download:

index.m3u8

Full analysis: https://app.any.run/tasks/76d94dc4-af5a-4dbd-b28d-9416be18e900
Verdict: No threats detected
Analysis date: August 28, 2020, 05:47:32
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MIME: text/plain
File info: M3U playlist, ASCII text
MD5:

D25FBEF77888B4B346384411AAD76BD1

SHA1:

1473890182EBDE9286D411592CE621FF88FFB0F4

SHA256:

CE13E58F9AB42FE10CF9F6779EC27310694AAC5EFA6D8C51FA06DABB0C859192

SSDEEP:

1536:wy3zj7yL97tVPmooN/D5pYbvOjrSmLyYqwidKh9E5oxd:wpL4d

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    No malicious indicators.

  • SUSPICIOUS

    • Creates files in the user directory

      • vlc.exe (PID: 3764)

  • INFO

    • Reads settings of System Certificates

      • vlc.exe (PID: 3764)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.m3u | Extended M3U playlist (100)
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
38
Monitored processes
1
Malicious processes
0
Suspicious processes
0

Behavior graph

Click at the process to see the details
start vlc.exe

Process information

PID
CMD
Path
Indicators
Parent process
3764"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\admin\AppData\Local\Temp\index.m3u8"C:\Program Files\VideoLAN\VLC\vlc.exe
explorer.exe
User:
admin
Company:
VideoLAN
Integrity Level:
MEDIUM
Description:
VLC media player
Exit code:
0
Version:
2.2.6
Modules
Images
c:\program files\videolan\vlc\vlc.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\videolan\vlc\libvlc.dll
c:\program files\videolan\vlc\libvlccore.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
Total events
525
Read events
524
Write events
1
Delete events
0

Modification events

(PID) Process:(3764) vlc.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Direct3D\MostRecentApplication
Operation:writeName:Name
Value:
vlc.exe
Executable files
0
Suspicious files
0
Text files
1
Unknown types
0

Dropped files

PID
Process
Filename
Type
3764vlc.exeC:\Users\admin\AppData\Local\Temp\VLC2566.tmp —
MD5:—
SHA256:—
3764vlc.exeC:\Users\admin\AppData\Local\Temp\VLC2C1D.tmp —
MD5:—
SHA256:—
3764vlc.exeC:\Users\admin\AppData\Local\Temp\VLC2C1E.tmp —
MD5:—
SHA256:—
3764vlc.exeC:\Users\admin\AppData\Local\Temp\VLC2C1F.tmp —
MD5:—
SHA256:—
3764vlc.exeC:\Users\admin\AppData\Local\Temp\VLC2C20.tmp —
MD5:—
SHA256:—
3764vlc.exeC:\Users\admin\AppData\Local\Temp\VLC2C21.tmp —
MD5:—
SHA256:—
3764vlc.exeC:\Users\admin\AppData\Local\Temp\VLC2C22.tmp —
MD5:—
SHA256:—
3764vlc.exeC:\Users\admin\AppData\Local\Temp\VLC2C23.tmp —
MD5:—
SHA256:—
3764vlc.exeC:\Users\admin\AppData\Local\Temp\VLC2C24.tmp —
MD5:—
SHA256:—
3764vlc.exeC:\Users\admin\AppData\Local\Temp\VLC2C25.tmp —
MD5:—
SHA256:—
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
20
DNS requests
9
Threats
0

HTTP requests

No HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
3764
vlc.exe
104.31.12.182:443
mihoutaosp.com
Cloudflare Inc
US
unknown
3764
vlc.exe
104.31.15.185:443
qiyiquosp.com
Cloudflare Inc
US
unknown
3764
vlc.exe
104.31.3.173:443
mihoutaotv.com
Cloudflare Inc
US
shared
3764
vlc.exe
172.67.211.134:443
xxvideo2.xyz
—
US
suspicious
3764
vlc.exe
104.31.6.189:443
mihoutaoys.com
Cloudflare Inc
US
unknown
3764
vlc.exe
104.31.3.183:443
qiyiquotv.com
Cloudflare Inc
US
unknown
3764
vlc.exe
104.31.1.166:443
qiyiquoys.com
Cloudflare Inc
US
shared
3764
vlc.exe
104.31.13.177:443
xxvideo3.xyz
Cloudflare Inc
US
unknown

DNS requests

Domain
IP
Reputation
xxvideo2.xyz
  • 172.67.211.134
  • 104.27.145.53
  • 104.27.144.53
suspicious
xxvideo3.xyz
  • 104.31.13.177
  • 104.31.12.177
unknown
mihoutaosp.com
  • 104.31.12.182
  • 104.31.13.182
unknown
mihoutaotv.com
  • 104.31.3.173
  • 104.31.2.173
unknown
mihoutaoys.com
  • 104.31.6.189
  • 104.31.7.189
unknown
qiyiquosp.com
  • 104.31.15.185
  • 104.31.14.185
unknown
qiyiquotv.com
  • 104.31.3.183
  • 104.31.2.183
unknown
qiyiquoys.com
  • 104.31.1.166
  • 104.31.0.166
unknown

Threats

No threats detected
Process
Message
vlc.exe
core libvlc: one instance mode ENABLED
vlc.exe
core libvlc: Running vlc with the default interface. Use 'cvlc' to use vlc without interface.
vlc.exe
httplive stream: HTTP Live Streaming (/C:/Users/admin/AppData/Local/Temp/index.m3u8)
vlc.exe
ts demux: MPEG-4 descriptor not found for pid 0x101 type 0xf
vlc.exe
packetizer_mpeg4audio packetizer: AAC channels: 2 samplerate: 44100
vlc.exe
direct3d vout display error: Could not read adapter capabilities. (hr=0x8876086A)
vlc.exe
direct3d vout display error: Direct3D could not be initialized
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
index.m3u8