d8055b6643651ca5b9ad58c438692a481483657f3f31624cdfa68b92e8394a57

Analysis

max time kernel
104s
max time network
121s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
19/02/2024, 16:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

vlc-3.0.20-win64.exe
Size

42.4MB
MD5

3d63e3a94c39a18f4da866b896b41e80
SHA1

c9520268936bfa6d060c8603cdee753db214d0ce
SHA256

d8055b6643651ca5b9ad58c438692a481483657f3f31624cdfa68b92e8394a57
SHA512

9dfcdeca8fbfb655d3a4a8d0297fdc7f4c34a46c1b4238436d6e51e8621cbcd866ebfbd2a738a50dccdcf18d162b213b086a5e2a720205751ae07147e800838a
SSDEEP

786432:3ESqSGUR5EpRsHXEiGxu9XjXlQGPmVaiTZiq+gB18wgMu232zhkYwWmA9d:0k1eqX6ucRX+C1xgMu232zhkYjD7

Score

4^/10

discovery persistence

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_ogg_plugin.dll	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\locale\co\LC_MESSAGES\vlc.mo	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\css\main.css	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libidummy_plugin.dll	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\brx\	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\requests\README.txt	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\index.html	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\playlist\newgrounds.luac	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\ps\	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\sq\	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\misc\libstats_plugin.dll	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\bs\	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\misc\liblogger_plugin.dll	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libblendbench_plugin.dll	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libflac_plugin.dll	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\control\libntservice_plugin.dll	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\demux\libdiracsys_plugin.dll	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\js\common.js	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\demux\libes_plugin.dll	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\libau_plugin.dll	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\libimage_plugin.dll	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ne\LC_MESSAGES\vlc.mo	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libfluidsynth_plugin.dll	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\sd\jamendo.luac	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\nn\LC_MESSAGES\	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\dialogs\stream_config_window.html	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\images\Back-48.png	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libcdg_plugin.dll	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\libdemux_cdg_plugin.dll	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_output\libvmem_plugin.dll	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_filter\librotate_plugin.dll	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\locale\lt\LC_MESSAGES\vlc.mo	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\playlist\twitch.luac	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\nn\	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\lua\intf\modules\httprequests.luac	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\requests\browse.json	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\ky\LC_MESSAGES\	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\css\	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_srt_plugin.dll	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libspudec_plugin.dll	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\skins\skin.catalog	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\id\LC_MESSAGES\	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\pa\	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_mlp_plugin.dll	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\lua\meta\art\00_musicbrainz.luac	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_dummy_plugin.dll	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_highlight-soft_75_ffe45c_1x100.png	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\hrtfs\	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\meta\art\01_googleimage.luac	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\ca\LC_MESSAGES\	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\cy\LC_MESSAGES\	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\lt\LC_MESSAGES\	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\demux\librawdv_plugin.dll	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\mux\libmux_avi_plugin.dll	vlc-3.0.20-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libi420_yuy2_sse2_plugin.dll	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\stream_filter\libaribcam_plugin.dll	vlc-3.0.20-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\libnoseek_plugin.dll	vlc-3.0.20-win64.exe

Executes dropped EXE 3 IoCs

pid	Process
2196	vlc-cache-gen.exe
1196	Process not Found
2020	vlc.exe

Loads dropped DLL 64 IoCs

pid	Process
1952	vlc-3.0.20-win64.exe
1952	vlc-3.0.20-win64.exe
1952	vlc-3.0.20-win64.exe
1952	vlc-3.0.20-win64.exe
1952	vlc-3.0.20-win64.exe
1952	vlc-3.0.20-win64.exe
2336	Process not Found
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe
2196	vlc-cache-gen.exe

Registers COM server for autorun 1 TTPs 4 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

description	ioc	Process
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32\ = "C:\\Program Files\\VideoLAN\\VLC\\axvlc.dll"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32\ThreadingModel = "Apartment"	regsvr32.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.aob\shell	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.aifc\shell\ = "Open"	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.avi\shell\ = "Open"	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mtv\shell\Open\command	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.vlc\ = "VLC Other File (VLC)"	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.amr\shell\AddToPlaylistVLC\MultiSelectModel = "Player"	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.xesc\shell\PlayWithVLC\MultiSelectModel = "Player"	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.3gpp\shell\ = "Open"	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m3u8	vlc-3.0.20-win64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{0AAEDF0B-D333-4B27-A0C6-BBF31413A42E}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.vqf	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ogv	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.vlc\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-3.0.20-win64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{465E787A-0556-452F-9477-954E4A940003}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.it\shell\PlayWithVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.tp\shell\PlayWithVLC\command	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ram\shell\PlayWithVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.wmv	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.wtv\shell\Open\command	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.cue\shell\Open\command	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.3ga\shell\PlayWithVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --no-playlist-enqueue \"%1\""	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mpeg2\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ifo\shell\PlayWithVLC\ = "Play with VLC media player"	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mpc\shell\PlayWithVLC	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.spx\shell\AddToPlaylistVLC\MultiSelectModel = "Player"	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.xm\shell\PlayWithVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.spx\shell\Open\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file \"%1\""	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.xm	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.dvr-ms\shell\PlayWithVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --no-playlist-enqueue \"%1\""	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mid\shell	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.w64\shell\AddToPlaylistVLC	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ogm\shell\PlayWithVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --no-playlist-enqueue \"%1\""	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m3u8\shell\Open\ = "Play"	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.iso\shell	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.divx\shell\Open\MultiSelectModel = "Player"	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.gxf\shell\Open	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8A4A20C2-93F3-44E8-8644-BEB2E3487E84}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.cda\shell\PlayWithVLC\command	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.dts\shell\PlayWithVLC\command	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.3gp\shell\AddToPlaylistVLC	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ram\shell\PlayWithVLC\MultiSelectModel = "Player"	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mka\DefaultIcon\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.3gpp	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.3gpp\DefaultIcon\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m2t\DefaultIcon	vlc-3.0.20-win64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{FD37FE32-82BC-4A25-B056-315F4DBB194D}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.amv	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.avi	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ape\shell\Open\ = "Play"	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.flac\shell\Open\ = "Play"	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ogx\shell\Open\command	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.xm\ = "VLC.xm"	vlc-3.0.20-win64.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000_CLASSES\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg	vlc.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m2t\shell	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.3ga\shell\AddToPlaylistVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.aob\shell\PlayWithVLC	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.aiff\shell\Open\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file \"%1\""	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.flv	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mp4\shell\Open	vlc-3.0.20-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ts\ = "TS Video File (VLC)"	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.tts\shell\Open	vlc-3.0.20-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.asx\shell\Open	vlc-3.0.20-win64.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
2020	vlc.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1952	vlc-3.0.20-win64.exe
1952	vlc-3.0.20-win64.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2020	vlc.exe

Suspicious use of FindShellTrayWindow 20 IoCs

pid	Process
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe

Suspicious use of SendNotifyMessage 19 IoCs

pid	Process
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe
2020	vlc.exe

Suspicious use of WriteProcessMemory 18 IoCs

description	pid	Process	procid_target
PID 1952 wrote to memory of 2196	1952	vlc-3.0.20-win64.exe	32
PID 1952 wrote to memory of 2196	1952	vlc-3.0.20-win64.exe	32
PID 1952 wrote to memory of 2196	1952	vlc-3.0.20-win64.exe	32
PID 1952 wrote to memory of 2196	1952	vlc-3.0.20-win64.exe	32
PID 1952 wrote to memory of 1744	1952	vlc-3.0.20-win64.exe	29
PID 1952 wrote to memory of 1744	1952	vlc-3.0.20-win64.exe	29
PID 1952 wrote to memory of 1744	1952	vlc-3.0.20-win64.exe	29
PID 1952 wrote to memory of 1744	1952	vlc-3.0.20-win64.exe	29
PID 1952 wrote to memory of 1744	1952	vlc-3.0.20-win64.exe	29
PID 1952 wrote to memory of 1744	1952	vlc-3.0.20-win64.exe	29
PID 1952 wrote to memory of 1744	1952	vlc-3.0.20-win64.exe	29
PID 1744 wrote to memory of 548	1744	regsvr32.exe	28
PID 1744 wrote to memory of 548	1744	regsvr32.exe	28
PID 1744 wrote to memory of 548	1744	regsvr32.exe	28
PID 1744 wrote to memory of 548	1744	regsvr32.exe	28
PID 1744 wrote to memory of 548	1744	regsvr32.exe	28
PID 1744 wrote to memory of 548	1744	regsvr32.exe	28
PID 1744 wrote to memory of 548	1744	regsvr32.exe	28

C:\Users\Admin\AppData\Local\Temp\vlc-3.0.20-win64.exe
"C:\Users\Admin\AppData\Local\Temp\vlc-3.0.20-win64.exe"
1⤵
- Drops file in Program Files directory
- Loads dropped DLL
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1952
- C:\Windows\SysWOW64\regsvr32.exe
  "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\VideoLAN\VLC\axvlc.dll"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1744
- C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe
  "C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe" C:\Program Files\VideoLAN\VLC\plugins
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2196

C:\Windows\system32\regsvr32.exe
/s "C:\Program Files\VideoLAN\VLC\axvlc.dll"
1⤵
- Registers COM server for autorun
- Modifies registry class
PID:548

C:\Program Files\VideoLAN\VLC\vlc.exe
"C:\Program Files\VideoLAN\VLC\vlc.exe"
1⤵
- Executes dropped EXE
- Modifies registry class
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:2020

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\VideoLAN\VLC\libvlc.dll

Filesize
186KB

MD5
12301645d2d72c0f480f2a6a65bc706e

SHA1
d9350fdedc5c3c311cea7f5087cecf24c1793ba4

SHA256
a2625d21b2cbca52ae5a9799e375529c715dba797a5646adf62f1c0289dbfb68

SHA512
fc856a3badd2479d2e30cb77b97d46db60946e2b15cd90425f85ebd877c67ab4752035b7c6f969f8188ef6a7206d2199ac11fb6c2746a758e2a7f640fe73a700

Download Submit
C:\Program Files\VideoLAN\VLC\libvlccore.dll

Filesize
754KB

MD5
2277f740919f62006c0ee85fc46bc71a

SHA1
cf28dd4811e8ffdba84ab29153ba3a98ec8e07ee

SHA256
13d47abf29a69d3a29fc15f7a2ec173d9784e52c359ea760af37e14d36ce8690

SHA512
00e2ceabfe7a155332f81a8ef238f6022d6c5d6856846378d7432a00c2b93cb945342a7137d5c7828b4da58951c6f4efc4acceea745c7861ef3155c9efa5a1e8

Download Submit
C:\Program Files\VideoLAN\VLC\locale\el\LC_MESSAGES\vlc.mo

Filesize
389KB

MD5
8a90f35ff25d154a8debdb39c5ac3d90

SHA1
8f5e466e4b10ba91e67d14f8d8743fe80789b241

SHA256
47e823ebe6b20dddc07fedd009e182dfa64feb4d05b81b698c565851e965959a

SHA512
6f02539eb7bed961ba97c09cd3a9c292eb74a213dd5bc92cad6a9a5a251230bc548c1a8d5c44e17fc135c95fa7d42d840648a9aeae03a88a9783cba8a47326e5

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll

Filesize
93KB

MD5
58c78c358a5ced18d65b14c0c3d4d995

SHA1
a146ce0dd7464e2c4c3a750d388f0319c80f93e1

SHA256
94fb31061ec5dbd6cddb505681b3beccf985bf9d4d0a977fed547b7a2d8b64ce

SHA512
062dbfe922d7653fbda84cd92e84b2b8778be12c1c4ac2208e2432001b1208cefdff355ddaa9000489f5b6a79dc114e04c8230a545bf1e531712c7b7b152a431

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll

Filesize
146KB

MD5
ede792db2e18a21b797ef5fed54b8c4b

SHA1
4000bb059d1da7ad794edba3a4214913c12ce9bf

SHA256
482eb8d973a09ced4ad2a2373026d7757a708057977a5a131f875cb5962e1f9b

SHA512
503d879df0c1bffb530482f4c0f84ce30947b513ae49a24d01611839205d4177450fe4d5a73d0cd37cd2c4a09f10a2fab983827d0ebe626b1d45c3d83d0ddf89

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll

Filesize
735KB

MD5
a0bb519743bf7fb7e00dc66664798371

SHA1
971f1acaa0888e9a65ca8e4b4157f9264ceea6ec

SHA256
2103bac3e6eb28b5f7447f18fafbb1ea1b28cc355a7f6a63071d37cbc1584aea

SHA512
ad733773415726ca7a6761cea950e5e42e90a9c736ea93ebd21f90ccd9e680f06f0c427a3990bfbf8f6b2a70034b9b350289355bbd82eeaccb768375e752c7ec

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libcdda_plugin.dll

Filesize
258KB

MD5
70bf610b6bea127e10841d00541bda39

SHA1
0591381abb61c62c3330beafb36dd6cdf3e44bfd

SHA256
4c3f31f79362e78f53ac53e9b9145e7dccc56c5960267ad57a461b483c30697a

SHA512
cf9453b8466072f53a542d48f88870bae1887b03c52f41ac0e0103ab85314f5524833c31f4cd1191580d72f2190e53705d0c9b706e724412ca5f0205d49492db

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdcp_plugin.dll

Filesize
388KB

MD5
5236cd55d9cd8560d04ce0576f1f5985

SHA1
d2cc86139309283335463dd4bf7e802e95d758a2

SHA256
37f913f713541199da18fb5b52dd81076c6a09552eb73fd2534c8bed7dd8a0c4

SHA512
4f6092a5c937d46cf350ecf7503363f544647163bfaa8281832526f9177cf630c4baa48e8bbc81d565fa9fb9c46bb6e8d04069adf1e7f10b771e08d498375c23

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdshow_plugin.dll

Filesize
228KB

MD5
faa955bae2f1acc17c336e2b91d7cd68

SHA1
59f76b010de8ba71de48f5a880df9a9d16ca38a1

SHA256
9f6a29fa24be1b3343a6f0936a548efe2b3ed6230220715177285c7f56b4b6bd

SHA512
862c58c3c849d9531db32ba11ea1881d278cd7db4862dee234299e11aa8563dfc7b5ccf810bbc4c5b5554c823afa7fb117218e0f8479dbf7eaa1388b2b44a536

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdtv_plugin.dll

Filesize
337KB

MD5
ecb23221cbbf5ae54de052994216bd10

SHA1
567d400ebfca299206a2f4280f0fef84c8c5a1b3

SHA256
737f2ea3266e837a7c13c2b16c5c64d2c29b4088429effa1b3bf351169ed8671

SHA512
b9e9ae07b48657042920f154ab8ed0554fc3585590a9aebbdd486bb62fce77dc62140c8e6e4c115da023218bf64577ffcb85eb31903de57b4d379368a196a496

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll

Filesize
76KB

MD5
5d362be1230d90ba769c9409e674b749

SHA1
4887af8dc50f61f712381cc571ddd148a4d0c7cc

SHA256
000bca07ab2bce8cefc84f96b673613a4e7f34eb628aa66fac5ca8282ba93082

SHA512
37643d35a977f35edf3c10e152f57fb37f96ff7232a89ce7fcdc278c9ffbdcb86b9b6cedd04ae1c26430e03f4b20da15d0b4335fa2c4190a0d74202e59e26201

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll

Filesize
161KB

MD5
3b513f5ed9c2607966b095c28050f958

SHA1
32f62ddee0c95c12fd96f289735934c45718594e

SHA256
54e1fe5c3a562a7c71a853e63aa355430eb1ba28bad6e7b9097c02b338e9968c

SHA512
e25bf53c5d80f10c474c1316000eede07b713ec256adab7b6c946b58b68cbc1afc16f49e0df88f4a3e105ab1e77ef1e7303e087bca0a79a3b9713d1b39fbbe9a

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll

Filesize
234KB

MD5
8e3ed4c64e2da987c37c8275ad6d7772

SHA1
aac3ab4aed9809e55b965fae25b80a9d2ad39e0f

SHA256
92fae312aa7c618318561abeea6627c74e72c318b6e361f708ae8c1dd3216bc2

SHA512
4571b1bd0b7fbd77764edb58e0fc4fa4606bbd547b204c9e75463d0fce6b63467df24afd7b37d66f7becfb669d617b82e1bfb7eae8cf21830f47d81a13e430fc

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\liblive555_plugin.dll

Filesize
264KB

MD5
caa598e4c2ea640e6eb059a1a59a0205

SHA1
bc72e8bb142b9e372c16e32202e24863ac4bb9cf

SHA256
de6099a320192d4060ccce54fab85fd9af6d137a8710c8f37374b3bd3d3a3803

SHA512
5e2f248b7a37c73aa5e5dd11e6d7918f0792f1beca0e4e38caedf6ed99fec2b3abc33b83d49fd4d2f02f0f5156594675486ad343a1ba3106145b8ec38822a920

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\libnfs_plugin.dll

Filesize
285KB

MD5
1ea40b8c695d15a27d61d2002e4efc6d

SHA1
75f490d3a5b5ae6153d5b69254732e19296267f7

SHA256
efbc6b12f6252e3c249b545a043b76df7db66bd04b7f4aed61e0e46c81260333

SHA512
21328350d73f13f0231fa36a48f2502f5f9031ad2eed81900c1109ff41bd7e7a8dc06587051a768011358d8a9c95cffe6e18a987138b290993f67b2a53b9630f

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\librist_plugin.dll

Filesize
96KB

MD5
fed93f0b29dbea9c72d0d021121f5d7a

SHA1
83e5f3a50796643b70e82e0f994cb75d2a48c169

SHA256
e4ba2d62277f02285c2e1426661ef9848dbec0be0e74ddebd292a553659678a5

SHA512
0f5d56e52274c0807d11300dcbf3dfedc1b68e6de9a631b1fa0490c6213fd51744bc7c885523e5571a40392e0c3f37f635d2af146238856c3dc1e02f3e7065ad

Download Submit
C:\Program Files\VideoLAN\VLC\plugins\access\librtp_plugin.dll

Filesize
572KB

MD5
437d21c1c1966fdfd844a39daa9f043d

SHA1
e194b362ebe440ec57318c4f31d1fa007d09e3e7

SHA256
db230fb33b1397aad53b8202e95c9b459339e0afa51347cd400fd478be098809

SHA512
da17dfa04cec0db2abc118312ff6d6a8466d38e24d3492203569566690294bcd38d29f8ae495d8d9f4de27b45d9e2dff83832ea4ba5784bf19df90cbd1791d20

Download Submit
C:\Program Files\VideoLAN\VLC\uninstall.log

Filesize
21KB

MD5
2919ed2afc1c36b6df363cf0076c6eed

SHA1
85ebade8abc5af3737c07a68316b20232a97769f

SHA256
8d5516220abb5309d96f0344425d8606758bfe2ebb60dd946f84ba20683a97ca

SHA512
978a9aa5f285357250e7cf3792432a3b66ddb7dd95437d13846f66211aa0da572f59fab6518daea95c6eee022ff2eb80653343d5f410100c6d452569cf9b9df1

Download Submit
C:\Program Files\VideoLAN\VLC\vlc.exe

Filesize
40KB

MD5
d9173e8611f20d3407ce7bef54d45ab6

SHA1
b76b400826b0c7642773fc8804f38aa836b44d04

SHA256
ab1a1341fc5fd7c5e0e27b1efa6a25668cfe2e2d1f852ad3a30ab64f71544453

SHA512
1880449898bfafd3b2d5a51230e6f08687d97ab699e2acf8c1d3355e97325c2564dd1c3bef18bfaf689018c8fcddcc5a5ed7487aa397b4e91c9aa34cff1ac9f9

Download Submit
C:\Users\Admin\AppData\Roaming\vlc\vlc-qt-interface.ini

Filesize
76B

MD5
8f2b4bd9316efff45369476119737dcd

SHA1
84c607082c78fd2682149997e19206dc4bfdd915

SHA256
e7aa9fa199cfe0f942d506c8c7319e57fe1dbb3fe220a1f65c84be06a50b029a

SHA512
e377282ff2b60c767bc754bf7a6fd9e74a057d31b22a261525d3a716e108cb79fb3bb5e62f9fd82821336bb6076283d1a07b437df9250788e9fa36eab7eac377

Download Submit
\Program Files\VideoLAN\VLC\libvlc.dll

Filesize
70KB

MD5
3a7fb0eaea07836c123791010d810874

SHA1
1160651c532432066bfcd8ece58729b468ffde6f

SHA256
eb5fe7128fe094569f817d77c29f46f437ea161f54dfd27010be6248b8565bbd

SHA512
33200fbf3a1735f65065eaa3844da37e50b9e71bc9f797d3a75d6bb1e2d4e9e57ec0f67e2cfc1e88e4741f76599600cc7e9d8479b2ad4c1fa09b4933c88f75a1

Download Submit
\Program Files\VideoLAN\VLC\libvlccore.dll

Filesize
221KB

MD5
609ec17e7b65a6cb9a7897b63ce07c7e

SHA1
dbdaf538316ff14ceaa87fdc2eb862c50748dbc0

SHA256
15bb789f7a038967f011e89e6df63d08112caad0ae017b391d581a381a0d08a0

SHA512
7e7f188943a2ddeceaf6470eaacab0f9b67c90c17b32d1cf24897b89d927a9d51c5f0e78a6703e3d13d7a28dafe5f7a25db0e35ac0cb7d187335fd478722c7cf

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libaccess_concat_plugin.dll

Filesize
42KB

MD5
399c70d81ee56fee27778f5df76bcffb

SHA1
61a55e01280e7de7d0d01490f5cee31eaa607db0

SHA256
8b6a92c5e127c876f273b52b05c8325d45832e1ba0be6e3ed160135287908a1c

SHA512
50d4c01fdff9d7ec138e409cef9293bec1257f3f93a45835d254e888f1daf5438f4ca37e2c18c46668b35dbd04d9bfa960a69bfe9a843a0085114c999e30c41f

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll

Filesize
71KB

MD5
0e15e4a2a2c4ca6596fadba8fd698886

SHA1
b4400814c9e6b8b4d81444de1d6582ee29543b84

SHA256
05d894562b569132df7ce2f285bcf3bc008b0d112f1f5acceef210e4ea3096b4

SHA512
4def562b67fb37a16c1f7ef725ebf8ab5b0cc91f3a9fd78e061b8031e67baf3d34b51e6b82c9e717a1699b8642c94a3994021cd06e2430605eed17674cbca369

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll

Filesize
44KB

MD5
50be7d967ee6f9e0e1b99d7e34c62ed7

SHA1
45456ad1f0722dfd6bb23184a63c984723d04c04

SHA256
5a69912df5c51808c3dd5f345abab9016763503d12c713c49008fa78d1cdf5c2

SHA512
536f3ecbc041d66c2676abd3500b577d430ef5b20df2ba485025c5b6a63d538185894a75d4b6ebcb159d2dde5b31d715f8685786d8e81c06255f148a22956b30

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll

Filesize
45KB

MD5
21e01d540243f6f8c9804f1661bd72d9

SHA1
8e2a22eac5d24b671529358f64457c9cce0f9667

SHA256
ba68083711e4903d7b83dbf0e7a1291f2a5e7cb4958b56bfd643b49f96e960a6

SHA512
974adf583d2d4a2ba19c774f345aca1c0c0684c31650062874d316efbdbfc714676c2ccffae35da6553e9278c1e74944b9ab7596657a3c638f1877b93be79665

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll

Filesize
278KB

MD5
834a7b087b154398192e381ba419b65f

SHA1
12768b28face324bc701f0d58bf00e4e5b79bf3a

SHA256
067b4af224cd0aab286b951c37ce0144da52064090ec72cbc43fd13da65f0bce

SHA512
ab69e0c61e772b3bf4ae6967716ea5ab18e45170109e690ca2910a66440fb77e11f3eef69831dddf9a4f262c01fab2f3a25eb7dcbd32da241607827a7fbd8e51

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libaccess_wasapi_plugin.dll

Filesize
58KB

MD5
5b0bc2238c0841d3e145e65c063ea4ec

SHA1
6c2e3a411aff78de463adff3c82ea2caaafeb050

SHA256
5d9f494558998cd8b4f1177a4833ba5608c36186ce8ca68b58bea24ae20f8fcf

SHA512
55f4abf59138aab5594079c4a679cc8d959c8b86b59c4a39dc469d038ca43a916b02599b974be99e14e8686df0938e7805759f8d56354c86676f81e9659b5995

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libattachment_plugin.dll

Filesize
40KB

MD5
5976f65a561c9a2aeadb7cfd50573d9c

SHA1
a21a4127d7d59b2bcb85011180abb4cc3d911017

SHA256
1bc95320136876ae16af46ec405b494d0578da12f5103cf191f20fd1a5afa546

SHA512
e32aa769eb252ec4ac81d6fbf93e61618de7a128172291c561c2959ac70996af26e4e46c20feea109a3201f6a334d2e79081b20e126e54fe843303ab6fe56c93

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libcdda_plugin.dll

Filesize
557KB

MD5
d3cde25a07a998952629b164929b4030

SHA1
134914790a0df0d0a6e0d6338b08ab5613b01b5d

SHA256
5c3b2898df9b9a66f80c8b0c7a59bcaf4df154c19103c6176a06f918513d2fbd

SHA512
e6ddb25eeef62dc0088a48b53e2e6aadfe7c9c971e3f3cca49d992197e13431a94e860d53224770e30200006f86cd4d416f2eac6d36edcab524bc271d91b6896

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libdcp_plugin.dll

Filesize
477KB

MD5
3a919010f3bd0198fbf80e294cde4745

SHA1
37099989fee8c40b203bac46c4b758f34090c421

SHA256
0023521c187c0b0152cdb685d2bc18850849662364620830dad954b3cc91afd5

SHA512
110b637f9c1a30d1c3dec68a2b9879ebba73c739f555534d73ca39e118cc87237257fa5b79bbeba6a897877b060178c87457e84fd45edb9ebf7b730de028a911

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libdshow_plugin.dll

Filesize
184KB

MD5
b3b580dac2545c54ef7c0a5e3ed73ef8

SHA1
9de1f4c83f9a627cd9d0a52099b09eecc9394093

SHA256
56ec13bb89b4436ec5c730cbab4206b01d163a53360f040bcd8c11af53fb1afa

SHA512
904a4abc075339428fa83a1933b9ffdec69f1c396741a34c280119ee674a940f1646881796ab814c2a2400eb58d96e0ee6c2056b9fc708370b2c45f87b88dcc7

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libdtv_plugin.dll

Filesize
413KB

MD5
97a3fcaa6a3d587b805aa9c98efba89a

SHA1
92dac896229cf5f845e19f85a1c4e60399398876

SHA256
972bd0fa539a613b09da9ef242d868d13268ae2a8d5082a3595f2f49114c4105

SHA512
3f9f48651d63add4a13bfe90e5370a8ca16c3d141b08dd077efc97ebe3f3166a95c9a3fe696dd3513a922e746f637d2f1a26812fafff5a2e29d862c2841f09a5

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll

Filesize
217KB

MD5
6e07a64f3f7cb450c9ce8faf69be88ff

SHA1
8ae2e033a355527425ca818dae8f9ca6daea05a6

SHA256
ef4795231d0404f834472f481e675fcf2ff993282988d54a02b4a13e6f6936ec

SHA512
601295668ae96443a0210231f6c0ff30a236fe52ba24b89dc00f08467a03a12e83bf1d79d0bbb56a0c5796c821602c75ae215eb276cc38b30cbf26a0a49667f9

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll

Filesize
69KB

MD5
cbc1d8fce47dc898a8bbe923d4046b4a

SHA1
c55166e5a7d3068eef9305b1fd28ecce8cfe2832

SHA256
d9e21fb0b03be335444435ae2af68d52c92347642c41d52b44924a0787ad5190

SHA512
9916595ec21b6365224382beb3de88747baff4ed5d6ccd1287a8c0ea9b5c9d4fa01cffd9aabdd5ac2c4fb1b5013e99464a366247bf1fd10e138a7c4fe9432711

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libftp_plugin.dll

Filesize
124KB

MD5
aa43cee76c4387d710849f4338fe52b2

SHA1
d500c6dfb921486054db380408128d47ec7f5957

SHA256
5499574b67f736506f8733d029995cd769870ad03b7a3f3e7686c01223e9ad7a

SHA512
5554c621e6acbab6d521a739f69250fe06b178a396764c66e311561636bca02ed90713165902ca3f9afbd09dfc6a95377b9dd833df5deeefcdd8b86d47fced56

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libhttp_plugin.dll

Filesize
74KB

MD5
36f73931514be53e12378860904aaeb1

SHA1
28496b852c3364e5b4c60830061594ebf5ce64e7

SHA256
f2016e1af95a85224614dec09bf0a8a8e87b37a75011ca9eb32c5bc04f6e6656

SHA512
38fc5febb9b21fae59072d8f04afed9226bcc9e5ab44e5fa1d00fdefe1caf7411edcb21a02a6f02d051b4acb43d5a7d18a3ad72b99b39d50a81abd19ca38a9f6

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libhttps_plugin.dll

Filesize
151KB

MD5
ce0d3532d91dd667377fa932c062bb35

SHA1
0b547f9a285069b4b48e73bb418528f80f8b1724

SHA256
e26ba30591b78d5399fdd9effb4e8d0d336aec20041567067488fb9b41a4a7ed

SHA512
235bcec66c66998e79fc93ce49b56f09a8a825e6f0e107dc5478238b0d5badae850d0f47daa912ffc2f151a3a47c25a5ff6475c82460bdfe04348bd6c3f809f6

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libidummy_plugin.dll

Filesize
40KB

MD5
ff5957e544f7d9997e79e4ba692b9e58

SHA1
94b3f29a89134132e810abb0a01696eb4cbfd73c

SHA256
fb1dbdad5f819b76e84192339148c5aa8bc752cc9753e4b844fcb488cd0801c6

SHA512
0c4f2b158e330e7a28a20f0058441595fbf6dfd0f4f15e6d61ec7180871a19227cc10eb3527acb61b461f221e39636a5d5ffaa8e85c08856a662bdec40943bb7

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libimem_plugin.dll

Filesize
40KB

MD5
8a8f11237d8e83de67315c078b28a933

SHA1
e06e375085b095a220e28c36edc540d75b79e662

SHA256
6b9a9fc8c264fb20d5c72db986333c3b4feb8eb05fcb0f882d28b62e0d1d5704

SHA512
8977391909c76ab809279d63f5e43693d2d484b66d172948d98dd13400f70457a381cc87fdea2e130e94a6b2ce3f3120c818bca464b287cfc5f684bce95b4568

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll

Filesize
269KB

MD5
30b35a268aefb872da2b16095d1c2166

SHA1
1b63c919e4dc97064da54564e0e92bd46b62bae4

SHA256
55cef603bb556101c56f1d8469d8d71cb638d870720e9239009a75553cd4184e

SHA512
c13922a43473e36d5fc973191337d51f94f9bc1845b2cefcb1b2d1686c38ef2913ce7ced61af03696429c91cc082fc93ce06482abcf23120fbc94f49d6c7aeb8

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\liblive555_plugin.dll

Filesize
567KB

MD5
612ebadbf4670e0c624d203c99191363

SHA1
c3e54fc8c80bd15ce756aeb081a5428cc61ec385

SHA256
435ef84760675676e9446ff0c68a35d75c05052059c356468f70da51e6ccdb2a

SHA512
5bc828e9058df0acb9a484ac6e7b5e0d50dbd56fbc0e1b9c04d7e31d7700f318a6ec90338b5c6c25945eb19a90de706a50e05567da5affe45b5361679653cd4b

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libnfs_plugin.dll

Filesize
232KB

MD5
136eeb9a31a9bbd1afd273d3e3c6e0f2

SHA1
44e708cd6ce6fc2656965a4f22ffee8a23729662

SHA256
2cbfd777a95f5f555d816e4ded403bb7d73d3ca2d5922d8a529cbcd6a6a9167b

SHA512
4b17e4dc650419ee24b2471c4fb9321a80224d0aee2c50c49f286561bdb91df565553156008c7c162d572046cf656a31d3fa234812d32f2930e11ce800f182ed

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\librist_plugin.dll

Filesize
115KB

MD5
ad221c77ff4e008e138da4570acecb6e

SHA1
5d611cab3ce7bfce9d9db0f26e353259aa7b8440

SHA256
eaf0324f69c4d74acd8651e9f376f1a74085e12a2db705e19217fd9eb8bfc3e3

SHA512
66673c3832fdbf6717d99e5dd91bd1282c88d104f2ec4e232809d8abe67ad60ec6a5160cecc07d317828fd2aea834470de5dfd4f174f35ce67b4e43387855d38

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\librtp_plugin.dll

Filesize
321KB

MD5
a4e7be10d3374a8059908adffa5614a4

SHA1
b83bc68678dabaa36b7a059f7a72b65ac3c793f5

SHA256
33f9065760a64ea81db36b7b3cf5923af817576b4c818e6018b5bcf1c96d0ba4

SHA512
4397f26054beed91c48bcc5e50b7407328397be3cc7aa085b30e6724c0139aad162728a6ffe28c3942187923e62bfdb44abe291c0e7d748b95e7d4e69ad83f3c

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libsatip_plugin.dll

Filesize
74KB

MD5
8836005a07c87a1d9f4a758b2d00809c

SHA1
678cafc4b7018afbcf2be4292640ede8bc3ebecc

SHA256
eb2141ad9f4d25265e8c3a141c3cb91d0998938761e52b1c13e084be64571400

SHA512
feb37a0aeea7e31d5b0ce081114666863c01e0b79f3145ba14d71a3fcf8bc64f91e4fb02f68b28b49deea05e3a6d699acad15c76db390c52fc407479401e3ae4

Download Submit
\Program Files\VideoLAN\VLC\plugins\access\libscreen_plugin.dll

Filesize
47KB

MD5
ab0ecf16177be2ba45c26b26e0b5d80b

SHA1
23a91166d0f6ac099792c234269cce01b65be613

SHA256
dec97a889aebccd7d899ff7215883c81f399fcbc82533c07308b58d265ec6211

SHA512
e0c1795c3fcb90fcd1b4b6c9ffe6e3c4ed242897963847b5e221aaa4dec114f0c9631058ae0ab72405e088a8d002e12b58fca1128df04c31961e058b7b475200

Download Submit
\Program Files\VideoLAN\VLC\vlc-cache-gen.exe

Filesize
140KB

MD5
c314f48471d34bc89863326324d00b8b

SHA1
d245a30303952f5573db6aa1c5e8f72b5a945bd3

SHA256
80b33a61cd53f82dd7f784310842fb1a8f28909a1f10e7a1abbfcda3794eb759

SHA512
82e994ab0685d075cd13f72d981fe3d2759efd58daccf032abf311f51a52be0168032118665720aabfe8455fe748d4f931b3a8e8c20a668da12afd7f596b38ad

Download Submit
\Users\Admin\AppData\Local\Temp\nsi1DA0.tmp\LangDLL.dll

Filesize
7KB

MD5
20850d4d5416fbfd6a02e8a120f360fc

SHA1
ac34f3a34aaa4a21efd6a32bc93102639170e219

SHA256
860b409b065b747aab2a9937f02d08b6fd7309993b50d8e4b53983c8c2b56b61

SHA512
c8048b9ae0ced72a384c5ab781083a76b96ae08d5c8a5c7797f75a7e54e9cd9192349f185ee88c9cf0514fc8d59e37e01d88b9c8106321c0581659ebe1d1c276

Download Submit
\Users\Admin\AppData\Local\Temp\nsi1DA0.tmp\System.dll

Filesize
26KB

MD5
4f25d99bf1375fe5e61b037b2616695d

SHA1
958fad0e54df0736ddab28ff6cb93e6ed580c862

SHA256
803931797d95777248dee4f2a563aed51fe931d2dd28faec507c69ed0f26f647

SHA512
96a8446f322cd62377a93d2088c0ce06087da27ef95a391e02c505fb4eb1d00419143d67d89494c2ef6f57ae2fd7f049c86e00858d1b193ec6dde4d0fe0e3130

Download Submit
\Users\Admin\AppData\Local\Temp\nsi1DA0.tmp\nsDialogs.dll

Filesize
12KB

MD5
2029c44871670eec937d1a8c1e9faa21

SHA1
e8d53b9e8bc475cc274d80d3836b526d8dd2747a

SHA256
a4ae6d33f940a80e8fe34537c5cc1f8b8679c979607969320cfb750c15809ac2

SHA512
6f151c9818ac2f3aef6d4cabd8122c7e22ccf0b84fa5d4bcc951f8c3d00e8c270127eac1e9d93c5f4594ac90de8aff87dc6e96562f532a3d19c0da63a28654b7

Download Submit
\Users\Admin\AppData\Local\Temp\nsi1DA0.tmp\nsExec.dll

Filesize
10KB

MD5
dcaaa39e47a9144ae10ee67b3183f4e1

SHA1
2af87fcebff57411e929dd2fce767e9a1e4d98e1

SHA256
da30c0f57a8a412bdc0fca182702f568bd91007475d1823464658fa523a4af9f

SHA512
d56997d74d841d01c62b7db4150729f395b57d065a1182249483640f80720fb6dc7a457cc3a23367982f92f85e9274507d6157f698a2e22ea11266866fb1bc2c

Download Submit
\Users\Admin\AppData\Local\Temp\nsi1DA0.tmp\nsProcess.dll

Filesize
35KB

MD5
764371d831841fe57172aa830d22149d

SHA1
680e20e9b98077dea32b083b5c746d8de35e0584

SHA256
93df9e969053ca77c982c6e52b7f2898d22777a8c50274b54303eaa0ef5ccded

SHA512
19076205eba08df978ad17f8176d3a5a17c4ea684460894b6a80cae7e48fcae5e9493ff745d88d62fd44fc17bcda838570add6c38bebe4962d575f060f1584f9

Download Submit
memory/1952-717-0x0000000074CB0000-0x0000000074CBE000-memory.dmp

Filesize
56KB

Download
memory/1952-20-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/1952-21-0x0000000074CB0000-0x0000000074CBE000-memory.dmp

Filesize
56KB

Download
memory/1952-22-0x0000000074C20000-0x0000000074C2B000-memory.dmp

Filesize
44KB

Download
memory/1952-17-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/1952-19-0x0000000074C20000-0x0000000074C2B000-memory.dmp

Filesize
44KB

Download
memory/1952-18-0x0000000074CB0000-0x0000000074CBE000-memory.dmp

Filesize
56KB

Download
memory/1952-716-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/1952-738-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/1952-718-0x0000000074C20000-0x0000000074C2B000-memory.dmp

Filesize
44KB

Download
memory/2020-753-0x000007FEF6990000-0x000007FEF69F7000-memory.dmp

Filesize
412KB

Download
memory/2020-746-0x000007FEF8430000-0x000007FEF8448000-memory.dmp

Filesize
96KB

Download
memory/2020-794-0x000007FEF4180000-0x000007FEF438B000-memory.dmp

Filesize
2.0MB

Download
memory/2020-795-0x000007FEF50C0000-0x000007FEF5101000-memory.dmp

Filesize
260KB

Download
memory/2020-741-0x00000000043E0000-0x00000000043E1000-memory.dmp

Filesize
4KB

Download
memory/2020-742-0x0000000004650000-0x0000000004660000-memory.dmp

Filesize
64KB

Download
memory/2020-744-0x000007FEF7700000-0x000007FEF7734000-memory.dmp

Filesize
208KB

Download
memory/2020-743-0x000000013F130000-0x000000013F228000-memory.dmp

Filesize
992KB

Download
memory/2020-751-0x000007FEF6A00000-0x000007FEF6A11000-memory.dmp

Filesize
68KB

Download
memory/2020-750-0x000007FEF6A20000-0x000007FEF6A3D000-memory.dmp

Filesize
116KB

Download
memory/2020-749-0x000007FEF6A40000-0x000007FEF6A57000-memory.dmp

Filesize
92KB

Download
memory/2020-748-0x000007FEF6A60000-0x000007FEF6A71000-memory.dmp

Filesize
68KB

Download
memory/2020-747-0x000007FEF6A80000-0x000007FEF6A97000-memory.dmp

Filesize
92KB

Download
memory/2020-752-0x000007FEF52B0000-0x000007FEF6360000-memory.dmp

Filesize
16.7MB

Download
memory/2020-796-0x000007FEF4150000-0x000007FEF4171000-memory.dmp

Filesize
132KB

Download
memory/2020-797-0x000007FEF4130000-0x000007FEF4148000-memory.dmp

Filesize
96KB

Download
memory/2020-745-0x000007FEF6360000-0x000007FEF6616000-memory.dmp

Filesize
2.7MB

Download
memory/2020-754-0x00000000043E0000-0x00000000043E1000-memory.dmp

Filesize
4KB

Download
memory/2020-756-0x000007FEA94F0000-0x000007FEA94FA000-memory.dmp

Filesize
40KB

Download
memory/2020-755-0x000007FEF4740000-0x000007FEF4883000-memory.dmp

Filesize
1.3MB

Download
memory/2020-798-0x000007FEF4110000-0x000007FEF4121000-memory.dmp

Filesize
68KB

Download
memory/2020-785-0x000007FEF6360000-0x000007FEF6616000-memory.dmp

Filesize
2.7MB

Download
memory/2020-792-0x000007FEF52B0000-0x000007FEF6360000-memory.dmp

Filesize
16.7MB

Download
memory/2020-802-0x000007FEF4090000-0x000007FEF40A1000-memory.dmp

Filesize
68KB

Download
memory/2020-801-0x000007FEF40B0000-0x000007FEF40CB000-memory.dmp

Filesize
108KB

Download
memory/2020-800-0x000007FEF40D0000-0x000007FEF40E1000-memory.dmp

Filesize
68KB

Download
memory/2020-799-0x000007FEF40F0000-0x000007FEF4101000-memory.dmp

Filesize
68KB

Download
memory/2196-682-0x0000000140000000-0x0000000140029000-memory.dmp

Filesize
164KB

Download
memory/2196-684-0x000007FEF6360000-0x000007FEF6616000-memory.dmp

Filesize
2.7MB

Download
memory/2196-685-0x000007FEECAA0000-0x000007FEEDB50000-memory.dmp

Filesize
16.7MB

Download
memory/2196-686-0x000007FEEC170000-0x000007FEEC27E000-memory.dmp

Filesize
1.1MB

Download
memory/2196-683-0x000007FEF8410000-0x000007FEF8444000-memory.dmp

Filesize
208KB

Download