Modvid

Ready to create your first ModVid asset? Follow this 5-step framework.

Unlike standard video editing, which produces a static output, Modvid relies on a logic layer. This layer dictates conditional playback. For example: modvid

The ModVid technique highlights a significant blind spot in modern security analysis: Ready to create your first ModVid asset

The most famous implementation of this concept was Challenge 10 of the 2020 Flare-On challenge, often retroactively referred to as the "ModVid" challenge. This layer dictates conditional playback

ModVid is a term popularized in the reverse engineering community, specifically arising from Flare-On Challenge 7 (2020). It refers to a class of obfuscation techniques where a malicious or obfuscated executable hides its core logic within the decoding or playback loop of a media file format—typically a video.

Instead of executing instructions linearly from the .text section of a binary, the application loads a media file (often a custom or modified format), and the act of "playing" or decompressing the video yields the actual x86 assembly instructions that the program intends to run.