home

vlc.exe

VLC media player

VideoLAN

This is a setup program which is used to install the application. It runs as a scheduled task under the Windows Task Scheduler. This is installed with multiple programs including VLC Media Player. The file has been seen being downloaded from scontent-mrs1-1.xx.fbcdn.net and multiple other hosts.
Publisher:
VideoLAN

Product:
VLC media player

Description:
VLC media player 2.1.5

Version:
2.1.5

MD5:
cc29fdf0e680c0f3531c9f2a834ca2a6

SHA-1:
7a9a1088c5bd92f2ddd297b3f841d5bbc5ff2bba

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/10/2024 8:27:55 PM UTC  (today)

File size:
124 KB (126,995 bytes)

Product version:
2,1,5,0

Copyright:
Copyright © 1996-2014 VideoLAN and VLC Authors

Trademarks:
VLC media player, VideoLAN and x264 are registered trademarks from VideoLAN

Original file name:
vlc.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\videolan\vlc\vlc.exe

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.24

CTPH (ssdeep):
3072:YOpSXBkZjE7167O0R86xiPmY2k9Hc3/nl6LAHkzI1UfgEA6IIyRgh:RM6E7u/VxiPm3k96kADW

Entry address:
0x14C0

Entry point:
83, EC, 0C, C7, 05, 54, E2, 40, 00, 01, 00, 00, 00, E8, EE, 19, 00, 00, 83, C4, 0C, E9, A6, FC, FF, FF, 8D, B6, 00, 00, 00, 00, 83, EC, 0C, C7, 05, 54, E2, 40, 00, 00, 00, 00, 00, E8, CE, 19, 00, 00, 83, C4, 0C, E9, 86, FC, FF, FF, 90, 90, 90, 90, 90, 90, A1, 6C, B0, 40, 00, 85, C0, 74, 43, 55, 89, E5, 83, EC, 18, C7, 04, 24, 00, C0, 40, 00, FF, 15, B8, F2, 40, 00, BA, 00, 00, 00, 00, 83, EC, 04, 85, C0, 74, 16, C7, 44, 24, 04, 0E, C0, 40, 00, 89, 04, 24, FF, 15, C0, F2, 40, 00, 83, EC, 08, 89, C2, 85, D2...
 
[+]

Code size:
38 KB (38,912 bytes)

7 Autoplay Handlers
Display name:
VLCPlayCDAudioOnArrival

CLSID name:
Notes Link

Display name:
VLCPlayDVDAudioOnArrival

CLSID name:
Notes Link

Display name:
VLCPlayDVDMovieOnArrival

CLSID name:
Notes Link

Display name:
VLCPlayMusicFilesOnArrival

CLSID name:
Notes Link

Display name:
VLCPlaySVCDMovieOnArrival

CLSID name:
Notes Link

Display name:
VLCPlayVCDMovieOnArrival

CLSID name:
Notes Link


Scheduled Task
Task name:
{1B23EE1F-48F5-4AE0-83C0-02DD212F2B6A}

Trigger:
Registration (Runs on registration)


13 Windows Firewall Allowed Programs
Name:
C:\Program Files\VideoLAN\VLC\vlc.exe

Name:
C:\Programme\VideoLAN\VLC\vlc.exe

Name:
D:\Multimedia\VLC\vlc.exe

Name:
C:\Programmi\VideoLAN\VLC\vlc.exe

Name:
C:\Program Files\adslTV\VLC\vlc.exe

Name:
C:\Archivos de programa\VideoLAN\VLC\vlc.exe


The file vlc.exe has been discovered within the following programs.

Free Avi To Flv Converter  by SoftSea.com
25% remove it
Free Media Player 2.0.7  by Somoto Ltd.
Free Media Player uses the Somoto BetterInstaller download and install manager which is designed to co-bundle additional offers which include toolbars, web browser extensions as well as various potentially unwanted applications.
81% remove it
Java(TM) 6 Update 30  by Oracle Corporation
Java SE 6 update realease contains no security fixes; fix for SSL regression in Update 29; support for Red Hat Enterprise Linux 6.
java.com
5% remove it
MoviePanda  by MoviePanda
www.moviepanda.tv
26% remove it
SSDlife Free  by BinarySense Inc.
Publisher's description - “SSDlife is a small and intuitive SSD diagnostic tool that helps users obtain comprehensive information about their SSD drives and take timely action if any problems are detected.”
ssd-life.com
About 1% of users remove it
VLC Media Player  by VideoLAN Team
VLC media player (also known as VLC) is a highly portable free and open-source cross-platform media player and streaming media server written by the VideoLAN project.
www.videolan.org
12% remove it
 
Powered by Should I Remove It?

The file vlc.exe has been seen being distributed by the following 3 URLs.

https://scontent-mrs1-1.xx.fbcdn.net/v/.../13608288_1743638682573521_688432009_n.gif?oh=1fc7d4e45a5a49f7fc5f7b38c4e04a63&oe=577F5CC7

https://webmail.laposte.net/service/home/.../?auth=co&loc=fr&id=8365&part=2&disp=a

temp:vlc.exe

Scan vlc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.