0a9e55a67af125cd841828f258db6aa42484cee620de0d0590f4e77489406577

Analysis

max time kernel
150s
max time network
114s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
16/08/2026, 04:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy.exe
Size 16.7MB
Sample260816-e32x8abc22
SHA256 0a9e55a67af125cd841828f258db6aa42484cee620de0d0590f4e77489406577
MD5 5f2372d220cd9c1ace2d49416b91bd49
SHA1 77aed2d5af74904c716d3db1b473452a1d1fb71f
SHA512 885002f56689f7fee6fc520ee3f919cf7b6ee7e6b4b23588b8585cb27140cf878b3679d073347076734d495a42193c0373e202ea7f2cd1cac63352ef655fdb47
SSDEEP 196608:Lr9aEW1kbwrmE8pLIzcAUbY5JsSwrRv5W9j4yvTFm9BluFBJt:LRxbBoTMvRvQF4ZB4jJt
TLSH
T1EF078B02FB869175C89F16B088AB7265A336BD0547F142F3E7683E1BE935BC32835395
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Program Files directory 11 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures\dustscratch_textures\waterdamage.jpg	2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy.exe
File created	C:\Program Files (x86)\NCH Software\Components\Shared\15ac__wt	2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy.exe
File created	C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures.zip	2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy.exe
File created	C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures\dustscratch_textures\dust.jpg	2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy.exe
File created	C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures\dustscratch_textures\grainy.jpg	2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy.exe
File created	C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures\dustscratch_textures\hazy.jpg	2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy.exe
File created	C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures\dustscratch_textures\torn.jpg	2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy.exe
File created	C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures\dustscratch_textures\filmlines.jpg	2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy.exe
File created	C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures\dustscratch_textures\folded.jpg	2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy.exe
File created	C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures\dustscratch_textures\scratched.jpg	2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy.exe
File created	C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures\dustscratch_textures\streaked.jpg	2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\hardware\description\system\CentralProcessor\0	2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-16_5f2372d220cd9c1ace2d49416b91bd49_elex_glassworm_poet-rat_remcos_stop_tobfy.exe"
1⤵
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Checks processor information in registry
PID:4608

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5572

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

dustscratch_textures.zip

Path C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures.zip
Size 1.3MB
SHA256 0496486044da4a7a3f2494e10be2f5508fb3c6d0476c96f34b9b4cfa2767228b
MD5 d0f35d4643a95944880d74b55308877a
SHA1 d18df7b0c761f62131a47763eec8167e3bd80100
SHA512 fdc0e0648a33fb97f89c1f15803a7b9f1e7f025647e6beb8d6c89ad7892f4ef403493cd8e3c3e7314c375b7466cb176495c1fd02a11921184f8ca0014ddbc041
SSDEEP 24576:dpe30FV0o9nfssCIHI981rg6TV7/Qus91klMADjzppkm+tTBiFqiiqwVZlD:ze38VBRfssCIHI98q6housjUMItemhF8
TLSH
T14255230C7D9E0E7EE40F9631179DAFD0BF4695F62B45338BA16477281AB723781804AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dust.jpg

Path C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures\dustscratch_textures\dust.jpg
Size 107KB
SHA256 7e3304976114564c485c4ba7fd855ed3076d9ced7eefecb306d509bf5c6face3
MD5 9209adb704259b683a1b2ae5afb0c472
SHA1 361afa020098807d94c33dae87b33630af838905
SHA512 7d5d3f2c81298be0546afe98bec187f849df4bb3d0d5abfadcb55019585d6ef9a67929ab10929f5a5dfefa5598bee48b5398adda172651911a90011edc307b33
SSDEEP 3072:EEaa8XUx7gfI9qgSwE1U+Kfv8LNaexfz9mTP5:Ek8XUx7gw/DE17Iv8B7mTP5
TLSH
T100B312DD2CD6EA10CAD4833561FA67A09E449AF41E93A79EA261BCEC84D31F66331503
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

filmlines.jpg

Path C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures\dustscratch_textures\filmlines.jpg
Size 41KB
SHA256 6365802684f3f5e82444b2a17d9840be93c076637bd17a5eb963fd6e0ca7a542
MD5 4ccb5c20b48d7489cba750f098bebf84
SHA1 741b8a275ae6b52dfbc5daf00fc4d1d80a07fb68
SHA512 613163f3337c9347e2340194c1b584a04d66d88c74aa2093502cb68a7867b899d6b1af44ddaf5127bc2aea7ed1a5439a62a88fcc01011e21b292dcd2f4c0b0e5
SSDEEP 768:o2QYq9fLoPnKxODsSZTCzWxzHEbCvJ586zWkxiUDT73efHev8N7:3vqlLoPnKxOD8WZHEbWLWkAUDG+vQ7
TLSH
T19C13F20BA9899D1B9087B0F64A385CD0FC8446848E22F247F9BAF475D895C2F334E179
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

folded.jpg

Path C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures\dustscratch_textures\folded.jpg
Size 683KB
SHA256 cbea948c3187b7a974b7ad1064264d12e091b7ae8c9491c0608efbe8b1e9ff62
MD5 30738cadc80a40d71c5f88ed5d371d2f
SHA1 3b7d5f79d1213bc1b6e12ec6f059d9afa22f759a
SHA512 f0bd5b3112696fc104bc48e148ee92baddbea503576b24bb4b3b6c7aa3a3e8adbfa94de72e13768947c02310653bb771d1b221c66b0471353eb73b1a41b51fc3
SSDEEP 12288:oqDvquflXsiYubgWM9ZtOhnjF6xDqttZo1VDCoU6L3fL7/kus70S/Ngw5GydAHWd:oq2uNXJYube9ZkjQOZo1Ve6DL7/kus7V
TLSH
T1CEE4235C256A4E50D54B07720A3DB782724BD11B2A047333E7BEA2D83BBD133D8969ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

grainy.jpg

Path C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures\dustscratch_textures\grainy.jpg
Size 92KB
SHA256 3c2a512ce2c8e60d57a558528430c17a333a2015b6106e17889e3c3f9ffc8f6c
MD5 774f09c1ae56760b62ee761d09aaf77f
SHA1 e661282aeda9333d1f8db06b7b75fa8a7a2ef193
SHA512 21d589b832a58ba76c09f589786f2e8fa94b880017837acc1560a05e105fda5c568d2fd129e5daf9772d08e8780e01c20a2cdd9bc6ef134d4fa61b0c7428f943
SSDEEP 1536:rqC1JzLihLj6Y105EV/aLS9c3GBHCnZ0J9aDrdgqV2+cCtpM:rqeMh/6WQEV/aLSMwiyJdx3
TLSH
T1619302B650A380195E31D1A253BB3356BE9E37D72500B97E92303DDD7D859AC063E0BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hazy.jpg

Path C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures\dustscratch_textures\hazy.jpg
Size 186KB
SHA256 378c7f63d7f272bcb345113411c300c92d26378e22c1381dd5bbf94711d06b0c
MD5 ce93c47ac828dbc9e294b7798f3a8f51
SHA1 0b0b6a778a047184a4894642477c9ec6effff21b
SHA512 32aeca77e422ec32ff885d8fc91877d90c5e61ad91567819782d2f79d429062b386e8ba6f48b9909a7a97af9821c71588252ee7ce015b9c93614fc3456f1957e
SSDEEP 3072:/a7oC08fom5VmVXhMayuv/llVFCAxW628nFfXXYRaglAOUvlbYEhUKMwujHJVFUz:/a7ngyViRMayEVwAxWV8nlXBM7AsmRiW
TLSH
T1221412970FEA9DACF02CA93F7604E7184543D597B12A3D5F0B0122EEC279B8D87058E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

scratched.jpg

Path C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures\dustscratch_textures\scratched.jpg
Size 46KB
SHA256 08b1edeb04dc0c7555609337f11a516e5ca52f94a392e9f528198d6e4a5a8b61
MD5 3a393f8e4479f50eb73171a2aac3ea9a
SHA1 4393ed598948a409f4f6dcf0f12cbe89c802f705
SHA512 7c6836f11b506e7dd32d8999aac762b1fef411877362a75e368d35b1eb653e402b9ff81b97ac849214ff746ca7b9edae65fc0ff31ba2e46b2461ddcc29aed1f7
SSDEEP 768:TXd0B8wkfAqpa0DzBe0hP2AR6euxWY9v2bGztTGLT+IqQsrA7ayATs:TN0BeIqppZhXti12aALaIdsE+y1
TLSH
T17623F1D40B3E862AE0DCE677583BB22659389CB7DB206946B15C7CBD4CC3786B16C934
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

streaked.jpg

Path C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures\dustscratch_textures\streaked.jpg
Size 67KB
SHA256 bf202ee793ade6afb4c9a02609def0a6fdbe1c1e8eeeaa09f7bbf99e6e17eda8
MD5 7cd69e6cb88fca6ee8df073e4dae1236
SHA1 c880f4c32693bb004f9f5b639dc701b414898aa1
SHA512 ed7c937616f4017784545f77054b78f90da7425f0b3b97bd8e5272726831abfc9e3563d1692e9ce0645ae85ebaddafc4003d4f37caae5bb6cb48c99f873ce94d
SSDEEP 1536:KyDQhBs/7Jra3uihaN3+qprNiUBj/Iu03ENEqkMD5nDQ:K3Bs/Vu3uiUlrNlBbJ+GQ
TLSH
T1E26302D5D1072C5EF08F40FDA789227A889A83D39B5592A090C33730127BE2DE9D4E3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

torn.jpg

Path C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures\dustscratch_textures\torn.jpg
Size 65KB
SHA256 cb11a77787a02ef50596966ca620355d2ce1549e408517e658c588a85dd68eb0
MD5 656f79eacbe45d69f7555864bf954750
SHA1 c8f241a6e2416e804565bf38c33f3964b60444ca
SHA512 e43954bd4bbb8b58bbf487aaae21935e4a651bcd09af37d45b7e5fcb8eacf30a5dd7bba1e63da01496e259d17877073905ee201bdb1fc0564c092ae595a7c598
SSDEEP 1536:B8gzvGNKrXpLB5n7ThZfPTAucmjNZbKigE+9MBadv4Q3YrOs/:+g2GtX79ZfEucChKimOwgQWOk
TLSH
T1CF63021F0662494BE00D2D3DF556AFCA5E126DE023883AC9ED441E286EF62F375CD29D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

waterdamage.jpg

Path C:\Program Files (x86)\NCH Software\Components\Shared\dustscratch_textures\dustscratch_textures\waterdamage.jpg
Size 80KB
SHA256 30ef21ec5728be0da8acd1554540060dd609bfaa4488f21379b33bd780e855a5
MD5 acbf3a7d0d123c006c110c390f264cc5
SHA1 0da95346ba49f6032578179d348246b4c2190cc8
SHA512 9288c3e57153cf9bcf66164b369d3fbd297f53cacfd9f384779b11c05b13cf4fbdcf628f7875902e6a7d646fcdf474be4bea2f3bcbdaf8a3e6543dde16e7c31d
SSDEEP 1536:mzbIEkW35/b2kj7d/8JGBwzhtiGBH6bYNGPR6VYPk1ZESzuY9:sblkW3tb2kj7+JGBwzhYs6IgRyYea+r9
TLSH
T1BB8302B47FEA2A30B4296946012DFF417FB8E943BE2B41EB405CEB65183E92C58D590D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PS3%20HD%201080.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\PS3%20HD%201080.dat
Size 507B
SHA256 2c7f295bf69e49cb8867af64bc39f7057c837317f25492aa5988ee23423be3e2
MD5 48730996ff4d975019d3b1d475a43e2b
SHA1 d755fbdea1f8db846d5081e7b060bf2298144073
SHA512 15bf693882d60d4bb6a7e332105a2e180f77dfaeb59fb704e6d22b12f56f2c88db45f6acd4bec78aea0e99f5d6c1609aeb49321b89ab2afe4399f470fec7d244
TLSH
T1C3F059676C185462AC842432D67B7A3E2520DC7CF7C9CDAA8DEBCD5CED76941003C10E
MD5 SHA1 SHA512 TLSH

Submit Download

YouTube%20-%20Vertical%20Video%20%284%3A5%29.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\YouTube%20-%20Vertical%20Video%20%284%3A5%29.dat
Size 507B
SHA256 474d9295934cdb254fd7b0fc8ca9093f255a71027ef141d76a9832079c434836
MD5 5758d10ea86d800494d7183b370f48ed
SHA1 2c2cb3ec281ade9412407d76733a776330f315d2
SHA512 f67f1da0bcd799926a5833b976df4ab8c241b7a2c735e927c00be0860757de0b7af1fc388ca9a3ee0d736577c6c80a5eb24245a7979b18b200d405d826722b13
TLSH
T1F4F02467AC185462AC846432D63B792E2520DC7CE7C5CDA98DEB8D5CEDB6800006810E
MD5 SHA1 SHA512 TLSH

Submit Download

YouTube%201440p%20%282K%29.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\YouTube%201440p%20%282K%29.dat
Size 506B
SHA256 187c3ca12e47c3c012cca8a9d1c7507f5d277a3bbec7945e5a01147dc9f9656e
MD5 7ce4d2fd918f8a2e074506acf4eebdf1
SHA1 f5746d5bade9ac127acf0de20c35b5ed7957c16f
SHA512 89e0c898ba68f5875fb83977d1aadb7327beaea50c1d7cbf63cfa67321d7e4dcbb85d32baa522f9c32ace5e3765ef8bf26e8aa62ead557a72d77463225fc9ca2
TLSH
T1CEF059A76D1814A2AC842432C63A7D3E1420DD7CF7C5CDB98DEB8D5CED76841003C15E
MD5 SHA1 SHA512 TLSH

Submit Download

YouTube%202160p%20%284K%29.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\YouTube%202160p%20%284K%29.dat
Size 506B
SHA256 388e261c9ec7c1e3dff160cd9262e295d1c5dba57773043e85ec19831855adee
MD5 3234e69c02df3ea711f7967b9cf2f68a
SHA1 63f72b809a8f5140d22104e3e0ccef5537180887
SHA512 c98a49749b78c2d1808be4f266eae33ca6789b25f8b7a9e5efdfc7c3b13db4421ae54cdc0ef01234ab9c6ec5d1b71b115601ddb11bd9f5a07eb92b1f9f72b195
TLSH
T1A6F059A76C1815A2AC842432C63A793E2420ED7CFBC9CDB98DEB8D5CED76941003C15E
MD5 SHA1 SHA512 TLSH

Submit Download

YouTube%20720p.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\ComputerPresets\YouTube%20720p.dat
Size 505B
SHA256 c8644ce52bc7f8ee4cadef2ea8ce5cdd7b5583a93b4d7d76cdfe9ae7e391baf7
MD5 3e067a492d5769fce12cb2b873368d27
SHA1 65170fb69a71c859fce085741c97f0af926a05a3
SHA512 5e044fa1f6e7a408127e92d43f50994057a363382e16140f270f2617e31cbf9782e464842e8611e76946958fd26e248fe81dfbfde4fd9cbca0ffdfb374dd5432
TLSH
T162F059676C0854A2AC842432C63A7A2E1520EC7CF7D5CDA98DEB8D5CEDB6801003C15E
MD5 SHA1 SHA512 TLSH

Submit Download

Default.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\Default.dat
Size 506B
SHA256 da088503ec137260401f9f63cbf2045052ec6e7467d92cbaa7f82e0fc477063d
MD5 74d4fa7b01153588b6437217a15d45ca
SHA1 572bdd04a751c9022e09d1f9ecf129a8098a7cdb
SHA512 2baade0de179617fd08cae046ae32a438aa1ec07d0db11fd54568a7d9b4725255c6a3100176d1ed4abbb6f7d4b8b818e698e22739e43bee25320e46d20c6d725
TLSH
T178F059676C0854A2AC842432D63A793E1520DC7CF7C5CDA98DEB8D5CED76801003C14E
MD5 SHA1 SHA512 TLSH

Submit Download

YouTube%20-%20Vertical%20Video%20%289%3A16%29.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\DVDDataDiscPresets\YouTube%20-%20Vertical%20Video%20%289%3A16%29.dat
Size 507B
SHA256 fb0e973097c1a99b3aacae2312d5210026f75d5c624ccb4e8aa90f464c286819
MD5 ada6de7526d5af740353c6f62241a8ff
SHA1 f13c72aacdb75ce1afebc77fff3cbe7360f90ffa
SHA512 fc08345148bf5e156f79c826929b6e011d8ba740dba4a973f960ff7ee38238386e98e1cf2524f1ff6478a781b879bf705c63723fe8c8d0ac2c29e6af115b7a1b
TLSH
T1F4F02467AC185462AC846432D67A792E2520DC7CE7C5CDA98DEB8D5CEDB6800006810E
MD5 SHA1 SHA512 TLSH

Submit Download

Animated%20GIF.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Animated%20GIF.dat
Size 203B
SHA256 95a0216e4b898535e9fde3e2f3dc451188fa0c7ab474cf5364ea0ed23cf1ba9b
MD5 b87cc2e85d1b38ce6721841aeb944959
SHA1 c6dbefbbe4dff194f8011a98222bb9ddd6cc03bf
SHA512 0bb88c58a80b8b0fb9247c191433cbb71f93336b557779ea1a4c5b65ddacff654040ef5470e980b30ff32adbcdee60173188217157f4b9818dac777280fd1cb9
TLSH
T165D012A71E9480B3D4800979C250BD251001EEE97FA4CDB148FACC5CAF77C8000BC365
MD5 SHA1 SHA512 TLSH

Submit Download

Facebook%20-%20Vertical%20Video%20%289%3A16%20-%201080%20x%201920%29.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Facebook%20-%20Vertical%20Video%20%289%3A16%20-%201080%20x%201920%29.dat
Size 507B
SHA256 923c35e6ca733a02fde332c7238cce668ec3fd44e9e07a9a63e390e600bba574
MD5 b105bb42e77be291d80dfd95aa722b36
SHA1 d6067c6036449338101abf446c529a956c7adc03
SHA512 01353100252294da15bf26ca7941fbfade619db6cdacd4b2f94f7293897568c314a055ee41cfa098c6885c3fd3b975413923cab864afe92e37c3a140e2bd8376
TLSH
T112F024676C185462AC842532D67B7A2E2520D87CE7C9CDBA8DEB8D5CED76800006C10E
MD5 SHA1 SHA512 TLSH

Submit Download

Facebook%20-%20Vertical%20Video%20%289%3A16%20-%20720%20x%201280%29.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Facebook%20-%20Vertical%20Video%20%289%3A16%20-%20720%20x%201280%29.dat
Size 506B
SHA256 2c0f33e5ae3a273850ee319ef56e65336859cc5aaae1ce555e5d1a2a713b98e0
MD5 55cd674003f60d1e63f42db6e5a5da37
SHA1 b71f5774cf0ef362a0aa892d1de8c120b5ae4439
SHA512 f000d6f2c2bea134c44213187794f0888715cba44dc4822cd698088e81d2f51e0f2defe95379049419833072d76bd76505982a73cfedc00ff15853227b36bbed
TLSH
T157F059676C185462AC842432C63B7A2E2420DC7CF7D9CD6A8DEBCC9CEDB6941003C10E
MD5 SHA1 SHA512 TLSH

Submit Download

Facebook%201080p.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Facebook%201080p.dat
Size 507B
SHA256 cea1dc33497f60a4c338f092efd4bc9417283fb5a19f2b3a82336b2492ba7dc3
MD5 2c4c1b1f77def8077a136ca8fc08e102
SHA1 e320db2453bb862dbdeea74a3f09ef25e1121cc7
SHA512 02e4c4ef160f81714bfb9432e98b60b30f5270dfb332374399177b6144f18dfecff83a356545da3b84c48afb2889e7be51d28e54e329d915e82271a2fb62bfc1
TLSH
T171F024676C185462AC842432D67B7A2E2520D87CE7C9CDBA8DEB8D5CED76801006C10E
MD5 SHA1 SHA512 TLSH

Submit Download

Facebook%20480p.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Facebook%20480p.dat
Size 504B
SHA256 37cf9d00b5248010cd78b4f0542d859f3059e99efab3ae00401c4432a7562617
MD5 4de48382e3368038d135250bf80602aa
SHA1 ae7fc6460d24e980f44166c6b4d7a55db20c68d8
SHA512 7e44afd05ec6da4b15a59d4677ad041e0867f55f2fd35b5e0828d7bb0bc27811396a1ce9127f7cec0edffc347160ab36b87cf4cb325b522a00e23fa9eefd434d
TLSH
T196F05967AC1814A26C842432C63B792E1420DC7CF7C5CDA98DEBCC9CED76941002C25E
MD5 SHA1 SHA512 TLSH

Submit Download

Facebook%20720p.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Facebook%20720p.dat
Size 506B
SHA256 619a329f4af7dfc64ec99d059eaddd764041ed45297806b5dda829a686edfdfd
MD5 87bf9f4a3af2011f61abd2529307ee1c
SHA1 294682cb247758f5720578ae3f6432909c2b4614
SHA512 042025ab5994a9ce79c99e2228a190a845603cd1a258c85bcb2495ec26d8ddce2070a6ed41a45de5eeabd547df3cc023028bb600026a9c40049c9bf7f50e334a
TLSH
T1ABF059676C1854626C842532C63B7A2E2520DC7CF7D9CD6A8DEBCD9CEDB6941003C10E
MD5 SHA1 SHA512 TLSH

Submit Download

Internet%20Video.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Internet%20Video.dat
Size 470B
SHA256 0258852c6313e7378eba2bf2caf461fd79c8afacf172d93331d7a1fcd19cef19
MD5 11cfe849931b7144949b119a85ece353
SHA1 4a94a3986c99c594a924437ae3a96204bd483cd6
SHA512 b1778f2392ccea292ef49e0f0164e3eda398ce5455c9b87dba76fd99c5ec1ef77675bb5f04885e0dd3842cc4a5b22e06cf946e966b5caa23b1f02a724c62587f
TLSH
T188F027A72D0456A2AC851632DA373A3A2520DCBDF5C5CEBA8CEB8C5CEE7985140B815D
MD5 SHA1 SHA512 TLSH

Submit Download

PS3%20720.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\PS3%20720.dat
Size 505B
SHA256 c23a607f38e7b908b5f4ddd21dac416c3c94ff909566ab778197f2b659b6fffc
MD5 2e60f2362fabb9ad2355c5931896a098
SHA1 7699609fa67b137a436c1b55082f56770cb94655
SHA512 351dcf817c676fc003c97d8efee43ee0c595a6c437c1fc47f721b0662c64a7ea5ae42e1c7d4d1c676b888f9f86225b67ee9f77c6388b33756b6c3704b7e36692
TLSH
T19CF059676C085462AC842572C63B7A2E2520EC7CF7D9CDAA8DEBCD5CEDB6801003C10E
MD5 SHA1 SHA512 TLSH

Submit Download

SonyPS4Pro.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\SonyPS4Pro.dat
Size 507B
SHA256 39f8aaa5b40ecb236d591409c08ea4b0fa0e4c8136963acb5641eb2eae120164
MD5 b59ffcfdf304b9021c2b150def8b34d0
SHA1 ab07f9ecfcdb814bd8277485c9e6febfec10faea
SHA512 5b711e4ef3d507abc977b898bfe48cecf4751231f48164a64dd8949865ba8be3002a8b47449a57256b15177d9201198acacdf9c133b612f315b1869a26a665e0
TLSH
T154F024A76C1854629C842472C63B7A2E2820A87CFBC9CDAA8DEB8D5CE976940002C11E
MD5 SHA1 SHA512 TLSH

Submit Download

SonyPS5.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\SonyPS5.dat
Size 507B
SHA256 258961f00497dbea3636613802cd0faa8b4489301cb8216f6c74445d80fdf83b
MD5 f80883b3500b12ab0b1e720a50eb43c3
SHA1 b154bb352f05cadc5c2476b6acfd3a8bfe865cf9
SHA512 c5e99d997dd98da784b9e26dd1ea7b4a44b8e73a03e348714a4e4ca6603423cfe6fc35858c2bffb645156e84777ed8ffed22c000ef94a4aeb8e6fee01342598e
TLSH
T159F059A75C1864629C842472C63B7A2D2820EC7CFBC9CEB98DEBCC4CED76940003C21E
MD5 SHA1 SHA512 TLSH

Submit Download

TV%20NTSC.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\TV%20NTSC.dat
Size 504B
SHA256 fdab9062324a7020ecf622a451d7f3634155a693ab442dad7502e63840e4ff05
MD5 84e214e398f12e158d901b91e59cfa0c
SHA1 c28f08636833719fba694520dc521124029835b0
SHA512 645867edc861ffab11f78e3b8d3381d23d58e1788268105e5d3b9c24011099779ecc450feba94127d7259312080c18f96ee529772659c1db1e0bdce434a9f5bb
TLSH
T14AF059676C1814A2AC842432C63A792E1820EC7CF7C5DDBA8DEBCC5CED7A801003C24E
MD5 SHA1 SHA512 TLSH

Submit Download

TV%20PAL.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\TV%20PAL.dat
Size 504B
SHA256 60207d85942980ae9017f42aa4a48854d1dea4754b9406172d5aaacff8bad710
MD5 e8c238c1deaeb876bf87f27d229cdb9c
SHA1 08cc06d309f59ac4af39feb6577342f332db9cb1
SHA512 517eb6f56881e10887892af1564dfcfcbb04295ff6ec79a3e6e43069ff47d64fa95fda56bb618095816cc5780046a38a9e842ba20d5f358812ac1c33f8b59527
TLSH
T198F059A75C1814A29C842432C63A792E1420ED7CE7C9CD798DEB8C5CED76841002C25E
MD5 SHA1 SHA512 TLSH

Submit Download

Twitter%20MP4.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Twitter%20MP4.dat
Size 505B
SHA256 86d141ac1ba7a613ba010b9ae4f0625ca400c8958852a50b9512239872197b88
MD5 f915e2f88a441cd7d23ef992272c8758
SHA1 4424c73427765871d0182a7c21c512f0a71ba59e
SHA512 d6be2c7992d086febd60ef8ecc8844dd6e0c09e17f80c6d87aa8ced3cdab41ec5ce56361fc6494a264fe81fa7bd4c194dc6f7b6cb8a01bbebd0ab2df95f012a6
TLSH
T1C4F05967AC0C54726C846432CA3A792E1520DC7CF7D9CDA98DEB8D9CEDB6801403C10E
MD5 SHA1 SHA512 TLSH

Submit Download

Vimeo%20MP4.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Vimeo%20MP4.dat
Size 505B
SHA256 b1cbcb13aa029b99dbe3b51983f3b48c38ad25d8d94580c78c0ac92cb6b0fe22
MD5 6c1ef8c43d42327e6ad60056932a218a
SHA1 0a31866e0fc2280183b0b278914acb5533420263
SHA512 fe04ddb6d92cf5b74c0d8259511fbcbaa568673afbfa0ba0bea5376809c5f6a26fc65d68656401b039f95e932fb7609ca58867d84566c285ae9b3dfa349aa960
TLSH
T114F059676C0814A26C842432C63A792E1520EC7CF7D5DDA98DEB8D5CEDB6801003C25E
MD5 SHA1 SHA512 TLSH

Submit Download

Widescreen%20TV.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\Widescreen%20TV.dat
Size 505B
SHA256 17aa970f7b924b8048bf9f804eccc4852b70d1eadd9cc1f018b3db7b9b1001c5
MD5 f15719105fd8c82fe28d9bcb977ad968
SHA1 c079b3bc170c20d4ef119471a15fbc69dd31f1ab
SHA512 776c919e2f882ec2598292cde233be89424412c7b93f04770e82d3f05383eeac76912c8be3e95f182494fb450e24d56683939a2cf88f910f4415ebddb9e4c1f2
TLSH
T181F059676C1814A26C842432D63A793E1520DC7CF7C5CDB98DEB8C5CED76941002C25E
MD5 SHA1 SHA512 TLSH

Submit Download

YouTube%20-%20Vertical%20Video%20%281%3A2%29.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\YouTube%20-%20Vertical%20Video%20%281%3A2%29.dat
Size 506B
SHA256 1279bb3987bcde18b6a16bd01ad09a556392bad072ff2154c49eaf4292e6bf74
MD5 e37e2cb37c02c6e5fec00a53b68b6ff2
SHA1 18c227c6662fd344687c644d4c79f677405df7f1
SHA512 c94c8b38db91f4258a2a9b1d5c89779ed8a9bda0be214df0435dfd167971b2958af222e2727559899df0fa9ac8a0e1e8a1531ffe13e78076246df5dadd6487b5
TLSH
T18EF02467AC186462AC846432C63A7A2E2520DC7CE7D5CDBA8DEB8D5CE9B6800006810E
MD5 SHA1 SHA512 TLSH

Submit Download

YouTube%20-%20Vertical%20Video%20%282%3A3%29.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\YouTube%20-%20Vertical%20Video%20%282%3A3%29.dat
Size 505B
SHA256 28e3c44b05ba975d834fb97289bfaa8f2c1df604ea7c69affe655422c91ab696
MD5 72be185907ffc1fd455e511bc67cf86b
SHA1 85cc663781064704f3977895d3e9c288039ca1d4
SHA512 6fe3a8836bf8f67774a5f792d48d426931935c5f076fccc7253f7e95ba1debdc2466d062f309cbb8e184e74ddc2440dd5fd6a5d3f65f52d8713a445d25b18b02
TLSH
T1E9F02B675C185462AC446431C63A792D1510DC7CE7D5CDB98DEBCD5CE976801006810D
MD5 SHA1 SHA512 TLSH

Submit Download

YouTube%20480p.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\GoogleDrivePresets\YouTube%20480p.dat
Size 504B
SHA256 d2cefc08a283a7993dfc0cbf40781d689d5899eb32da777fe09d7d792cac322a
MD5 f3ff2aed9732931917912a8584ab7c67
SHA1 97a16aeb640c7801c516e5bad21e1216a28bbc43
SHA512 8445fdf382427634468f0f72afb0f34351e4bb9c831343199c7c6944b02cf66739468b342a65aa3019daffaa94a8e92a30f900ff3bd0bed9c5916b1f6c502102
TLSH
T1BBF05967AC1814A26C842432C63A792E1420DC7CF7C5CDA98DEBCC9CED76941003C25E
MD5 SHA1 SHA512 TLSH

Submit Download

AppleiPad5.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPad5.dat
Size 506B
SHA256 b217c2d4b8e0dc47d226605537ceaba33960cc45ebc4928ea77bf1a496e4e07d
MD5 1f181d8b9f4418935a4f0408213eb1e9
SHA1 0e3f49c725315a92dfe1f3e15a0dfb2faeca4e17
SHA512 00fff7b8adfd4ea2d14a3e508d9e4f26956857684578cad7d8fab6b25e776652cd17c29620490e93a3e1265c6a1ef1bb265b90b320041dc4ea5b845a2f6a7997
TLSH
T1D9F0596B6C0814A2AC842432D63A793E2920EC7CF7C5CDAA8DEB8D5CED76801003C24E
MD5 SHA1 SHA512 TLSH

Submit Download

AppleiPadAir.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPadAir.dat
Size 506B
SHA256 22dc4b7246f2a03db4cf7f46baeed0862622431d7bed3ea9181ef83d76206ebf
MD5 90e7ebcdfea52ace04dc1f59d5ad1bc2
SHA1 6141ed76b24caf2456a53fec667e8e5acdfb6220
SHA512 46c11a219a2f2cac6df7a7f1e90a69bcb34a9ae5fceca7c2509a6bd1307dda3e621dbfeb552e0598a9cc1d9ec85f7f26a7aaf20bfd5492d7cabf281b8b1ba0e7
TLSH
T101F0596B6C0854A29C842432D63A792E2920EC7CE7C5CDA98DEB8C4CED76801003C24E
MD5 SHA1 SHA512 TLSH

Submit Download

AppleiPodTouch2.dat

Path C:\Users\Admin\AppData\Roaming\NCH Software\VideoPad\PortablePresets\AppleiPodTouch2.dat
Size 504B
SHA256 a55103364a8cf90ec840e643ad29170c663bfa7778d0ff1cb5ec9a4738b9d637
MD5 6093b241afb851acd085509bb823be48
SHA1 7f420319accdf547f6c7ce498b26b6f81a5013fa
SHA512 09561faec032ba0899bdb6b8a11e7418f3cf733ef327e42fbdd487a7356d733285996442c68845d2c86334a344ee4e4ebf3a54d1fd825960058459ba246436cc
TLSH
T11AF050A76C081462AC446532C63A392E2410DC7CF7C5CDBA8DEBCC9CED76400003C14E
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads