f4baaa8135e0f9a993f0258a4d095db475096896bd3adb48369f1f70c1f0d9d4

Analysis

max time kernel
150s
max time network
119s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
25-02-2024 02:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

vlc-3.0.18-win32.exe
Size

40.8MB
MD5

6dc33df9e4a089a39e5e3a4e1932de67
SHA1

5c82fe5bab170139c5337f5826bc11f67bcdcb8e
SHA256

f4baaa8135e0f9a993f0258a4d095db475096896bd3adb48369f1f70c1f0d9d4
SHA512

1f189a30ae3d98ae21b1ca2d8c87074f42c0a643261c0e8f8125e5b5e4176079847be2ede348c278c07596e333af430a9114ff0d36b61e8a8e32755b03368905
SSDEEP

786432:F87DNeXbdh8M6OI8ut/NgZb4YrAXJapq3iZ6qeoeTD+HgEc68ebBEi/S+hbyrpwg:4UbdhqOIvtVNYWwq3pOeTDMC7ebBBS+e

Score

4^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\VideoLAN\VLC\locale\be\LC_MESSAGES\vlc.mo	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\skins\default.vlt	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libextract_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libsamplerate_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdca_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libdirect3d9_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\locale\te\LC_MESSAGES\vlc.mo	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\lua\intf\modules\host.luac	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libvpx_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\control\libwin_hotkeys_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\misc\libexport_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\libi420_rgb_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libidummy_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libsmf_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\video_splitter\libclone_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\lua\http\favicon.ico	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\README.txt	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\meta_engine\libfolder_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\liboldmovie_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libpng_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\video_output\libyuv_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libadf_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libaribcam_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_filter\libinflate_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\locale\an\LC_MESSAGES\vlc.mo	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\locale\fy\LC_MESSAGES\vlc.mo	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\locale\ms\LC_MESSAGES\vlc.mo	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll	vlc-3.0.18-win32.exe
File opened for modification	C:\Program Files (x86)\VideoLAN\VLC\VideoLAN Website.url	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libspeex_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\control\libntservice_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\librawvid_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libcvdsub_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\packetizer\libpacketizer_mpegaudio_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_cycle_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\video_chroma\librv32_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\locale\af\LC_MESSAGES\vlc.mo	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\locale\co\LC_MESSAGES\vlc.mo	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-icons_ef8c08_256x240.png	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\lua\sd\jamendo.luac	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\audio_filter\libscaletempo_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libaom_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\demux\libimage_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\video_filter\libedgedetection_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\locale\da\LC_MESSAGES\vlc.mo	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\vlc.mo	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\locale\vi\LC_MESSAGES\vlc.mo	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\lua\http\requests\browse.xml	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\access_output\libaccess_output_livehttp_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\AUTHORS.txt	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liba52_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\liblpcm_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\locale\kk\LC_MESSAGES\vlc.mo	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\vlc-cache-gen.exe	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\lua\http\dialogs\stream_config_window.html	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\locale\fi\LC_MESSAGES\vlc.mo	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\locale\nb\LC_MESSAGES\vlc.mo	vlc-3.0.18-win32.exe
File created	C:\Program Files (x86)\VideoLAN\VLC\locale\ps\LC_MESSAGES\vlc.mo	vlc-3.0.18-win32.exe

Executes dropped EXE 1 IoCs

pid	Process
328	vlc-cache-gen.exe

Loads dropped DLL 64 IoCs

pid	Process
2904	vlc-3.0.18-win32.exe
2904	vlc-3.0.18-win32.exe
2904	vlc-3.0.18-win32.exe
2904	vlc-3.0.18-win32.exe
2904	vlc-3.0.18-win32.exe
2904	vlc-3.0.18-win32.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe
328	vlc-cache-gen.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mpe\shell\AddToPlaylistVLC\MultiSelectModel = "Player"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mpc\ = "MPC Audio File (VLC)"	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m4v\shell	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.drc\ = "VLC.drc"	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.xesc\shell\PlayWithVLC\command	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mpeg1\shell\ = "Open"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.3g2\shell\AddToPlaylistVLC\MultiSelectModel = "Player"	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.flac\shell\Open\command	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m2v\shell\Open\ = "Play"	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ogg\DefaultIcon	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.3gp2\shell\AddToPlaylistVLC\ = "Add to VLC media player's Playlist"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.tod\shell\AddToPlaylistVLC\MultiSelectModel = "Player"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mpg\shell\Open\command\ = "\"C:\\Program Files (x86)\\VideoLAN\\VLC\\vlc.exe\" --started-from-file \"%1\""	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\DVD\shell\PlayWithVLC\command	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.thp\shell\Open\MultiSelectModel = "Player"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mka\shell\AddToPlaylistVLC\ = "Add to VLC media player's Playlist"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.s3m\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files (x86)\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.tta\shell\AddToPlaylistVLC	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.aifc\shell\Open	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.rpl\shell	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mpg\shell\PlayWithVLC\Icon = "\"C:\\Program Files (x86)\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.rmvb\shell\AddToPlaylistVLC	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mp2\shell\PlayWithVLC\Icon = "\"C:\\Program Files (x86)\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.drc\ = "DRC Video File (VLC)"	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.wmv\shell\Open\command	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.rar\ = "VLC.rar"	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.snd\DefaultIcon	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.nsv	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.rar	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.f4v\shell\AddToPlaylistVLC	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.aifc\shell\PlayWithVLC	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.gxf\shell\PlayWithVLC\MultiSelectModel = "Player"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.cda\shell\ = "Open"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin\CurVer\ = "VideoLAN.VLCPlugin.2"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.amv\shell\AddToPlaylistVLC\MultiSelectModel = "Player"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m1v\shell\PlayWithVLC\Icon = "\"C:\\Program Files (x86)\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mpv2\shell	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.evo\shell\AddToPlaylistVLC\ = "Add to VLC media player's Playlist"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.vlc\DefaultIcon\ = "\"C:\\Program Files (x86)\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.aob\shell\PlayWithVLC\command\ = "\"C:\\Program Files (x86)\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --no-playlist-enqueue \"%1\""	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.gvi\shell\PlayWithVLC\MultiSelectModel = "Player"	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m1v\shell\AddToPlaylistVLC\command	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mp2v\shell\AddToPlaylistVLC\ = "Add to VLC media player's Playlist"	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.aac\shell\Open	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AudioCD\shell\PlayWithVLC\ = "Play with VLC media player"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.vlc\shell\PlayWithVLC\ = "Play with VLC media player"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.bik\shell\Open\command\ = "\"C:\\Program Files (x86)\\VideoLAN\\VLC\\vlc.exe\" --started-from-file \"%1\""	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.dv\shell\Open\MultiSelectModel = "Player"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ogx\shell\Open\command\ = "\"C:\\Program Files (x86)\\VideoLAN\\VLC\\vlc.exe\" --started-from-file \"%1\""	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.rm\shell\ = "Open"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.rpl\ = "RPL Video File (VLC)"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.snd\ = "VLC.snd"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.bik\ = "VLC.bik"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ogx\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files (x86)\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.vqf\ = "VQF Audio File (VLC)"	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.oga\shell\PlayWithVLC\command	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mp4\shell\Open\MultiSelectModel = "Player"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.gvi\ = "VLC.gvi"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.iso\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files (x86)\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ogm\shell\ = "Open"	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.xa\shell\PlayWithVLC\command\ = "\"C:\\Program Files (x86)\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --no-playlist-enqueue \"%1\""	vlc-3.0.18-win32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.aiff\shell\Open\ = "Play"	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mka\shell	vlc-3.0.18-win32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m1v\shell	vlc-3.0.18-win32.exe

Suspicious behavior: EnumeratesProcesses 22 IoCs

pid	Process
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
2904	vlc-3.0.18-win32.exe
2904	vlc-3.0.18-win32.exe
2904	vlc-3.0.18-win32.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	1196	taskmgr.exe
Token: SeDebugPrivilege	604	taskmgr.exe

Suspicious use of FindShellTrayWindow 57 IoCs

pid	Process
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe

Suspicious use of SendNotifyMessage 57 IoCs

pid	Process
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
1196	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe
604	taskmgr.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2904 wrote to memory of 328	2904	vlc-3.0.18-win32.exe	35
PID 2904 wrote to memory of 328	2904	vlc-3.0.18-win32.exe	35
PID 2904 wrote to memory of 328	2904	vlc-3.0.18-win32.exe	35
PID 2904 wrote to memory of 328	2904	vlc-3.0.18-win32.exe	35

C:\Users\Admin\AppData\Local\Temp\vlc-3.0.18-win32.exe
"C:\Users\Admin\AppData\Local\Temp\vlc-3.0.18-win32.exe"
1⤵
- Drops file in Program Files directory
- Loads dropped DLL
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2904
- C:\Program Files (x86)\VideoLAN\VLC\vlc-cache-gen.exe
  "C:\Program Files (x86)\VideoLAN\VLC\vlc-cache-gen.exe" C:\Program Files (x86)\VideoLAN\VLC\plugins
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:328

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1196

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
1⤵
PID:2080

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
1⤵
PID:1584

C:\Windows\system32\DeviceDisplayObjectProvider.exe
C:\Windows\system32\DeviceDisplayObjectProvider.exe -Embedding
1⤵
PID:2276

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:604

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\VideoLAN\VLC\libvlc.dll

Filesize
177KB

MD5
ee346f3217e3c2b4b48e1b8c551a3c93

SHA1
1fc3e78150152ea315e7b25e2291b11ece09e210

SHA256
7c898b98dfeb57484b524dd2ca6243f4442b1fa6d175f57b245b31e993abf24a

SHA512
e804c2f7a442caea676c89deb4333590a8890eb459ce6b26d26caf6385f97fb57d2e2092b0188501a427ec1aa3bb4c34da3dcfbb8ac75398ff803c668cec6b7b

Download Submit
C:\Program Files (x86)\VideoLAN\VLC\libvlccore.dll

Filesize
2.6MB

MD5
8e37f63196391ae62e49459eef83d81f

SHA1
5809b5bfe416a98863c2be69a3dd588c64811fc1

SHA256
9a52bede67b923645859d84be4294d81a05bac45dd224a33528f583103cba4f3

SHA512
dadf72648f6ed2177d3e58ad9b747f24f25c0ef4692614b99fe8c08b62b13e57959af17ad70a3b1d79e12ea25e3f79dbc50484f630ce9a943edd9be149dda773

Download Submit
C:\Program Files (x86)\VideoLAN\VLC\locale\fi\LC_MESSAGES\vlc.mo

Filesize
599KB

MD5
b32e3dc98ae64634ac70bca8d9fe9049

SHA1
b76035923c6712c4ef4242cbbd0fee1fd98fa88b

SHA256
62fe79e569453987e9e2f0f6ce1b3d31f1591b9a2b9243972f46406f70b53f1d

SHA512
4d67d9ff3d769d279aa9760fe87fe7ed3d91b526a52c96a2ac5fde95557ed1ba3b77421ed793f14dd094763129e9a2b791c40562e6f6c1a1c2663c62ca946deb

Download Submit
C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libcdda_plugin.dll

Filesize
684KB

MD5
f14118e98c2efdff85c8648c92b65146

SHA1
6a16f86dc51d2f9a62735f4ce1bc50f2feec9338

SHA256
72d70fb92d04f9c3bb0d26743e6e838e51e86d4415a5aaff27d3cf64b554beab

SHA512
d4837a4e716768f8922324a011bbd4685cbf7993f298ddb94926ddb738b3032edde10f8f3356e7c19cfb12536ba78d3139fd64ab90a1ffbe33762a1fa7d173ac

Download Submit
C:\Program Files (x86)\VideoLAN\VLC\plugins\access\libsdp_plugin.dll

Filesize
34KB

MD5
7606714626ae1f3ae8f53270118a31c9

SHA1
39917771d6c822dd93670c7a8ca1af1fc8d3781d

SHA256
05d101b3c882470321d9465598459352c33d83434f8970249a8361385fe66b2e

SHA512
9e695c18329c9fdd8228061f1a6a4db85eb489dcbe8c73486f39cb6405436d2046dfc2fa135d9137c1456ebefa4176b09f821227037cda0ba913b163a714bde0

Download Submit
C:\Program Files (x86)\VideoLAN\VLC\plugins\plugins.dat.328

Filesize
307KB

MD5
a3c7f4981f03ba9a69f93789838bf47f

SHA1
4434250922e80196e6b9b2fe3fd58690d89b8819

SHA256
6e4c3cca267579c4854bca0bb482fa9217d067d8271b33df4484256abd2b0edb

SHA512
9dfeb33a3aa644873c0558dc7e1bffa85723f0d8aa39bc5d769d185da8d895b091b584a2ec8466b7f5f8cdc7875edf3d78e01f7b7387bc3110bed42866d3851c

Download Submit
C:\Program Files (x86)\VideoLAN\VLC\uninstall.log

Filesize
21KB

MD5
8e34006002648f4131bd348dc30d5504

SHA1
b6b24efd9c27ff601a938cf370bc28dcb27ccf04

SHA256
f4b87e6b2752dbaecee09ab11d254d5eb13a32a2ae009191f4cb0843401e2b7c

SHA512
34f762052fbb1818e75e7acabb794d45625dcb0a32332d64a4fb1bfb763d452e2f30acc0e4a21f2c9a55395fb8a679102e89f138f1d8fb49ef862da3356c124e

Download Submit
C:\Program Files (x86)\VideoLAN\VLC\vlc.exe

Filesize
943KB

MD5
0f403fbfe09131e82cf5222bf6cd29c2

SHA1
c24c9bd3e6f7ed82b8143bce59954bf81e91cc32

SHA256
2727f2739579932c4319feb3e484cb9be3b0e0d0ca36ab773ea19ead06c8db3a

SHA512
287ad20576b48e4f2639ebbae5b35a5dd31cf0cf6988793ffeb4ed3f759143a97059995c5537486869353ad2cc42f55cf24a24abc0a7c11825a0d8549f1269ff

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_concat_plugin.dll

Filesize
38KB

MD5
096efa9efc1153808b0c5de3ac99a4f1

SHA1
f4991f5b549ffa921633c6fea8ec0cf7027f2d32

SHA256
4d4f4d3be5207f45702523a780d9f6965bdb7220fe3b8ef23cb96a2a0d62ee4f

SHA512
5b14506ff370e614883b297f2f0ce01ce0eedf832a1a2027eac1c2cce073871c21525ac8b8482730ab8d3a3abcc269010790557f1f2472f38cd747849702db42

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll

Filesize
70KB

MD5
8dc87ddda5c07519fbd4d59bf6d026c9

SHA1
2345500a3c5edacdd948d8e9f7ff770f0d6143ab

SHA256
c6363cfa6cd4e9f5aecede46ddbdce393cf1362e36036b32ac1ab7556f7e6fca

SHA512
97b20e8fc84d3b2a7b732387d8999404779f4014b3e2533171d29501bfd77f3d065b93dddc5b1f72127bcb096d26bf25fbf1bd0eabafce73f6cca04dbebb235a

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll

Filesize
101KB

MD5
2b6a00f0911d6a33839a778774110636

SHA1
4d1de6fe09270613391e90ff78a251398b703071

SHA256
04e38bbd00dddec73860b98c4aa4de02c9cd56cb115b492478df60038ec08745

SHA512
1f3ba67d3a99e7051e282455be36a8408f184e51e405b1c0f99d375aa82e88884eea7ccaff6447f853ca211a3d4949768fdf34d0d645c38ec3720639efd07c2b

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll

Filesize
138KB

MD5
bbd065720cd8abbf7090dfed764cda79

SHA1
9b5c656f3902073b48b37ef6579ab4de8435f91f

SHA256
81b10e8b4b4647fa8148007a377936d0a81dd85a150e5f9b40f0c42a7a21ca49

SHA512
076bbd0b7052be1dd6672d005849dddc90a414b4131809c590df4562435308d948b22f7c4ef00c80a6c169ba6b43ed7427e6c5e46a7ca072ebc2319f18ec5eda

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll

Filesize
3.5MB

MD5
25c4958cad7cfdd31c00facf51398f61

SHA1
1b3d9c1c0c578f6e67b2915f7e3225ce2dd57535

SHA256
499f734bce858e3a9d4ff627e1af367ac8a0a16e4057f79dda91f0cc6db7bbb7

SHA512
b81c1346b374d996569fcca6b623a77f94ce79f154a2bd4c17c121a0ebf02187fb16ddcf5b5bbb2ba5a57530b16af6ad9ef93193101929fefc856939bb3ace8a

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libaccess_wasapi_plugin.dll

Filesize
54KB

MD5
8033799f3b80d0237471dae7b315a59d

SHA1
ccb2e5a6a18d4cafa3d8e734e97cf4404e22aad3

SHA256
3323af9b9f84cd15104897419d253aaabf35c5263f8151f7a52ac66add5c17cb

SHA512
f681b41884e2e36d5f8c519709673bebc60bd3127b501d2b4a2c21c12931ff6d1260161ebde11e6478eae19d58761b3731d6a39932ef5899b9de9035f8714d92

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libattachment_plugin.dll

Filesize
35KB

MD5
f4fa7b8bddf6d569d665143dd01fcbf6

SHA1
d4f5341d3164234e7764750d9ed4f1def2bdee5a

SHA256
09722b5efd188f93b4a2954474b2e12240cfda8dee1afe8627aefc29d045d57e

SHA512
4db1bd506a0e9d3a24e59f54423cd5ab3ca8bb1efcf70cc9496a77857f10d8ea45a3f9103eebb4b82e9c105c1376ccbcedc3cf76eb630981c60d89f3dc77c9d1

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libdcp_plugin.dll

Filesize
2.4MB

MD5
6129e16b609dbafe474f3e5579941ea4

SHA1
7247963db43fb12ee0a85b2acc9fb2b5b1e7199c

SHA256
858279cd101cfd0b227159a469e1bdc3e6be856ac2ebddb34eeb644d7c649d7a

SHA512
2b1626eab0788eeae69b793e8c8686e162ad5de8f0578f3b9037e0caae57b695825efe94e0fb24a8d0f390f59fa6acd306152d2444932c8bca7cbedc672a0bef

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libdshow_plugin.dll

Filesize
899KB

MD5
bcb7197acfd52694ecffb74b436a46f9

SHA1
35d61976bfcac894118dbd18d1c14ad9fb1eb0da

SHA256
491d48da64c06e171516d3605e67e3d7b8de57bdd65f1839820cc77af692ce2f

SHA512
55f506502a22a78cabbdc2031f5f615c63b268998841065e6c65a8772d2b927d868d6fae40f85070b370f0e7a4181fa298356e391967bd36c299bfc88bb5f535

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libdtv_plugin.dll

Filesize
876KB

MD5
e2e295fd07175558d60fc889a1d3f3a4

SHA1
fb861c145c84a5e3d299b6de9e2a02ec9929cd54

SHA256
b127fcb25d04ed9e2d3d5d2cb126220f3062ddb476100e57baa95e8604532cd7

SHA512
5768a2525a99e7dcbfefc0b2a70df2dbc6f3359978134bb4b820d556bfa1f6d0a369f66b92a561d116963ac81e6db0d6e70b17ad663bafcbacc143e37e015f34

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll

Filesize
221KB

MD5
354f7917eebd7d5f73cd0d46b19df09c

SHA1
8f576c4b639c4850a73844f41a15567bd306ff9d

SHA256
c717c81c24a776eee344fefdea8294fdade9855e68614ec58c6f1018967a5766

SHA512
42292135bbf3aa4a5349ce56bb177abc427db3bc4a8949f2e3a098e93f3fd41a8ea15e5f837fa73c4c1ab6d36647993cbfd6dcdd885198f8d0385b97b4aec4bc

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll

Filesize
158KB

MD5
7fdba91051fd0caad0b79b811d97f6da

SHA1
5f321f2987d8476cedf88828c9d7cafd7d5fb44b

SHA256
45ab8c1d665dcac0a32b983776447018a871c373036ef340d8c51154fd7cf9c4

SHA512
311ae20bdbecf118b4d0d16fd6d7baf1aebdcd950857dabc6a4150e9316441859b7b38b436864b401755203ff1a517729ca085f6170989d9562452bc2c7cb539

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll

Filesize
64KB

MD5
56f56fa72a746910af4e72c7d8ea1631

SHA1
0047e37a58c22f66099e723a9c4bb7e85b192ea8

SHA256
8cce16ac76f922af4dcb2d69b8da761d3bfaaad4716cc27ecda53c9823060a64

SHA512
93117c4ca310355fe2d0c19709fda85b5858a4f1848c9a4c18b045d8442bf5252acd2b2517de48aa103e392b7b9345c6c2ae6baa908f9457c49eeadbe5804cf5

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libftp_plugin.dll

Filesize
120KB

MD5
173d08f9b2c657514cb801464fd4a4e6

SHA1
59f2c179af28558d83eea90e07ff43f6ece73a8f

SHA256
95782dd0c8252d404303b417b6f3394fc397d24a2dd3b35b477ea0b1ffdf7635

SHA512
ef7ac48899d0cc66f6d610b95d4b479f4ba08335597ae23adbc3840c5124b699280180612c2deb0cf2a1c5a88654c1f6658e7d900a1264801d16bd37916f5325

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libhttp_plugin.dll

Filesize
70KB

MD5
3e5a88312cb9534f06f4b3ee7c1f1bbf

SHA1
374fa31eab73e7291ce05309265f81936310ac9c

SHA256
7a75d814a4aa33492fbf0a9478f3117abf3ddc47a1f9e965490c50bbde5a86b1

SHA512
1dd7cc6dd4751a006a71312d2c93d2f3e3070943b078af02a1f81fb2d916e8228d0cdaf39741d0394079c2227d6b67332c629cf5419323ecd2ca587ba6040dfa

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libhttps_plugin.dll

Filesize
143KB

MD5
b28f962d296d47b78f3ba9e1a24c7565

SHA1
7a6d43efdcbc8a156bac4c9498f5740058335af2

SHA256
acc3b0e6016f206f126fc05e2b43ab784123a2957a59670a080248e9ad54b7d0

SHA512
1ac78ab4281fe339dcfcff5ac5fa77c89b621d82b594f560ff4ccc251d981fcda95ac453683a7c03d92a7c91f9f0c01553eea384972e54b2b75e67af09d9cf69

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libidummy_plugin.dll

Filesize
36KB

MD5
d426870b75df2c5aee6ff876f1125be9

SHA1
d8f70b7fb2d0d8ff95dd7156e87848c272d9211a

SHA256
eaafeb93a286c0d3875b91c94063f9fb53b0aa9467efd303bd0e9157eacc9a82

SHA512
b057fe699d9b7df10f0241ccf3806bd7e3425df3203d1eaeb4e9aa73eb5ecf04c79e2a49344009511d675a5f7073798d3bbc790512f595ae043ac8113acf2f4f

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libimem_plugin.dll

Filesize
35KB

MD5
a507e79c0bfd439a671d9687b20d54f0

SHA1
cd39db2f041585c557dd8e48aec1b70dacb53bfa

SHA256
20a7aee09ac218408360b533a0b0a2ca628429e34d039c1d258e472535b56360

SHA512
3a077b66dc4d4885e3028e18cb105a23804522576d2c3740dab4f74fd1c92d96ec733c3a233da3c2043243307ed2cac3adb4712c0cfe05c346174f8744c7926f

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll

Filesize
1.9MB

MD5
903d1a7c9dd51b5b835c1d744f2c5c4c

SHA1
9427cbfc8378fd4be95507e7169dd22ab848a850

SHA256
63d5eb81e24318b714d8bc0d7c7d0e68530ed74e2a2b6da7a92e7fb7023d566e

SHA512
c33ac4098c0c93913cd96b207a8b8a68b48e1944795837be948b3368166bc13c79ee909c4a047a0b2d042a11e14cbef8f21c0d4baa0a481772f517fe890d0653

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\liblive555_plugin.dll

Filesize
554KB

MD5
e72aaedb1d3a8649346a26910ab729ca

SHA1
b7f9fe1b46328d9f54e65720065c4fdfa2e24441

SHA256
eb6a720d16945ff2fbaf421f31b1b0b07e8f176aae975669f7bfdd3d73bb77c7

SHA512
1a738d4e517b12437b0dd25879bba7d1baba7ab6a4b747ceaa6b0b68f884a82d9ec14746044bbbbfae0beca0fc46b1044177be565dcf5df98fe6a0615209788c

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libnfs_plugin.dll

Filesize
273KB

MD5
975e4e28ac289f6cd099c8f2eb840908

SHA1
c46390f114972d2ae87e51843b10498f028b675f

SHA256
3d3e37f268e0730a045349c2f6bbb2abf935bac05e30b499235bd328e810b9bf

SHA512
d55e165984e23c973339d2d7ed91a328aa7ba15c049a545d99f6da4fa880b642696d28d1cf05b2b28f4f8b751f975613b8c90af6692c80d0de119123c8608596

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\librist_plugin.dll

Filesize
110KB

MD5
f8114f303b59ab3874a0bbc0049f800f

SHA1
32fca4407659ab48ecc7bd4cbd7d3c2d38962527

SHA256
232a886f129189414b383c4b9fbfdb881b1f4182a4ad9846a5932439cabd9846

SHA512
d223894c0a23adfd39cd5774aa806e162add136ae20d5819c91e53fec2378e0810e0e8ddc6cea7bd8259f867df5224720e2d487ffa36262078839b4980f908dc

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\librtp_plugin.dll

Filesize
549KB

MD5
36ee11efdf12bfdcb2100c4f96c328cc

SHA1
5a47f8d05cf5b022796a105af2ac3777e8e92c20

SHA256
25ad64e40186217389c47c7a52dd0fabc02fa7804e3abe8d78171f5fd5faf967

SHA512
579ef55080475ce3af4075fe5f193ab6673b55356d38b1aa02283e2568b192759e7f35ba7ccf55f1a51a981431e3e652c7c05a075b15c4b321383d79e54e7327

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libsatip_plugin.dll

Filesize
70KB

MD5
67e1af741d8a1b2ba79ccdf1f2560e5e

SHA1
a31dd8dc137204fb42abd6183da5097b0e13cea8

SHA256
02cfd23f8e3a9901f10c36869b96d382a339ff56b23eee4d2ff8994498eae8f4

SHA512
511ddc65511ecd849ec0720e7d105fc9b932152955b661d7f3e023669e7a7327db6b6845f7737a9df7a051d71bb35e106525f959075c56e2dbf7bad184ff305c

Download Submit
\Program Files (x86)\VideoLAN\VLC\plugins\access\libscreen_plugin.dll

Filesize
43KB

MD5
45b5a0a0788ffd652f66603c8e8e7c2b

SHA1
a072a72a78a8dd5318e82a42309522b8e33939b1

SHA256
9f538424228dc6c937ce5231575b4481dd498da1a39dc756fc66b284e3809825

SHA512
4c0ab0f269dcd1136f5cc1731fd277dd8fcef1d391fd724dd7642c863286039323273217ea40f392db1d93d79220fb7a1370054692f64c9391ece178c3344e74

Download Submit
\Program Files (x86)\VideoLAN\VLC\vlc-cache-gen.exe

Filesize
135KB

MD5
8dc4183b2e18f0c97f2e5cce7efd5847

SHA1
469e041039d5f30d4614fc71fd142141e14f8777

SHA256
aec17dd6d76a4ee0c4525fa7e6c3bdc3a4505def23b6a154160500a9969517fd

SHA512
8f130af6dcb2a8573eb4a072a84fddc855d305ef9d005f8000307903da012e16836b6cab73968274c80e5fdf2550ada22c8fa272f87bea46c5a1722f04b082d6

Download Submit
\Users\Admin\AppData\Local\Temp\nst1815.tmp\LangDLL.dll

Filesize
7KB

MD5
20850d4d5416fbfd6a02e8a120f360fc

SHA1
ac34f3a34aaa4a21efd6a32bc93102639170e219

SHA256
860b409b065b747aab2a9937f02d08b6fd7309993b50d8e4b53983c8c2b56b61

SHA512
c8048b9ae0ced72a384c5ab781083a76b96ae08d5c8a5c7797f75a7e54e9cd9192349f185ee88c9cf0514fc8d59e37e01d88b9c8106321c0581659ebe1d1c276

Download Submit
\Users\Admin\AppData\Local\Temp\nst1815.tmp\System.dll

Filesize
26KB

MD5
4f25d99bf1375fe5e61b037b2616695d

SHA1
958fad0e54df0736ddab28ff6cb93e6ed580c862

SHA256
803931797d95777248dee4f2a563aed51fe931d2dd28faec507c69ed0f26f647

SHA512
96a8446f322cd62377a93d2088c0ce06087da27ef95a391e02c505fb4eb1d00419143d67d89494c2ef6f57ae2fd7f049c86e00858d1b193ec6dde4d0fe0e3130

Download Submit
\Users\Admin\AppData\Local\Temp\nst1815.tmp\nsDialogs.dll

Filesize
12KB

MD5
2029c44871670eec937d1a8c1e9faa21

SHA1
e8d53b9e8bc475cc274d80d3836b526d8dd2747a

SHA256
a4ae6d33f940a80e8fe34537c5cc1f8b8679c979607969320cfb750c15809ac2

SHA512
6f151c9818ac2f3aef6d4cabd8122c7e22ccf0b84fa5d4bcc951f8c3d00e8c270127eac1e9d93c5f4594ac90de8aff87dc6e96562f532a3d19c0da63a28654b7

Download Submit
\Users\Admin\AppData\Local\Temp\nst1815.tmp\nsExec.dll

Filesize
10KB

MD5
dcaaa39e47a9144ae10ee67b3183f4e1

SHA1
2af87fcebff57411e929dd2fce767e9a1e4d98e1

SHA256
da30c0f57a8a412bdc0fca182702f568bd91007475d1823464658fa523a4af9f

SHA512
d56997d74d841d01c62b7db4150729f395b57d065a1182249483640f80720fb6dc7a457cc3a23367982f92f85e9274507d6157f698a2e22ea11266866fb1bc2c

Download Submit
\Users\Admin\AppData\Local\Temp\nst1815.tmp\nsProcess.dll

Filesize
35KB

MD5
63cf074466bb317785df2bb8d46ae7aa

SHA1
cafec4efe0f428c4f5869c2b853c7c88f4ce463a

SHA256
7673fcd41b9f2e2c44af1cdce77d3e9045f41a388f258a4d56f0427387431165

SHA512
6ded6d7ddf9a8803a5cd7b3401d90db03b0fad0770449802435dde0ecadb2b356046a0db52f71e229dda99d327ec3bb28643346264345bcb6cd70a7edbd3545f

Download Submit
memory/328-727-0x000000006C880000-0x000000006D901000-memory.dmp

Filesize
16.5MB

Download
memory/328-725-0x00000000742A0000-0x00000000742CF000-memory.dmp

Filesize
188KB

Download
memory/328-728-0x000000006BFB0000-0x000000006C0AD000-memory.dmp

Filesize
1012KB

Download
memory/328-726-0x0000000073D30000-0x0000000073FC4000-memory.dmp

Filesize
2.6MB

Download
memory/328-724-0x0000000000400000-0x0000000000424000-memory.dmp

Filesize
144KB

Download
memory/604-766-0x0000000140000000-0x00000001405E8000-memory.dmp

Filesize
5.9MB

Download
memory/604-765-0x0000000140000000-0x00000001405E8000-memory.dmp

Filesize
5.9MB

Download
memory/1196-29-0x0000000140000000-0x00000001405E8000-memory.dmp

Filesize
5.9MB

Download
memory/2276-49-0x0000000001BB0000-0x0000000001BC0000-memory.dmp

Filesize
64KB

Download
memory/2904-19-0x00000000743F0000-0x00000000743FB000-memory.dmp

Filesize
44KB

Download
memory/2904-18-0x0000000074400000-0x000000007440E000-memory.dmp

Filesize
56KB

Download
memory/2904-17-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/2904-30-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/2904-61-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/2904-763-0x00000000743F0000-0x00000000743FB000-memory.dmp

Filesize
44KB

Download
memory/2904-762-0x0000000074400000-0x000000007440E000-memory.dmp

Filesize
56KB

Download
memory/2904-758-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/2904-64-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/2904-20-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download
memory/2904-23-0x0000000000400000-0x0000000000481000-memory.dmp

Filesize
516KB

Download