download:

/web/20140722113202/http://hyperionics.swmirror.com/hc2setup.exe

Full analysis: https://app.any.run/tasks/5f6919d0-5a7b-4883-b5d5-4c619581c70b
Verdict: Malicious activity
Analysis date: July 21, 2024, 13:30:57
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows, RAR self-extracting archive
MD5:

671CF757E28768FD98EF9E32EF795A7B

SHA1:

30BE0C6F953ED09629A802FD3AEAABB4B3F22F8F

SHA256:

78E17664EE969C9A1064EA286BDBE6C5D37EA4672AD672541885023F06233B91

SSDEEP:

98304:+8QNEExsVkYP54EeF1jS5wB5MSsjIJ/FkzSr7d9LF3i+QAxeVGrGSxGPwl20ifE3:WVP9

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Drops the executable file immediately after the start

      • hc2setup.exe (PID: 3700)
      • Setup.exe (PID: 2956)

  • SUSPICIOUS

    • Process drops legitimate windows executable

      • hc2setup.exe (PID: 3700)
      • Setup.exe (PID: 2956)

    • Reads security settings of Internet Explorer

      • hc2setup.exe (PID: 3700)
      • HyCam2.exe (PID: 3152)

    • Reads the Internet Settings

      • hc2setup.exe (PID: 3700)
      • rundll32.exe (PID: 2092)
      • rundll32.exe (PID: 3144)
      • HyCam2.exe (PID: 3152)
      • HyCam2.exe (PID: 2068)

    • Executable content was dropped or overwritten

      • hc2setup.exe (PID: 3700)
      • Setup.exe (PID: 2956)

    • The process drops C-runtime libraries

      • hc2setup.exe (PID: 3700)
      • Setup.exe (PID: 2956)

    • Uses RUNDLL32.EXE to load library

      • Setup.exe (PID: 2956)

    • Creates a software uninstall entry

      • Setup.exe (PID: 2956)

    • There is functionality for taking screenshot (YARA)

      • vlc.exe (PID: 4060)

  • INFO

    • Checks supported languages

      • hc2setup.exe (PID: 3700)
      • Setup.exe (PID: 2956)
      • HyCam2.exe (PID: 3152)
      • vlc.exe (PID: 4060)
      • HyCam2.exe (PID: 3408)
      • HyCam2.exe (PID: 2068)

    • Create files in a temporary directory

      • hc2setup.exe (PID: 3700)

    • Reads the computer name

      • hc2setup.exe (PID: 3700)
      • Setup.exe (PID: 2956)
      • HyCam2.exe (PID: 3152)
      • vlc.exe (PID: 4060)
      • HyCam2.exe (PID: 3408)
      • HyCam2.exe (PID: 2068)

    • Checks proxy server information

      • rundll32.exe (PID: 2092)
      • rundll32.exe (PID: 3144)
      • HyCam2.exe (PID: 3152)

    • Creates files in the program directory

      • Setup.exe (PID: 2956)

    • Creates files or folders in the user directory

      • Setup.exe (PID: 2956)
      • HyCam2.exe (PID: 3152)

    • Manual execution by a user

      • explorer.exe (PID: 1788)
      • HyCam2.exe (PID: 3152)
      • HyCam2.exe (PID: 3408)
      • HyCam2.exe (PID: 2068)

    • Reads the machine GUID from the registry

      • HyCam2.exe (PID: 3152)

    • Application launched itself

      • msedge.exe (PID: 3820)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | Win32 Executable MS Visual C++ (generic) (42.2)
.exe | Win64 Executable (generic) (37.3)
.dll | Win32 Dynamic Link Library (generic) (8.8)
.exe | Win32 Executable (generic) (6)
.exe | Generic Win/DOS Executable (2.7)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2012:02:17 14:55:21+00:00
ImageFileCharacteristics: No relocs, Executable, 32-bit
PEType: PE32
LinkerVersion: 9
CodeSize: 73216
InitializedDataSize: 113152
UninitializedDataSize: -
EntryPoint: 0xb583
OSVersion: 5
ImageVersion: -
SubsystemVersion: 5
Subsystem: Windows GUI
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
64
Monitored processes
22
Malicious processes
2
Suspicious processes
0

Behavior graph

Click at the process to see the details
start hc2setup.exe setup.exe no specs setup.exe rundll32.exe no specs rundll32.exe no specs hycam2.exe explorer.exe no specs THREAT vlc.exe hycam2.exe no specs hycam2.exe no specs msedge.exe msedge.exe no specs msedge.exe msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs msedge.exe no specs wmpnscfg.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
1788"C:\Windows\explorer.exe" C:\Windows\explorer.exe—explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Explorer
Exit code:
1
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\explorer.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
2068"C:\Program Files\HyperCam 2\HyCam2.exe" C:\Program Files\HyperCam 2\HyCam2.exe—explorer.exe
User:
admin
Company:
Hyperionics
Integrity Level:
MEDIUM
Description:
HyperCam
Version:
2.29.1.0
Modules
Images
c:\program files\hypercam 2\hycam2.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\winmm.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
2092RunDll32.exe "C:\Users\admin\AppData\Local\Temp\RarSFX0\OCSetupHlp.dll",_OCPID203OpenCandy2@16 2956,52F8C096004943CE816B62095C087C9A,29690371C0984BD8865A4B4455F0834C,40B3F89C531748B6AD6434D72C633154C:\Windows\System32\rundll32.exe—Setup.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Windows host process (Rundll32)
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\rundll32.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\imagehlp.dll
2364"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=renderer --first-renderer-process --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2304 --field-trial-handle=1236,i,18056620125644515751,10796788104236050646,131072 /prefetch:1C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
2396"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=renderer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2336 --field-trial-handle=1236,i,18056620125644515751,10796788104236050646,131072 /prefetch:1C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
2452"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=1388 --field-trial-handle=1236,i,18056620125644515751,10796788104236050646,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
2672"C:\Program Files\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1464 --field-trial-handle=1236,i,18056620125644515751,10796788104236050646,131072 /prefetch:8C:\Program Files\Microsoft\Edge\Application\msedge.exe—msedge.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
LOW
Description:
Microsoft Edge
Exit code:
0
Version:
109.0.1518.115
Modules
Images
c:\program files\microsoft\edge\application\msedge.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\microsoft\edge\application\109.0.1518.115\msedge_elf.dll
c:\windows\system32\api-ms-win-core-synch-l1-2-0.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
2956"C:\Users\admin\AppData\Local\Temp\RarSFX0\Setup.exe" C:\Users\admin\AppData\Local\Temp\RarSFX0\Setup.exe
hc2setup.exe
User:
admin
Integrity Level:
HIGH
Exit code:
0
Modules
Images
c:\users\admin\appdata\local\temp\rarsfx0\setup.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\users\admin\appdata\local\temp\rarsfx0\mfc100.dll
c:\users\admin\appdata\local\temp\rarsfx0\msvcr100.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
3144RunDll32.exe "C:\Users\admin\AppData\Local\Temp\RarSFX0\OCSetupHlp.dll",_OCPID203OpenCandy2@16 2956,10A4506830A8431F8774C10EFA6EEE9D,4489FE44B90043A2A7BB883E20D7CDA0,40B3F89C531748B6AD6434D72C633154C:\Windows\System32\rundll32.exe—Setup.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
HIGH
Description:
Windows host process (Rundll32)
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\system32\rundll32.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\imagehlp.dll
3152"C:\Program Files\HyperCam 2\HyCam2.exe" C:\Program Files\HyperCam 2\HyCam2.exe
explorer.exe
User:
admin
Company:
Hyperionics
Integrity Level:
MEDIUM
Description:
HyperCam
Exit code:
20
Version:
2.29.1.0
Modules
Images
c:\program files\hypercam 2\hycam2.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\winmm.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\user32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
Total events
22 138
Read events
21 393
Write events
237
Delete events
508

Modification events

(PID) Process:(3700) hc2setup.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:ProxyBypass
Value:
1
(PID) Process:(3700) hc2setup.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:IntranetName
Value:
1
(PID) Process:(3700) hc2setup.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:UNCAsIntranet
Value:
1
(PID) Process:(3700) hc2setup.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:AutoDetect
Value:
0
(PID) Process:(2092) rundll32.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Operation:writeName:ProxyEnable
Value:
0
(PID) Process:(2092) rundll32.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Operation:delete valueName:ProxyServer
Value:
(PID) Process:(2092) rundll32.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Operation:delete valueName:ProxyOverride
Value:
(PID) Process:(2092) rundll32.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Operation:delete valueName:AutoConfigURL
Value:
(PID) Process:(2092) rundll32.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
Operation:delete valueName:AutoDetect
Value:
(PID) Process:(2092) rundll32.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
Operation:writeName:SavedLegacySettings
Value:
460000005D010000090000000000000000000000000000000400000000000000C0E333BBEAB1D3010000000000000000000000000100000002000000C0A8016B000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Executable files
17
Suspicious files
45
Text files
38
Unknown types
16

Dropped files

PID
Process
Filename
Type
3700hc2setup.exeC:\Users\admin\AppData\Local\Temp\RarSFX0\8-8000d.wavbinary
MD5:1912519EA64D50843AE9084D37E8A0C1
SHA256:5F8D2BDA27A1036902C82778FF4C947AC57D63D558C1D6F0AA4B168489774538
3700hc2setup.exeC:\Users\admin\AppData\Local\Temp\RarSFX0\8-22050u.wavbinary
MD5:BF39380290ED50079B752A2593B9A50D
SHA256:C809DB4B1D49BB7F70A1E91FA8769563BD1E2BEFF8EC979B881713CD55FF99E9
3700hc2setup.exeC:\Users\admin\AppData\Local\Temp\RarSFX0\8-11025u.wavwav
MD5:C928167AE840C4D092D2D11157458B72
SHA256:C1D1F055679140D002EEADCD16FD2D72FA6BDC03E0649520E1CF4EEEA6182EF7
3700hc2setup.exeC:\Users\admin\AppData\Local\Temp\RarSFX0\16-8000d.wavbinary
MD5:596ED55E171623AD208EE78F1301F007
SHA256:60C6967511ED8F42C1861F6396B36AE3838721E9FD1CCE512BB3C187D3C04A7D
3700hc2setup.exeC:\Users\admin\AppData\Local\Temp\RarSFX0\8-44100u.wavbinary
MD5:FA7805635EFE3D2B2F1891274413731F
SHA256:9CBB2AD958F1CF1D8EB111CF8813C18596473679220B393C6689F745CD9FDEB3
3700hc2setup.exeC:\Users\admin\AppData\Local\Temp\RarSFX0\8-44100d.wavwav
MD5:38A775466B8DC0A1F2D7E04F34F72BD9
SHA256:FF20BEF1BA7566685B22F5F92DD215178A312DB97DA4C6C743585405F5C040ED
3700hc2setup.exeC:\Users\admin\AppData\Local\Temp\RarSFX0\8-22050d.wavwav
MD5:CA12246A9F402472599F55F894D9183A
SHA256:43B8C0E7D0BCB7EE07B02CB9A9EDA353876E344976BDF6E8D508C10C3C549124
3700hc2setup.exeC:\Users\admin\AppData\Local\Temp\RarSFX0\16-44100d.wavwav
MD5:77F67F35EE1E4F5BF4F76CCC072550BE
SHA256:46F00FEF0CEBE38DEEFBBA59F859B4A72906FA4A894DB552B0AFDB213C61FCFE
3700hc2setup.exeC:\Users\admin\AppData\Local\Temp\RarSFX0\16-22050u.wavbinary
MD5:76F42715F524FB2110CA845520E101D8
SHA256:3B393414011D7CCF8A1EB588C3FFD627105EB33E9660D5BDC050455B3C7A215A
3700hc2setup.exeC:\Users\admin\AppData\Local\Temp\RarSFX0\msvcp100.dllexecutable
MD5:BC83108B18756547013ED443B8CDB31B
SHA256:B2AD109C15EAA92079582787B7772BA0A2F034F7D075907FF87028DF0EAEA671
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
16
TCP/UDP connections
21
DNS requests
28
Threats
0

HTTP requests

PID
Process
Method
HTTP Code
IP
URL
CN
Type
Size
Reputation
3152
HyCam2.exe
GET
200
66.135.60.154:80
http://www.hyperionics.com/vers/hc2.txt
unknown
—
—
malicious
3152
HyCam2.exe
GET
200
66.135.60.154:80
http://www.hyperionics.com/vers/HC4offer.gif
unknown
—
—
malicious
3152
HyCam2.exe
GET
200
66.135.60.154:80
http://www.hyperionics.com/vers/HyperCamPromo.gif
unknown
—
—
malicious
1372
svchost.exe
GET
304
23.50.131.216:80
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?33775f6043c93e33
unknown
—
—
whitelisted
1372
svchost.exe
GET
200
184.30.21.171:80
http://www.microsoft.com/pkiops/crl/MicSecSerCA2011_2011-10-18.crl
unknown
—
—
whitelisted
1372
svchost.exe
GET
200
23.48.23.156:80
http://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl
unknown
—
—
whitelisted
1060
svchost.exe
GET
304
199.232.214.172:80
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?8f69642324cc87bd
unknown
—
—
whitelisted
3788
msedge.exe
GET
200
66.135.60.154:80
http://www.hyperionics.com/?Page=/atVoice
unknown
—
—
malicious
3788
msedge.exe
GET
200
66.135.60.154:80
http://www.hyperionics.com/navigation.asp
unknown
—
—
malicious
3788
msedge.exe
GET
200
66.135.60.154:80
http://www.hyperionics.com/styles/main_net.css
unknown
—
—
malicious
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:137
—
—
—
whitelisted
—
—
224.0.0.252:5355
—
—
—
whitelisted
1372
svchost.exe
4.231.128.59:443
settings-win.data.microsoft.com
MICROSOFT-CORP-MSN-AS-BLOCK
IE
whitelisted
2564
svchost.exe
239.255.255.250:3702
—
—
—
whitelisted
1060
svchost.exe
224.0.0.252:5355
—
—
—
whitelisted
4
System
192.168.100.255:138
—
—
—
whitelisted
3152
HyCam2.exe
66.135.60.154:80
www.hyperionics.com
COGECO-PEER1
US
unknown
1372
svchost.exe
23.50.131.216:80
ctldl.windowsupdate.com
Akamai International B.V.
DE
unknown
1372
svchost.exe
23.48.23.156:80
crl.microsoft.com
Akamai International B.V.
DE
unknown
1372
svchost.exe
184.30.21.171:80
www.microsoft.com
AKAMAI-AS
DE
unknown

DNS requests

Domain
IP
Reputation
google.com
  • 142.250.186.46
whitelisted
api.opencandy.com
  • —
whitelisted
www.hyperionics.com
  • 66.135.60.154
malicious
settings-win.data.microsoft.com
  • 4.231.128.59
whitelisted
ctldl.windowsupdate.com
  • 23.50.131.216
  • 23.50.131.200
  • 199.232.214.172
  • 199.232.210.172
whitelisted
crl.microsoft.com
  • 23.48.23.156
  • 23.48.23.166
whitelisted
www.microsoft.com
  • 184.30.21.171
whitelisted
config.edge.skype.com
  • 13.107.42.16
whitelisted
edge.microsoft.com
  • 204.79.197.239
  • 13.107.21.239
whitelisted
www.bing.com
  • 104.126.37.160
  • 104.126.37.161
  • 104.126.37.137
  • 104.126.37.129
  • 104.126.37.136
  • 104.126.37.130
  • 104.126.37.171
  • 104.126.37.153
  • 104.126.37.154
whitelisted

Threats

No threats detected
Process
Message
vlc.exe
main libvlc debug: VLC media player - 3.0.11 Vetinari
vlc.exe
main libvlc debug: Copyright © 1996-2020 the VideoLAN team
vlc.exe
main libvlc debug: revision 3.0.11-0-gdc0c5ced72
vlc.exe
main libvlc debug: configured with ../extras/package/win32/../../../configure '--enable-update-check' '--enable-lua' '--enable-faad' '--enable-flac' '--enable-theora' '--enable-avcodec' '--enable-merge-ffmpeg' '--enable-dca' '--enable-mpc' '--enable-libass' '--enable-schroedinger' '--enable-realrtsp' '--enable-live555' '--enable-dvdread' '--enable-shout' '--enable-goom' '--enable-caca' '--enable-qt' '--enable-skins2' '--enable-sse' '--enable-mmx' '--enable-libcddb' '--enable-zvbi' '--disable-telx' '--enable-nls' '--host=i686-w64-mingw32' '--with-breakpad=https://win.crashes.videolan.org' 'host_alias=i686-w64-mingw32' 'PKG_CONFIG_LIBDIR=/home/jenkins/workspace/vlc-release/windows/vlc-release-win32-x86/contrib/i686-w64-mingw32/lib/pkgconfig'
vlc.exe
main libvlc debug: using multimedia timers as clock source
vlc.exe
main libvlc debug: min period: 1 ms, max period: 1000000 ms
vlc.exe
main libvlc debug: searching plug-in modules
vlc.exe
main libvlc debug: loading plugins cache file C:\Program Files\VideoLAN\VLC\plugins\plugins.dat
vlc.exe
main libvlc debug: recursively browsing `C:\Program Files\VideoLAN\VLC\plugins'
vlc.exe
main libvlc error: stale plugins cache: modified C:\Program Files\VideoLAN\VLC\plugins\access\libaccess_concat_plugin.dll
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
/web/20140722113202/http://hyperionics.swmirror.com/hc2setup.exe