File name:

getscreen-741290987-x86.exe

Full analysis: https://app.any.run/tasks/73352b15-b5dc-4e57-8517-dc8f79e6e9f9
Verdict: Malicious activity
Analysis date: March 05, 2024, 07:07:24
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Tags:
remote
getmescreen
Indicators:
MIME: application/x-dosexec
File info: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
MD5:

7934E3FDB6A906D5FD32FD1055DAD2CF

SHA1:

7461FC1CA4FDB7F96FD6E82044027304C55668EE

SHA256:

DE246A85F33ECDBF6B0412D0AA34492E52D7047C50A901A990E7D73902B175BF

SSDEEP:

98304:fqrJNNcxEpbA8Xv763d5M5ggRVA33Azr1gL/4k2u8iR/mrZZfjDv/wmM+pFo/LIh:ha+WDT

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Drops the executable file immediately after the start

      • getscreen-741290987-x86.exe (PID: 3672)
      • getscreen-741290987-x86.exe (PID: 2964)

    • GETMESCREEN has been detected (SURICATA)

      • getscreen-741290987-x86.exe (PID: 2964)

  • SUSPICIOUS

    • Reads the Internet Settings

      • getscreen-741290987-x86.exe (PID: 3672)
      • getscreen-741290987-x86.exe (PID: 2964)

    • Reads security settings of Internet Explorer

      • getscreen-741290987-x86.exe (PID: 3672)

    • Application launched itself

      • getscreen-741290987-x86.exe (PID: 3672)
      • getscreen-741290987-x86.exe (PID: 2964)

    • Executable content was dropped or overwritten

      • getscreen-741290987-x86.exe (PID: 2964)

    • Changes Internet Explorer settings (feature browser emulation)

      • getscreen-741290987-x86.exe (PID: 1492)

    • Executes as Windows Service

      • gnntjtmxzkaoknwdiqgmfpqbpgkasvi-elevate.exe (PID: 1040)

    • Connects to unusual port

      • getscreen-741290987-x86.exe (PID: 2964)

    • Likely accesses (executes) a file from the Public directory

      • vlc.exe (PID: 2868)
      • vlc.exe (PID: 1576)

    • Reads settings of System Certificates

      • vlc.exe (PID: 2868)

  • INFO

    • Creates files in the program directory

      • getscreen-741290987-x86.exe (PID: 3672)
      • getscreen-741290987-x86.exe (PID: 2964)

    • Reads the computer name

      • getscreen-741290987-x86.exe (PID: 2964)
      • getscreen-741290987-x86.exe (PID: 3672)
      • getscreen-741290987-x86.exe (PID: 1492)
      • gnntjtmxzkaoknwdiqgmfpqbpgkasvi-elevate.exe (PID: 1040)
      • getscreen-741290987-x86.exe (PID: 4044)
      • getscreen-741290987-x86.exe (PID: 2244)
      • getscreen-741290987-x86.exe (PID: 2632)
      • getscreen-741290987-x86.exe (PID: 1232)
      • vlc.exe (PID: 2868)

    • Checks supported languages

      • getscreen-741290987-x86.exe (PID: 2964)
      • getscreen-741290987-x86.exe (PID: 3672)
      • gnntjtmxzkaoknwdiqgmfpqbpgkasvi-elevate.exe (PID: 1040)
      • getscreen-741290987-x86.exe (PID: 1492)
      • getscreen-741290987-x86.exe (PID: 2244)
      • getscreen-741290987-x86.exe (PID: 4044)
      • getscreen-741290987-x86.exe (PID: 2632)
      • getscreen-741290987-x86.exe (PID: 1232)
      • vlc.exe (PID: 2868)
      • vlc.exe (PID: 1576)

    • Creates files or folders in the user directory

      • getscreen-741290987-x86.exe (PID: 2964)

    • Reads the machine GUID from the registry

      • getscreen-741290987-x86.exe (PID: 2964)

    • Manual execution by a user

      • explorer.exe (PID: 1504)
      • WINWORD.EXE (PID: 4020)
      • vlc.exe (PID: 2868)
      • vlc.exe (PID: 1576)

    • Reads mouse settings

      • getscreen-741290987-x86.exe (PID: 1232)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.

TRiD

.exe | UPX compressed Win32 Executable (76)
.exe | Win32 Executable (generic) (12.6)
.exe | Generic Win/DOS Executable (5.6)
.exe | DOS Executable Generic (5.6)

EXIF

EXE

MachineType: Intel 386 or later, and compatibles
TimeStamp: 2024:03:01 08:03:49+00:00
ImageFileCharacteristics: Executable, 32-bit
PEType: PE32
LinkerVersion: 14.36
CodeSize: 3620864
InitializedDataSize: 20480
UninitializedDataSize: 20402176
EntryPoint: 0x16e9100
OSVersion: 6
ImageVersion: -
SubsystemVersion: 6
Subsystem: Windows GUI
FileVersionNumber: 2.18.1.0
ProductVersionNumber: 2.18.1.0
FileFlagsMask: 0x003f
FileFlags: (none)
FileOS: Windows NT 32-bit
ObjectFileType: Executable application
FileSubtype: -
LanguageCode: Unknown (0009)
CharacterSet: Unicode
CompanyName: Getscreen.me
InternalName: Getscreen.me
OriginalFileName: getscreen.exe
ProductName: Getscreen.me
FileVersion: 2.18.1
LegalCopyright: Copyright (C) 2023
ProductVersion: 2.18.1
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
59
Monitored processes
12
Malicious processes
2
Suspicious processes
1

Behavior graph

Click at the process to see the details
start getscreen-741290987-x86.exe no specs #GETMESCREEN getscreen-741290987-x86.exe getscreen-741290987-x86.exe no specs gnntjtmxzkaoknwdiqgmfpqbpgkasvi-elevate.exe no specs getscreen-741290987-x86.exe getscreen-741290987-x86.exe no specs getscreen-741290987-x86.exe explorer.exe no specs vlc.exe winword.exe no specs vlc.exe getscreen-741290987-x86.exe

Process information

PID
CMD
Path
Indicators
Parent process
1040"C:\ProgramData\Getscreen.me\gnntjtmxzkaoknwdiqgmfpqbpgkasvi-elevate.exe" -elevate \\.\pipe\elevateGS512gnntjtmxzkaoknwdiqgmfpqbpgkasviC:\ProgramData\Getscreen.me\gnntjtmxzkaoknwdiqgmfpqbpgkasvi-elevate.exe—services.exe
User:
SYSTEM
Company:
Getscreen.me
Integrity Level:
SYSTEM
Exit code:
1
Version:
2.18.1
Modules
Images
c:\programdata\getscreen.me\gnntjtmxzkaoknwdiqgmfpqbpgkasvi-elevate.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.24483_none_2b200f664577e14b\comctl32.dll
c:\windows\system32\gdi32.dll
1232"C:\Users\admin\AppData\Local\Temp\getscreen-741290987-x86.exe" -cpipe \\.\pipe\PCommand96saezxrtkaaifcaj -childC:\Users\admin\AppData\Local\Temp\getscreen-741290987-x86.exe
getscreen-741290987-x86.exe
User:
SYSTEM
Company:
Getscreen.me
Integrity Level:
SYSTEM
Exit code:
4294967295
Version:
2.18.1
Modules
Images
c:\users\admin\appdata\local\temp\getscreen-741290987-x86.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.24483_none_2b200f664577e14b\comctl32.dll
c:\windows\system32\gdi32.dll
1492"C:\Users\admin\AppData\Local\Temp\getscreen-741290987-x86.exe" -gpipe \\.\pipe\PCommand97tliugkzhwtlhvie -guiC:\Users\admin\AppData\Local\Temp\getscreen-741290987-x86.exe—getscreen-741290987-x86.exe
User:
admin
Company:
Getscreen.me
Integrity Level:
HIGH
Exit code:
0
Version:
2.18.1
Modules
Images
c:\users\admin\appdata\local\temp\getscreen-741290987-x86.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.24483_none_2b200f664577e14b\comctl32.dll
c:\windows\system32\gdi32.dll
1504"C:\Windows\explorer.exe" C:\Windows\explorer.exe—explorer.exe
User:
admin
Company:
Microsoft Corporation
Integrity Level:
MEDIUM
Description:
Windows Explorer
Exit code:
1
Version:
6.1.7600.16385 (win7_rtm.090713-1255)
Modules
Images
c:\windows\explorer.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
1576"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Public\Videos\Sample Videos\Wildlife.wmv"C:\Program Files\VideoLAN\VLC\vlc.exe
explorer.exe
User:
admin
Company:
VideoLAN
Integrity Level:
MEDIUM
Description:
VLC media player
Exit code:
0
Version:
3.0.11
Modules
Images
c:\program files\videolan\vlc\vlc.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\videolan\vlc\libvlc.dll
c:\program files\videolan\vlc\libvlccore.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
2244"C:\Users\admin\AppData\Local\Temp\getscreen-741290987-x86.exe" -epipe \\.\pipe\PCommand98phqghumeaylnlfd -environmentC:\Users\admin\AppData\Local\Temp\getscreen-741290987-x86.exe—getscreen-741290987-x86.exe
User:
admin
Company:
Getscreen.me
Integrity Level:
HIGH
Exit code:
1
Version:
2.18.1
Modules
Images
c:\users\admin\appdata\local\temp\getscreen-741290987-x86.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.24483_none_2b200f664577e14b\comctl32.dll
c:\windows\system32\gdi32.dll
2632"C:\Users\admin\AppData\Local\Temp\getscreen-741290987-x86.exe" -cpipe \\.\pipe\PCommand96saezxrtkaaifcaj -childC:\Users\admin\AppData\Local\Temp\getscreen-741290987-x86.exe
getscreen-741290987-x86.exe
User:
SYSTEM
Company:
Getscreen.me
Integrity Level:
SYSTEM
Exit code:
1
Version:
2.18.1
Modules
Images
c:\users\admin\appdata\local\temp\getscreen-741290987-x86.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.24483_none_2b200f664577e14b\comctl32.dll
c:\windows\system32\gdi32.dll
2868"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Public\Music\Sample Music\Kalimba.mp3"C:\Program Files\VideoLAN\VLC\vlc.exe
explorer.exe
User:
admin
Company:
VideoLAN
Integrity Level:
MEDIUM
Description:
VLC media player
Exit code:
3221225547
Version:
3.0.11
Modules
Images
c:\program files\videolan\vlc\vlc.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\videolan\vlc\libvlc.dll
c:\program files\videolan\vlc\libvlccore.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
2964"C:\Users\admin\AppData\Local\Temp\getscreen-741290987-x86.exe" C:\Users\admin\AppData\Local\Temp\getscreen-741290987-x86.exe
getscreen-741290987-x86.exe
User:
admin
Company:
Getscreen.me
Integrity Level:
HIGH
Exit code:
0
Version:
2.18.1
Modules
Images
c:\users\admin\appdata\local\temp\getscreen-741290987-x86.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.24483_none_2b200f664577e14b\comctl32.dll
c:\windows\system32\gdi32.dll
3672"C:\Users\admin\AppData\Local\Temp\getscreen-741290987-x86.exe" C:\Users\admin\AppData\Local\Temp\getscreen-741290987-x86.exe—explorer.exe
User:
admin
Company:
Getscreen.me
Integrity Level:
MEDIUM
Exit code:
0
Version:
2.18.1
Modules
Images
c:\users\admin\appdata\local\temp\getscreen-741290987-x86.exe
c:\windows\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\advapi32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\sechost.dll
c:\windows\system32\rpcrt4.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.24483_none_2b200f664577e14b\comctl32.dll
c:\windows\system32\gdi32.dll
Total events
18 149
Read events
17 633
Write events
200
Delete events
316

Modification events

(PID) Process:(3672) getscreen-741290987-x86.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:ProxyBypass
Value:
1
(PID) Process:(3672) getscreen-741290987-x86.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:IntranetName
Value:
1
(PID) Process:(3672) getscreen-741290987-x86.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:UNCAsIntranet
Value:
1
(PID) Process:(3672) getscreen-741290987-x86.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
Operation:writeName:AutoDetect
Value:
0
(PID) Process:(1492) getscreen-741290987-x86.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION
Operation:writeName:getscreen-741290987-x86.exe
Value:
11001
(PID) Process:(1492) getscreen-741290987-x86.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION
Operation:writeName:getscreen-741290987-x86.exe
Value:
11001
(PID) Process:(1492) getscreen-741290987-x86.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\getscreen.me
Operation:writeName:http
Value:
2
(PID) Process:(1492) getscreen-741290987-x86.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\getscreen.me
Operation:writeName:https
Value:
2
(PID) Process:(1492) getscreen-741290987-x86.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\getscreen.me
Operation:writeName:http
Value:
2
(PID) Process:(1492) getscreen-741290987-x86.exeKey:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\getscreen.me
Operation:writeName:https
Value:
2
Executable files
6
Suspicious files
7
Text files
8
Unknown types
2

Dropped files

PID
Process
Filename
Type
4044getscreen-741290987-x86.exeC:\ProgramData\Getscreen.me\memory\0000pipe0PCommand96saezxrtkaaifcaj0 —
MD5:—
SHA256:—
2964getscreen-741290987-x86.exeC:\ProgramData\Getscreen.me\memory\192D9C25C86EDA015697DFDACB6EDA01940B0000FFFFFFFF —
MD5:—
SHA256:—
4020WINWORD.EXEC:\Users\admin\AppData\Local\Temp\CVR9BAA.tmp.cvr —
MD5:—
SHA256:—
2868vlc.exe —
MD5:—
SHA256:—
2868vlc.exeC:\Users\admin\AppData\Roaming\vlc\vlc-qt-interface.initext
MD5:78C2FD5687165ABB1591E254EAE208C5
SHA256:BC84D9D3BB3AFBC45414BC3A71071756146FF6937FA88CF71373D8DC271B0872
1232getscreen-741290987-x86.exeC:\ProgramData\Getscreen.me\memory\0000pipe0PCommand96saezxrtkaaifcaj0 —
MD5:—
SHA256:—
2964getscreen-741290987-x86.exeC:\ProgramData\Getscreen.me\memory\192D9C25C86EDA011EDF5E34CC6EDA01940B0000FEFFFFFF —
MD5:—
SHA256:—
2632getscreen-741290987-x86.exeC:\ProgramData\Getscreen.me\memory\0000pipe0PCommand96saezxrtkaaifcaj0 —
MD5:—
SHA256:—
2964getscreen-741290987-x86.exeC:\Users\admin\AppData\Local\Getscreen.me\folder\settings.datbinary
MD5:D1E2E1B4D752EC396E92110F13A95184
SHA256:B56F08C7CCA9381DA1185C241309DE9925B7F018EADE79A4EFF22D830FD16C26
2964getscreen-741290987-x86.exeC:\ProgramData\Getscreen.me\folder\settings.datbinary
MD5:D1E2E1B4D752EC396E92110F13A95184
SHA256:B56F08C7CCA9381DA1185C241309DE9925B7F018EADE79A4EFF22D830FD16C26
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
81
DNS requests
21
Threats
550

HTTP requests

No HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
4
System
192.168.100.255:138
—
—
—
whitelisted
4
System
192.168.100.255:137
—
—
—
whitelisted
1080
svchost.exe
224.0.0.252:5355
—
—
—
unknown
2964
getscreen-741290987-x86.exe
5.75.168.191:443
getscreen.me
Hetzner Online GmbH
DE
unknown
2964
getscreen-741290987-x86.exe
5.9.146.41:443
image.getscreen.me
Hetzner Online GmbH
DE
unknown
2964
getscreen-741290987-x86.exe
95.85.71.16:3478
px-in1.getscreen.me
—
—
unknown
2964
getscreen-741290987-x86.exe
146.185.219.90:3478
px-il1.getscreen.me
—
—
unknown
2964
getscreen-741290987-x86.exe
103.43.75.192:3478
px-au1.getscreen.me
—
—
unknown
2964
getscreen-741290987-x86.exe
162.55.165.163:3478
px-eu1.getscreen.me
—
—
unknown
2964
getscreen-741290987-x86.exe
5.161.108.215:3478
px-us2.getscreen.me
—
—
unknown

DNS requests

Domain
IP
Reputation
getscreen.me
  • 5.75.168.191
  • 78.47.165.25
unknown
image.getscreen.me
  • 5.9.146.41
unknown
px-il1.getscreen.me
  • 146.185.219.90
unknown
px-us1.getscreen.me
  • 45.65.9.108
unknown
px-in1.getscreen.me
  • 95.85.71.16
unknown
px-au1.getscreen.me
  • 103.43.75.192
unknown
px-us2.getscreen.me
  • 5.161.108.215
unknown
px-eu1.getscreen.me
  • 162.55.165.163
unknown
px-br1.getscreen.me
  • 5.188.225.23
unknown
fingerprint.videolan.org
  • 213.36.253.2
unknown

Threats

PID
Process
Class
Message
2964
getscreen-741290987-x86.exe
Misc activity
REMOTE [ANY.RUN] GetMeScreen Remote Desctop Software (TURN)
2964
getscreen-741290987-x86.exe
Misc activity
REMOTE [ANY.RUN] GetMeScreen Remote Desctop Software (TURN)
2964
getscreen-741290987-x86.exe
Misc activity
REMOTE [ANY.RUN] GetMeScreen Remote Desctop Software (TURN)
2964
getscreen-741290987-x86.exe
Misc activity
REMOTE [ANY.RUN] GetMeScreen Remote Desctop Software (TURN)
2964
getscreen-741290987-x86.exe
Misc activity
REMOTE [ANY.RUN] GetMeScreen Remote Desctop Software (TURN)
2964
getscreen-741290987-x86.exe
Misc activity
REMOTE [ANY.RUN] GetMeScreen Remote Desctop Software (TURN)
2964
getscreen-741290987-x86.exe
Misc activity
REMOTE [ANY.RUN] GetMeScreen Remote Desctop Software (TURN)
2964
getscreen-741290987-x86.exe
Misc activity
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
2964
getscreen-741290987-x86.exe
Misc activity
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
2964
getscreen-741290987-x86.exe
Misc activity
ET INFO Session Traversal Utilities for NAT (STUN Binding Request)
Process
Message
vlc.exe
main libvlc debug: VLC media player - 3.0.11 Vetinari
vlc.exe
main libvlc debug: Copyright © 1996-2020 the VideoLAN team
vlc.exe
main libvlc debug: revision 3.0.11-0-gdc0c5ced72
vlc.exe
main libvlc debug: configured with ../extras/package/win32/../../../configure '--enable-update-check' '--enable-lua' '--enable-faad' '--enable-flac' '--enable-theora' '--enable-avcodec' '--enable-merge-ffmpeg' '--enable-dca' '--enable-mpc' '--enable-libass' '--enable-schroedinger' '--enable-realrtsp' '--enable-live555' '--enable-dvdread' '--enable-shout' '--enable-goom' '--enable-caca' '--enable-qt' '--enable-skins2' '--enable-sse' '--enable-mmx' '--enable-libcddb' '--enable-zvbi' '--disable-telx' '--enable-nls' '--host=i686-w64-mingw32' '--with-breakpad=https://win.crashes.videolan.org' 'host_alias=i686-w64-mingw32' 'PKG_CONFIG_LIBDIR=/home/jenkins/workspace/vlc-release/windows/vlc-release-win32-x86/contrib/i686-w64-mingw32/lib/pkgconfig'
vlc.exe
main libvlc debug: using multimedia timers as clock source
vlc.exe
main libvlc debug: min period: 1 ms, max period: 1000000 ms
vlc.exe
main libvlc debug: searching plug-in modules
vlc.exe
main libvlc debug: loading plugins cache file C:\Program Files\VideoLAN\VLC\plugins\plugins.dat
vlc.exe
main libvlc debug: recursively browsing `C:\Program Files\VideoLAN\VLC\plugins'
vlc.exe
main libvlc debug: plug-ins loaded: 494 modules
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
getscreen-741290987-x86.exe