VLC update - "Virus" alert PA

patrik.szilagyi — Thu, 03 Apr 2025 09:00:29 GMT

Hello,

I have a question regarding alert in Threat detection - type "virus"

Some endpoints were trying to update VLC player, but it detected as "virus" with this threat ID: 706518286. This is file name: mirror.alwyzon.net/videolan/vlc/3.0.21/win64/vlc-3.0.21-win64.exe. After analysis, I found out that VLC auto-update was trying to download latest version of VLC player from third party web site "mirror".

VLC official website is using this "Mirror.alwyzon" for reaching/downloading updates. I just want to be sure its false positive. Thanks

Re: VLC update - "Virus" alert PA

kangnamkyu — Wed, 23 Apr 2025 22:48:27 GMT

Just got the same exact threat ID flagged during a local file transfer of vlc-3.0.21-win64.exe . Virus total showing clean https://www.virustotal.com/gui/file/9742689a50e96ddc04d80ceff046b28da2beefd617be18166f8c5e715ec60c59 , and Cortex hasn't flagged it. I'm sure it's false positive, but can someone chime in if it's otherwise. Thanks!

topic VLC update - "Virus" alert PA in Advanced Threat Prevention Discussions

VLC update - "Virus" alert PA

Re: VLC update - "Virus" alert PA