ba575f153d357eaf3fdbf446b9b93a12ced87c35887cdd83ad4281733eb86602

Analysis

max time kernel
205s
max time network
209s
platform
windows10-2004_x64
resource
win10v2004-20230220-es
resource tags

arch:x64arch:x86image:win10v2004-20230220-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
05-06-2023 00:31

Sharing

Copy URL

Twitter E-mail

Reason

Machine shutdown

Report Analysis Logs

General

Target

vlc-media-player-3-0-18.exe
Size

42.2MB
MD5

7fddbac28a9c85c79fe08e2d6506e535
SHA1

b2def381b57b9a7643a91790f5537e74fab729dc
SHA256

ba575f153d357eaf3fdbf446b9b93a12ced87c35887cdd83ad4281733eb86602
SHA512

bfbda8c590dc53d565cc2d26a59c97834663e871c6c7233523a2dd48027e78b93c75ae8af6d56c8542c9102aadbee8aa3b5c7f83a7600b377cf0af2cc92433b9
SSDEEP

786432:5+vk5XxMOrNfNWNG7JNzwCR3xmgpa3qdxrXcAPXCIfJ546BZTg2QrXoRHq:5+vyTnJFwL3qrJvCIxi6By2QrXoE

Score

4^/10

discovery persistence

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libcrystalhd_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_splitter\libpanoramix_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\skins\winamp2.xml	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\index.html	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libscte18_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\dialogs\create_stream.html	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\axvlc.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\librtp_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\ar\LC_MESSAGES\vlc.mo	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\requests\vlm_cmd.xml	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libmediadirs_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_autodel_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\is\LC_MESSAGES\vlc.mo	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\zu\LC_MESSAGES\vlc.mo	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libudp_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\hu\LC_MESSAGES\vlc.mo	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\ta\LC_MESSAGES\vlc.mo	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libdtv_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\audio_output\libamem_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\spu\libremoteosd_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libinflate_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_i420_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\pt_PT\LC_MESSAGES\vlc.mo	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\mobile_view.html	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libftp_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libnfs_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\misc\libaddonsvorepository_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\spu\libmarq_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libhds_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libyuy2_i422_plugin.dll	vlc-media-player-3-0-18.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libbluray-awt-j2se-1.3.2.jar	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\services_discovery\libwindrive_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\ro\LC_MESSAGES\vlc.mo	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\sq\LC_MESSAGES\vlc.mo	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\css\mobile.css	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\jquery-ui-1.8.13.custom.css	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libfreeze_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\meta\art\02_frenchtv.luac	vlc-media-player-3-0-18.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\librist_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libyuvp_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\skins\fonts\FreeSans.ttf	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\custom.lua	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\liboggspots_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\keystore\libfile_keystore_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\dialogs\equalizer_window.html	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\playlist\koreus.luac	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libadpcm_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_output\libwgl_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\cs\LC_MESSAGES\vlc.mo	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\favicon.ico	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libblend_plugin.dll	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ffffff_256x240.png	vlc-media-player-3-0-18.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libattachment_plugin.dll	vlc-media-player-3-0-18.exe

Executes dropped EXE 1 IoCs

pid	Process
1404	vlc-cache-gen.exe

Loads dropped DLL 64 IoCs

pid	Process
3592	vlc-media-player-3-0-18.exe
3592	vlc-media-player-3-0-18.exe
3592	vlc-media-player-3-0-18.exe
3592	vlc-media-player-3-0-18.exe
3592	vlc-media-player-3-0-18.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe
1404	vlc-cache-gen.exe

Registers COM server for autorun 1 TTPs 4 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

description	ioc	Process
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32\ = "C:\\Program Files\\VideoLAN\\VLC\\axvlc.dll"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32\ThreadingModel = "Apartment"	regsvr32.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 8 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe

Modifies data under HKEY_USERS 15 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292311040"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292311040"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "192"	LogonUI.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = a6d8ff0076b9ed00429ce3000078d700005a9e000042750000264200f7630c00	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365271"	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4288567808"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365271"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89"	LogonUI.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m3u\shell\PlayWithVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --no-playlist-enqueue \"%1\""	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.xspf\shell\AddToPlaylistVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m2t\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ape\shell\AddToPlaylistVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mpeg\shell\Open	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m3u8\DefaultIcon\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mkv\shell\AddToPlaylistVLC	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mid\ = "MID Audio File (VLC)"	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.xm\shell\Open\MultiSelectModel = "Player"	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mkv\shell	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.adt\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.dts\shell\AddToPlaylistVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mpeg2\shell\PlayWithVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.tod\shell\AddToPlaylistVLC\MultiSelectModel = "Player"	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.sdp\shell\PlayWithVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --no-playlist-enqueue \"%1\""	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DF2BBE39-40A8-433B-A279-073F48DA94B6}\1.0\FLAGS\ = "0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.xa\shell\PlayWithVLC\command	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.f4v\shell\PlayWithVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --no-playlist-enqueue \"%1\""	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.iso\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.aif\shell\Open\ = "Reproducir"	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ape\shell\ = "Open"	vlc-media-player-3-0-18.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5AF314CF-8849-4A79-A3FC-8DE6625D9E72}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.amv\shell\AddToPlaylistVLC\MultiSelectModel = "Player"	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.opus\shell\ = "Open"	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.CDAudio\shell	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ac3\shell\AddToPlaylistVLC\command	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ape\shell\PlayWithVLC\command	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ra\shell\AddToPlaylistVLC	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.a52\shell\Open\ = "Reproducir"	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m1v\DefaultIcon	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.wpl\shell\Open\MultiSelectModel = "Player"	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.oga\shell\Open\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file \"%1\""	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\USER\S-1-5-21-1675742406-747946869-1029867430-1000_Classes\.mp3	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.wtv\shell\AddToPlaylistVLC	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ogm\shell\AddToPlaylistVLC\ = "Añadir a la lista de VLC"	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.asf\shell\Open	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.b4s\shell\Open\MultiSelectModel = "Player"	vlc-media-player-3-0-18.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.wpl\shell\AddToPlaylistVLC	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.gxf\shell\Open\command	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\ = "IVLCMediaDescription"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.webm\shell\AddToPlaylistVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.rmvb\shell\AddToPlaylistVLC\MultiSelectModel = "Player"	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m2t\shell\Open\command	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.zip\shell\ = "Open"	vlc-media-player-3-0-18.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\CONTROL	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mkv\shell\Open	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mp1\shell\AddToPlaylistVLC	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.wvx\shell\AddToPlaylistVLC\command	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.nsv\shell	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.s3m\shell\PlayWithVLC\ = "Reproducir con VLC"	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.aiff\shell	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.tta\shell\AddToPlaylistVLC\ = "Añadir a la lista de VLC"	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.voc\shell\PlayWithVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --no-playlist-enqueue \"%1\""	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.xa\shell\AddToPlaylistVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.asx\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mlp\shell\ = "Open"	vlc-media-player-3-0-18.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{796A2C2D-5B11-4FB5-9077-56D5E674972B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.vlc	vlc-media-player-3-0-18.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m4p\shell\AddToPlaylistVLC	vlc-media-player-3-0-18.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3592	vlc-media-player-3-0-18.exe
3592	vlc-media-player-3-0-18.exe
3592	vlc-media-player-3-0-18.exe
3592	vlc-media-player-3-0-18.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	4852	firefox.exe
Token: SeDebugPrivilege	4852	firefox.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
4852	firefox.exe
4852	firefox.exe
4852	firefox.exe
4852	firefox.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
4852	firefox.exe
4852	firefox.exe
4852	firefox.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4852	firefox.exe
3508	LogonUI.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3592 wrote to memory of 1404	3592	vlc-media-player-3-0-18.exe	87
PID 3592 wrote to memory of 1404	3592	vlc-media-player-3-0-18.exe	87
PID 3592 wrote to memory of 636	3592	vlc-media-player-3-0-18.exe	89
PID 3592 wrote to memory of 636	3592	vlc-media-player-3-0-18.exe	89
PID 3592 wrote to memory of 636	3592	vlc-media-player-3-0-18.exe	89
PID 636 wrote to memory of 4236	636	regsvr32.exe	90
PID 636 wrote to memory of 4236	636	regsvr32.exe	90
PID 3424 wrote to memory of 4852	3424	firefox.exe	101
PID 3424 wrote to memory of 4852	3424	firefox.exe	101
PID 3424 wrote to memory of 4852	3424	firefox.exe	101
PID 3424 wrote to memory of 4852	3424	firefox.exe	101
PID 3424 wrote to memory of 4852	3424	firefox.exe	101
PID 3424 wrote to memory of 4852	3424	firefox.exe	101
PID 3424 wrote to memory of 4852	3424	firefox.exe	101
PID 3424 wrote to memory of 4852	3424	firefox.exe	101
PID 3424 wrote to memory of 4852	3424	firefox.exe	101
PID 3424 wrote to memory of 4852	3424	firefox.exe	101
PID 3424 wrote to memory of 4852	3424	firefox.exe	101
PID 4852 wrote to memory of 1564	4852	firefox.exe	102
PID 4852 wrote to memory of 1564	4852	firefox.exe	102
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103
PID 4852 wrote to memory of 4012	4852	firefox.exe	103

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\vlc-media-player-3-0-18.exe
"C:\Users\Admin\AppData\Local\Temp\vlc-media-player-3-0-18.exe"
1⤵
- Drops file in Program Files directory
- Loads dropped DLL
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3592
- C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe
  "C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe" C:\Program Files\VideoLAN\VLC\plugins
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1404
- C:\Windows\SysWOW64\regsvr32.exe
  regsvr32.exe /s "C:\Program Files\VideoLAN\VLC\axvlc.dll"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:636
- - C:\Windows\system32\regsvr32.exe
    /s "C:\Program Files\VideoLAN\VLC\axvlc.dll"
    3⤵
    - Registers COM server for autorun
    - Modifies registry class
    PID:4236

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3424
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4852
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4852.0.82510392\1434763799" -parentBuildID 20221007134813 -prefsHandle 1836 -prefMapHandle 1828 -prefsLen 20890 -prefMapSize 232675 -appDir "C:\Program Files\Mozilla Firefox\browser" - {a6e6cb17-f9ce-476e-9fb2-bcb146284176} 4852 "\\.\pipe\gecko-crash-server-pipe.4852" 1916 1c8dcde0258 gpu
    3⤵
    PID:1564
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4852.1.1289147010\1966769593" -parentBuildID 20221007134813 -prefsHandle 2304 -prefMapHandle 2300 -prefsLen 20926 -prefMapSize 232675 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b2013c33-8801-4807-bb4c-750b4cb3f386} 4852 "\\.\pipe\gecko-crash-server-pipe.4852" 2316 1c8cfe72858 socket
    3⤵
    - Checks processor information in registry
    PID:4012
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4852.2.812542178\970015051" -childID 1 -isForBrowser -prefsHandle 2896 -prefMapHandle 3036 -prefsLen 21074 -prefMapSize 232675 -jsInitHandle 1496 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {ebfa521a-66d2-49da-b2ab-aba741717f10} 4852 "\\.\pipe\gecko-crash-server-pipe.4852" 2856 1c8e09f6358 tab
    3⤵
    PID:4972
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4852.3.1039779936\758749544" -childID 2 -isForBrowser -prefsHandle 3516 -prefMapHandle 3244 -prefsLen 26519 -prefMapSize 232675 -jsInitHandle 1496 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {4dca772c-e10a-48d5-84bf-989264f590a2} 4852 "\\.\pipe\gecko-crash-server-pipe.4852" 2348 1c8cfe68758 tab
    3⤵
    PID:2668
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4852.4.1204143307\1647779961" -childID 3 -isForBrowser -prefsHandle 3944 -prefMapHandle 3940 -prefsLen 26519 -prefMapSize 232675 -jsInitHandle 1496 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {b95cec69-b680-489a-afb4-d5bfc344c17e} 4852 "\\.\pipe\gecko-crash-server-pipe.4852" 3956 1c8cfe5b258 tab
    3⤵
    PID:3928
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4852.5.1885521796\770434675" -childID 4 -isForBrowser -prefsHandle 5004 -prefMapHandle 4768 -prefsLen 26578 -prefMapSize 232675 -jsInitHandle 1496 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {fdb44578-722c-4b77-9173-c3da3c8c6a30} 4852 "\\.\pipe\gecko-crash-server-pipe.4852" 5012 1c8cfe61658 tab
    3⤵
    PID:3708
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4852.7.1705030096\2046220039" -childID 6 -isForBrowser -prefsHandle 5316 -prefMapHandle 5320 -prefsLen 26578 -prefMapSize 232675 -jsInitHandle 1496 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {3d119ebb-1288-4594-b526-4b0edb43b956} 4852 "\\.\pipe\gecko-crash-server-pipe.4852" 5308 1c8e32be458 tab
    3⤵
    PID:3424
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4852.6.1076088453\758949597" -childID 5 -isForBrowser -prefsHandle 5116 -prefMapHandle 5124 -prefsLen 26578 -prefMapSize 232675 -jsInitHandle 1496 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {a80912c3-fb13-4032-9f21-3ab163d46243} 4852 "\\.\pipe\gecko-crash-server-pipe.4852" 4772 1c8e32c0e58 tab
    3⤵
    PID:3036
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4852.8.1866335216\689604651" -childID 7 -isForBrowser -prefsHandle 5340 -prefMapHandle 5664 -prefsLen 26849 -prefMapSize 232675 -jsInitHandle 1496 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {372f8bad-e4fb-401d-8435-b8c6e5227724} 4852 "\\.\pipe\gecko-crash-server-pipe.4852" 5352 1c8e4b58d58 tab
    3⤵
    PID:1608
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4852.9.186622052\202442299" -parentBuildID 20221007134813 -prefsHandle 3568 -prefMapHandle 5016 -prefsLen 27114 -prefMapSize 232675 -appDir "C:\Program Files\Mozilla Firefox\browser" - {2a1771e5-bd54-4097-a078-c15c03d0349d} 4852 "\\.\pipe\gecko-crash-server-pipe.4852" 5104 1c8e5134558 rdd
    3⤵
    PID:3752
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="4852.10.574960701\236014359" -childID 8 -isForBrowser -prefsHandle 5340 -prefMapHandle 4808 -prefsLen 27114 -prefMapSize 232675 -jsInitHandle 1496 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {e9b95e0b-476c-45d9-87f9-1bc4895495d3} 4852 "\\.\pipe\gecko-crash-server-pipe.4852" 5876 1c8e52f1e58 tab
    3⤵
    PID:2104

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x4 /state0:0xa397c855 /state1:0x41c64e6d
1⤵
- Modifies data under HKEY_USERS
- Suspicious use of SetWindowsHookEx
PID:3508

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\VideoLAN\VLC\libvlc.dll

Filesize
186KB

MD5
4b262612db64f26ea1168ca569811110

SHA1
8e59964d1302a3109513cd4fd22c1f313e79654c

SHA256
a9340c99206f3388153d85df4ca94d33b28c60879406cc10ff1fd10eae16523f

SHA512
9902e64eb1e5ed4c67f4b7e523b41bde4535148c6be20db5f386a1da74533ca575383f1b3154f5985e379df9e1e164b6bda25a66504edcfaa57d40b04fc658c7

Download Submit
C:\Program Files\VideoLAN\VLC\libvlc.dll

Filesize
186KB

MD5
4b262612db64f26ea1168ca569811110

SHA1
8e59964d1302a3109513cd4fd22c1f313e79654c

SHA256
a9340c99206f3388153d85df4ca94d33b28c60879406cc10ff1fd10eae16523f

SHA512
9902e64eb1e5ed4c67f4b7e523b41bde4535148c6be20db5f386a1da74533ca575383f1b3154f5985e379df9e1e164b6bda25a66504edcfaa57d40b04fc658c7

Download Submit
C:\Program Files\VideoLAN\VLC\libvlccore.dll

Filesize
2.7MB

MD5
01f6f807faf190a38bded7bb1c105c18

SHA1
22c9fbe9a92be74fe857aaea020025a78c52365f

SHA256
1fed66191a0cda73b37ba2bc58f6ebad3ee1ec4f8193608f3ac1d8ad2b97640d

SHA512
e35201ce08d51cf3c7580ec390e4eee228dbe17b51ee0885f748a65f36f2bb6a1c4deee10ce9be92d6b6d58db8a59b8d1f93dc8108e9ae7ef0f059c62d2faee9

Download Submit
C:\Program Files\VideoLAN\VLC\libvlccore.dll

Filesize
2.7MB

MD5
01f6f807faf190a38bded7bb1c105c18

SHA1
22c9fbe9a92be74fe857aaea020025a78c52365f

SHA256
1fed66191a0cda73b37ba2bc58f6ebad3ee1ec4f8193608f3ac1d8ad2b97640d

SHA512
e35201ce08d51cf3c7580ec390e4eee228dbe17b51ee0885f748a65f36f2bb6a1c4deee10ce9be92d6b6d58db8a59b8d1f93dc8108e9ae7ef0f059c62d2faee9

Download Submit
C:\Program Files\VideoLAN\VLC\locale\fi\LC_MESSAGES\vlc.mo

Filesize
599KB

MD5
b32e3dc98ae64634ac70bca8d9fe9049

SHA1
b76035923c6712c4ef4242cbbd0fee1fd98fa88b

SHA256
62fe79e569453987e9e2f0f6ce1b3d31f1591b9a2b9243972f46406f70b53f1d

SHA512
4d67d9ff3d769d279aa9760fe87fe7ed3d91b526a52c96a2ac5fde95557ed1ba3b77421ed793f14dd094763129e9a2b791c40562e6f6c1a1c2663c62ca946deb

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_concat_plugin.dll

Filesize
42KB

MD5
26016914b5b8b7c6d758a30a6fae2dda

SHA1
c455742059ebe4908e12d0e04971ee3cf9b51ee1

SHA256
2609e2c53d1ba720c0a778384784cceccb86532a31285e5dcb287e7bb7793bdb

SHA512
6b2db3623d98b51793860973c60fed97d54d3e426a7ec489f265bae92e152e4c9849967eaa136519008018aec43dadbe7a34f1859fe16c8488094d7037c77705

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_concat_plugin.dll

Filesize
42KB

MD5
26016914b5b8b7c6d758a30a6fae2dda

SHA1
c455742059ebe4908e12d0e04971ee3cf9b51ee1

SHA256
2609e2c53d1ba720c0a778384784cceccb86532a31285e5dcb287e7bb7793bdb

SHA512
6b2db3623d98b51793860973c60fed97d54d3e426a7ec489f265bae92e152e4c9849967eaa136519008018aec43dadbe7a34f1859fe16c8488094d7037c77705

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll

Filesize
71KB

MD5
e15fba7216c5181234e8455efdf61d76

SHA1
ec86c00eb58b5a97864d36b346622318012612f7

SHA256
bf51d2f6b8417fc3d3f31df06637b11b6c351a61d774860973c008b25378cc42

SHA512
0e5f46f1961d169f5ad9909d40426fc56e3ae41b0e0cfba38174b9b3c992a26819468979f565660cc5617914b9e601c5869004631c21829da5a2f7f420aad8d3

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll

Filesize
71KB

MD5
e15fba7216c5181234e8455efdf61d76

SHA1
ec86c00eb58b5a97864d36b346622318012612f7

SHA256
bf51d2f6b8417fc3d3f31df06637b11b6c351a61d774860973c008b25378cc42

SHA512
0e5f46f1961d169f5ad9909d40426fc56e3ae41b0e0cfba38174b9b3c992a26819468979f565660cc5617914b9e601c5869004631c21829da5a2f7f420aad8d3

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll

Filesize
105KB

MD5
7c76017e1503ab07e51ec0d44d2a139c

SHA1
27f4d14877f9ac883695b36f8fe0cf04f459f16f

SHA256
68c3ea26325ec61ba7a7a9dd467889873a8759b3be0bca2707081ba4c16c7a7e

SHA512
c9f9996796d952af6e2e7ce92a73e1ad3b6642029093a97652c60c1c42146f1591b579da4f9fdf2193fdc7fb0d289e94d754b3f865e79875491b7001389b68fc

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll

Filesize
105KB

MD5
7c76017e1503ab07e51ec0d44d2a139c

SHA1
27f4d14877f9ac883695b36f8fe0cf04f459f16f

SHA256
68c3ea26325ec61ba7a7a9dd467889873a8759b3be0bca2707081ba4c16c7a7e

SHA512
c9f9996796d952af6e2e7ce92a73e1ad3b6642029093a97652c60c1c42146f1591b579da4f9fdf2193fdc7fb0d289e94d754b3f865e79875491b7001389b68fc

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll

Filesize
146KB

MD5
e421f61deee0078802d8604b2ad08917

SHA1
ff5375c9ea526c45271ca5c580be4c608cb47814

SHA256
119edeff09504af40f8eb736ab56e1b9a9534cb9743b54ce07d80d00012c5e6d

SHA512
be19eaeb85d9438deada938ec431a035ac4e65c51c807b173a0a7bb4765571ada010c627e013a558fb668467f72dceaf62fefaaf4393a3fd4ae2a2995d95ede0

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll

Filesize
146KB

MD5
e421f61deee0078802d8604b2ad08917

SHA1
ff5375c9ea526c45271ca5c580be4c608cb47814

SHA256
119edeff09504af40f8eb736ab56e1b9a9534cb9743b54ce07d80d00012c5e6d

SHA512
be19eaeb85d9438deada938ec431a035ac4e65c51c807b173a0a7bb4765571ada010c627e013a558fb668467f72dceaf62fefaaf4393a3fd4ae2a2995d95ede0

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll

Filesize
3.5MB

MD5
ef8754762924e185bc64a23a8e8f5a8f

SHA1
731c4df43dba07c89e9b70063b0dec355beb3393

SHA256
d032c07dc6cdd73d8b9ca722836a4ba75809c2c808004f663c7a187c9116928a

SHA512
69810d21054e10ebf3398149105a4ee9d0414936a0bb8a5c55bdff5c19ed1e99ead00c28250bef1b2dd44a0269ca6e7816f8bf2f0d3a95df405b4756e6508587

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll

Filesize
3.5MB

MD5
ef8754762924e185bc64a23a8e8f5a8f

SHA1
731c4df43dba07c89e9b70063b0dec355beb3393

SHA256
d032c07dc6cdd73d8b9ca722836a4ba75809c2c808004f663c7a187c9116928a

SHA512
69810d21054e10ebf3398149105a4ee9d0414936a0bb8a5c55bdff5c19ed1e99ead00c28250bef1b2dd44a0269ca6e7816f8bf2f0d3a95df405b4756e6508587

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_wasapi_plugin.dll

Filesize
58KB

MD5
04b3b624b4e61a3374ed2dd95528c68b

SHA1
7bd2e32fa529da4369198ca384ce2dfafaa33d2f

SHA256
820e5ab7c819e24fe1c59da164cd01c7d672bcb1f3134c663c5fe8c104763695

SHA512
c9bf2ef3f3f431520e3522b75147a74c64bd6a3b9c8dc004fd6c4a4b31dfe96bffb4d084f30020fab467dbf566a2b6059f40fe98f7cb9a922de8b9a2de22ebb5

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_wasapi_plugin.dll

Filesize
58KB

MD5
04b3b624b4e61a3374ed2dd95528c68b

SHA1
7bd2e32fa529da4369198ca384ce2dfafaa33d2f

SHA256
820e5ab7c819e24fe1c59da164cd01c7d672bcb1f3134c663c5fe8c104763695

SHA512
c9bf2ef3f3f431520e3522b75147a74c64bd6a3b9c8dc004fd6c4a4b31dfe96bffb4d084f30020fab467dbf566a2b6059f40fe98f7cb9a922de8b9a2de22ebb5

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libattachment_plugin.dll

Filesize
40KB

MD5
c2c4dcdc172007b8cf5dc29629029f83

SHA1
70c76bddc0eee156c502221be2f2c66cadccad2a

SHA256
8b48547f9804d30c6328dd238fa7c2a02ee0ac0296ce557b4c4a662eae22fb6a

SHA512
ade5beaf251a30bc8b5e18223d5cb771155cdfa57ca3cc056b7d611ea25468502fef0138e24037d54f862309b1218ac5b3648a670696c755e3b08b0ece1ec892

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libattachment_plugin.dll

Filesize
40KB

MD5
c2c4dcdc172007b8cf5dc29629029f83

SHA1
70c76bddc0eee156c502221be2f2c66cadccad2a

SHA256
8b48547f9804d30c6328dd238fa7c2a02ee0ac0296ce557b4c4a662eae22fb6a

SHA512
ade5beaf251a30bc8b5e18223d5cb771155cdfa57ca3cc056b7d611ea25468502fef0138e24037d54f862309b1218ac5b3648a670696c755e3b08b0ece1ec892

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libcdda_plugin.dll

Filesize
807KB

MD5
f4e1627c9f9ece45aff14e9d0c59111d

SHA1
e5c249e2bcf0fd2bd75780008aac42fa8d761cd0

SHA256
bc345c902d036a597b5c22de723561345818e0c566adc67d85934aff584cc8e8

SHA512
811fbad644f7cbd7dc818142559385ca53619ae77a8b3fa680aa36e9882465325c55fa697cb164a8c541619af95a476b7e9a3dcef8189bd2214a40d49b82c8be

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libcdda_plugin.dll

Filesize
807KB

MD5
f4e1627c9f9ece45aff14e9d0c59111d

SHA1
e5c249e2bcf0fd2bd75780008aac42fa8d761cd0

SHA256
bc345c902d036a597b5c22de723561345818e0c566adc67d85934aff584cc8e8

SHA512
811fbad644f7cbd7dc818142559385ca53619ae77a8b3fa680aa36e9882465325c55fa697cb164a8c541619af95a476b7e9a3dcef8189bd2214a40d49b82c8be

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdcp_plugin.dll

Filesize
2.4MB

MD5
7b6ff607323c5959e3bbacf44a020a63

SHA1
c1dcd68691f16abf1ac5505d216e8f45234b195b

SHA256
70dbda1fe19c58f57d75b4f9f0ceb2960272bfd4578973f233434734f43db5c7

SHA512
2048000757f07e065fe671253e83ec72f03d46eff6c6670bcf5f61e9663062ff17d85e6f2d1d66ca649568235e3db088972b74629ab941b4816a162cb4273721

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdcp_plugin.dll

Filesize
2.4MB

MD5
7b6ff607323c5959e3bbacf44a020a63

SHA1
c1dcd68691f16abf1ac5505d216e8f45234b195b

SHA256
70dbda1fe19c58f57d75b4f9f0ceb2960272bfd4578973f233434734f43db5c7

SHA512
2048000757f07e065fe671253e83ec72f03d46eff6c6670bcf5f61e9663062ff17d85e6f2d1d66ca649568235e3db088972b74629ab941b4816a162cb4273721

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdshow_plugin.dll

Filesize
901KB

MD5
4955b3a469bf306278dad7473d4c886b

SHA1
3946b973a8eb1324e1107fe9f471939b332caa32

SHA256
4de9a8045550a94969ecea084e17d2efd6eef6e05559e3b9c45601ced0ca5a8a

SHA512
1e803973cb973f82286051653952b40ec9bbf54c7a4c8cf2039454d56053f8b25d961420be89ecb5c3b805348195aeb3bcbc33aca94f6567e9ed599d967a755f

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdshow_plugin.dll

Filesize
901KB

MD5
4955b3a469bf306278dad7473d4c886b

SHA1
3946b973a8eb1324e1107fe9f471939b332caa32

SHA256
4de9a8045550a94969ecea084e17d2efd6eef6e05559e3b9c45601ced0ca5a8a

SHA512
1e803973cb973f82286051653952b40ec9bbf54c7a4c8cf2039454d56053f8b25d961420be89ecb5c3b805348195aeb3bcbc33aca94f6567e9ed599d967a755f

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdtv_plugin.dll

Filesize
883KB

MD5
3866a489871640f58025aea1e7f3eabe

SHA1
7e4888a54b518b3e495efcce3b6115cbd7d2cdfc

SHA256
42695ac2d401f4f664adbb8e6c8a1798c51a6d190c07eb0ee4f1d4076d361150

SHA512
b4d31ddd39f72a81d34e3eb920299e2a106803c5ecf81b336bffb1c000da574db45038642e50a03a6d92db0d1c94d39a4f065149e26a134bb57bcefc5f0ca153

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdtv_plugin.dll

Filesize
883KB

MD5
3866a489871640f58025aea1e7f3eabe

SHA1
7e4888a54b518b3e495efcce3b6115cbd7d2cdfc

SHA256
42695ac2d401f4f664adbb8e6c8a1798c51a6d190c07eb0ee4f1d4076d361150

SHA512
b4d31ddd39f72a81d34e3eb920299e2a106803c5ecf81b336bffb1c000da574db45038642e50a03a6d92db0d1c94d39a4f065149e26a134bb57bcefc5f0ca153

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll

Filesize
227KB

MD5
1ca57e7dcf1761c3188c1cd41c2ab6af

SHA1
7df55110c863fc57607f65304023f753a3bc4f1f

SHA256
595281bd8bc4ea452fd8e1b230c033030ed65d75207cd076f08b1ce12c13c8b2

SHA512
28bcfaf3544698d5a1e6cc874963b0b52a44f13c8a769cd5ccbac8c1ec73993ce1bb45217df8c89a59b5ae5084e525bc9a6aafedbfcfd6d7f0c742148428b9ab

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll

Filesize
227KB

MD5
1ca57e7dcf1761c3188c1cd41c2ab6af

SHA1
7df55110c863fc57607f65304023f753a3bc4f1f

SHA256
595281bd8bc4ea452fd8e1b230c033030ed65d75207cd076f08b1ce12c13c8b2

SHA512
28bcfaf3544698d5a1e6cc874963b0b52a44f13c8a769cd5ccbac8c1ec73993ce1bb45217df8c89a59b5ae5084e525bc9a6aafedbfcfd6d7f0c742148428b9ab

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll

Filesize
161KB

MD5
4d871db3f202f3dd1d88d32c5f70cddf

SHA1
85f06234c342e119fb849c0798b005990d4dd7e3

SHA256
1bd6379823b65bdeed2d6faac4751e991bc445f91157a628368904068c94ccd2

SHA512
e42eb24cab1cb02b67322451945ea9d13f51a0c104c2d79f91f97f34c540e43b91efa599bb056faa2fd4d39b062ab09cbeece7e13c2196cfdb35119b4d1a2743

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll

Filesize
161KB

MD5
4d871db3f202f3dd1d88d32c5f70cddf

SHA1
85f06234c342e119fb849c0798b005990d4dd7e3

SHA256
1bd6379823b65bdeed2d6faac4751e991bc445f91157a628368904068c94ccd2

SHA512
e42eb24cab1cb02b67322451945ea9d13f51a0c104c2d79f91f97f34c540e43b91efa599bb056faa2fd4d39b062ab09cbeece7e13c2196cfdb35119b4d1a2743

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll

Filesize
69KB

MD5
d72adf488c072b89c8effa5feee6075d

SHA1
93be557e9bd3c759e987dda92b1d1282b3fb574b

SHA256
1074ed0713b19008c9d6cf9baa85215aa8f5f5de1a3986b757f67d2ec891ad7a

SHA512
61ac0e7fd236b3a26ea8b84808b66ebe8a960cd9fb3c9c2314f793f742aae2f41c32087f7b0ea835d8144fc14bece7d9b8ba3df05f3d92c832cd150fdb3eb11b

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll

Filesize
69KB

MD5
d72adf488c072b89c8effa5feee6075d

SHA1
93be557e9bd3c759e987dda92b1d1282b3fb574b

SHA256
1074ed0713b19008c9d6cf9baa85215aa8f5f5de1a3986b757f67d2ec891ad7a

SHA512
61ac0e7fd236b3a26ea8b84808b66ebe8a960cd9fb3c9c2314f793f742aae2f41c32087f7b0ea835d8144fc14bece7d9b8ba3df05f3d92c832cd150fdb3eb11b

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libftp_plugin.dll

Filesize
124KB

MD5
066a14f063e391192213355a17b8c112

SHA1
80d87b150f9ad09433f65232c9a20f4fed5c5136

SHA256
755969ab9109c8b9adb2ea47f6737520754cbbbc6fe3a320df73df48be7d1109

SHA512
0cbe79339a04f240ad07f8b75c31c381f22c221cc0b8ce976f9e4b7f73b9b9114c8ff2375830639ae56e160c770d5512dafb34891b1803b1401c32d42b640902

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libftp_plugin.dll

Filesize
124KB

MD5
066a14f063e391192213355a17b8c112

SHA1
80d87b150f9ad09433f65232c9a20f4fed5c5136

SHA256
755969ab9109c8b9adb2ea47f6737520754cbbbc6fe3a320df73df48be7d1109

SHA512
0cbe79339a04f240ad07f8b75c31c381f22c221cc0b8ce976f9e4b7f73b9b9114c8ff2375830639ae56e160c770d5512dafb34891b1803b1401c32d42b640902

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libhttp_plugin.dll

Filesize
74KB

MD5
22a6364dd6ce3d43851557eb4bc5fca1

SHA1
5d39e630186545ea2ab84b4ac961b765c538fb5a

SHA256
239b6fc3e680ff798c6a46683330960f5f98617e676e3c35e09e3e57054979e7

SHA512
dba9e9d160f938b3e7d0e49ef6568205bfa780d675dcd25105b82974242d1bba9c3e7e218c8f216fb32d791648a7ef2f8e16477805555d2895da58471fbb2157

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libhttp_plugin.dll

Filesize
74KB

MD5
22a6364dd6ce3d43851557eb4bc5fca1

SHA1
5d39e630186545ea2ab84b4ac961b765c538fb5a

SHA256
239b6fc3e680ff798c6a46683330960f5f98617e676e3c35e09e3e57054979e7

SHA512
dba9e9d160f938b3e7d0e49ef6568205bfa780d675dcd25105b82974242d1bba9c3e7e218c8f216fb32d791648a7ef2f8e16477805555d2895da58471fbb2157

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libhttps_plugin.dll

Filesize
151KB

MD5
64c037b9c364da561f88a1782acb8888

SHA1
efcaedb1a060f94e091624750f47bae7c39d23ca

SHA256
908baa924b9ac929eabe5d07f3c05dac72e654314eddd7d9ff1ffc52e8476f8d

SHA512
0622cc3322ac68a05b638f16bb09e34064668f773d14601e9484833dc177d2e4e346dd1ca3e198bf34a20f8f620b7aa32b744aec539456ffc82a28470e247dca

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libhttps_plugin.dll

Filesize
151KB

MD5
64c037b9c364da561f88a1782acb8888

SHA1
efcaedb1a060f94e091624750f47bae7c39d23ca

SHA256
908baa924b9ac929eabe5d07f3c05dac72e654314eddd7d9ff1ffc52e8476f8d

SHA512
0622cc3322ac68a05b638f16bb09e34064668f773d14601e9484833dc177d2e4e346dd1ca3e198bf34a20f8f620b7aa32b744aec539456ffc82a28470e247dca

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libidummy_plugin.dll

Filesize
40KB

MD5
52533e37a5a6d13ff52c19fdae293306

SHA1
7da740a58ab1ecdf8a8853c74663adfdc8e5c8b8

SHA256
74329123435229d3a28c2935fb9471c7c2333e75ae82ec94704840ed92521bbc

SHA512
bd50c860c5b830a7489f2349731829b311e075efc1494b3b4554ff882ddbb354983c8807e4600fb6d3cb21dbe5976a71c42e836a13d3b89e8aa432d174c62ba6

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libidummy_plugin.dll

Filesize
40KB

MD5
52533e37a5a6d13ff52c19fdae293306

SHA1
7da740a58ab1ecdf8a8853c74663adfdc8e5c8b8

SHA256
74329123435229d3a28c2935fb9471c7c2333e75ae82ec94704840ed92521bbc

SHA512
bd50c860c5b830a7489f2349731829b311e075efc1494b3b4554ff882ddbb354983c8807e4600fb6d3cb21dbe5976a71c42e836a13d3b89e8aa432d174c62ba6

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libimem_plugin.dll

Filesize
40KB

MD5
50af31d831c0ed08a15667ad81d81438

SHA1
d97a6377e3601a33700bb5cb41d5a04298f941d1

SHA256
7266e96ba730878aa4c12f86528811ecbfaab99e7e32aeb2a1886a80ec04843b

SHA512
5e2022831f50bc5917f340600be3030e8f24b3a7a0949ff34e38e77b6ee098650de6aaa195272b37216c13b50e3e4acb4ba408e43ee73ebadaec436e4f05f243

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libimem_plugin.dll

Filesize
40KB

MD5
50af31d831c0ed08a15667ad81d81438

SHA1
d97a6377e3601a33700bb5cb41d5a04298f941d1

SHA256
7266e96ba730878aa4c12f86528811ecbfaab99e7e32aeb2a1886a80ec04843b

SHA512
5e2022831f50bc5917f340600be3030e8f24b3a7a0949ff34e38e77b6ee098650de6aaa195272b37216c13b50e3e4acb4ba408e43ee73ebadaec436e4f05f243

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll

Filesize
2.0MB

MD5
228722de7314391dfc4d9bbbb2b41ce7

SHA1
848e2b75c7f9818042b9350c90c003d7bc9d4557

SHA256
bfcc63d312fb3f4240598a7071dcca87488aba2f1419e4bb7432bf302fc10d3a

SHA512
1a88fb9a54187c8e1cfcd283426220d95fdfb2e3a0f618b7f2946cc6bef3c931a64c38bc8226582324144ca73cebabdf9f8318c9dcbecc063bbfe4e2c23e1966

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll

Filesize
2.0MB

MD5
228722de7314391dfc4d9bbbb2b41ce7

SHA1
848e2b75c7f9818042b9350c90c003d7bc9d4557

SHA256
bfcc63d312fb3f4240598a7071dcca87488aba2f1419e4bb7432bf302fc10d3a

SHA512
1a88fb9a54187c8e1cfcd283426220d95fdfb2e3a0f618b7f2946cc6bef3c931a64c38bc8226582324144ca73cebabdf9f8318c9dcbecc063bbfe4e2c23e1966

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\liblive555_plugin.dll

Filesize
582KB

MD5
2868cd1a2a163970631df706d0705702

SHA1
cc36c54d9442d3a56cfad75f8bee7c5a862c0f90

SHA256
e43d1c7b823c53c177c0724f5cd6a97f47ee4256bd1f58ae61c4ec42c3fd0c86

SHA512
b9282615f2416a9a1bd03e0a5437e52806c0ff48bfd2ba85f393df3fd7bc735f3a29d2973208cf5f148c600411d7c8fa8f9f7eb65bc686bbfbe671c08d3ebe29

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\liblive555_plugin.dll

Filesize
582KB

MD5
2868cd1a2a163970631df706d0705702

SHA1
cc36c54d9442d3a56cfad75f8bee7c5a862c0f90

SHA256
e43d1c7b823c53c177c0724f5cd6a97f47ee4256bd1f58ae61c4ec42c3fd0c86

SHA512
b9282615f2416a9a1bd03e0a5437e52806c0ff48bfd2ba85f393df3fd7bc735f3a29d2973208cf5f148c600411d7c8fa8f9f7eb65bc686bbfbe671c08d3ebe29

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libnfs_plugin.dll

Filesize
285KB

MD5
5a52733ec86b80039ebf115a30d8b370

SHA1
e29191c3f0b5a29f85152e6ab3d0515b31f200f8

SHA256
66a90f84e4718dd77ddd8f587dda500f15f5fcf7d6845c573d16d8c9a22b0fa7

SHA512
0e2325ce133b1ad67e7ac89cd648fcd18b3b5debdbd77ab3fedf62ae191b97d769800de71f5b38a678ade8846696126e75c26db00da7cf12a03b6b0065ad51c3

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libnfs_plugin.dll

Filesize
285KB

MD5
5a52733ec86b80039ebf115a30d8b370

SHA1
e29191c3f0b5a29f85152e6ab3d0515b31f200f8

SHA256
66a90f84e4718dd77ddd8f587dda500f15f5fcf7d6845c573d16d8c9a22b0fa7

SHA512
0e2325ce133b1ad67e7ac89cd648fcd18b3b5debdbd77ab3fedf62ae191b97d769800de71f5b38a678ade8846696126e75c26db00da7cf12a03b6b0065ad51c3

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\librist_plugin.dll

Filesize
115KB

MD5
cc3476188a788dbfc9a9487eea44a464

SHA1
c9d648f4d4609ead2a96563bf87da84dd2437f53

SHA256
866acdfda3cb62831920b62c432fe8b09374b13a060b6daee93be652d236b958

SHA512
baf05fb56ed0ec6de0cf193cf157c39b9be61174ce3303dcbf270ce16e08c082bf01c5c1a9d78d5aebc36e677bb7a9673e64d5b6313eb6cf113c1de1ec7f0bf8

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\librist_plugin.dll

Filesize
115KB

MD5
cc3476188a788dbfc9a9487eea44a464

SHA1
c9d648f4d4609ead2a96563bf87da84dd2437f53

SHA256
866acdfda3cb62831920b62c432fe8b09374b13a060b6daee93be652d236b958

SHA512
baf05fb56ed0ec6de0cf193cf157c39b9be61174ce3303dcbf270ce16e08c082bf01c5c1a9d78d5aebc36e677bb7a9673e64d5b6313eb6cf113c1de1ec7f0bf8

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\librtp_plugin.dll

Filesize
659KB

MD5
a82a0d87c600bf6430bd9b0813b2a012

SHA1
0e6f06fe75059c4d5e2962e30e85cb42bc9bd7d4

SHA256
f66f86a688631276b9999c07443f10c902bbe65fa7318634edf60ea478219aaf

SHA512
9ea1bcc1dc8aff0d6d497ea24c9825f0f2c2a17a4636532e651b7c0270a9853688cd07344780b96c3cd0f93fc45b3360371a7ec3bbcdfdf00c342e6f680d20f4

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\librtp_plugin.dll

Filesize
659KB

MD5
a82a0d87c600bf6430bd9b0813b2a012

SHA1
0e6f06fe75059c4d5e2962e30e85cb42bc9bd7d4

SHA256
f66f86a688631276b9999c07443f10c902bbe65fa7318634edf60ea478219aaf

SHA512
9ea1bcc1dc8aff0d6d497ea24c9825f0f2c2a17a4636532e651b7c0270a9853688cd07344780b96c3cd0f93fc45b3360371a7ec3bbcdfdf00c342e6f680d20f4

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libsatip_plugin.dll

Filesize
74KB

MD5
0cd7b4427d43f4b6b168fa4d6cc0c748

SHA1
01d503bb7ad1b004f39596441a2ca3acf0860072

SHA256
51515722c3ac22b573659f2a19722c212fc95f71c3f6fdcd4883118ae9f7ae26

SHA512
d0085f56baff7d6318cbbaacbfaa6d989b8a560b924fafaf6ddb0af30527c00ff5290550a062e99403267f36cb36439eba9667e200bde9ba5c0eb4e16ba1b366

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libsatip_plugin.dll

Filesize
74KB

MD5
0cd7b4427d43f4b6b168fa4d6cc0c748

SHA1
01d503bb7ad1b004f39596441a2ca3acf0860072

SHA256
51515722c3ac22b573659f2a19722c212fc95f71c3f6fdcd4883118ae9f7ae26

SHA512
d0085f56baff7d6318cbbaacbfaa6d989b8a560b924fafaf6ddb0af30527c00ff5290550a062e99403267f36cb36439eba9667e200bde9ba5c0eb4e16ba1b366

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libscreen_plugin.dll

Filesize
47KB

MD5
706965e2d92ddab16afa7063f2e98803

SHA1
61f36aeb6a5fc343e562fb93ad145d1e2b6d6b0b

SHA256
c87992d43b094a18e48c3e1502c8b5a6765786c4943b9a9748d3cf8f6638f196

SHA512
1dd35d0108599963a7518a61cfcc2959e5d7cc07843fd353a31f41ebace9ee6db53483564b8cfca7fb6f46c1ba5c975a12780226fc000870afbf5d837b97f7e9

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libscreen_plugin.dll

Filesize
47KB

MD5
706965e2d92ddab16afa7063f2e98803

SHA1
61f36aeb6a5fc343e562fb93ad145d1e2b6d6b0b

SHA256
c87992d43b094a18e48c3e1502c8b5a6765786c4943b9a9748d3cf8f6638f196

SHA512
1dd35d0108599963a7518a61cfcc2959e5d7cc07843fd353a31f41ebace9ee6db53483564b8cfca7fb6f46c1ba5c975a12780226fc000870afbf5d837b97f7e9

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libsdp_plugin.dll

Filesize
39KB

MD5
80488e0a3b1f0131dda7981482e53892

SHA1
3cdbcd8708c732f2794bf8453a8b558322334ba4

SHA256
c69a1b2d3d8283e81080d90268e1b3f0aadfe4af42ca02ba29f4b5704829436d

SHA512
593058a37870a516f2176d711833d7eb3725780115a00ecc413f2b50a9b458da27e780c006c9fb44cc44ab84aaa28a2c21b6f6da92e026ab35828f45ff0b1b6d

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libsdp_plugin.dll

Filesize
39KB

MD5
80488e0a3b1f0131dda7981482e53892

SHA1
3cdbcd8708c732f2794bf8453a8b558322334ba4

SHA256
c69a1b2d3d8283e81080d90268e1b3f0aadfe4af42ca02ba29f4b5704829436d

SHA512
593058a37870a516f2176d711833d7eb3725780115a00ecc413f2b50a9b458da27e780c006c9fb44cc44ab84aaa28a2c21b6f6da92e026ab35828f45ff0b1b6d

Download Submit
C:\Program Files\VideoLAN\VLC\uninstall.log

Filesize
42KB

MD5
d67ee1a30f5a67ed10333e3319fe217f

SHA1
9f98fbca68d547d906a70bdae881a14849e2a3a1

SHA256
8ca28e95c1c95cee3dcb682e8aa6f0aaea95d9ac64cd5fe21cd59e8c56dc64ab

SHA512
b7f79b47be0987a89b696b94c11839267b7ec64174430e5635a6770f7dfa6bc9c3dd8a76bc495bc5e0e49412e62da26a0a90e12177a4304b889d1f2ea01b0917

Download Submit
C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe

Filesize
140KB

MD5
e7a7daa3ee59bd9ca701bf95f2b9c958

SHA1
a91b42e5062fef608f285002debaff9358162b25

SHA256
abbf9c57ad3068c8aafaf443297e9448e8657b6ac16e1a8bdde5ba87254708e1

SHA512
806905c6b9781461ec56488634afd620b47870563cb2a67eec72d441b7248bfc76387afb2c370e6f4a41e1e8902cc1661e6c9bfd82e262101ec2394b1311d9c5

Download Submit
C:\Program Files\VideoLAN\VLC\vlc.exe

Filesize
966KB

MD5
e634616d3b445fc1cd55ee79cf5326ea

SHA1
ca27a368d87bc776884322ca996f3b24e20645f4

SHA256
1fcd04fe1a3d519c7d585216b414cd947d16997d77d81a2892821f588c630937

SHA512
7d491c0a97ce60e22238a1a3530f45fbb3c82377b400d7986db09eccad05c9c22fb5daa2b4781882f870ab088326e5f6156613124caa67b54601cbad8f66aa90

Download Submit
C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\3o4pebi0.default-release\activity-stream.discovery_stream.json.tmp

Filesize
144KB

MD5
80b8a444b23934e28bc3813b460e9fa1

SHA1
ed604fe18f5deabb18213cf14b9e158f7bdf0dbd

SHA256
5e41a82689e2d8950af40bc2b3cbb865a40bd71893cf33cc1b3556c7be2d3d2a

SHA512
bd1d19a78829d7038e34a6329fae90c489e8c5995b8f5226511a2b2ea28942d0c2bf93be70c692b4887021c424bc776c7c23ce089a1212f5565ae84479c8d941

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf9571.tmp\LangDLL.dll

Filesize
7KB

MD5
20850d4d5416fbfd6a02e8a120f360fc

SHA1
ac34f3a34aaa4a21efd6a32bc93102639170e219

SHA256
860b409b065b747aab2a9937f02d08b6fd7309993b50d8e4b53983c8c2b56b61

SHA512
c8048b9ae0ced72a384c5ab781083a76b96ae08d5c8a5c7797f75a7e54e9cd9192349f185ee88c9cf0514fc8d59e37e01d88b9c8106321c0581659ebe1d1c276

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf9571.tmp\System.dll

Filesize
26KB

MD5
4f25d99bf1375fe5e61b037b2616695d

SHA1
958fad0e54df0736ddab28ff6cb93e6ed580c862

SHA256
803931797d95777248dee4f2a563aed51fe931d2dd28faec507c69ed0f26f647

SHA512
96a8446f322cd62377a93d2088c0ce06087da27ef95a391e02c505fb4eb1d00419143d67d89494c2ef6f57ae2fd7f049c86e00858d1b193ec6dde4d0fe0e3130

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf9571.tmp\nsDialogs.dll

Filesize
12KB

MD5
2029c44871670eec937d1a8c1e9faa21

SHA1
e8d53b9e8bc475cc274d80d3836b526d8dd2747a

SHA256
a4ae6d33f940a80e8fe34537c5cc1f8b8679c979607969320cfb750c15809ac2

SHA512
6f151c9818ac2f3aef6d4cabd8122c7e22ccf0b84fa5d4bcc951f8c3d00e8c270127eac1e9d93c5f4594ac90de8aff87dc6e96562f532a3d19c0da63a28654b7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf9571.tmp\nsExec.dll

Filesize
10KB

MD5
dcaaa39e47a9144ae10ee67b3183f4e1

SHA1
2af87fcebff57411e929dd2fce767e9a1e4d98e1

SHA256
da30c0f57a8a412bdc0fca182702f568bd91007475d1823464658fa523a4af9f

SHA512
d56997d74d841d01c62b7db4150729f395b57d065a1182249483640f80720fb6dc7a457cc3a23367982f92f85e9274507d6157f698a2e22ea11266866fb1bc2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf9571.tmp\nsProcess.dll

Filesize
35KB

MD5
1d391f65d3f16149d324dfe4178f2941

SHA1
834a465290feea0ea6f2783cfeccf85a1ff31648

SHA256
ded1a83fbd3dab203ca4e5db33b5a826d25d5cbb9413fb18ba21e1a91fb5f113

SHA512
7096362fa5b71fb8fc7f0a1a46686d7efb82fc079d00a508091cd8c3e8c36974c841d3a3185ce27c5a2bba468c301bf2bd720cb5b515fe34d3a2c987f36ba3ce

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3o4pebi0.default-release\prefs-1.js

Filesize
6KB

MD5
61d9a4c9ca413c4da289ac4b1f4b901e

SHA1
3025cb2c210e66d2e4bdf6b5fc32c130d5b768d1

SHA256
2321cab0774ac579756bc0e59b9b07a44d06b19bc91a9d3f57705931cf065f0b

SHA512
5520a80967fa3e88a61216ccc53f3636f93fdc34e312ae15f0a7c6c55b268de606afbe915c92bfcde4435a64ac4952f39a98d6305e919a55e9e4ed9ace66488f

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3o4pebi0.default-release\prefs-1.js

Filesize
6KB

MD5
78258427cd144ae4782f55fef51a31e0

SHA1
39cb94304be4822874e8a076f18d057aaabf4f93

SHA256
8e673f1b06d33ed9146679a09bbfa7dcf7d8cd6515aa1286ea345a0160bb5f9f

SHA512
d5c1bb26ad84597e92f0cf5c3e77d3f52812278344ef17c339ecb00051410c5a3ccd78a54b720bbe7e048541bf7e6b9ea967269fae4c6981d0d230d4d0d575c2

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3o4pebi0.default-release\prefs-1.js

Filesize
7KB

MD5
3d150270ff2548dfcc323914aee2ede8

SHA1
f618a77cf14d9b6958f5cb55eb1401101faaa095

SHA256
cab9f787c77d00526970253c5b99b10b81a9168b85ad46b1dd9423a7f3efa0d5

SHA512
ab854e17798233837cf2df2984a65875ede2569557824c38c609dc68451f462dc7735120c9e4b3f32dc972016ec4726a4f5fde5cecebe4742cec62207c136ad8

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3o4pebi0.default-release\prefs-1.js

Filesize
7KB

MD5
72d75ad1c190dc24ecbd5b65c8fa7189

SHA1
7642640ff4dbd895d3811219e04edb239cef6e32

SHA256
76703adfcb621136a70bd6af353b951663e5d77914e8323d2fb69d35e2a56907

SHA512
ce1fbbf894551126a6f8be5deaf46459c0a361075ecc0a6d772df64f8c684777d004aa50cc4cbc0fb918c439586d14becf117a7f34ad1e8b2a56b10025b43043

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3o4pebi0.default-release\prefs.js

Filesize
6KB

MD5
1984b45f201f1fd79d2154406648433b

SHA1
42f082dc6d4d43333688690bf4dfa7c7f8b618ab

SHA256
000a408519010d12b94281710f9a987f822093a1efb5293bbb50ca2e4a6a9df9

SHA512
e73a00cc8994d4023168e93ff5f5b6e6b13ffeb740872b64f565787cbb57e49e64eb03e4de1d8068a6f303f0615749fb27cb47bdbc4cef3fef1290bd3a3a17cc

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3o4pebi0.default-release\sessionCheckpoints.json.tmp

Filesize
259B

MD5
700fe59d2eb10b8cd28525fcc46bc0cc

SHA1
339badf0e1eba5332bff317d7cf8a41d5860390d

SHA256
4f5d849bdf4a5eeeb5da8836589e064e31c8e94129d4e55b1c69a6f98fb9f9ea

SHA512
3fa1b3fd4277d5900140e013b1035cb4c72065afcc6b6a8595b43101cfe7d09e75554a877e4a01bb80b0d7a58cdcfe553c4a9ef308c5695c5e77cb0ea99bada4

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3o4pebi0.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
1KB

MD5
9d13c9f174d8527608013e85b1c2a6f9

SHA1
833d6d048a213309077aa6fdd155170075fbb1e3

SHA256
b76bbe789b40cf7ef965f279453515d1b678a92f8d5514e793128030f439e14b

SHA512
f04b0dbf81d05942d05e1b436639ce159c9188c6a21cf57c2935455dd74a081d2a17916d7a21eac5198798031f922b97a8d6a2b42930de65438dfce5df55a2ca

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3o4pebi0.default-release\sessionstore-backups\recovery.jsonlz4

Filesize
3KB

MD5
fab737c6257dad38981d02287af41711

SHA1
53d0fd7961b3933f1918ec8fc08ff1b787091eab

SHA256
b1b9aa337a96d38e669f424935acf7492bd00ecd1b9218510c487eb780d81514

SHA512
1ca941b84cc93292410a8c92f47bb69f1339563843442c86ae2b84df16c4bd0b9bfb1fa7f3b490ccbc9d9908e493b762d85e30f655a6a623a8a1889119d68261

Download Submit
C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\3o4pebi0.default-release\sessionstore.jsonlz4

Filesize
10KB

MD5
4375ef714931c67838345e45f6e4c6fb

SHA1
a2e66cee883275cbb61d343bf44bd6e3fe9e15c3

SHA256
9359dab38c64af4cc8a3646221a88c02f79366219d87256d6cc1942fc2d4cd48

SHA512
f41bcff48cfd83128f7926dcabee9c5bfdd901ecc936fa27ab58599b7f407ab0f57883c264e30f2d3574b1077fa10243c9abd3607e29796d3c59a3748d53d89d

Download Submit
memory/1404-819-0x0000000140000000-0x0000000140029000-memory.dmp

Filesize
164KB

Download
memory/1404-820-0x00007FFE2ED50000-0x00007FFE2ED84000-memory.dmp

Filesize
208KB

Download
memory/1404-821-0x00007FFE20010000-0x00007FFE202C5000-memory.dmp

Filesize
2.7MB

Download
memory/1404-822-0x00007FFE15310000-0x00007FFE163BE000-memory.dmp

Filesize
16.7MB

Download
memory/1404-823-0x00007FFE16AD0000-0x00007FFE16BDE000-memory.dmp

Filesize
1.1MB

Download
memory/3592-159-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/3592-830-0x00000000744D0000-0x00000000744DE000-memory.dmp

Filesize
56KB

Download
memory/3592-856-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/3592-858-0x00000000744C0000-0x00000000744CB000-memory.dmp

Filesize
44KB

Download
memory/3592-872-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/3592-829-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/3592-147-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/3592-148-0x00000000744D0000-0x00000000744DE000-memory.dmp

Filesize
56KB

Download
memory/3592-149-0x00000000744C0000-0x00000000744CB000-memory.dmp

Filesize
44KB

Download
memory/3592-156-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/3592-158-0x00000000744C0000-0x00000000744CB000-memory.dmp

Filesize
44KB

Download
memory/3592-161-0x00000000744C0000-0x00000000744CB000-memory.dmp

Filesize
44KB

Download
memory/3592-162-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/3592-285-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/3592-611-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download