Gridinsoft Logo

The libvlc(MALWARE)_dll (VLC media player) File Analysis

Updated 3 months ago
Checked by Malaware Check
libvlc(MALWARE)_dll

Technical Analysis

File Name libvlc(MALWARE)_dll
File Type
PE32+ executable (DLL) (console) x86-64, for MS Windows
Scanner Version 1.0.210.174
Database Version 2025-03-05 20:00:37 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
191,096
File Size (bytes)
2025-03-05
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
4b262612db64f26ea1168ca569811110
SHA1
8e59964d1302a3109513cd4fd22c1f313e79654c
SHA256
a9340c99206f3388153d85df4ca94d33b28c60879406cc10ff1fd10eae16523f
SHA512
9902e64eb1e5ed4c67f4b7e523b41bde4535148c6be20db5f386a1da74533ca575383f1b3154f5985e379df9e1e164b6bda25a66504edcfaa57d40b04fc658c7
ImpHash
4a8a57264b43bbc7180b2ebc83eea796

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x1400013d0
Compilation Time 1970-01-25 06:34:28
Checksum 0x00031f41 (Actual: 0x00031f41)
OS Version 4.0
PEiD Signatures PE32+ executable (DLL) (console) x86-64, for MS Windows
Digital Signature OK
Imports 4 libraries
libvlccore, ADVAPI32, KERNEL32, msvcrt
Exports 316 functions
Resources 2 Resources
Sections 14 Sections

Version Information

▼
CompanyName VideoLAN
ProductName VLC media player
ProductVersion 3,0,18,0
FileVersion 3.0.18
FileDescription VLC media player
LegalCopyright Copyright © 1996-2022 VideoLAN and VLC Authors
LegalTrademarks VLC media player, VideoLAN and x264 are registered trademarks from VideoLAN
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 118,304 bytes 118,784 bytes 6.18 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_16BYTES 3E6ED9C920DD6F9FE5A0F201D0C9D5F4
.data 0x0001e000 184 bytes 512 bytes 1.05 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_16BYTES 6BFF000DA5F5435E267B777A1BD9DE3C
.rdata 0x0001f000 13,040 bytes 13,312 bytes 4.72 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_32BYTES D6B383B88C86F3E87AA53C9E7C4F157D
.buildid 0x00023000 53 bytes 512 bytes 0.57 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_4BYTES 8E302601C9480304ACE19E74BFF6860F
.pdata 0x00024000 6,024 bytes 6,144 bytes 5.14 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_4BYTES 5705D981AA45B378C2E4E237F58579FB
.xdata 0x00026000 5,824 bytes 6,144 bytes 4.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_4BYTES A5366AAF66A15D2E9736E0ED4E1F745E
.bss 0x00028000 5,056 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_32BYTES D41D8CD98F00B204E9800998ECF8427E
.edata 0x0002a000 12,142 bytes 12,288 bytes 5.10 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_4BYTES 22729524278264513F26C3F820F7C7B4
.idata 0x0002d000 8,104 bytes 8,192 bytes 4.48 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES C5164457343259636CB46A56CFC5C48B
.CRT 0x0002f000 88 bytes 512 bytes 0.23 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_8BYTES 280955EDF7D2BEB5690C0FE8C30C86F4
.tls 0x00030000 104 bytes 512 bytes 0.31 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_32BYTES 4B9D035B8F511CEEF56CB1F3D7ACA922
.rsrc 0x00031000 1,608 bytes 2,048 bytes 3.68 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES 79D9A72A5DA0E51D4B5209D2A0BB981B
.reloc 0x00032000 172 bytes 512 bytes 1.96 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_4BYTES BECFDEE7A0F08767F4865920B8888ED0
/4 0x00033000 20 bytes 512 bytes 0.34 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_4BYTES 196F9C8EB715491433404033FECD114A

Resource Analysis

▼
Total Resources: 2 (1,441 bytes)
Resource Type Count Total Size Percentage
RT_VERSION 1 844 bytes
58.6%
RT_MANIFEST 1 597 bytes
41.4%

Certificate Chain Analysis

▼
Certificate Information
Product VLC media player
Description VLC media player
File Version 3.0.18
Signing Date 09:32 PM 11/08/2022 (940 days ago)
Verification Status Signed
Signers VideoLAN; DigiCert SHA2 Assured ID Code Signing CA; DigiCert
Counter Signers DigiCert Timestamp 2022 - 2; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Copyright Copyright © 1996-2022 VideoLAN and VLC Authors
Certificate Chain Summary
DigiCert Assured ID Root CA #1 Primary
Validity Period: 2006-11-10 00:00:00 → 2031-11-10 00:00:00
Signature Algorithm: sha1RSA
Serial Number: 0C E7 E0 E5 17 D8 46 FE 8F E5 60 FC 1B F0 30 39
DigiCert SHA2 Assured ID Code Signing CA #2 Chain
Validity Period: 2013-10-22 12:00:00 → 2028-10-22 12:00:00
Signature Algorithm: sha256RSA
Serial Number: 04 09 18 1B 5F D5 BB 66 75 53 43 B5 6F 95 50 08
VideoLAN #3 Chain
Validity Period: 2020-12-14 00:00:00 → 2023-12-18 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 04 07 AB B6 4E 99 90 18 07 89 EA CB 81 F5 F9 14
DigiCert Trusted Root G4 #4 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #5 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Timestamp 2022 - 2 #6 Chain
Validity Period: 2022-09-21 00:00:00 → 2033-11-21 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0C 4D 69 72 4B 94 FA 3C 2A 4A 3D 29 07 80 3D 5A

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware