20ad191348684b470ddc4e05204316f3d8e39655f412b3e392a0eef97639daaf

Analysis

max time kernel
150s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
30/07/2026, 18:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
vlc-3.0.23-win64.exe
Size 43.8MB
Sample260730-w6yteavepd
SHA256 20ad191348684b470ddc4e05204316f3d8e39655f412b3e392a0eef97639daaf
MD5 f711b3aee7c805d52ab28fe53440e35f
SHA1 ee04a6c1317bba9c60369a586379ff245abb286c
SHA512 fe7aa76985fe90e13a47ddd255bcaafa2bfbc6ece4b998a8031a8e0b6042e3d904b9db03f669cd9580914f050b558bc6541fcaaf1be176993eb847cf739c6f45
SSDEEP 786432:Gn0FVwAvmLqmA88sH1xD8vMdvI7BBx7p4AMvIPtEg6k5JaA/ATqmIQOMJxVPkW:JVwAuidsVF8viItDpTfEo56qmIQOQxVv
TLSH
T128A7332E76ADCC65C0DDAC391923ECBEF145AFA38A500767F8653EC0A93B5552C2D063
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery persistence privilege_escalation

Malware Config

Signatures

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\lv\LC_MESSAGES\vlc.mo	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\images\Audio-48.png	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\AUTHORS.txt	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_output\libwaveout_plugin.dll	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libx26410b_plugin.dll	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_record_plugin.dll	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\visualization\libvisual_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access_output\libaccess_output_srt_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\demux\libplaylist_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\modules\dkjson.luac	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\uninstall.exe	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_rtp_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\d3d9\libdirect3d9_filters_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\demux\libtta_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_output\libcaca_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\de\LC_MESSAGES\	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\COPYING.txt	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libshm_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\mn\	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\control\libgestures_plugin.dll	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\locale\fy\LC_MESSAGES\vlc.mo	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\misc\libstats_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\eu\LC_MESSAGES\	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\te\	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\tr\LC_MESSAGES\	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libspeex_resampler_plugin.dll	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_chroma\libyuvp_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\es_MX\LC_MESSAGES\	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\locale\sv\LC_MESSAGES\vlc.mo	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\playlist\twitch.luac	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libgrain_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\intf\telnet.luac	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\locale\tr\LC_MESSAGES\vlc.mo	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\lua\intf\dummy.luac	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libtextst_plugin.dll	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_filter\liboldmovie_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\demux\libavi_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\video_filter\libscene_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\nn\	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\demux\libwav_plugin.dll	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\locale\en_GB\LC_MESSAGES\vlc.mo	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\images\vlc16x16.png	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\access\libhttp_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libugly_resampler_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\demux\libadaptive_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\skins\winamp2.xml	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\dialogs\mosaic_window.html	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\locale\fr\LC_MESSAGES\vlc.mo	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\requests\vlm_cmd.xml	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\oc\LC_MESSAGES\vlc.mo	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\skins\skin.dtd	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\uz\	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libspdif_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libaraw_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\codec\libzvbi_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\plugins\visualization\libprojectm_plugin.dll	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\requests\browse.xml	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\pt_BR\	vlc-3.0.23-win64.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\intf\	vlc-3.0.23-win64.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\codec\libaes3_plugin.dll	vlc-3.0.23-win64.exe

Executes dropped EXE 2 IoCs

pid	Process
6864	vlc-cache-gen.exe
4728	vlc.exe

Loads dropped DLL 64 IoCs

pid	Process
6836	vlc-3.0.23-win64.exe
6836	vlc-3.0.23-win64.exe
6836	vlc-3.0.23-win64.exe
6836	vlc-3.0.23-win64.exe
6836	vlc-3.0.23-win64.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe
6864	vlc-cache-gen.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vlc-3.0.23-win64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.3gpp	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.rmi\shell\AddToPlaylistVLC\command	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mpeg\shell\PlayWithVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --no-playlist-enqueue \"%1\""	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mtv\shell\PlayWithVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --no-playlist-enqueue \"%1\""	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.vob\shell\PlayWithVLC\MultiSelectModel = "Player"	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.dts\shell\Open\MultiSelectModel = "Player"	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.oma\DefaultIcon	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.snd\shell\PlayWithVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.thp	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.wv\shell\AddToPlaylistVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m3u\shell\PlayWithVLC	vlc-3.0.23-win64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5AF314CF-8849-4A79-A3FC-8DE6625D9E72}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.dts\shell\PlayWithVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.b4s\shell\PlayWithVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --no-playlist-enqueue \"%1\""	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m4p\shell\Open	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mka\shell\Open\command	vlc-3.0.23-win64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{49E0DBD1-9440-466C-9C97-95C67190C603}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.mpa\ = "VLC.mpa"	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mlp\shell\AddToPlaylistVLC\MultiSelectModel = "Player"	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ram\shell\Open\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file \"%1\""	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.zpl\DefaultIcon	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.cda\shell\PlayWithVLC	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.aob	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.mpeg2	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.wav\shell\PlayWithVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --no-playlist-enqueue \"%1\""	vlc-3.0.23-win64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{54613049-40BF-4035-9E70-0A9312C0188D}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mpg\shell\AddToPlaylistVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.wma\shell	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.dav\shell\Open\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file \"%1\""	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.aob\shell\AddToPlaylistVLC	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mp2\shell\PlayWithVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Applications\vlc.exe\shell\Open\command	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.avi\shell\PlayWithVLC\command	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mpeg4\shell\Open\command	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.wtv\shell\Open\MultiSelectModel = "Player"	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.3gp2\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{B5DEF5A1-FFB6-4E68-B3D8-A12AC60FDA54}\ = "IVLCTitle"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m2ts\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ogx\shell\PlayWithVLC	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mid\shell\PlayWithVLC\ = "Play with VLC media player"	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.mpeg2\ = "VLC.mpeg2"	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.caf\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mts\shell\PlayWithVLC\MultiSelectModel = "Player"	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.avi\DefaultIcon	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8D076AD6-9B6F-4150-A0FD-5D7E8C8CB02C}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2D719729-5333-406C-BF12-8DE787FD65E3}\TypeLib\ = "{DF2BBE39-40A8-433B-A279-073F48DA94B6}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.rmi\shell\AddToPlaylistVLC	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m1v\shell\AddToPlaylistVLC\ = "Add to VLC media player's Playlist"	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.nuv\shell\PlayWithVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.m2v	vlc-3.0.23-win64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DF2BBE39-40A8-433B-A279-073F48DA94B6}\1.0\0	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ac3\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mka\shell\PlayWithVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --no-playlist-enqueue \"%1\""	vlc-3.0.23-win64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.evo\DefaultIcon	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mp1\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.oma\shell\PlayWithVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --no-playlist-enqueue \"%1\""	vlc-3.0.23-win64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{465E787A-0556-452F-9477-954E4A940003}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.mts\shell\PlayWithVLC	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9BE31822-FDAD-461B-AD51-BE1D1C159921}\InprocServer32\ = "C:\\Program Files\\VideoLAN\\VLC\\axvlc.dll"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.ape\shell\AddToPlaylistVLC\Icon = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\",0"	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.flv\shell\AddToPlaylistVLC\command\ = "\"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe\" --started-from-file --playlist-enqueue \"%1\""	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\VLC.zpl\shell\PlayWithVLC\MultiSelectModel = "Player"	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Applications\vlc.exe\	vlc-3.0.23-win64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BC97469F-CB11-4037-8DCE-5FC9F5F85307}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
4728	vlc.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
6836	vlc-3.0.23-win64.exe
6836	vlc-3.0.23-win64.exe
6836	vlc-3.0.23-win64.exe
6836	vlc-3.0.23-win64.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4728	vlc.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
4728	vlc.exe
4728	vlc.exe
4728	vlc.exe
4728	vlc.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
4728	vlc.exe
4728	vlc.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1656	explorer.exe
4728	vlc.exe

Suspicious use of WriteProcessMemory 5 IoCs

description	pid	Process	procid_target
PID 6836 wrote to memory of 6864	6836	vlc-3.0.23-win64.exe	90
PID 6836 wrote to memory of 5492	6836	vlc-3.0.23-win64.exe	92
PID 5492 wrote to memory of 4520	5492	regsvr32.exe	93
PID 6836 wrote to memory of 6812	6836	vlc-3.0.23-win64.exe	95
PID 1656 wrote to memory of 4728	1656	explorer.exe	97

C:\Users\Admin\AppData\Local\Temp\vlc-3.0.23-win64.exe
"C:\Users\Admin\AppData\Local\Temp\vlc-3.0.23-win64.exe"
1⤵
- Drops file in Program Files directory
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:6836
- C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe
  "C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe" C:\Program Files\VideoLAN\VLC\plugins
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:6864
- C:\Windows\SysWOW64\regsvr32.exe
  "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files\VideoLAN\VLC\axvlc.dll"
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:5492
- - C:\Windows\system32\regsvr32.exe
    /s "C:\Program Files\VideoLAN\VLC\axvlc.dll"
    3⤵
    - Modifies registry class
    PID:4520
- C:\Windows\explorer.exe
  "C:\Windows\explorer.exe" "C:\Program Files\VideoLAN\VLC\vlc.exe"
  2⤵
  PID:6812

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{75dff2b7-6936-4c06-a8bb-676a7b00b24b} -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1656
- C:\Program Files\VideoLAN\VLC\vlc.exe
  "C:\Program Files\VideoLAN\VLC\vlc.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: AddClipboardFormatListener
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  PID:4728

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

libvlc.dll

Path C:\Program Files\VideoLAN\VLC\libvlc.dll
Size 187KB
SHA256 8ae9f16a72441f43fb4ae8f72c843736726e067ea4a8def2646748631cc4e872
MD5 cbfbca59dd83388486cb52fffce2ccb0
SHA1 472c05af87c1984dc790d22f133a8e2b13902d98
SHA512 624edd14476af2fb0b0fda553c2725a7862668008b671ff6758ef67654d38098c28ebcfb4582689156d78a4005aeb06ddd7977dd0fe6b5c811974ef6cb023d3f
SSDEEP 3072:9ku6r3xh/8XktE/onwU6PEw6fxxpty61Sees6dKxs6dJ:9klD8HgnSRShtysSXdKfdJ
TLSH
T151143A17B24660EDC5ABC23593E6A773B831B4201730BE6E1760CB341FA1D547B2AE6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libvlccore.dll

Path C:\Program Files\VideoLAN\VLC\libvlccore.dll
Size 2.7MB
SHA256 d3475b834dd3eb77910f37f71b0341d358bcbdda5b9f04cc4a3a8e2be1bc8e35
MD5 b86d0ddd8fd0b64460ac99cde2a382b3
SHA1 879451a94611a0a0f740cc28a92c5b4f02839b39
SHA512 7c8ffd7690bb3bbdbbaa9e7bcc7a1dfae1cc37c21f26a9ef1adc3df3fc05d4de9dcc9ef539e6d07a21b0723a59837c4d02ae8957474637e9dacdc4c654a1a03d
SSDEEP 49152:eJW0T+Y1VBNoXg196rhC8LFU50Y2U89cmBAUZLY6sEZGaXBuQQ9e5:eJ/TV39mBAUZL37
TLSH
T184D59D27E29254EDC52BC130875AAB32B531FC2406317EBF2960F7752E31EA06B5DB19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vlc.mo

Path C:\Program Files\VideoLAN\VLC\locale\it\LC_MESSAGES\vlc.mo
Size 612KB
SHA256 9374b3008d24a22ad6b3979140181fdaf9d28f5ea1b1c0c140c068e2ccaa361e
MD5 0cc7ff14bc52611094d54eed148381f8
SHA1 aee02158e83a385eae9c6e325bb02a5b0593cce5
SHA512 70dfce6788391e550f9769d93841d1db82cf37a27a1a14bb8f58d0f1b1a840e9b878e2d66e4cc71a7e044c89a3788ea668c69634a8c9f57662b886e79786ba3f
SSDEEP 6144:aEAr/5GAkZu2iB/nD7w1zEe5e7I3Roimtl8wBTEp5KmHvbaeoaVTRzOtTgWq/Uqd:w/qcpD7m35t2B8aewiUEeO
TLSH
T185D46C369A801721CA570372F76AA1E1F73D84CCBB59A5152C9EE13C33CB950B36E6C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vlc.mo

Path C:\Program Files\VideoLAN\VLC\locale\ko\LC_MESSAGES\vlc.mo
Size 615KB
SHA256 fcc4dc9a5bb34966e583b6efa12adea57a9d869f2430608a05b01ec908e9b5fa
MD5 45b882a46bd877601d49876b554f4f04
SHA1 4cbcbb01e994769bcaed9ccfcac91c2b6d85d424
SHA512 5ab2a4efe1ffd5c0758d9bb332145d3a5918eeabdd802923fa93b137e58c2b8383762606729078210eac77ff5335249668105880cbd3be451d55443440fa8980
SSDEEP 6144:/YSZAmHAymw9+1acmgKe5e7SsRoims28eBkEpXjmIvbaeDatcPPdw1V3zLSo+MsQ:Xgywwe5p/BTaeZo+Ms0xxjD
TLSH
T119D45AA2B5976B64C1974073BEEAF7B2837A813E5357C241AC0CDC746F0788242976F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libaccess_concat_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_concat_plugin.dll
Size 43KB
SHA256 25abecc7232db9539517581fc8a68259aa6d211f04801722273cbba50312e054
MD5 9106070040a3a1f2fc962e32fb8953cf
SHA1 6b285fb6478b286ce7800dfacc2f8b73c497a89f
SHA512 88a9a6987f5b47bc3156d30d537d361426138a1aae7dca49dd99e8bfcd8971ffb5d19c0db5d699e08f38f9328899dda1a89d890427724bf8669ff28df053149b
SSDEEP 768:qtuyPYCqYTxl5c5Yio6bLfNVn65Yio6bLfNxivdl:qj1Trg7o6dxY7o6dAvdl
TLSH
T14C137D4B37107859CF4BC5B5A6E9C733A9B1F4A25E30869A0138D2709F90B967F3D06E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libaccess_imem_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_imem_plugin.dll
Size 71KB
SHA256 548c86ac90fb6de9b3972182e0255feede9ed3e5eb99fe3bd6bac9a976872de4
MD5 ebe92520171ceba5e6f95a6959239c87
SHA1 8cc846ee87fb7f02ae418fce5356c2ee2135627c
SHA512 b37612777a7475203baf8d097ec40f40cfe4d3f43894465f824d8ca5af215ba9909d9cfedde58354e9047c9bd4e0d841eba5df9d309bc725481cc2cee79ab46c
SSDEEP 768:agIEzFZ1TE5crJ2VEmcCZfreyKaPLK7tz6T3XKKn+5Yio6bLfNV5Yio6bLfNyZ:Lpj1I+aRBfrjPe7tkU7o6d77o6d0
TLSH
T1B1735B0FB2926498C58FC4719AF68B37BAB0B8710931D77E8A64D7741F50A903F9E21D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libaccess_mms_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_mms_plugin.dll
Size 105KB
SHA256 8f0a0b7f03bcd91ebe8bcf18069da31491ed1d44f69a9fbaabc7f2069261f343
MD5 3cd6cadebeb0292a69aebaf92a9e2417
SHA1 b2b052959df96c9cd00626389b1e8ceddb32170b
SHA512 ddd33bc4e9eb96bc20a73d034e7074783a49e7be6b2a0de2164021b5c19ab7654967d221108a5683aeced0998287450ec45d1f6b4a7de95bd6e4226333003210
SSDEEP 1536:7YK3dMlfmnuUVVJgX8xKRBfrYct7oXn5FnboN7o6d37o6d/:3geJxEfMMopVoNs6d3s6d/
TLSH
T18FB37D57B29654ACCE9F817096E69333FA70B86296307BBF4B64C2350F10E913F1A19D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libaccess_realrtsp_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_realrtsp_plugin.dll
Size 146KB
SHA256 cdfc00385bb945ee4d19344c03e8eca20b737d8a680aecdbf8487e8a1543ba6f
MD5 df0b1737205b403f920949413d4a637a
SHA1 03b95c87d45f454c845a25a35edae21d19204109
SHA512 3f5a411caed5b10f758af2f25e782774193f52fceb9c5dd59d6f1603f60a425bd5469541776dc6a74dca1a16a353ce15a9872357fadcd0665dd25c83754cb14c
SSDEEP 3072:va7ibOzC1I7qpZMxm0zhlQLfKDw2ywhE/BcGds6d1s6dQ:va7ibUCe+8dhlQDOygknDdLdQ
TLSH
T1D6E35C57E29660FCC567C17092D69733F931BC654320AEFE5B68DB321E40E607B6E228
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libaccess_srt_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_srt_plugin.dll
Size 4.1MB
SHA256 d82a5b3972fd1a590cda4da70888fcd145ca2897f53c45dea518aaaec41b709d
MD5 c67acec948ce5c513fd800b9117c186a
SHA1 f5328c690e5b752ec4879bbc08dfde7e5ffad50b
SHA512 dedddf9c1c6134ca8081fd30223aab1dcce39e422a5cf9bedcae435422bb63345e4771b8cd69cdf8e825549c12e60d733114807141ae5eb7aa7def6a6a4a73ac
SSDEEP 49152:7ci2KTaWFl+uVQGnT9IAqR2CSP5g8dOGtlq6Isc4WbOJrpbDU+myBiYZ3mXetgA8:7p+WFl+uV9zq6P59Lc4/0VstOWLC25y
TLSH
T10F165B03E2A255ECC67BC1308753A332B971BC655530BE6F5A94FB712E31EA05B2EB14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libaccess_wasapi_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_wasapi_plugin.dll
Size 59KB
SHA256 c616ee4af027d63790ae11fd99dbec6552375c3c5154e8c3c239df3e6bd43b1a
MD5 4b63cf519d8c7ac6612eddaf161a5ec4
SHA1 1d7e831439d1980600f919d65defdf6770574db9
SHA512 528d7e775455dd46df583230c1fae7ccd823b8bf14d6177a4b58cd9b73715c031e049b8eb62f4368864d9a19392705b76400f802db5759f21e570af913274d93
SSDEEP 768:Th16KnpQZsK7sv3BUKqk/hdLNOqL5Yio6bLfNG95Yio6bLfNcC:Thfeuv6kT8q17o6dGj7o6dcC
TLSH
T101537C4A77013C99DB17C074A2EA873A6D71FC624A709ACE4138C3769E74B81BB5F12D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libattachment_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libattachment_plugin.dll
Size 40KB
SHA256 d2c50a69f896bedd1a6d69fcf89fafba4519d4241e31715bb674ecd4af9681ce
MD5 4951415497ac09a008713d92638d3ba3
SHA1 f9196260d21aff7aa32a007b7ade4f7b01e0942a
SHA512 036e19ab5de8017666de2806639519ffaac553abd6e33732dff407660614a1d8d91615349a81ea1c970d5f6fb2c6869800dea9d064d4fb8bc75b6c113191b367
SSDEEP 384:NV4RnRr6eqULcu14nOBfEB/E8OiHQIYizPoBWx7bLb2WqdennENwhHQIYizPoBWN:KlIKEJE65Yio6bLfNnXl5Yio6bLfNUm
TLSH
T189038D9B2A507848CA4BC5B4A1E9DB37ECB1B4B11E6096DA4028C3618F50B927F5E06E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcdda_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libcdda_plugin.dll
Size 784KB
SHA256 7828a92fdd848e24cf06d0b73ee346308fe30c4e56ac23cd39efb76ac4a79932
MD5 af4a29fef2270ed9f47516013ac36712
SHA1 33f5d55fe2454372326db4bbb4ee838006c7999a
SHA512 c9273616afd65535c3087da786032d814bce85971f76b7b8815aac86471df6b09874132b160129b3ccc054869fb844cdf8528f424ca5cae3d7ea20f808578f63
SSDEEP 12288:2l95rgbfzRGBXfR7mrtt5p1nYNX0YSR6ldjdhk:2LJgbfzR8fR7mrtt5TYty6ldjdhk
TLSH
T190055B27E6A324ECC56BC135479AB333B971F8691170BE7E1264D7703E20E606B2E764
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libdcp_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libdcp_plugin.dll
Size 2.4MB
SHA256 b668f849da878fba5bd1fedc1804da69244fbde47c8692aaedb395ddc9e023d3
MD5 ed998a2c7547c0a786c24befd5a58c80
SHA1 f5231e0b95047e537c0ec6588f00bb7c10e9422d
SHA512 c617f9d3adfb485c3519564d846d90bad4daea8d50164c75320744d1c045681d0881b5b205337447be9559ad7c7e5b3e9e71e1a4e2d6a7d8da9e512e5b6b0bdf
SSDEEP 49152:mkOp0d+Xi6/xU/cv9G75quzy4RYUc5w3OfCQzL8Y4:4G7UKLl
TLSH
T12FB54B17E66354ECC16FC13483969772B630B8A911347E3F2A98D7321FA1E60DB1E768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libdshow_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libdshow_plugin.dll
Size 895KB
SHA256 b60d22f1582d13f13f8809f5166b6ca8675e46b6594f8204ca6621270b60cc2f
MD5 d64b9af53aa640e5eb97b84cd290d42e
SHA1 e71607817d11b54e7d27ac80804144f1fe4bb9dc
SHA512 40a2e3748d2a88679f324606fff118681205421192f053bd6d9cfcc6dbc30cb4904e8441d2ce815dbbbebb5d717a404dbd356179e0dab223f1570603439aa63e
SSDEEP 24576:B5IvBGjlSqg3XSASBa1Z1aJFC1PPPeYPPPSPPPNPPPGdqdI:7IvBGhSqSSASnJFCX
TLSH
T14E153B1BE36345F9C56FC03487A79732BA30B4694235BE6E1E94C7222F11E609F6E724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libdtv_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libdtv_plugin.dll
Size 876KB
SHA256 e1268176fa9a41dbb5ef03f51142d5a5902bf3713c58ab1b2e0ea03b8c9cc88e
MD5 5ce3a611caccfcb725594ae72fc64a20
SHA1 f39ca5008955ea720c960eda4721bd5352620198
SHA512 96e0849f53857eb110e1374bd699b96b961c240cee65f17de815b7cfb494124ae8fc6e04f34145f7a932496cf566b4a8a99219486fe881ce1fa1620c938df3f6
SSDEEP 24576:jkpq5j7Mh6Fz3j992GbQAg91e1DvC7lllvlllHlll3lll18dxdD:dj7M0Rj995bQA5vl
TLSH
T1E5152A1BE26358F9C56FC43087A7D731BA30B4694234BA7E1E94C7262F11E609F6E724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libdvdnav_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libdvdnav_plugin.dll
Size 277KB
SHA256 e978244ebc0ae7b3eee91799c3c1b9dabc9760ea9ff937285d5233b99d0b73a1
MD5 1db60372b31fb53161c51a99157e56b2
SHA1 7d066f478c3e1405b44ea525f231a987e6d441cf
SHA512 f472d01827c1201545c5705a2ae9184d45a138dab60dc62e9311f9cfc1c73e06a21a8616d528dbef4420ae2791ae0f2054a36fce373418bc3c1a9000ebae489b
SSDEEP 3072:o/SapwHMJ4IYWuhctR6VHFV5vlo6Rwjl5xfoUEbOuextD6CHq8YyxVs6dXs6de6:o/9HPRYHtl9qjl5Nib1etD60Gyldddp
TLSH
T14B544A16F2A324ECDA5BC1348396E732F87278560230BD7E1B64C7752E15E306B2E66D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libdvdread_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libdvdread_plugin.dll
Size 214KB
SHA256 27c2d191b6257d99ae3810b88470279d0acefc0065f82719c2f2ca325e742bfe
MD5 039c76bc66e79d04022d0ab5758bdb24
SHA1 607d82b805edd57672744c046efdae336888a6c9
SHA512 11b6509c4d1cd90ad03a15e5c151dec4e1efef9356e7f4980048cf6eb4885aba0795c53037266ec2fa0d33fbe644dd706d3b6c068dc87e71b184c3102f7d6c85
SSDEEP 3072:BACI+JmZ/4upyQG9h0MF4JhW7raSJelixfPR/0+/6QCWqPm3WA0s6d1s6dI:icBD9SMQW7W6eliNR0g6QZAcXcdLdI
TLSH
T169245B17F29368EDCA6BC2304793A632F931BC560220BD7E2B60C7712E15E20776D66D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libfilesystem_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libfilesystem_plugin.dll
Size 69KB
SHA256 0369ada8df130e85f08c2a102943b96ddce753de31299d7b71bc61971be27203
MD5 3b315ce4f8358490b55141d5059de08b
SHA1 708b507ed486a593c55f3250625878979f17b0c9
SHA512 ec85575a551ad09aacadf76afd569964ccfbceecd3648f0392acdcec9c9e1cfbf0d58ae6c59e8708dadcb84cb6459557a1b66561fbadf6c8ea21b8b73b74dc31
SSDEEP 768:u5yY4KqYw/7hn2VamcgZfreyVai9z7hzv1cfjAr5Yio6bLfNLNt5Yio6bLfND:Fs4VgL3frsiN7hhMw7o6dLNz7o6dD
TLSH
T10B637C4BB792A8ECCA4BC17552E69B33BD70BC6219209B6E1374E3301F10A953F5A16D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libftp_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libftp_plugin.dll
Size 123KB
SHA256 1ef7f7eee7c2a38d36186542004194e5ddfcb98efe535566743fe7d6c3e44690
MD5 6bc9ce3a71b8f9b2d83b2ae172230fdd
SHA1 790cff3c615b0113a24e237d6632096500481844
SHA512 535bccb017db5e20cf9a570f39fa5335d9efc5d3cce0fb2a6f742e37c1a8dbc98d7496e511fb0c9189c8668bc9d8c1ac7280745271f02de59919249f41507223
SSDEEP 3072:IuJwuumjlyjf/LJ3o2Rin+q77s6dXs6do:IcNjlyrt3Fin+q7pdddo
TLSH
T16CC34B17F19AA0ECC59AC17487DB6333F631B8514930AFBE1BA4D6322E10E50BE5D26D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libhttp_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libhttp_plugin.dll
Size 75KB
SHA256 ac382cfa5598a9baaaad596fddc454dbac07eee7407793c9212f39e39d3db59b
MD5 0a8a026212a7b956d1ad92f8b7648823
SHA1 321db08a5132874231a3ea9ab7a394ba8071af77
SHA512 d0d65c530bb0e3e677a0ced462f1289b94c82d09ea696640e2b2433acfac6ca043704c287d48029f1071601b7738553d33faca4e489af469a5e83cee53f723ec
SSDEEP 1536:yjMUnSGgICRBfrI/B7xaM4z7o6dt7o6dEU:A2GgIsfstxaDzs6dts6dH
TLSH
T1B0737C1BB2C224D8CA8BC07092EB9B33FAB1F85149346B6F07A0D7351F40A517F6A56D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libhttps_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libhttps_plugin.dll
Size 150KB
SHA256 f6d8b1845059b00d9efe09a10631591b39ea04e12fc4b3524f7360b2add713b0
MD5 18abc82e706ef27602047e8131e6e496
SHA1 56e7bba5124ec07b5c268fd84054826a890d7ced
SHA512 6f6f64d95fd0e48f9d583c976ed50253f110b73c8de6e680aa8b917eb0301eee620e2df1aaca42ef1f557226dea3116e18ea444b99ad331c3942a1c9f8695b69
SSDEEP 3072:h+RlzM+8LF6VK5nxo3GO+rl8jfuJWBXnFHrxys+s6dnIs6d0:h+foLLF64nxuGdrl8r5BX17ed4d0
TLSH
T126E35C67E29660FDC65BC23486D69333F871B8215730AEAE5B64E7312E00E507F5E329
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libidummy_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libidummy_plugin.dll
Size 41KB
SHA256 1b7c278f971a115fbfe5ecd20a787cdf397836960a08a343e9f0c9c94d36991b
MD5 507b72c6e7d2266b286b060f350a86bb
SHA1 63e986768604a8c2dfc26cb31d397d61cd0b8af2
SHA512 06728cc3af24fa4bc028e5e683bd14fd3b0e9ae11bfd5a8cbcf08b3e26c2f5834527df2ed3ffe675aa357c478ca8341ad41130c94ce2010e97476c8b43a3b4c6
SSDEEP 384:ZqHjSc+q5ONo31qfDC1yN0e8ovocdiHQIYizPoBWx7bLb2WqdeSmXHQIYizPoBWO:C+q5udrP0Uwd5Yio6bLfN55Yio6bLfN+
TLSH
T168138D873F507858CE4BC9B4A0E5CB37BDB1B4A25A70869A4138D2B18F507827F6E16D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libimem_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libimem_plugin.dll
Size 40KB
SHA256 c0cee305070cf30867f2897b01b5516ec328c9770e0a0c950b638631e13d2402
MD5 4f37ca623d7324cfa6ea542ace34b969
SHA1 bf3fcdde1927f0fb5609ab073c1290037d689285
SHA512 1b218df4fe9c3d243f5026de8bbb5624c1a9da2ca4fa8534b86c1fe3da9c9bd5690953be982abc2d6cf99165ea32335df9b79c1f83d243983991a274af1470cc
SSDEEP 768:cTQdD+K/zEn5Yio6bLfN/A15Yio6bLfNcZo:cTQQK67o6d/Ab7o6db
TLSH
T11D038E872E507C99CF4BC5B0A1E5D737ACB1B4A21E7056DA412CC2B18F507927F6E0AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

liblibbluray_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\liblibbluray_plugin.dll
Size 2.0MB
SHA256 5636636fa9f9799bb3c3fecc8fae242fdc0685793d4017677a158ab321e78f29
MD5 21f91d82b1959f448af57f4f940d2307
SHA1 8ebaed3af40ffab4aa9ae30d79951fa89b461110
SHA512 259045b7decfdf2e6becce26a2052bfd7b1198022240f5c20c8a4a95cb20f4fe9324aef40f44b1f6af641513abdb629f7bda4d94876ea17f0d594e53d0a8abd2
SSDEEP 24576:qyS4QwyYbqryih2Za3I2KcIqu79SVltYnCylEs7ZR/HIKyB2Ph9PgSZsWRvrdadV:5vyYbW3dTb3ntYnCylEs1toKymhyiR8
TLSH
T1A5A55D13E2E320FCC76BC2744797A772B971F4251134BDAE15A4CB312E11E602B7EA69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

liblive555_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\liblive555_plugin.dll
Size 582KB
SHA256 25ab888c80cda4665382942b7e1e7cd37d9569125551568928f50c3280703f28
MD5 b215d5a6b4c31886481f40070ffa8d97
SHA1 62c43f4b695ae7892d4283449059720bffad2f52
SHA512 cb96cfdd07dc988fa0a2d2fcb89e041e803ed2ecea6440a26cef13c8315e2f6eb7f7e56439cc1c3cdd288591beb21117504cd399f02768c1c4816ff6c4e6fdd7
SSDEEP 12288:81+CkxWBT6p3D6E7Wj+5qh98PcX2rYnBhLdeVdfdq:O+CkND6EiK5qlAqjdwdfdq
TLSH
T116C43917A7A324ECC72BC03486679771AB31F8150234BE6E3668E7326F56D245F2D638
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libnfs_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libnfs_plugin.dll
Size 285KB
SHA256 0b7855b74d385ed1d95a0e87b0e2f16cd27a3446dbd05a02efbc1809ad3832d0
MD5 c5746431982972312593221b1a3d0304
SHA1 a8c60142b12d7f84ef9260bc9245501482385d0e
SHA512 f6084262bd9ad42b826d96380144c9bd990016a7d5e04e6dd9c3722b3104f2c9b49de31c284b9087f3bbe1577b385e95caced20c371a41619f0386d38affb847
SSDEEP 6144:QQZONMJxKDp4TToZawuHsvy9toBOGogdbd5:QQaMaSTToGHs692Sgdbd5
TLSH
T1B4541A26E6DA65BDCB6F81308257D3327C71F464D721BD6F0465CA382D18C606BBFA28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

librist_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\librist_plugin.dll
Size 113KB
SHA256 00d6d5c62203a748cdba538e8950a950c69a1773ed2cb8367b90717883e61419
MD5 f9268d9ee68859a8beb8a8df39fd9287
SHA1 fa17cadd89401007625335817c61a5e8a554d695
SHA512 f4bcc761cd29998bd7be2bd6edcd7e517de0a68d411c42c06b37ac950809fad76e4c275acc69a44fefcbb738157d92c94b441d318597d64b824a66fdb8d52b9c
SSDEEP 1536:KDaX1VFK4H9QgsfvsCMclUgLifrLNU7wKlklUdX8B/dJq7o6dxE7o6dS:/F5pYvsalUzfHgw6kk8B/dJqs6dWs6dS
TLSH
T121B34A47F29264E8C59B85B092E76737F9307C6246249BBE4BA4D7302E11F607F5E328
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

librtp_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\librtp_plugin.dll
Size 661KB
SHA256 38d7b995a91e9e8d5216fc8f82f4639ab0b82dbe2144bb483f6d8ef028e72950
MD5 3e36d8d50f60c662701187b8b02b1e69
SHA1 e448cbeb0fdda85207f785bcd5194dee358ad22c
SHA512 44cd22cc2705ed23015c42a6a3d413a73df43e30bc516aa936257f91adff8df19e7333cb6181a5f10eb145e80578962d1634fe554052eb2eb557bf692eddd56e
SSDEEP 6144:8Isu8o4pvtL5tx+0ZdklPFA76fIXEBszzbtx5LrY6MlDFYLjl+dJ4h0pb0QQVf16:89uh4oyd/7++x5L5lcu0uCk/dxd4
TLSH
T10DE45B27E76360ECC66BC1314766A332B572FC6512B0BE7E1654EB302E35E506B1E728
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libsatip_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libsatip_plugin.dll
Size 75KB
SHA256 1c174f56ecab62101a1716ba7298d6a520cac7f58b8a2080b1b3e2f2e66afe9d
MD5 974d280b60d076458f2a6d5381df53c2
SHA1 3c89b4f5008ef22d9722185be02782f33b1e65ff
SHA512 f24da65728cfac2f9e271dd02d050d04cd6ebee484791c0ba7821492bb2a8962057c247f3025d82351acedaba474dbd00b8cc4e2d1a46a8f08ef77b4932015e5
SSDEEP 1536:RrkwHhDhxfrh/r787B/aSL9d7o6du7o6dL:RBhHflX8l/Nds6dus6dL
TLSH
T192737D5BB2936498CA5BC47451FB9733FAB1B8214A34AF6E46B0D7311F00E903F5A19E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libscreen_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libscreen_plugin.dll
Size 48KB
SHA256 fe3a2810593910cc4ef421b81c15893dea6525fffd08fbce6e9751a60a3fc1a8
MD5 2d7f0227cd2d1a1c9acde4c10814a049
SHA1 4ab4f8994cd774ab7d5284de67afa84304570afc
SHA512 9aec2f3db19d059da70d074a2c1c1a9071acb2cb901d8c872ae7ea29e070b4a64dbf1ff40f5f926ff93fe31c06b9b4c0c719d6c6f89ecb40a29edaace05e2d51
SSDEEP 768:6Jt6ZdWHnbC5Yio6bLfNITJzE5Yio6bLfNkLK:WtdHnE7o6d6S7o6dkW
TLSH
T1D8239D5B3A116848CE4B85B5A1F9CB33F9B1B4B11A309BAF4578C2706F50B913F6E11E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libsdp_plugin.dll

Path C:\Program Files\VideoLAN\VLC\plugins\access\libsdp_plugin.dll
Size 39KB
SHA256 cf85208198b0d8751f4a61fbabe152b5de8369516b2622cae366969ec8ad0c88
MD5 34df4ffe42abfed0c267d82ef6a8cadb
SHA1 5853f8f2b53c0b0a2fb9d6894a12720bcf738dc1
SHA512 75b6dea2446d73501244c566a298d19ee873fd91013117e77001b85d96b28eba8288e9ebd402cd64f39c2bd60b5ed716b884e0fd9655b43bf9af9298ce92f8b6
SSDEEP 768:S+5RVH/f9jFF5Yio6bLfNad5Yio6bLfNvO:S+5r/fVZ7o6daD7o6dG
TLSH
T19E039D872F50B854CF4BC9B0A1E9C73BECB1B4A25E30569A5038D2B58F507927F6E06D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uninstall.log

Path C:\Program Files\VideoLAN\VLC\uninstall.log
Size 21KB
SHA256 083c6d0605151ad201827884919ed57d1024ecd3c7489c4bd259a11bb4979407
MD5 467911f847683b4d64f11beaa9150620
SHA1 f8bafe3fb960e9d0d5b3bf92ec7849b9b0ae204e
SHA512 9138bee21066707aa32332984432f08e67b9c77b3b0a888dcb657a0f596bb28be012e1671bdc8cdf3ba4c0f49098e4b058b727fd459f0edee697c6c7d22c340c
SSDEEP 192:xijpTJ1+smkLI/cnwpnGPJigp17k78m7L2FxmQVw0WAiCZ7XVIINaonICB6DfsZD:Sk08kIcEuKcr
TLSH
T1BAA2DFAF92AC0C96B5BA5D8478CC6ED885CC27E72305C364827D88E87E47D3B16E7474
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vlc-cache-gen.exe

Path C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe
Size 141KB
SHA256 8bf0d5a2bca0bbb09de532f8d8694928c978d9862aa8064f3b9a09058aaca9a4
MD5 a1ef9cc9e44483fd4e55fc6d43eff646
SHA1 58b09a1006217516916ab62e03bf4fc8eabb1e6b
SHA512 6375961f83b233fa9c08f1d8b17d3ab364ba23876b2280683fe7ca3599aa415d2c75a58c9f20f37c9f45712eeb34db800fad634dedc3be970c3a26d1c9150a28
SSDEEP 3072:1oYYfne8VDrTC2k9Hc3/nl6LAHkzI1UfgEA6IIyRJrs6d7s6dZ:1J0PBVk96kADldpdZ
TLSH
T139E3DF96B781A4DACA5F853CC5E79731AA70BC210A205A5F2668FF747F40E803F0A16D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vlc.exe

Path C:\Program Files\VideoLAN\VLC\vlc.exe
Size 1021KB
SHA256 bfa5740f028a8f310ca01c779bbc5f2f1b435c41539c54de592f715bb0c10389
MD5 f0a4d5c3492115bfe2f346bc7bdce396
SHA1 bfcbdc7d0cbb92b68d348090fe9f381b4358a587
SHA512 8e4b2e1852fbc821cab4a7c16675afbfa2588472faa1848600829c415bfbee7cbf4713568ba15a76916e6c761d79b0fff7c5a1ae087aabd912bb7063d38a560a
SSDEEP 24576:uGKuKkPztKt9cHPrLRAqKBAy1N1UGAmnnnFnnnZnnnGnnnsddodt:uGKuKkPzgt9cHTLRAqK81k8
TLSH
T1A9254B1BE7A345EDC56FC13487A7C772AA30B86942347E2E1D95DB221F10E609F2E724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LangDLL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsc6114.tmp\LangDLL.dll
Size 8KB
SHA256 2e08e077a0800ec39c0596f4dd91cbbfa917eeef2d75a00767917b8d1f6884ac
MD5 313661ec12ed5ce1fd0b3292bf02cb69
SHA1 fd341676cf680a9f0f690c35b43feadc0693e9a8
SHA512 a16f35c6019eb1431a3d03fb7d0935c272756f2a8363f541e168a55b2e20a85ee90191715c845ab0588eef8f2af6cf91ac75c5bf1a5d0c61c513339006da9ff2
SSDEEP 96:b0nLo47eYkrGj23kBTPEa8ir2qUuRkNB/RMZCabEO/2/HdNfdpX2N:KoZYkrGj20tEEeYkv/RaCA/2/9h2N
TLSH
T13402D6DEFF0959F5C83395344096F25FC51D7426CA3B0E46EE1B0629BA2A9FC2A0D206
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsc6114.tmp\System.dll
Size 28KB
SHA256 b89448b9fd7be5ef215cac6d973a57c0e75e1fffa25552afe174855c9b71fdf9
MD5 81e34f1c4b04a15dbce200c52f598f67
SHA1 f40a922ad7a5494e2aeeaa2b961d96738e888af7
SHA512 577f52a292075269f0e8ec4c6d243b2ed411872e009839553020929a8263174ad97943f150543e4ea6cb327d95e227f4065441a9d2106b7cabf1cb872dbcc181
SSDEEP 384:xmEs6sVqQq0DwRiGUaLYuAXLaMoy4m973uwYkvZ6YfkzB8yy1Eiu8ILvFd/9:xmEwqZ2wRiGUcY8TBsdvEbB8yyvIJ
TLSH
T1DFD20A2AFF06C8F2D1B1D570889EE677C526782957220E7BFF1B9E4CFC236825A19105
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsc6114.tmp\nsDialogs.dll
Size 14KB
SHA256 778b2bfbf3f4e641161f40c8174442a4d3865f097e3a2a383356dbfcac8005ab
MD5 2726673c720a296442c8ed134b41d169
SHA1 b8050c85017fcda78f6b82cc86ad277bb0dbd539
SHA512 95fd8cd96a4c627dfc1a89a98630ead3fe431360ab15f2324a52fdd03b2b493bdc44a4d6d0189276826725ea4e48aeb4711459a459b92a80be51e9431b70bb0b
SSDEEP 192:clWWck581HwPRLG/CocFR1w5nEYkv/RGl5BoiS+6SZSM3CU:Hdk5SoRLG/CocFR62Ykv8l5BoiFXyU
TLSH
T16252E50EFB0A44F6C572D834548BE72F869DA415C66F4E0AEF170B0CBDA32B5280E346
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsExec.dll

Path C:\Users\Admin\AppData\Local\Temp\nsc6114.tmp\nsExec.dll
Size 10KB
SHA256 0d7f702c518286a2d87db689af169c3857142324de4c9d76d51ebf639dced3df
MD5 e78bcd3208bff839e612041895bb8d42
SHA1 4b21b475b21d8f8bb2655d8e8e7d47548825831f
SHA512 eb38959a877d1af4ae53f25407ede3172f990f8c824624f5a2f385cddbd71a437b9033d45042a0e40f7fb611ff48836be166d97d42f3c169babb063ef48e8e35
SSDEEP 192:MItx8GSBYnUMu3Oad973Ykv/RGwC7ocJ4D4:bx8GOYnBu3Oad973YkvMwC7ocJ
TLSH
T12A22B8C9BA1579F5E0239838B18AF12F4D5D7C31DA2B840EE89A1E35B81F5E4571DB03
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsProcess.dll

Path C:\Users\Admin\AppData\Local\Temp\nsc6114.tmp\nsProcess.dll
Size 39KB
SHA256 70b1ba04ab0663f1044b182090294e117fda3921fd498a731dea0d34db6a98d5
MD5 9b36ac51498d4ed624c385c24ca6b842
SHA1 47718878cf6772f38f7bd31da24a5c5c61a20cca
SHA512 fcacbc613744236f46010995c363d63c7f35009d9ced952a4375ccdb81abd9cf5350d546fd32d9c48a510a9eecb31b56db1ce0082f13b01f5dfa418270448895
SSDEEP 384:phoHdm2naWXCeq6QHQIYizPoBWx7bLb2WqdeKPcmylLpCHQIYizPoBWx7bLb2WqE:U9xX/5q5Yio6bLfNrpY5Yio6bLfNzZ
TLSH
T19B038D4F6E016812DE439EB064D4CB7E9D70FB52EDB106E6B6288990FF957837A0D01E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4728-726-0x00007FF86D760000-0x00007FF86D776000-memory.dmp

Download

memory/4728-732-0x000001EEF0890000-0x000001EEF1949000-memory.dmp

Download

memory/4728-831-0x000001EEF0890000-0x000001EEF1949000-memory.dmp

Download

memory/4728-820-0x000001EEF0890000-0x000001EEF1949000-memory.dmp

Download

memory/4728-809-0x000001EEF0890000-0x000001EEF1949000-memory.dmp

Download

memory/4728-798-0x000001EEF0890000-0x000001EEF1949000-memory.dmp

Download

memory/4728-787-0x000001EEF0890000-0x000001EEF1949000-memory.dmp

Download

memory/4728-776-0x000001EEF0890000-0x000001EEF1949000-memory.dmp

Download

memory/4728-765-0x000001EEF0890000-0x000001EEF1949000-memory.dmp

Download

memory/4728-754-0x000001EEF0890000-0x000001EEF1949000-memory.dmp

Download

memory/4728-743-0x000001EEF0890000-0x000001EEF1949000-memory.dmp

Download

memory/4728-727-0x00007FF86D0D0000-0x00007FF86D0E5000-memory.dmp

Download

memory/4728-728-0x00007FF86ECB0000-0x00007FF86ECC0000-memory.dmp

Download

memory/4728-729-0x00007FF868890000-0x00007FF8688A7000-memory.dmp

Download

memory/4728-730-0x00007FF867DC0000-0x00007FF867DDB000-memory.dmp

Download

memory/4728-724-0x00007FF86ED00000-0x00007FF86ED33000-memory.dmp

Download

memory/4728-723-0x00007FF6BB390000-0x00007FF6BB493000-memory.dmp

Download

memory/4728-731-0x00007FF867DA0000-0x00007FF867DB1000-memory.dmp

Download

memory/4728-733-0x00007FF8679D0000-0x00007FF867A35000-memory.dmp

Download

memory/4728-725-0x00007FF8593E0000-0x00007FF859699000-memory.dmp

Download

memory/6836-18-0x0000000000400000-0x0000000000486000-memory.dmp

Download

memory/6836-415-0x0000000000400000-0x0000000000486000-memory.dmp

Download

memory/6836-19-0x0000000074930000-0x000000007493F000-memory.dmp

Download

memory/6836-722-0x0000000000400000-0x0000000000486000-memory.dmp

Download

memory/6836-417-0x0000000074920000-0x000000007492C000-memory.dmp

Download

memory/6836-16-0x0000000074930000-0x000000007493F000-memory.dmp

Download

memory/6836-17-0x0000000074920000-0x000000007492C000-memory.dmp

Download

memory/6836-15-0x0000000000400000-0x0000000000486000-memory.dmp

Download

memory/6836-675-0x0000000000400000-0x0000000000486000-memory.dmp

Download

memory/6836-678-0x0000000074200000-0x0000000074209000-memory.dmp

Download

memory/6836-6-0x0000000074939000-0x000000007493A000-memory.dmp

Download

memory/6836-20-0x0000000074920000-0x000000007492C000-memory.dmp

Download

memory/6864-685-0x00007FF8593E0000-0x00007FF859699000-memory.dmp

Download

memory/6864-684-0x00007FF86F290000-0x00007FF86F2C3000-memory.dmp

Download

memory/6864-683-0x0000000140000000-0x0000000140027000-memory.dmp

Download