ba575f153d357eaf3fdbf446b9b93a12ced87c35887cdd83ad4281733eb86602

Analysis

max time kernel
142s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
14-08-2023 19:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

vlc-3.0.18-win64.exe
Size

42.2MB
MD5

7fddbac28a9c85c79fe08e2d6506e535
SHA1

b2def381b57b9a7643a91790f5537e74fab729dc
SHA256

ba575f153d357eaf3fdbf446b9b93a12ced87c35887cdd83ad4281733eb86602
SHA512

bfbda8c590dc53d565cc2d26a59c97834663e871c6c7233523a2dd48027e78b93c75ae8af6d56c8542c9102aadbee8aa3b5c7f83a7600b377cf0af2cc92433b9
SSDEEP

786432:5+vk5XxMOrNfNWNG7JNzwCR3xmgpa3qdxrXcAPXCIfJ546BZTg2QrXoRHq:5+vyTnJFwL3qrJvCIxi6By2QrXoE

Score

4^/10

persistence

Malware Config

Signatures

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\audio_mixer\libfloat_mixer_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\requests\browse.json	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_srt_plugin.dll	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libcache_block_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\hr\	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\visualization\libgoom_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\th\LC_MESSAGES\vlc.mo	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\playlist\	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\librawaud_plugin.dll	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\locale\is\LC_MESSAGES\vlc.mo	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\jquery-ui-1.8.13.custom.css	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libvpx_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\stream_filter\	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\librawvideo_plugin.dll	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\vlc.mo	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\js\common.js	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libsdp_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\demux\libmjpeg_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\demux\libmp4_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\ml\LC_MESSAGES\vlc.mo	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\pa\LC_MESSAGES\	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libimem_plugin.dll	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\vlc.mo	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\locale\de\LC_MESSAGES\vlc.mo	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\lua\extensions\VLSub.luac	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libhttps_plugin.dll	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libsftp_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\images\Video-48.png	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libsubsdec_plugin.dll	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\locale\fi\LC_MESSAGES\vlc.mo	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\view.html	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_glass_65_ffffff_1x400.png	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_duplicate_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\lg\LC_MESSAGES\	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\keystore\libmemory_keystore_plugin.dll	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\locale\zh_CN\LC_MESSAGES\vlc.mo	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\text_renderer\libtdummy_plugin.dll	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libhttps_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi422_yuy2_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\ar\	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libopus_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libparam_eq_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\sv\LC_MESSAGES\	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_udp_plugin.dll	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\meta_engine\libtaglib_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_file_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libpng_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\ky\LC_MESSAGES\vlc.mo	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libchain_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libdcp_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\spu\	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libchorus_flanger_plugin.dll	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\locale\pl\LC_MESSAGES\vlc.mo	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\mobile_browse.html	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\lua\playlist\youtube.luac	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libvhs_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\demux\libpva_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_setid_plugin.dll	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\id\LC_MESSAGES\vlc.mo	vlc-3.0.18-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\js\jquery.jstree.js	vlc-3.0.18-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_output\libafile_plugin.dll	vlc-3.0.18-win64.exe

Executes dropped EXE 1 IoCs

pid	Process
2256	vlc-cache-gen.exe

Loads dropped DLL 64 IoCs

pid	Process
4548	vlc-3.0.18-win64.exe
4548	vlc-3.0.18-win64.exe
4548	vlc-3.0.18-win64.exe
4548	vlc-3.0.18-win64.exe
4548	vlc-3.0.18-win64.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe
2256	vlc-cache-gen.exe

Registers COM server for autorun 1 TTPs 4 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

description	ioc	Process
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32\ = "C:\\Program Files\\VideoLAN\\VLC\\axvlc.dll"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32\ThreadingModel = "Apartment"	regsvr32.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.rec\shell	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.3gp2\shell\AddToPlaylistVLC\MultiSelectModel = "Player"	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.rmi\shell	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.rec\DefaultIcon	vlc-3.0.18-win64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5AF314CF-8849-4A79-A3FC-8DE6625D9E72}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.aif\shell\PlayWithVLC	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.aob\shell\PlayWithVLC\MultiSelectModel = "Player"	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mpga\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.dts\shell\AddToPlaylistVLC	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.au\DefaultIcon\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mxf	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.wmv\DefaultIcon\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ram\DefaultIcon\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3011986978-2180659500-3669311805-1000_Classes\.adts\ = "VLC.adts"	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.mxf\ = "VLC.mxf"	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.au\shell\PlayWithVLC\command	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.aob\shell\Open	vlc-3.0.18-win64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\ProxyStubClsid32	regsvr32.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5AF314CF-8849-4A79-A3FC-8DE6625D9E72}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9E0BD17B-2D3C-4656-B94D-03084F3FD9D4}\TypeLib\ = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.cda\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.f4v\shell\PlayWithVLC\command	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mtv\shell\AddToPlaylistVLC\MultiSelectModel = "Player"	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.bik\shell	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.mpeg4	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ogg\shell\PlayWithVLC	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.vlc\shell\AddToPlaylistVLC	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mid\shell	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.b4s	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.3ga\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.adts\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.spx\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ogv\shell\AddToPlaylistVLC\command	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mod\ = "MOD Audio File (VLC)"	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ape\shell\PlayWithVLC	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ra\shell\PlayWithVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --no-playlist-enqueue \"%1\""	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.tod\shell\AddToPlaylistVLC\ = "Add to VLC media player's Playlist"	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\PlayWithVLC	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.aifc\shell\AddToPlaylistVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.a52\shell\Open\MultiSelectModel = "Player"	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.iso\shell\Open\ = "Play"	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mod\shell\PlayWithVLC\MultiSelectModel = "Player"	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.3gp2\shell\AddToPlaylistVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.au\shell\Open\ = "Play"	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.vqf\shell\Open\command	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.m4p\ = "VLC.m4p"	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.tta\ = "VLC.tta"	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m1v\shell\PlayWithVLC	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.flac\shell\Open\command	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.vob	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.aob\shell\Open\ = "Play"	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mpga\shell\AddToPlaylistVLC	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mp4v\shell\PlayWithVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --no-playlist-enqueue \"%1\""	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.wv\shell\Open	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.zpl\shell\Open\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file \"%1\""	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mid\shell\AddToPlaylistVLC\command	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.amv\shell	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.669\shell\PlayWithVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.18-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.divx\shell\AddToPlaylistVLC	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.a52\shell\PlayWithVLC\ = "Play with VLC media player"	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.divx\shell\AddToPlaylistVLC\ = "Add to VLC media player's Playlist"	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.webm\shell\PlayWithVLC\MultiSelectModel = "Player"	vlc-3.0.18-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.3ga\shell\ = "Open"	vlc-3.0.18-win64.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4548	vlc-3.0.18-win64.exe
4548	vlc-3.0.18-win64.exe
4548	vlc-3.0.18-win64.exe
4548	vlc-3.0.18-win64.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 4548 wrote to memory of 2256	4548	vlc-3.0.18-win64.exe	90
PID 4548 wrote to memory of 2256	4548	vlc-3.0.18-win64.exe	90
PID 4548 wrote to memory of 640	4548	vlc-3.0.18-win64.exe	92
PID 4548 wrote to memory of 640	4548	vlc-3.0.18-win64.exe	92
PID 4548 wrote to memory of 640	4548	vlc-3.0.18-win64.exe	92
PID 640 wrote to memory of 1904	640	regsvr32.exe	93
PID 640 wrote to memory of 1904	640	regsvr32.exe	93

C:\Users\Admin\AppData\Local\Temp\vlc-3.0.18-win64.exe
"C:\Users\Admin\AppData\Local\Temp\vlc-3.0.18-win64.exe"
1⤵
- Drops file in Program Files directory
- Loads dropped DLL
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4548
- C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe
  "C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe" C:\Program Files\VideoLAN\VLC\plugins
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2256
- C:\Windows\SysWOW64\regsvr32.exe
  regsvr32.exe /s "C:\Program Files\VideoLAN\VLC\axvlc.dll"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:640
- - C:\Windows\system32\regsvr32.exe
    /s "C:\Program Files\VideoLAN\VLC\axvlc.dll"
    3⤵
    - Registers COM server for autorun
    - Modifies registry class
    PID:1904

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\VideoLAN\VLC\libvlc.dll

Filesize
186KB

MD5
4b262612db64f26ea1168ca569811110

SHA1
8e59964d1302a3109513cd4fd22c1f313e79654c

SHA256
a9340c99206f3388153d85df4ca94d33b28c60879406cc10ff1fd10eae16523f

SHA512
9902e64eb1e5ed4c67f4b7e523b41bde4535148c6be20db5f386a1da74533ca575383f1b3154f5985e379df9e1e164b6bda25a66504edcfaa57d40b04fc658c7

Download Submit
C:\Program Files\VideoLAN\VLC\libvlc.dll

Filesize
186KB

MD5
4b262612db64f26ea1168ca569811110

SHA1
8e59964d1302a3109513cd4fd22c1f313e79654c

SHA256
a9340c99206f3388153d85df4ca94d33b28c60879406cc10ff1fd10eae16523f

SHA512
9902e64eb1e5ed4c67f4b7e523b41bde4535148c6be20db5f386a1da74533ca575383f1b3154f5985e379df9e1e164b6bda25a66504edcfaa57d40b04fc658c7

Download Submit
C:\Program Files\VideoLAN\VLC\libvlccore.dll

Filesize
2.7MB

MD5
01f6f807faf190a38bded7bb1c105c18

SHA1
22c9fbe9a92be74fe857aaea020025a78c52365f

SHA256
1fed66191a0cda73b37ba2bc58f6ebad3ee1ec4f8193608f3ac1d8ad2b97640d

SHA512
e35201ce08d51cf3c7580ec390e4eee228dbe17b51ee0885f748a65f36f2bb6a1c4deee10ce9be92d6b6d58db8a59b8d1f93dc8108e9ae7ef0f059c62d2faee9

Download Submit
C:\Program Files\VideoLAN\VLC\libvlccore.dll

Filesize
2.7MB

MD5
01f6f807faf190a38bded7bb1c105c18

SHA1
22c9fbe9a92be74fe857aaea020025a78c52365f

SHA256
1fed66191a0cda73b37ba2bc58f6ebad3ee1ec4f8193608f3ac1d8ad2b97640d

SHA512
e35201ce08d51cf3c7580ec390e4eee228dbe17b51ee0885f748a65f36f2bb6a1c4deee10ce9be92d6b6d58db8a59b8d1f93dc8108e9ae7ef0f059c62d2faee9

Download Submit
C:\Program Files\VideoLAN\VLC\locale\fi\LC_MESSAGES\vlc.mo

Filesize
599KB

MD5
b32e3dc98ae64634ac70bca8d9fe9049

SHA1
b76035923c6712c4ef4242cbbd0fee1fd98fa88b

SHA256
62fe79e569453987e9e2f0f6ce1b3d31f1591b9a2b9243972f46406f70b53f1d

SHA512
4d67d9ff3d769d279aa9760fe87fe7ed3d91b526a52c96a2ac5fde95557ed1ba3b77421ed793f14dd094763129e9a2b791c40562e6f6c1a1c2663c62ca946deb

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_concat_plugin.dll

Filesize
42KB

MD5
26016914b5b8b7c6d758a30a6fae2dda

SHA1
c455742059ebe4908e12d0e04971ee3cf9b51ee1

SHA256
2609e2c53d1ba720c0a778384784cceccb86532a31285e5dcb287e7bb7793bdb

SHA512
6b2db3623d98b51793860973c60fed97d54d3e426a7ec489f265bae92e152e4c9849967eaa136519008018aec43dadbe7a34f1859fe16c8488094d7037c77705

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_concat_plugin.dll

Filesize
42KB

MD5
26016914b5b8b7c6d758a30a6fae2dda

SHA1
c455742059ebe4908e12d0e04971ee3cf9b51ee1

SHA256
2609e2c53d1ba720c0a778384784cceccb86532a31285e5dcb287e7bb7793bdb

SHA512
6b2db3623d98b51793860973c60fed97d54d3e426a7ec489f265bae92e152e4c9849967eaa136519008018aec43dadbe7a34f1859fe16c8488094d7037c77705

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll

Filesize
71KB

MD5
e15fba7216c5181234e8455efdf61d76

SHA1
ec86c00eb58b5a97864d36b346622318012612f7

SHA256
bf51d2f6b8417fc3d3f31df06637b11b6c351a61d774860973c008b25378cc42

SHA512
0e5f46f1961d169f5ad9909d40426fc56e3ae41b0e0cfba38174b9b3c992a26819468979f565660cc5617914b9e601c5869004631c21829da5a2f7f420aad8d3

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll

Filesize
71KB

MD5
e15fba7216c5181234e8455efdf61d76

SHA1
ec86c00eb58b5a97864d36b346622318012612f7

SHA256
bf51d2f6b8417fc3d3f31df06637b11b6c351a61d774860973c008b25378cc42

SHA512
0e5f46f1961d169f5ad9909d40426fc56e3ae41b0e0cfba38174b9b3c992a26819468979f565660cc5617914b9e601c5869004631c21829da5a2f7f420aad8d3

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll

Filesize
105KB

MD5
7c76017e1503ab07e51ec0d44d2a139c

SHA1
27f4d14877f9ac883695b36f8fe0cf04f459f16f

SHA256
68c3ea26325ec61ba7a7a9dd467889873a8759b3be0bca2707081ba4c16c7a7e

SHA512
c9f9996796d952af6e2e7ce92a73e1ad3b6642029093a97652c60c1c42146f1591b579da4f9fdf2193fdc7fb0d289e94d754b3f865e79875491b7001389b68fc

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll

Filesize
105KB

MD5
7c76017e1503ab07e51ec0d44d2a139c

SHA1
27f4d14877f9ac883695b36f8fe0cf04f459f16f

SHA256
68c3ea26325ec61ba7a7a9dd467889873a8759b3be0bca2707081ba4c16c7a7e

SHA512
c9f9996796d952af6e2e7ce92a73e1ad3b6642029093a97652c60c1c42146f1591b579da4f9fdf2193fdc7fb0d289e94d754b3f865e79875491b7001389b68fc

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll

Filesize
146KB

MD5
e421f61deee0078802d8604b2ad08917

SHA1
ff5375c9ea526c45271ca5c580be4c608cb47814

SHA256
119edeff09504af40f8eb736ab56e1b9a9534cb9743b54ce07d80d00012c5e6d

SHA512
be19eaeb85d9438deada938ec431a035ac4e65c51c807b173a0a7bb4765571ada010c627e013a558fb668467f72dceaf62fefaaf4393a3fd4ae2a2995d95ede0

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll

Filesize
146KB

MD5
e421f61deee0078802d8604b2ad08917

SHA1
ff5375c9ea526c45271ca5c580be4c608cb47814

SHA256
119edeff09504af40f8eb736ab56e1b9a9534cb9743b54ce07d80d00012c5e6d

SHA512
be19eaeb85d9438deada938ec431a035ac4e65c51c807b173a0a7bb4765571ada010c627e013a558fb668467f72dceaf62fefaaf4393a3fd4ae2a2995d95ede0

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll

Filesize
3.5MB

MD5
ef8754762924e185bc64a23a8e8f5a8f

SHA1
731c4df43dba07c89e9b70063b0dec355beb3393

SHA256
d032c07dc6cdd73d8b9ca722836a4ba75809c2c808004f663c7a187c9116928a

SHA512
69810d21054e10ebf3398149105a4ee9d0414936a0bb8a5c55bdff5c19ed1e99ead00c28250bef1b2dd44a0269ca6e7816f8bf2f0d3a95df405b4756e6508587

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll

Filesize
3.5MB

MD5
ef8754762924e185bc64a23a8e8f5a8f

SHA1
731c4df43dba07c89e9b70063b0dec355beb3393

SHA256
d032c07dc6cdd73d8b9ca722836a4ba75809c2c808004f663c7a187c9116928a

SHA512
69810d21054e10ebf3398149105a4ee9d0414936a0bb8a5c55bdff5c19ed1e99ead00c28250bef1b2dd44a0269ca6e7816f8bf2f0d3a95df405b4756e6508587

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_wasapi_plugin.dll

Filesize
58KB

MD5
04b3b624b4e61a3374ed2dd95528c68b

SHA1
7bd2e32fa529da4369198ca384ce2dfafaa33d2f

SHA256
820e5ab7c819e24fe1c59da164cd01c7d672bcb1f3134c663c5fe8c104763695

SHA512
c9bf2ef3f3f431520e3522b75147a74c64bd6a3b9c8dc004fd6c4a4b31dfe96bffb4d084f30020fab467dbf566a2b6059f40fe98f7cb9a922de8b9a2de22ebb5

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_wasapi_plugin.dll

Filesize
58KB

MD5
04b3b624b4e61a3374ed2dd95528c68b

SHA1
7bd2e32fa529da4369198ca384ce2dfafaa33d2f

SHA256
820e5ab7c819e24fe1c59da164cd01c7d672bcb1f3134c663c5fe8c104763695

SHA512
c9bf2ef3f3f431520e3522b75147a74c64bd6a3b9c8dc004fd6c4a4b31dfe96bffb4d084f30020fab467dbf566a2b6059f40fe98f7cb9a922de8b9a2de22ebb5

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libattachment_plugin.dll

Filesize
40KB

MD5
c2c4dcdc172007b8cf5dc29629029f83

SHA1
70c76bddc0eee156c502221be2f2c66cadccad2a

SHA256
8b48547f9804d30c6328dd238fa7c2a02ee0ac0296ce557b4c4a662eae22fb6a

SHA512
ade5beaf251a30bc8b5e18223d5cb771155cdfa57ca3cc056b7d611ea25468502fef0138e24037d54f862309b1218ac5b3648a670696c755e3b08b0ece1ec892

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libattachment_plugin.dll

Filesize
40KB

MD5
c2c4dcdc172007b8cf5dc29629029f83

SHA1
70c76bddc0eee156c502221be2f2c66cadccad2a

SHA256
8b48547f9804d30c6328dd238fa7c2a02ee0ac0296ce557b4c4a662eae22fb6a

SHA512
ade5beaf251a30bc8b5e18223d5cb771155cdfa57ca3cc056b7d611ea25468502fef0138e24037d54f862309b1218ac5b3648a670696c755e3b08b0ece1ec892

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libcdda_plugin.dll

Filesize
807KB

MD5
f4e1627c9f9ece45aff14e9d0c59111d

SHA1
e5c249e2bcf0fd2bd75780008aac42fa8d761cd0

SHA256
bc345c902d036a597b5c22de723561345818e0c566adc67d85934aff584cc8e8

SHA512
811fbad644f7cbd7dc818142559385ca53619ae77a8b3fa680aa36e9882465325c55fa697cb164a8c541619af95a476b7e9a3dcef8189bd2214a40d49b82c8be

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libcdda_plugin.dll

Filesize
807KB

MD5
f4e1627c9f9ece45aff14e9d0c59111d

SHA1
e5c249e2bcf0fd2bd75780008aac42fa8d761cd0

SHA256
bc345c902d036a597b5c22de723561345818e0c566adc67d85934aff584cc8e8

SHA512
811fbad644f7cbd7dc818142559385ca53619ae77a8b3fa680aa36e9882465325c55fa697cb164a8c541619af95a476b7e9a3dcef8189bd2214a40d49b82c8be

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdcp_plugin.dll

Filesize
2.4MB

MD5
7b6ff607323c5959e3bbacf44a020a63

SHA1
c1dcd68691f16abf1ac5505d216e8f45234b195b

SHA256
70dbda1fe19c58f57d75b4f9f0ceb2960272bfd4578973f233434734f43db5c7

SHA512
2048000757f07e065fe671253e83ec72f03d46eff6c6670bcf5f61e9663062ff17d85e6f2d1d66ca649568235e3db088972b74629ab941b4816a162cb4273721

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdcp_plugin.dll

Filesize
2.4MB

MD5
7b6ff607323c5959e3bbacf44a020a63

SHA1
c1dcd68691f16abf1ac5505d216e8f45234b195b

SHA256
70dbda1fe19c58f57d75b4f9f0ceb2960272bfd4578973f233434734f43db5c7

SHA512
2048000757f07e065fe671253e83ec72f03d46eff6c6670bcf5f61e9663062ff17d85e6f2d1d66ca649568235e3db088972b74629ab941b4816a162cb4273721

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdshow_plugin.dll

Filesize
901KB

MD5
4955b3a469bf306278dad7473d4c886b

SHA1
3946b973a8eb1324e1107fe9f471939b332caa32

SHA256
4de9a8045550a94969ecea084e17d2efd6eef6e05559e3b9c45601ced0ca5a8a

SHA512
1e803973cb973f82286051653952b40ec9bbf54c7a4c8cf2039454d56053f8b25d961420be89ecb5c3b805348195aeb3bcbc33aca94f6567e9ed599d967a755f

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdshow_plugin.dll

Filesize
901KB

MD5
4955b3a469bf306278dad7473d4c886b

SHA1
3946b973a8eb1324e1107fe9f471939b332caa32

SHA256
4de9a8045550a94969ecea084e17d2efd6eef6e05559e3b9c45601ced0ca5a8a

SHA512
1e803973cb973f82286051653952b40ec9bbf54c7a4c8cf2039454d56053f8b25d961420be89ecb5c3b805348195aeb3bcbc33aca94f6567e9ed599d967a755f

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdtv_plugin.dll

Filesize
883KB

MD5
3866a489871640f58025aea1e7f3eabe

SHA1
7e4888a54b518b3e495efcce3b6115cbd7d2cdfc

SHA256
42695ac2d401f4f664adbb8e6c8a1798c51a6d190c07eb0ee4f1d4076d361150

SHA512
b4d31ddd39f72a81d34e3eb920299e2a106803c5ecf81b336bffb1c000da574db45038642e50a03a6d92db0d1c94d39a4f065149e26a134bb57bcefc5f0ca153

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdtv_plugin.dll

Filesize
883KB

MD5
3866a489871640f58025aea1e7f3eabe

SHA1
7e4888a54b518b3e495efcce3b6115cbd7d2cdfc

SHA256
42695ac2d401f4f664adbb8e6c8a1798c51a6d190c07eb0ee4f1d4076d361150

SHA512
b4d31ddd39f72a81d34e3eb920299e2a106803c5ecf81b336bffb1c000da574db45038642e50a03a6d92db0d1c94d39a4f065149e26a134bb57bcefc5f0ca153

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll

Filesize
227KB

MD5
1ca57e7dcf1761c3188c1cd41c2ab6af

SHA1
7df55110c863fc57607f65304023f753a3bc4f1f

SHA256
595281bd8bc4ea452fd8e1b230c033030ed65d75207cd076f08b1ce12c13c8b2

SHA512
28bcfaf3544698d5a1e6cc874963b0b52a44f13c8a769cd5ccbac8c1ec73993ce1bb45217df8c89a59b5ae5084e525bc9a6aafedbfcfd6d7f0c742148428b9ab

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll

Filesize
227KB

MD5
1ca57e7dcf1761c3188c1cd41c2ab6af

SHA1
7df55110c863fc57607f65304023f753a3bc4f1f

SHA256
595281bd8bc4ea452fd8e1b230c033030ed65d75207cd076f08b1ce12c13c8b2

SHA512
28bcfaf3544698d5a1e6cc874963b0b52a44f13c8a769cd5ccbac8c1ec73993ce1bb45217df8c89a59b5ae5084e525bc9a6aafedbfcfd6d7f0c742148428b9ab

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll

Filesize
161KB

MD5
4d871db3f202f3dd1d88d32c5f70cddf

SHA1
85f06234c342e119fb849c0798b005990d4dd7e3

SHA256
1bd6379823b65bdeed2d6faac4751e991bc445f91157a628368904068c94ccd2

SHA512
e42eb24cab1cb02b67322451945ea9d13f51a0c104c2d79f91f97f34c540e43b91efa599bb056faa2fd4d39b062ab09cbeece7e13c2196cfdb35119b4d1a2743

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll

Filesize
161KB

MD5
4d871db3f202f3dd1d88d32c5f70cddf

SHA1
85f06234c342e119fb849c0798b005990d4dd7e3

SHA256
1bd6379823b65bdeed2d6faac4751e991bc445f91157a628368904068c94ccd2

SHA512
e42eb24cab1cb02b67322451945ea9d13f51a0c104c2d79f91f97f34c540e43b91efa599bb056faa2fd4d39b062ab09cbeece7e13c2196cfdb35119b4d1a2743

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll

Filesize
69KB

MD5
d72adf488c072b89c8effa5feee6075d

SHA1
93be557e9bd3c759e987dda92b1d1282b3fb574b

SHA256
1074ed0713b19008c9d6cf9baa85215aa8f5f5de1a3986b757f67d2ec891ad7a

SHA512
61ac0e7fd236b3a26ea8b84808b66ebe8a960cd9fb3c9c2314f793f742aae2f41c32087f7b0ea835d8144fc14bece7d9b8ba3df05f3d92c832cd150fdb3eb11b

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll

Filesize
69KB

MD5
d72adf488c072b89c8effa5feee6075d

SHA1
93be557e9bd3c759e987dda92b1d1282b3fb574b

SHA256
1074ed0713b19008c9d6cf9baa85215aa8f5f5de1a3986b757f67d2ec891ad7a

SHA512
61ac0e7fd236b3a26ea8b84808b66ebe8a960cd9fb3c9c2314f793f742aae2f41c32087f7b0ea835d8144fc14bece7d9b8ba3df05f3d92c832cd150fdb3eb11b

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libftp_plugin.dll

Filesize
124KB

MD5
066a14f063e391192213355a17b8c112

SHA1
80d87b150f9ad09433f65232c9a20f4fed5c5136

SHA256
755969ab9109c8b9adb2ea47f6737520754cbbbc6fe3a320df73df48be7d1109

SHA512
0cbe79339a04f240ad07f8b75c31c381f22c221cc0b8ce976f9e4b7f73b9b9114c8ff2375830639ae56e160c770d5512dafb34891b1803b1401c32d42b640902

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libftp_plugin.dll

Filesize
124KB

MD5
066a14f063e391192213355a17b8c112

SHA1
80d87b150f9ad09433f65232c9a20f4fed5c5136

SHA256
755969ab9109c8b9adb2ea47f6737520754cbbbc6fe3a320df73df48be7d1109

SHA512
0cbe79339a04f240ad07f8b75c31c381f22c221cc0b8ce976f9e4b7f73b9b9114c8ff2375830639ae56e160c770d5512dafb34891b1803b1401c32d42b640902

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libhttp_plugin.dll

Filesize
74KB

MD5
22a6364dd6ce3d43851557eb4bc5fca1

SHA1
5d39e630186545ea2ab84b4ac961b765c538fb5a

SHA256
239b6fc3e680ff798c6a46683330960f5f98617e676e3c35e09e3e57054979e7

SHA512
dba9e9d160f938b3e7d0e49ef6568205bfa780d675dcd25105b82974242d1bba9c3e7e218c8f216fb32d791648a7ef2f8e16477805555d2895da58471fbb2157

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libhttp_plugin.dll

Filesize
74KB

MD5
22a6364dd6ce3d43851557eb4bc5fca1

SHA1
5d39e630186545ea2ab84b4ac961b765c538fb5a

SHA256
239b6fc3e680ff798c6a46683330960f5f98617e676e3c35e09e3e57054979e7

SHA512
dba9e9d160f938b3e7d0e49ef6568205bfa780d675dcd25105b82974242d1bba9c3e7e218c8f216fb32d791648a7ef2f8e16477805555d2895da58471fbb2157

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libhttps_plugin.dll

Filesize
151KB

MD5
64c037b9c364da561f88a1782acb8888

SHA1
efcaedb1a060f94e091624750f47bae7c39d23ca

SHA256
908baa924b9ac929eabe5d07f3c05dac72e654314eddd7d9ff1ffc52e8476f8d

SHA512
0622cc3322ac68a05b638f16bb09e34064668f773d14601e9484833dc177d2e4e346dd1ca3e198bf34a20f8f620b7aa32b744aec539456ffc82a28470e247dca

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libhttps_plugin.dll

Filesize
151KB

MD5
64c037b9c364da561f88a1782acb8888

SHA1
efcaedb1a060f94e091624750f47bae7c39d23ca

SHA256
908baa924b9ac929eabe5d07f3c05dac72e654314eddd7d9ff1ffc52e8476f8d

SHA512
0622cc3322ac68a05b638f16bb09e34064668f773d14601e9484833dc177d2e4e346dd1ca3e198bf34a20f8f620b7aa32b744aec539456ffc82a28470e247dca

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libidummy_plugin.dll

Filesize
40KB

MD5
52533e37a5a6d13ff52c19fdae293306

SHA1
7da740a58ab1ecdf8a8853c74663adfdc8e5c8b8

SHA256
74329123435229d3a28c2935fb9471c7c2333e75ae82ec94704840ed92521bbc

SHA512
bd50c860c5b830a7489f2349731829b311e075efc1494b3b4554ff882ddbb354983c8807e4600fb6d3cb21dbe5976a71c42e836a13d3b89e8aa432d174c62ba6

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libidummy_plugin.dll

Filesize
40KB

MD5
52533e37a5a6d13ff52c19fdae293306

SHA1
7da740a58ab1ecdf8a8853c74663adfdc8e5c8b8

SHA256
74329123435229d3a28c2935fb9471c7c2333e75ae82ec94704840ed92521bbc

SHA512
bd50c860c5b830a7489f2349731829b311e075efc1494b3b4554ff882ddbb354983c8807e4600fb6d3cb21dbe5976a71c42e836a13d3b89e8aa432d174c62ba6

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libimem_plugin.dll

Filesize
40KB

MD5
50af31d831c0ed08a15667ad81d81438

SHA1
d97a6377e3601a33700bb5cb41d5a04298f941d1

SHA256
7266e96ba730878aa4c12f86528811ecbfaab99e7e32aeb2a1886a80ec04843b

SHA512
5e2022831f50bc5917f340600be3030e8f24b3a7a0949ff34e38e77b6ee098650de6aaa195272b37216c13b50e3e4acb4ba408e43ee73ebadaec436e4f05f243

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libimem_plugin.dll

Filesize
40KB

MD5
50af31d831c0ed08a15667ad81d81438

SHA1
d97a6377e3601a33700bb5cb41d5a04298f941d1

SHA256
7266e96ba730878aa4c12f86528811ecbfaab99e7e32aeb2a1886a80ec04843b

SHA512
5e2022831f50bc5917f340600be3030e8f24b3a7a0949ff34e38e77b6ee098650de6aaa195272b37216c13b50e3e4acb4ba408e43ee73ebadaec436e4f05f243

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll

Filesize
2.0MB

MD5
228722de7314391dfc4d9bbbb2b41ce7

SHA1
848e2b75c7f9818042b9350c90c003d7bc9d4557

SHA256
bfcc63d312fb3f4240598a7071dcca87488aba2f1419e4bb7432bf302fc10d3a

SHA512
1a88fb9a54187c8e1cfcd283426220d95fdfb2e3a0f618b7f2946cc6bef3c931a64c38bc8226582324144ca73cebabdf9f8318c9dcbecc063bbfe4e2c23e1966

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll

Filesize
2.0MB

MD5
228722de7314391dfc4d9bbbb2b41ce7

SHA1
848e2b75c7f9818042b9350c90c003d7bc9d4557

SHA256
bfcc63d312fb3f4240598a7071dcca87488aba2f1419e4bb7432bf302fc10d3a

SHA512
1a88fb9a54187c8e1cfcd283426220d95fdfb2e3a0f618b7f2946cc6bef3c931a64c38bc8226582324144ca73cebabdf9f8318c9dcbecc063bbfe4e2c23e1966

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\liblive555_plugin.dll

Filesize
582KB

MD5
2868cd1a2a163970631df706d0705702

SHA1
cc36c54d9442d3a56cfad75f8bee7c5a862c0f90

SHA256
e43d1c7b823c53c177c0724f5cd6a97f47ee4256bd1f58ae61c4ec42c3fd0c86

SHA512
b9282615f2416a9a1bd03e0a5437e52806c0ff48bfd2ba85f393df3fd7bc735f3a29d2973208cf5f148c600411d7c8fa8f9f7eb65bc686bbfbe671c08d3ebe29

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\liblive555_plugin.dll

Filesize
582KB

MD5
2868cd1a2a163970631df706d0705702

SHA1
cc36c54d9442d3a56cfad75f8bee7c5a862c0f90

SHA256
e43d1c7b823c53c177c0724f5cd6a97f47ee4256bd1f58ae61c4ec42c3fd0c86

SHA512
b9282615f2416a9a1bd03e0a5437e52806c0ff48bfd2ba85f393df3fd7bc735f3a29d2973208cf5f148c600411d7c8fa8f9f7eb65bc686bbfbe671c08d3ebe29

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libnfs_plugin.dll

Filesize
285KB

MD5
5a52733ec86b80039ebf115a30d8b370

SHA1
e29191c3f0b5a29f85152e6ab3d0515b31f200f8

SHA256
66a90f84e4718dd77ddd8f587dda500f15f5fcf7d6845c573d16d8c9a22b0fa7

SHA512
0e2325ce133b1ad67e7ac89cd648fcd18b3b5debdbd77ab3fedf62ae191b97d769800de71f5b38a678ade8846696126e75c26db00da7cf12a03b6b0065ad51c3

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libnfs_plugin.dll

Filesize
285KB

MD5
5a52733ec86b80039ebf115a30d8b370

SHA1
e29191c3f0b5a29f85152e6ab3d0515b31f200f8

SHA256
66a90f84e4718dd77ddd8f587dda500f15f5fcf7d6845c573d16d8c9a22b0fa7

SHA512
0e2325ce133b1ad67e7ac89cd648fcd18b3b5debdbd77ab3fedf62ae191b97d769800de71f5b38a678ade8846696126e75c26db00da7cf12a03b6b0065ad51c3

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\librist_plugin.dll

Filesize
115KB

MD5
cc3476188a788dbfc9a9487eea44a464

SHA1
c9d648f4d4609ead2a96563bf87da84dd2437f53

SHA256
866acdfda3cb62831920b62c432fe8b09374b13a060b6daee93be652d236b958

SHA512
baf05fb56ed0ec6de0cf193cf157c39b9be61174ce3303dcbf270ce16e08c082bf01c5c1a9d78d5aebc36e677bb7a9673e64d5b6313eb6cf113c1de1ec7f0bf8

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\librist_plugin.dll

Filesize
115KB

MD5
cc3476188a788dbfc9a9487eea44a464

SHA1
c9d648f4d4609ead2a96563bf87da84dd2437f53

SHA256
866acdfda3cb62831920b62c432fe8b09374b13a060b6daee93be652d236b958

SHA512
baf05fb56ed0ec6de0cf193cf157c39b9be61174ce3303dcbf270ce16e08c082bf01c5c1a9d78d5aebc36e677bb7a9673e64d5b6313eb6cf113c1de1ec7f0bf8

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\librtp_plugin.dll

Filesize
659KB

MD5
a82a0d87c600bf6430bd9b0813b2a012

SHA1
0e6f06fe75059c4d5e2962e30e85cb42bc9bd7d4

SHA256
f66f86a688631276b9999c07443f10c902bbe65fa7318634edf60ea478219aaf

SHA512
9ea1bcc1dc8aff0d6d497ea24c9825f0f2c2a17a4636532e651b7c0270a9853688cd07344780b96c3cd0f93fc45b3360371a7ec3bbcdfdf00c342e6f680d20f4

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\librtp_plugin.dll

Filesize
659KB

MD5
a82a0d87c600bf6430bd9b0813b2a012

SHA1
0e6f06fe75059c4d5e2962e30e85cb42bc9bd7d4

SHA256
f66f86a688631276b9999c07443f10c902bbe65fa7318634edf60ea478219aaf

SHA512
9ea1bcc1dc8aff0d6d497ea24c9825f0f2c2a17a4636532e651b7c0270a9853688cd07344780b96c3cd0f93fc45b3360371a7ec3bbcdfdf00c342e6f680d20f4

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libsatip_plugin.dll

Filesize
74KB

MD5
0cd7b4427d43f4b6b168fa4d6cc0c748

SHA1
01d503bb7ad1b004f39596441a2ca3acf0860072

SHA256
51515722c3ac22b573659f2a19722c212fc95f71c3f6fdcd4883118ae9f7ae26

SHA512
d0085f56baff7d6318cbbaacbfaa6d989b8a560b924fafaf6ddb0af30527c00ff5290550a062e99403267f36cb36439eba9667e200bde9ba5c0eb4e16ba1b366

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libsatip_plugin.dll

Filesize
74KB

MD5
0cd7b4427d43f4b6b168fa4d6cc0c748

SHA1
01d503bb7ad1b004f39596441a2ca3acf0860072

SHA256
51515722c3ac22b573659f2a19722c212fc95f71c3f6fdcd4883118ae9f7ae26

SHA512
d0085f56baff7d6318cbbaacbfaa6d989b8a560b924fafaf6ddb0af30527c00ff5290550a062e99403267f36cb36439eba9667e200bde9ba5c0eb4e16ba1b366

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libscreen_plugin.dll

Filesize
47KB

MD5
706965e2d92ddab16afa7063f2e98803

SHA1
61f36aeb6a5fc343e562fb93ad145d1e2b6d6b0b

SHA256
c87992d43b094a18e48c3e1502c8b5a6765786c4943b9a9748d3cf8f6638f196

SHA512
1dd35d0108599963a7518a61cfcc2959e5d7cc07843fd353a31f41ebace9ee6db53483564b8cfca7fb6f46c1ba5c975a12780226fc000870afbf5d837b97f7e9

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libscreen_plugin.dll

Filesize
47KB

MD5
706965e2d92ddab16afa7063f2e98803

SHA1
61f36aeb6a5fc343e562fb93ad145d1e2b6d6b0b

SHA256
c87992d43b094a18e48c3e1502c8b5a6765786c4943b9a9748d3cf8f6638f196

SHA512
1dd35d0108599963a7518a61cfcc2959e5d7cc07843fd353a31f41ebace9ee6db53483564b8cfca7fb6f46c1ba5c975a12780226fc000870afbf5d837b97f7e9

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libsdp_plugin.dll

Filesize
39KB

MD5
80488e0a3b1f0131dda7981482e53892

SHA1
3cdbcd8708c732f2794bf8453a8b558322334ba4

SHA256
c69a1b2d3d8283e81080d90268e1b3f0aadfe4af42ca02ba29f4b5704829436d

SHA512
593058a37870a516f2176d711833d7eb3725780115a00ecc413f2b50a9b458da27e780c006c9fb44cc44ab84aaa28a2c21b6f6da92e026ab35828f45ff0b1b6d

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libsdp_plugin.dll

Filesize
39KB

MD5
80488e0a3b1f0131dda7981482e53892

SHA1
3cdbcd8708c732f2794bf8453a8b558322334ba4

SHA256
c69a1b2d3d8283e81080d90268e1b3f0aadfe4af42ca02ba29f4b5704829436d

SHA512
593058a37870a516f2176d711833d7eb3725780115a00ecc413f2b50a9b458da27e780c006c9fb44cc44ab84aaa28a2c21b6f6da92e026ab35828f45ff0b1b6d

Download Submit
C:\Program Files\VideoLAN\VLC\uninstall.log

Filesize
21KB

MD5
8e34006002648f4131bd348dc30d5504

SHA1
b6b24efd9c27ff601a938cf370bc28dcb27ccf04

SHA256
f4b87e6b2752dbaecee09ab11d254d5eb13a32a2ae009191f4cb0843401e2b7c

SHA512
34f762052fbb1818e75e7acabb794d45625dcb0a32332d64a4fb1bfb763d452e2f30acc0e4a21f2c9a55395fb8a679102e89f138f1d8fb49ef862da3356c124e

Download Submit
C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe

Filesize
140KB

MD5
e7a7daa3ee59bd9ca701bf95f2b9c958

SHA1
a91b42e5062fef608f285002debaff9358162b25

SHA256
abbf9c57ad3068c8aafaf443297e9448e8657b6ac16e1a8bdde5ba87254708e1

SHA512
806905c6b9781461ec56488634afd620b47870563cb2a67eec72d441b7248bfc76387afb2c370e6f4a41e1e8902cc1661e6c9bfd82e262101ec2394b1311d9c5

Download Submit
C:\Program Files\VideoLAN\VLC\vlc.exe

Filesize
966KB

MD5
e634616d3b445fc1cd55ee79cf5326ea

SHA1
ca27a368d87bc776884322ca996f3b24e20645f4

SHA256
1fcd04fe1a3d519c7d585216b414cd947d16997d77d81a2892821f588c630937

SHA512
7d491c0a97ce60e22238a1a3530f45fbb3c82377b400d7986db09eccad05c9c22fb5daa2b4781882f870ab088326e5f6156613124caa67b54601cbad8f66aa90

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa9378.tmp\LangDLL.dll

Filesize
7KB

MD5
20850d4d5416fbfd6a02e8a120f360fc

SHA1
ac34f3a34aaa4a21efd6a32bc93102639170e219

SHA256
860b409b065b747aab2a9937f02d08b6fd7309993b50d8e4b53983c8c2b56b61

SHA512
c8048b9ae0ced72a384c5ab781083a76b96ae08d5c8a5c7797f75a7e54e9cd9192349f185ee88c9cf0514fc8d59e37e01d88b9c8106321c0581659ebe1d1c276

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa9378.tmp\System.dll

Filesize
26KB

MD5
4f25d99bf1375fe5e61b037b2616695d

SHA1
958fad0e54df0736ddab28ff6cb93e6ed580c862

SHA256
803931797d95777248dee4f2a563aed51fe931d2dd28faec507c69ed0f26f647

SHA512
96a8446f322cd62377a93d2088c0ce06087da27ef95a391e02c505fb4eb1d00419143d67d89494c2ef6f57ae2fd7f049c86e00858d1b193ec6dde4d0fe0e3130

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa9378.tmp\nsDialogs.dll

Filesize
12KB

MD5
2029c44871670eec937d1a8c1e9faa21

SHA1
e8d53b9e8bc475cc274d80d3836b526d8dd2747a

SHA256
a4ae6d33f940a80e8fe34537c5cc1f8b8679c979607969320cfb750c15809ac2

SHA512
6f151c9818ac2f3aef6d4cabd8122c7e22ccf0b84fa5d4bcc951f8c3d00e8c270127eac1e9d93c5f4594ac90de8aff87dc6e96562f532a3d19c0da63a28654b7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa9378.tmp\nsExec.dll

Filesize
10KB

MD5
dcaaa39e47a9144ae10ee67b3183f4e1

SHA1
2af87fcebff57411e929dd2fce767e9a1e4d98e1

SHA256
da30c0f57a8a412bdc0fca182702f568bd91007475d1823464658fa523a4af9f

SHA512
d56997d74d841d01c62b7db4150729f395b57d065a1182249483640f80720fb6dc7a457cc3a23367982f92f85e9274507d6157f698a2e22ea11266866fb1bc2c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa9378.tmp\nsProcess.dll

Filesize
35KB

MD5
1d391f65d3f16149d324dfe4178f2941

SHA1
834a465290feea0ea6f2783cfeccf85a1ff31648

SHA256
ded1a83fbd3dab203ca4e5db33b5a826d25d5cbb9413fb18ba21e1a91fb5f113

SHA512
7096362fa5b71fb8fc7f0a1a46686d7efb82fc079d00a508091cd8c3e8c36974c841d3a3185ce27c5a2bba468c301bf2bd720cb5b515fe34d3a2c987f36ba3ce

Download Submit
memory/2256-834-0x00007FFAD47C0000-0x00007FFAD4A75000-memory.dmp

Filesize
2.7MB

Download
memory/2256-835-0x00007FFACB4A0000-0x00007FFACC54E000-memory.dmp

Filesize
16.7MB

Download
memory/2256-836-0x00007FFACAEB0000-0x00007FFACAFBE000-memory.dmp

Filesize
1.1MB

Download
memory/2256-833-0x00007FFAE4540000-0x00007FFAE4574000-memory.dmp

Filesize
208KB

Download
memory/2256-832-0x0000000140000000-0x0000000140029000-memory.dmp

Filesize
164KB

Download
memory/4548-150-0x0000000074860000-0x000000007486B000-memory.dmp

Filesize
44KB

Download
memory/4548-279-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/4548-148-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/4548-149-0x0000000074870000-0x000000007487E000-memory.dmp

Filesize
56KB

Download
memory/4548-281-0x0000000074860000-0x000000007486B000-memory.dmp

Filesize
44KB

Download
memory/4548-850-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/4548-637-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/4548-863-0x0000000074870000-0x000000007487E000-memory.dmp

Filesize
56KB

Download
memory/4548-869-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/4548-871-0x0000000074860000-0x000000007486B000-memory.dmp

Filesize
44KB

Download