
TLSH
T1B9F02E676C0855625CC46436D63A793E15308C7CF795CDA98DEBCD5CED76541007C14E
MD5 SHA1 SHA512 TLSH

Submit Download

YouTube%20-%20Vertical%20Video%20%289%3A16%29.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\YouTube%20-%20Vertical%20Video%20%289%3A16%29.dat
Size 484B
SHA256 f3b0af75a4537ff0d80bf14afd9288e58ba414370d8524e8145ef205e51f75f7
MD5 ed28e04db66bf78a0209ecbbd2dfef9d
SHA1 4eedf8f87f9c812cd42dc8dec516846b6b16bb6f
SHA512 77c4aec450b95241614b0f4962576340fd1104f199bfa374ab980507dee5742f9fb6a049bb25fa0c512e1e67085265951403c3d79f60aa714b155ac46e3766cc
TLSH
T14AF02E67AC0854726C846536D67A792D1520CC7CF795CDB98DEBCD5CE9B6840407C14E
MD5 SHA1 SHA512 TLSH

Submit Download

Animated%20GIF.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Animated%20GIF.dat
Size 203B
SHA256 95a0216e4b898535e9fde3e2f3dc451188fa0c7ab474cf5364ea0ed23cf1ba9b
MD5 b87cc2e85d1b38ce6721841aeb944959
SHA1 c6dbefbbe4dff194f8011a98222bb9ddd6cc03bf
SHA512 0bb88c58a80b8b0fb9247c191433cbb71f93336b557779ea1a4c5b65ddacff654040ef5470e980b30ff32adbcdee60173188217157f4b9818dac777280fd1cb9
TLSH
T165D012A71E9480B3D4800979C250BD251001EEE97FA4CDB148FACC5CAF77C8000BC365
MD5 SHA1 SHA512 TLSH

Submit Download

Facebook%201080p.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Facebook%201080p.dat
Size 484B
SHA256 edccce9d96efb8e964ea9d67ae9d75e8a69896f2f4d2bf49b46332f98d5732e8
MD5 095cdcf5f0b3b9833ffceba3e9e2cb91
SHA1 01ed1292d6f9fb414ac72f72595e9c22ba00190a
SHA512 8b9577fc6625959fce694eef57ee4d793ddbd04e2788d665f0cd9447917978ad7505568f70f9a305cde9a44639d748dd3a3b0f4c4bdc153d5e87f01ab93ede6b
TLSH
T187F09E676C0854635C842432D67A7A3D2520CC7CF789CDBA8DEBCD5CE976400007C10E
MD5 SHA1 SHA512 TLSH

Submit Download

Facebook%20480p.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Facebook%20480p.dat
Size 481B
SHA256 9032142620bcffafb741911906500159c24aa74e41e4d399a556efeaadd1cf7e
MD5 9d464516256be22f266a00510ee2af7e
SHA1 5b7e7346f518fcd29701cde078161e7d4a0fc203
SHA512 88d52ef07cf60f2994f5c22739f5b8e7ffc4f6708c14a8d598fc53710a9892e30df44d34a789d60c741e7868c638766e7a41b2880b09116129722bb4ecde4137
TLSH
T1D7F02E67AC1814636C846576C63A792D14208C7CF795CDA98DEBCC9CED76541003C24E
MD5 SHA1 SHA512 TLSH

Submit Download

Facebook%20720p.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Facebook%20720p.dat
Size 483B
SHA256 cca275b89dabaea3d71078a883f8b2d5aa66c4c13cdcb0f4f16e4d242616e033
MD5 66f7701ff524c397dd386ba51cf5424c
SHA1 08d58ef9c27e2a5c4690a627220408fb848b3511
SHA512 c48ef0d805949c441b64583a1b09b231a9c9a1cae5f2fc0984ea63e91a0272573854827f9ff0e7b925be5b278cfd8d7a29e42e208d9863ad9f35f718549c6d5f
TLSH
T1E1F09E676C08546328842532C73A7A2D14208C7CF799CD6A8DEFCC9CE9B6540003C10E
MD5 SHA1 SHA512 TLSH

Submit Download

Internet%20Video.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Internet%20Video.dat
Size 447B
SHA256 bf8c927f01ea3dbab2004ad9bcbf1ac11863e0b75015c7c002f092c546dce916
MD5 94ce49ca59596a8c37b670f8e9aea146
SHA1 bd4c003c4d7d99d6758be8374b69c6ba051f1660
SHA512 a57e31f26c99261b9789ea2dc64c55e14a7974554eb6a7139e397f820f82f0a552ea08ef69290b5ddad82b6bb481e0452f307a49456b531dafa2d295848d30a6
TLSH
T13EF05C772D0456526C851632CA363A3A2530CCBDF5C5CEBA8CFB8C5CEA7985040B814D
MD5 SHA1 SHA512 TLSH

Submit Download

PS3%20720.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\PS3%20720.dat
Size 482B
SHA256 5906d9f29338e141a6aecece90a3729ef4bdc0437428d3b3351101de81941b0e
MD5 a9e4349bd0962dab1cbeedf15231fc61
SHA1 be44b53af8766c7c4d319baa71e8b1102407ad6e
SHA512 1324394ecf08e9f9aa9cd896f9df0acc5cb93547272d129c7752af22442d74973c8d5c4e9679bd227367e451e54b09073a3b1aed3b8f1c7ee9523b5ce106dcd1
TLSH
T101F09E676C08546368842572C63A7A2D24208C7CF799CDAA8DEFCD5CE9B6400003C10E
MD5 SHA1 SHA512 TLSH

Submit Download

PS4%20Pro.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\PS4%20Pro.dat
Size 484B
SHA256 17cbe4143db916c4e79e1f491112f21359db46379f7985678c34fc3ae6b5c24c
MD5 6085a62ed0909dde1baa21880f53a9db
SHA1 160787a65973cff18ce85c828454bb7bd0addb24
SHA512 c0e6391cfbf000e1973b58bde16162e8154a0fb8cc8f4b7fd6bce1ec3744213da2d8e50399b904feb9bf42a0fd7d9f99a264d2d095799c76a28a9696a3abf594
TLSH
T186F09EA76C0854635C842472C73A7A3D28208C7CFB89CDBA8DEBCC5CE976540003C10E
MD5 SHA1 SHA512 TLSH

Submit Download

PS5.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\PS5.dat
Size 484B
SHA256 ad926282a522b563f2547935054ee3bb0022dbdcd8c0964b56b9286fe4eb1a1b
MD5 fa64fb416dcf191fc93c3caebedc311f
SHA1 247d211e91c61ada2780d5ba0d792dd7f595dc6d
SHA512 ff01873689d9df78297471e7a9ccc16102c83b438ca921c29efa37924e120e412670ee56e2a168877a9681190768e5e9c23860883d48cb2dcc3076a79416b4d0
TLSH
T14BF02EB75C08656358846576C77A7A2D28248C7CFB99CEB98DEFCC5CE976540403C24E
MD5 SHA1 SHA512 TLSH

Submit Download

TV%20NTSC.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\TV%20NTSC.dat
Size 481B
SHA256 e8a9783152f0c00f2406660bcd53d477a4079a4399ef92a69dae5110e75f4767
MD5 0156fbc4bfd6e88b9a69d0a50cef0123
SHA1 9c18e7f4c66a966078bc697a3288551d3501365d
SHA512 4c87db505e39c1d94384269477bfd5c8ff1498df97c5ca780509bf8038a2cd6f3eda79d26bb397b3df6aec09bfdafcb0547f4d58b9d8d5aca254b90233fad68e
TLSH
T18DF02E676C0815626C846576C639792E18208C7CF795DDBA8DEBCC5CED7A541003C24E
MD5 SHA1 SHA512 TLSH

Submit Download

TV%20PAL.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\TV%20PAL.dat
Size 481B
SHA256 371b1290b7d047a3f8542fd1a9bc21c489c70cfb0392ed9534dfa96db97733e8
MD5 1d0d31b5da6de39ef04b1b1e9ffd5523
SHA1 d47d1afd0b0406311c24684c1be1743ee15e1917
SHA512 e8f79675d70640ef7dbd1e327f0b5cd8a95ad3df2227bcf0e496b8fe8c70abf1cdcb86b1fd8308b0a6be8eefdb040c648543336d324b0ea9630da3e18d4b4ef0
TLSH
T1CDF02E675C0C14A258846476C639752E14209D7CE7D9DD798DEBCC5CED76541003C25E
MD5 SHA1 SHA512 TLSH

Submit Download

Twitter%20MP4.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Twitter%20MP4.dat
Size 482B
SHA256 9cb4f1ab44fae1ff467d88be05069afbd605e5a2dce42f40d0cf03b9d761693d
MD5 f26e6a1f86f44e3e0fbb8f0703cd49c2
SHA1 fa1345c08155dbeac4058475cb3ed59d7e69c2c8
SHA512 02e716e56f72e1461a3d4d6c1cba9086581009b5f658c74cb51a0a2bda49e58d436b13beb6cec4c6652ac33fd09accbdf0a7b4523303c1028e9336a0fff02664
TLSH
T124F09E67AC0C547228846432CA39792D14208C7CF799CDA98DEBCC9CE9B7800403C10E
MD5 SHA1 SHA512 TLSH

Submit Download

Vimeo%20MP4.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Vimeo%20MP4.dat
Size 482B
SHA256 b2852e173472c68d093341dbc0757505d54a6ee0ec6cc4ec7c89f7f1e1b32d23
MD5 c8aa019395c5da3d66aad9b42010dfa4
SHA1 710f8a238807960b7e9b144333129260db52b545
SHA512 27b0bdd33b57507bf30076385c806f1ab1c489daf1883d748674a5cd39a73e91a431f30c908047f48d97c85a5461135e7cbdf499078ca0fd14e1bbea42b72127
TLSH
T13EF09E676C0C14622C842432C639792E14308C7CF795DDA98DEBCD5CE9B6401003C24E
MD5 SHA1 SHA512 TLSH

Submit Download

Widescreen%20TV.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Widescreen%20TV.dat
Size 482B
SHA256 c03878f47765535655a187bed85f3c8a29a2d34cb85bb12871376f939e17e454
MD5 52efff8aa9febbacbdd819aeb3f4d9df
SHA1 a13e9b88c5619297a1f0e1959357252d6bf5be14
SHA512 1edff88102d57b23de2e13678514539b84c80f6f7de06e7be11c0f4d5ea7225c26990cef9ce4072dadbe57a3168415ba04af7c7e7ca7b15cc64aabca22bd0f28
TLSH
T1E5F02E676C0C15A25C846476C63A753E15208C7CF795DDB98DEBCC5CED76541003C25E
MD5 SHA1 SHA512 TLSH

Submit Download

YouTube%20-%20Vertical%20Video%20%281%3A2%29.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\YouTube%20-%20Vertical%20Video%20%281%3A2%29.dat
Size 483B
SHA256 30177d88b89e3a5d54647d7ed4c9e7922106ba0f54bfda5f1b0f61f04a97f773
MD5 85e08f6cd7ca4f89ccc591f6978de2b4
SHA1 34f746d373da245a9dac73d1d45d26104976db60
SHA512 b6be4886457732cf225eea10084b87c4480123ea6a981f4efb86cf9cd850994321d36b1530201feee4d3d04b7c4e293177be69ce93d2a7d6167a7696662809b5
TLSH
T165F02E67AC0C6462AC846536C63A7A2D1520CC7CF795CDBA8DFBCD5CE9B6940407C14E
MD5 SHA1 SHA512 TLSH

Submit Download

YouTube%20-%20Vertical%20Video%20%282%3A3%29.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\YouTube%20-%20Vertical%20Video%20%282%3A3%29.dat
Size 482B
SHA256 8a6aab0dc4469a2e3b9f352c42b12857454c43f13a73a0671e0fab8bc7b67357
MD5 d670bdf7adb087a8a05bf59e9e295ade
SHA1 e07fa5e1e78d4e699261381a63d9b984d56425cb
SHA512 6de38711fa266999335ce90b91dac858f03919b67f464d64b85772e429ca5b50bada7cfbc916001896ef806c68270c4af3350412916f59aff10ff8d3c9ce3a3a
TLSH
T175F09E67AC08A862AC846432C63A792D1420CC7CF795CDBA8DFBCC5CE9B6800007C10E
MD5 SHA1 SHA512 TLSH

Submit Download

YouTube%20480p.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\YouTube%20480p.dat
Size 481B
SHA256 c6b68f3e9ca18b14508a024c8ee3ed6ecdcdc3d7735b0e21da69a84ada311c2f
MD5 256f46cdfd255a5ad4f9e549ba518b70
SHA1 3e3ca3bb0e0bd9aa0d431ec38e3f1bdda5ccee24
SHA512 07e5b49c365989d37fdf1690b948676e20273927ca3cb1bb0c816b59ba2feb8474017b0f958604ad9aaa0650af32992fa5e69db3891f56be76ad0f66ae7fc210
TLSH
T17EF02E67AC0815626C846576C63A792E14208C7CF795DDA98DEBCC9CED76541003C24E
MD5 SHA1 SHA512 TLSH

Submit Download

AppleiPad5.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPad5.dat
Size 483B
SHA256 e384d667ca18eb01dba8c1ad7b5bf629a03d44e70736161f03c9a6ee6f1f2b55
MD5 93ed1eadc6cf992624ae703f1d81e42a
SHA1 a4d7cf66708a833cec8c57a4f74ebe45c1e71619
SHA512 a8560abed03b0d8b945b6552d3e4b9f4143aa536bc47955f7a782b8bf2c6a4b8fef4a21615313b473e5c9478c8e849fa2b10c628d56f028445c6cfdc863e6aee
TLSH
T154F09E676C0814625CC42432C639793E18308C7CF785CDAA8DEBCC5CED76401003C24E
MD5 SHA1 SHA512 TLSH

Submit Download

AppleiPadAir.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPadAir.dat
Size 483B
SHA256 ff59d543dd7d82ec91365f816c06b0c122b8a34d34b238486ef5931de1d05666
MD5 a4ccf0d8d6f79e90e2e163659fccebf8
SHA1 350a7ab14a263422de742eec3bbfacceb3dcc629
SHA512 e8f48fa579c83e92bffa13fd7ec2f8bb5f48f0bf189bc1339024b796e339e2a98306ccf2fefb94d514b4a5d080b01df1685502a6b7de2f891bc4df18befc6342
TLSH
T1CEF09E676C08546258C42432C639792D28308C7CE785CDA98DEBCC4CED76401003C24E
MD5 SHA1 SHA512 TLSH

Submit Download

AppleiPodTouch2.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPodTouch2.dat
Size 481B
SHA256 42aae7247c976e249884fa55aefcf7a2c56d8319de520d31ba92df032b838795
MD5 520afaefdc4e6c66adc291a8d114c14e
SHA1 24fa045eaef7b8186107c916ae032761b1168f02
SHA512 57f6b299416dc83da2af07d940a3cdeb5bf78e86e1c09d6ed01b77dcfcb40345c5c2a941bf831206716bf0a6d2198a59d8266d74bbfb3a182c05606219b9db13
TLSH
T126F02EA7AC0855626C856536C63A792E2820CC7CF7D5CDBA8DEBCC9CED76440003C24F
MD5 SHA1 SHA512 TLSH

Submit Download

15.png

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\effects_transitions\effects\15.png
Size 2KB
SHA256 46da149c3799c85fed64c25f4ce55da701d9f2d3c01831e9b110a3d9022550a7
MD5 353421125dcc7242e5ae8e367d3c3993
SHA1 b25a0e027426d4af0e99a5ec35fece7070809c9b
SHA512 ced40b5d8176442d2d8ed2c287e0256d1ad390fa21bdca9d10356f70ddc305c4beef5e0846ac8480be133bb86e3f20a084389f5137a6dd8ec57e9f0238f39158
TLSH
T1E9514C9819CA9506E4C42406EEBC2708B98759897C663C54A366CC76B6326D872164CB
MD5 SHA1 SHA512 TLSH

Submit Download

74.png

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\effects_transitions\effects\74.png
Size 5KB
SHA256 7472acf1976c551f813ca0f99c4a0567104d83d2554d251c4ce79110dabd3ab6
MD5 9df6d439df05afe36a97bf177b0dddbf
SHA1 2aaf6b68d1b22bc66075957b147118e1562aa241
SHA512 7ebc3ed479267ec49352a201e2e8ffe0771316ebabb68a82a8b6c1b8e1d903ea52addf1bf6f5289bbc9e8ec058519f5793d9aa23982cf7536c62080fc426a56f
SSDEEP 96:OUCPt5AVOA8dPkt/NK5RLkc5kyJA/gv/Y90gg2SmikBYVD6NHnXZ2GKXp4jdeegG:OZ15AVJ8xm/0NPmMLFL2SmRxZrKXOMe/
TLSH
T18BC1AE6389F1278B92DA7D8C2A161C44FB694CF3589446E6643C9DC488282BF4F1B3C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52.png

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\effects_transitions\transitions\52.png
Size 5KB
SHA256 4cdad0f761450ef4cd1564b021591af6724718912eb528db01dfd86f36583f4a
MD5 c51c57f38a4ea1b61d9df34704448f21
SHA1 a3d6698c92ba5928aa3c58de678248d98f6dc049
SHA512 19bd4eac1e6811d311d69f9dccedfeb676f1247dc166b1c3bdbf1513411d70e021e62a7d10131cf8482fe7f730af43117e0aea3009e97feafb7cb8d0f6118ff6
SSDEEP 96:2JEDrp1+afeG99VVyh3ziA1YDBczicH0BEX8G5QbM0s4Wbqo7:2KDrua2IVyBqDBMicH0EXT5p0s4E
TLSH
T191B17DD48A744F34EE5F7CBC0146A4B56F55128FA92741C47C90C599CF9210EA68AB48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads