Analysis

  • max time kernel
    93s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-09-2024 09:41

General

  • Target

    yt-dlp-gui.exe

  • Size

    81.1MB

  • MD5

    6f3c85a4b583f3106733147e2d4c8dc0

  • SHA1

    916f5d02c3acc3428bc835742f82e35119b15bac

  • SHA256

    8f92101d2a894e756a78588139af3e48b9e27da7364c4fb5cf7153c673494fef

  • SHA512

    813407932635bd363cb4f3e8da73d09b6b551df4014542bb5493623b6d4ee5a5bc19dd96304ad0b4ca7ce57377b0fcb5624d59a331116965d3d60a2aeb699955

  • SSDEEP

    1572864:p9T8RtFkr3E0TMcvsTKpfRXUEgh74zObyfSvx+mm6BPNj0OsgRB:p9wRtFkr3JTN3fNUE64qbI2m6B1jBlRB

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 17 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\yt-dlp-gui.exe
    "C:\Users\Admin\AppData\Local\Temp\yt-dlp-gui.exe"
    1⤵
    • Checks computer location settings
    • Loads dropped DLL
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3940

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\D3DCompiler_47_cor3.dll

    Filesize

    4.7MB

    MD5

    2191e768cc2e19009dad20dc999135a3

    SHA1

    f49a46ba0e954e657aaed1c9019a53d194272b6a

    SHA256

    7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d

    SHA512

    5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\DirectWriteForwarder.dll

    Filesize

    508KB

    MD5

    4ff2b5c5233d8803df2d90917db7e88d

    SHA1

    918b8f2e57e096df9c1b1bfcac8278e82373b952

    SHA256

    1f1deac1653d1d2557c24720365209b45db28d0ccf0a44f81c7f30f1ca8effdb

    SHA512

    f511308a1f324810db01dd6e16d372ed92392db58d833ede71411548c5b3e3874babfecebd48dc5b9e1af6a692ad6a1adb330bbfce6fb24db88e851c453e39a1

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\ICSharpCode.AvalonEdit.dll

    Filesize

    1.4MB

    MD5

    a5b8702fcaedacde097932d5062305ff

    SHA1

    1d54c27ddfe857f0d21d58f4cff2cd122e920546

    SHA256

    88fde22a24089ae582ea492cbf2eb8175ff78a007f15d26210e81b061eb64128

    SHA512

    06ec9d38281f750b1b9ea725707f617df0c590808a3df11e9797024e3c50f3b217b9ca713a4235627e391d2b5c85871b9d144473a20ea861d2dc66ff3acf0837

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\Microsoft.Toolkit.Uwp.Notifications.dll

    Filesize

    326KB

    MD5

    c685294a8be04664395fa5788772a5e5

    SHA1

    5eb934caa35e8f1233754a36a461f4c7d08bf48b

    SHA256

    cac7af0a65d446b17bee4def075505d7cc0a7b2be95056f73ea480447419a2bc

    SHA512

    77cd89b23ff87a7a109aa5d9a29363b33dba5400ad09e2b57aac2879b02bbd73b9accdef22e9a3e8e064391faec4f79cfab85cd3018f09424505c6435e0b86df

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\Microsoft.Win32.Primitives.dll

    Filesize

    25KB

    MD5

    b1768bd0db1435fb96ec78d33d40b2f7

    SHA1

    1566b56067d9af16453b941f21fdc553ce834097

    SHA256

    aad8504aaee01f97b462b8fd667e3e07683bb42f165e6a6a0cdbecc401e12098

    SHA512

    fb8e9ead2b0bb781e6151b5e95ee03027e0ffa3b45fdf55377a264690e9aa85d9aceab6f4683060eaffe355caa7c2811acf14199fa746c7dc8a6d3a3f3e61348

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\Microsoft.Win32.Registry.dll

    Filesize

    85KB

    MD5

    7ae0b57aa5df524c72d7bacb9e642afe

    SHA1

    5d9bd968da50efee932579a4b59e5f182e89a94c

    SHA256

    5b463f71655abfb4151fb29846728db4f674e2bd953bba4f8abf53d0e0f8e57e

    SHA512

    42dbac8226440bdaaae226fb710a18e8018d0421f848be67522bf6abaaded1c6f13d868855096484e899a9c2d8230591f010f3d9271f7854a33bc2406a8cc5f3

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\Microsoft.Windows.SDK.NET.dll

    Filesize

    36.9MB

    MD5

    c5f94de50628fae7cd1ffc60b76d16c7

    SHA1

    3eb7b6f82c8207b1ea03008d27e9cdf41e572fac

    SHA256

    c31265ffe6771ef8ed7dda9032d4badcacc21488f55e5efc37e2c761de389300

    SHA512

    c8a949b058c9b36ef9c01f07e9979e36b225da3815e8d4b4a24da33abee1545884e2688f4a1cd7a193ad62c7e86efc8dd0cce231b7f753b0d14e5cc154fdc7f9

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\Microsoft.Xaml.Behaviors.dll

    Filesize

    352KB

    MD5

    5f9dd8d3010445c31f49f21ec88cef55

    SHA1

    42c56bcb6b192e003c705c4022d68a73440595a1

    SHA256

    2227063ce729f646fae88a78ec1ca9fa6f1496f19615570780e9d664bf506373

    SHA512

    a2f59e99477ec484571da8da224ab00328decae8fb18918d04c943aa8b67ddd0e00eed744282bed7f03ea5101405346ff4742ebdb5c876332427d5d51887a7dc

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\PresentationCore.dll

    Filesize

    8.3MB

    MD5

    e85a5ff99fd7a6ae9619138293e1cfea

    SHA1

    d1edceeeb255acffe14ad2c4eb4fe2a0a911dfd0

    SHA256

    a70e09031ef5ee4a2d79659aabe5d1ebef48effe2705a6f97c37c5c46cda9473

    SHA512

    b3380cbb8a400562ca9d9ad1a4ebc0167aa16616652162d0f5a9a7a543c52b97b5bf6687a0f63ee913ce73ac61c5bde1375ca317e11457bdbb681a0bf02d435f

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\PresentationFramework-SystemXml.dll

    Filesize

    23KB

    MD5

    7f3625bd1f2c444303e66ffb52b025e9

    SHA1

    2e7a3b7568f972b14a028550fb91ebd69c3fb0a4

    SHA256

    2ed2e74dbb4f8c8b022ee9a88ebe240f1584fcf3e7206837d8efe7b01d6de63a

    SHA512

    160a34ad5b97c1f10b294442880905a9b9ed88109733381099a1f1f966f1ae67c82b1c8c9eccccaaabe4cd76674406a788d099b1523f578807d85d9ddd8e4dab

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\PresentationFramework.Aero2.dll

    Filesize

    446KB

    MD5

    c57a27654c8fbc94ccecff9f3be41d21

    SHA1

    8f40f95d0d86b7c61193c77c661e54da687c4da0

    SHA256

    0b4c58a3767454100c6fdf1bb3859baa32c17fcf78d4720152f991415f838a0e

    SHA512

    c6a4bc9f3a0b1026b0d45222a575be7c18c4f5817ac56d50df1fdb5ed12bf2d51c85b99c3e3800e3755829cf2439c02c9d05e2237ff157d78314cf1c2231a318

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\PresentationFramework.dll

    Filesize

    15.5MB

    MD5

    2b68c0520a9076b2b4f71a767596bb89

    SHA1

    284c08abb3ec37677857423b75fba5e58eb08037

    SHA256

    b054a9f4cbf2edce6749e2a55b028fce302d767722b08a30a923c9783cde63fc

    SHA512

    eaea44fae8047fae79b0d5fcceb3cc5e998de6556236604e76d00188aceb293e203981de4992eb393026e2f3efc10dae583f13c7c1266f112ca02f50f515c443

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\PresentationNative_cor3.dll

    Filesize

    1.2MB

    MD5

    5a137f1c0db458b0e5bb642f5293d3e6

    SHA1

    6f66bf8ad1a930c7021a95025b81af6169508a08

    SHA256

    334a78b0e495b25b9b828216c4613a8a169129c583245da3c3b2b923d4e4c39b

    SHA512

    d645f9c57523296923e2753202dbcd2a09f75bf46ac9a5a5525182d1d90b6f2fb078789150f4aeeafca8717098670780cbdb1e81fdb7fdd32d5ad791a2cafc79

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\SharpClipboard.dll

    Filesize

    49KB

    MD5

    65de5bcec05d892a270a7ba42f273a19

    SHA1

    b488333726fb5369897c876a423c0c602e53e5de

    SHA256

    04e746badfaf3d86d123824c6b97a2747ff46522f7ef9e6301ee53454a490c2f

    SHA512

    88d82c19d558fd2fcc01bb01e820b2e8af25fffed32119f44c1615d3169e5ff01a281a8205b5aa5ac7ecba79f0032a86db6d3eb56c1f75b57aacf0ca12ad367c

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\Swordfish.NET.CollectionsV3.dll

    Filesize

    459KB

    MD5

    3161e56189cdb2c417802fb75e107948

    SHA1

    b6a6ccdc438eae5c28142aee244689bb1b9657f8

    SHA256

    cdad770f3393423bfd91b01d806f2256e3ca488262601c5fef6c7235019e9d43

    SHA512

    3526af1cca48945a25f10d9533a326fa266daa43715ee96e4d4ecefae4dd7ea3c140ccd5325921a815b5c039a3f0a5626d5a80b02a9da90bb89b18cd7f13a2de

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Collections.Concurrent.dll

    Filesize

    241KB

    MD5

    d41e3d1951f35d08b79d18e770bbb6ae

    SHA1

    98036039cd4becd9973a12cfa523ef40de544960

    SHA256

    b75facbb66d65f101504bb0d50afdcb72e31742a215bd27015c48b5127d86c31

    SHA512

    8c73fdb7ec5b887f65c9bab8ac05010441f974a26ea9caa35e645d2405ca7f100e7b0deef581cc7b7b3bf6530ba005fd2fa2f93668e78cb22be3a1a7b3d4ed05

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Collections.Immutable.dll

    Filesize

    650KB

    MD5

    ba1f5a8a5bdc98416994466a2c8e8656

    SHA1

    ee3e824b1579df11be6da829a2a5a3588db4ef62

    SHA256

    e721ca2b3bd22672b51f8667fd69dc5924bebb38294f0983879ce2248e4c5807

    SHA512

    84406644181bfefa01ec8a2d598c47e99a5e5e114112642f1209cd936579c48da6dfbea27a798cdc9095cdf91ac44994d4356b6e3c8216f22c50a142e01522b2

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Collections.NonGeneric.dll

    Filesize

    98KB

    MD5

    84b42811ec3954533204584578f45cf8

    SHA1

    8d6a808fdd659f94b5014ad287865e80e55fc37b

    SHA256

    57e385fd7fe381a401b98a2f2b4eba1d2f58774542fc9410802fb1735ec30e99

    SHA512

    1367998c106d184c54fe41d86105950d26f5e9712997ed7411d2a975e660cf9bfb81ae6ac34907eb7ea556b3286ee9584d0a298977368df2763ac9efc3b877a9

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Collections.Specialized.dll

    Filesize

    93KB

    MD5

    adb258f6cf33b099480fa47678be5ade

    SHA1

    3cfa8fa6bfa0be6e63a8d1a64b5ffc96b3b7f6c5

    SHA256

    a76bf97a6951d99d7727c791a97648c28f217614e9170dd3cdad6b8ae0b7d06f

    SHA512

    2366e3d66d9e14467b527395e1898d5ddd729f19dab91b6959096487f025dd0b2e5e25873306124d1e29dbdacaa06232e88b1775ab375b3e6a746db048073d34

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Collections.dll

    Filesize

    258KB

    MD5

    e00b7420780845fb2eec8ea6acb7e75e

    SHA1

    2dc561d5b7038a0fb67281a2f82ca3d5d7e940e9

    SHA256

    de7fd074fd7ffbe33b00885b06679a8b544b8ed54e379313af441b2ecff634fc

    SHA512

    c38018b3f783c7b17fc46865a8ebf103f9bbd9f0a8611f966515e145f265396394a841fd3061a441aeb3ce362134c9bfea759c571e5d418f1a2fcfd045b0822c

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.ComponentModel.EventBasedAsync.dll

    Filesize

    37KB

    MD5

    ba618467c8989748ca867f71cce9babd

    SHA1

    34cc7cb173afdb42bbd8b8b0db8565fc02eeac5c

    SHA256

    6e73071f6a3c90c224f817c6b66ca229ed41e7a8c87ed4cb6493fb868f64b089

    SHA512

    4d42df982946614772d67168e57e34f140e4f6ed9a2a240ecdcc4127eceb5936d199cb6eb3ca56b3f228e1059456219a13701be3719d0824a1dce8d1250d30a4

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.ComponentModel.Primitives.dll

    Filesize

    73KB

    MD5

    6f10de41634536f5469bdd37c66db156

    SHA1

    58efe31909d427f2253f61ed646f586103f0bd7c

    SHA256

    2193fd271b6d915ee9eb6abba1b1ae8f224888befd372351a056f4d2e6e8d326

    SHA512

    67b22dde55174624ce3786f47170cf74d16b10413df825cfad9fa3145cd28da26bcf8015c010c4279e87ecbb4583c06cddc4bf3d8d5c253ef4d4d92488718e36

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.ComponentModel.TypeConverter.dll

    Filesize

    727KB

    MD5

    729d2cf2b0cb573f20ef9f7c34988cda

    SHA1

    34ccc49a6355b403a8d6cc204765f5a24e5f36a1

    SHA256

    72124e6d74458125285a2894eb6eca25623a882f07657c2099580b359167522c

    SHA512

    e2b0c5804235feb40eb29b2f62032a4439d1cc5faeccc60613c3f7b677b369977149c817192d2939492d51d51f78efaac8400c2037c506021699ba908c12cac7

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.ComponentModel.dll

    Filesize

    18KB

    MD5

    7579dca6eef1f2fec36cdf3a122f650d

    SHA1

    a9e60a49e978a7f321dc199c132a5c3a4cab7966

    SHA256

    9eb75c58c9bacab54fb30018a7c9b1d5ac19b6f6e7adfc55f2c89f6e5e6fc788

    SHA512

    d21b4b07ff6aea39421975899940a4e970ba58c176baa299bec157b38e1f05897a4d9df7d37a05d94eaa50c9490d6b11df057e1b43686a963409fcb7f830d333

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Configuration.ConfigurationManager.dll

    Filesize

    982KB

    MD5

    bb9cf097ec90aa8689d0a89069a96613

    SHA1

    aac970c4ea438a947243fe072f7af50a006d8d7a

    SHA256

    f12c8f806ca7a39692d65ea9a98bb3716e6df590fef687eda857ec472859bb2b

    SHA512

    7085ffa499bf84ff79cd3204e79f46f06d0d0e7d96bb64b6e22faa24ed2dba8e5ebd204da9b5790eeb3e85d3c61e468ae260666cec58f0926a20b34673a37f34

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Diagnostics.Process.dll

    Filesize

    283KB

    MD5

    b10ff840852514c041bb46627b940d92

    SHA1

    510d0df4c3f4e42c9fdfc3a740fb20dedbc5756f

    SHA256

    c4290a3e9a91617dd43b37d2c94784f56bea3c166dd9f0106d30ea4d0d6075bb

    SHA512

    905b92c61993c999c60fed89b86f0c9320b6a6bbaa26c0c1868163058a2a4d35c53d511c53c95fecf373852aee211af070cb132e13d8ab9f31c8f03092150515

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Diagnostics.TraceSource.dll

    Filesize

    130KB

    MD5

    1be25f8b0e84e1cd331d22f557862b33

    SHA1

    909c872894270e76f893c4655f4ff2352c1d3928

    SHA256

    7337e63e5852823e542c112ff76cd20da7994fdf9ab671f1f389a44800937332

    SHA512

    56a02a624b47723f7ee72caff63c126b25f3ada8399c8bc70908bf2ab7bac0027fef042275a4f50049de2aa052bceac6e0a6cd359e920f9bd2bebcc8faa819f6

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Drawing.Common.dll

    Filesize

    1018KB

    MD5

    e474eaae7f0eca8db7232b1254dbac35

    SHA1

    861da96d52cec844dc495c4831f7ba240b782911

    SHA256

    eeeb660a0019ffd81e9ce53f8bd82b688f92a313d79c1852bb68096c10e63b75

    SHA512

    34e8e1eb90d28da15d1c07eee94d769f765a3df8f500b45d1759a4a459a8e94241294b0a69ec63723f41362bca792aedfc28033bade053f6ed4584cc0ffd1fba

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Drawing.Primitives.dll

    Filesize

    127KB

    MD5

    4163cf9cf6e2f856033b322f0818bd9c

    SHA1

    feaf251bfbea49b17fc6a2df36de7429c4a041d4

    SHA256

    046ebef76a6f9ae752f66b1fafdfbc50c2a3250f6294cd5ba2f058483a80c6c6

    SHA512

    42272954c89631699330ef7f5782d43697835b79ef8ca048b40474131b7405c603121ee21492cdddd32b3b67beddb7d9c0d2326f66a3eaec50adb4d6f51bc9ac

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.IO.Packaging.dll

    Filesize

    273KB

    MD5

    2b0fb9c558f58924a1fe180add97508c

    SHA1

    341e2a6eaa8bea6cbc50486f7b4c3fd621b97f4f

    SHA256

    46879851803996582449f489ff62c1686dadc1d9c4b07be5f48d007ea01d4d9a

    SHA512

    a21f02e7e29fc3d7e0c8baed1773f01340e7beed24cb2c0c6d9f483d2b14999c74293adf90bde5592b1e52b59c5a5a19945d2f0bc86b0815613910f72369b1a2

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Linq.dll

    Filesize

    525KB

    MD5

    c238298d75e065bda96ae43146fb245e

    SHA1

    d1742b36799a5512dca4326c199da0a54a9fc680

    SHA256

    756f99cc509d024e6c271fc1e3b4c25820d376b25298ffab6ba70e9f5e70501b

    SHA512

    f362d5d0a6ebd67bc4a12111ab69c3a0dd60a318870c3e41156c060fe6d2bfe72c370249cca504c55936282e6b134d3a40dcb902659c9b586cfecf71bca1b63e

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Memory.dll

    Filesize

    169KB

    MD5

    ace558338d4ab97284086569db64a264

    SHA1

    856c5a5c3cef0babc435cc93556f04bb7ec97db6

    SHA256

    948a3ef0cfec92dea21f65eea6087464a9e7693fc16b2b9422ffd9f3431e8dad

    SHA512

    989173c290e09880008fb186a4801d118a749eb654459910e37f86f58d595b202d70f8763c15946cfea847c721cb4308be627746fd7432a378b9b29af4cd6356

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Net.Primitives.dll

    Filesize

    209KB

    MD5

    11d3347f708e1b11703e1b9ef25ea15c

    SHA1

    440250ad3b3e8657532f448dc0e77d07b88c8fa2

    SHA256

    4364ce820fd6c706cb5acc1edd776c9c86114713a9ae314c3c6f2a16b95042ea

    SHA512

    e8243a80c94863a830cc49b830fc53c6479bdb5c7fd387f0b04e40dd739e43d84864baccd886649e07f603d9bbedae02e1a0c2e7aff5807ed6886386a20d3bee

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Net.Requests.dll

    Filesize

    341KB

    MD5

    2bd600bf48be09165723c3cc90efccbc

    SHA1

    d58d845e5125ca45fc52f7e43555dbd9825be780

    SHA256

    05180eccc5eef66dd876b055040902c0ebe7d3643eb932fc199a1f693990d2f0

    SHA512

    2e94cb84fc0e4da0e8d5192e2b2d7e9e6178495f06125a5d3bc1df0d3e7c5dbcdd98b7f7c9e0ff297e316305b618a890eb32229053bdf825151e7280d356d06d

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Net.WebClient.dll

    Filesize

    162KB

    MD5

    af3e2b01f313d1649163e933dd63a67f

    SHA1

    53a6b584cae341c014f97dd4f3eee3a260597ad5

    SHA256

    ed86d1becb168093b7cf5d8eb9cdf5632229a0967540f84d3aa674003823c4c5

    SHA512

    820c4978a3da6ae98bf0ddfa5d6dfbf14dd1f6ef432887a9cb4ec66496f94a7075980296285a1d7dee2c415610e8b8db7c164a12a6f874e111b3e7065160205e

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Net.WebHeaderCollection.dll

    Filesize

    59KB

    MD5

    e37bd7348187566daaa71222a2355b12

    SHA1

    6f520bd29de719d1ceea44e5c09239b017c23267

    SHA256

    2860f7d02bd59157b0da1f40a0f660d8532ae34486373a00ed261c5e95a04d40

    SHA512

    7473be704a53fcaa97e0ed16872e1287495d8125fc02d5fe0549b334420aac5f48dfd5bef108653df72584bcd62860a2f69d9743d54aeb69352deabec7364fe2

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.ObjectModel.dll

    Filesize

    89KB

    MD5

    4f063d41612f10f70fcb555caef72fc7

    SHA1

    2dd4cfa67b7afa0c0824dd9e1efa0939629fa4ff

    SHA256

    828e5dd65873b8f54bf55f3c5dd065400e5441bb367e4bc464c08d82b3832687

    SHA512

    bd20b488333b95a74265a9c5456a932df5d8ca40fa520c06bbe5d7e832aae92453a5956e9a34f2a3ed3455b86cf4ed38fb8774d7a3b54b1ecf67e46c8db71fb0

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Private.CoreLib.dll

    Filesize

    10.1MB

    MD5

    9a3a2948d2f3d14284fdd685f79b20bd

    SHA1

    fb7db128c6aec42d7390f9f5f43c34a7210d01db

    SHA256

    e0e2c63cb07fb55c4e0e27b9eeb7eefc9328a0e84375e1434cdea21c04f0c2e4

    SHA512

    9ce40425eac0a6065d9420d5cf09c4c4c96d4b0f7697817e91d3041a08cbe102636760ca56904470740289cbf14c8db3080ace5b3c45651520ce6029d8e250bc

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Private.Uri.dll

    Filesize

    246KB

    MD5

    0cbb4e5bc8be74b159aee98f329e2d10

    SHA1

    58341efba55e0ed1e07e3008d2371bd7c3022ab4

    SHA256

    95e39a4563a947524269e7acd0fa5c84f7985f2ddfe33cd0fa9791197673a532

    SHA512

    602bae60d5850d009824f197451fa2ff139449e3b842a282b8515a1c2590200fffd582f09cb0667bcc0a1b90016c9de3d24a21ebfeef15d215a53b31be7be824

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Private.Xml.dll

    Filesize

    8.1MB

    MD5

    6756087e071532303f7001b6e5970538

    SHA1

    bcdb033ebd460ddb70cc8986def9c5e5dedc2502

    SHA256

    320e661c03bd44c9cbeccefa20dfeccc6c7ceebf06a76510e120d37208d61054

    SHA512

    0eb38ae862bfce0628feea7604475ad7019f2e4f652cfc20b34bb37f1fcead271792a9a5d06eb9f30ab95136ff4557f6a9fa8ecb43910c9d3d2eca3691f5219d

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Runtime.CompilerServices.Unsafe.dll

    Filesize

    22KB

    MD5

    ad61c528cd992731e8fc58d80e5c2ee0

    SHA1

    0ce935bd7e4b6b01391da6c67d64bb0df235c1ba

    SHA256

    b6fd966a8479ae7e842afd58d1226424f19f1b65cb119775f2d1e72ab5c97211

    SHA512

    af9072a4389dcafb45ba0573a6e39b732669d4a41f06e095b21bd3c527556d95575c369366c7e198c86e4b0e00a8c6d6ef877282777c68adc8c083b166f0b92f

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Runtime.CompilerServices.VisualC.dll

    Filesize

    19KB

    MD5

    832e2e9ef6b1799e65be94c84945637c

    SHA1

    c8da980eed72859ac5817c4040a7f490077a6afb

    SHA256

    61bcbcc0c9058bf39f26595603c8e965dfee494feb95c5e810311ed8d8aa5068

    SHA512

    093372edee566f6d300fe3042142747ad4c6552db059eadc9d643817cebfaa9de71d7f37213a37eafb0d209028b2ea0c5a3c1446429cfb86f3952e739bb09ed4

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Runtime.InteropServices.RuntimeInformation.dll

    Filesize

    31KB

    MD5

    9adcf3e59560f559387426cfdec99447

    SHA1

    bd7d4089cb905d5e161a30ce073a802339458e19

    SHA256

    130e4c414984c9c390e814be46930178423b527dc2fc32e7d9c4829b4560a142

    SHA512

    8735a20dba186e06ae98a5c8e413afacb39afe1410dce9e0c909d6700bf9d79a8678757992cea9ae0a6e710cae4e5a73cada713f0971cce341f0287b85941314

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Runtime.InteropServices.dll

    Filesize

    50KB

    MD5

    9f46975f0ed6da0bcc0d466e99fdf8d7

    SHA1

    4b7860930b9ffaa084919d7d1f0720aa7b3949a8

    SHA256

    d983f323ef1a1d6415db5cf218672363211ad834d664f532132bbb61b671468a

    SHA512

    bfe9caed1301e3e44eaf9de561fd12f027255372c6ff0ccfc5eb8df29fa5f9bdee4de60e596069c973206e92d2fc432e61ef7fc06cbeef788370d8e43db207f1

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Runtime.Numerics.dll

    Filesize

    216KB

    MD5

    47d0b629d9dce0a5412cdc8f70096958

    SHA1

    3851083ee1fd63631c7fe792a2c015c56f22029c

    SHA256

    d9988f2c0484637c9e3ffc1f1d40805cb54efcc0d669d63487130407f354d639

    SHA512

    ee7031aa5605a14c19cf3d1531210120d8c2e6ba3ba3c04d030fc34fb7d7deaa6de2fc796c58327bc34e131930b17538b3bd539c737fcedaa53d1bed27f5eda9

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Security.Claims.dll

    Filesize

    92KB

    MD5

    14237f23fbf9b6a8e49a856ab35dc850

    SHA1

    e7c8f92987ddac5f7816dcd7a4096f4f7fadd6c4

    SHA256

    3653ab2f2406cafff866441618a332cb624ec96d614a89f028b3b5d7774814c4

    SHA512

    a1637e6934d5112407268d5f07f2af9a1b7a7cb0a63a866976b7a9235d83c8ef0e2b6323ac839dbabf47c19d706d0e88a6b66e439079adc1516c94013b3e1330

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Security.Cryptography.Algorithms.dll

    Filesize

    786KB

    MD5

    b18bc97d18bfccba1d0e7757ab5f102c

    SHA1

    3e367375e467502ecf508e7c7f17b1661864e557

    SHA256

    ef07a4a331460498db0e8c162773b9913a93b453e079309894a4053a535c418c

    SHA512

    7592f846f31b6a9faa1d2999ec68f44a8e3876abe63386cf33fa64aa23f621aa634e8c68b6923dd2ce922c5b42c0b727f07cbec943e8054bfa60f0c23d5abb65

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Security.Cryptography.Primitives.dll

    Filesize

    131KB

    MD5

    9a5acc212f4c8c2ae04bfcba443a67ca

    SHA1

    d1dcf5fc50b12f56f687b80cdfd38cbcae3e42bd

    SHA256

    aaaf2852cd73fff7896fcad12b392a5a4520b54dd331ad10872a7813ab37e4c0

    SHA512

    2396ebb1d332557fabb43534e0c22622a09dff42d6ed72672c36f05ee4e6cc01c73b5ee62989c05ec7a90948ca7de0a4f628891c1695ed7c5e27ef7a1247637b

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Security.Principal.Windows.dll

    Filesize

    148KB

    MD5

    6827d863039438e71b0dda38bca88465

    SHA1

    b652bf4667fcc4df506ced4b88d2ab62d699b18d

    SHA256

    a25c5d4f50df639d732bf30c9a0510fbb43b504b7ab0e8196a2150c3d2c05fdc

    SHA512

    c1d0792ffe20fe14891569202a71dfd2e0f36fe548090a7673ccf154a810f7a11cbf59496c7e5d151e21283b8dca406b5aba56b5799a25d87ec22a5cdd9ae9b7

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Text.RegularExpressions.dll

    Filesize

    517KB

    MD5

    b73d9d10fa6c56199a8886c0b25317eb

    SHA1

    1b912028b83dc17b5fdebdc505a2cb9ad778bb8c

    SHA256

    f772a704086dcd5b9d645235d3bed1249885b9f3044c3eaa0368d9c5238e8cc5

    SHA512

    9a0b4e64af6d4a486a247bb0a5a5302c1d4dc00a20fbdb2d45c0fda84e126ccdc1df7205ffb7c23468c1cc0bd9b2287e77c9499bc89ddfd02fdc7de39aa9a97a

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Threading.dll

    Filesize

    78KB

    MD5

    3c0191ce81ab2270e63a9bb589336327

    SHA1

    29f3282e9cd34e1d51bd1ef80fdf458f1f0a688f

    SHA256

    a2a6b1ac01dda80c8559be694402c56b7ebec79a11d23e4cc1f50d2557535056

    SHA512

    a47f71cbbc73a510b17698dbd05571123e236d196aa1105ee747aae9319d695b75d516304da17daf4b70fdab0a72a6423e45233b33143ccf9882ab12be4beb4f

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Windows.Controls.Ribbon.dll

    Filesize

    1.4MB

    MD5

    3ab12820407bd3e4531b0e6590020e6f

    SHA1

    49da6ef0fa00c8a6f9a87d1fe3ac787c8f8a03e8

    SHA256

    751ced5a75ebd7382415c96820252543df5b496bfd8ef3851496c433fb1810be

    SHA512

    613679ad7215e5363ea50b00bee294763fb7243c623e881d270807cfd3d179c024391920be5db2133ca917b66c547f6eaa8fa46ec1b3331e81b12d9291a51121

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Windows.Extensions.dll

    Filesize

    74KB

    MD5

    8dc3db06c176b15b2c1d816f1a13e1c1

    SHA1

    92e61f8ac41d88b88a3e85fc603f309e94af6f61

    SHA256

    337ba520f68cdb18b1e3af3d4dc86710e37d30df52231b593d657b639040feb4

    SHA512

    d1bdcf908d3306abcd24f3f083820e4412e882372519b87123e163a7180ccf35f3e37dce907eec95fb508c0bf9553af2318be8b1060be5dd2763da3158f159bd

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Windows.Forms.Primitives.dll

    Filesize

    773KB

    MD5

    c96a066b65aea81908c552367d53c7ff

    SHA1

    3992d1d9993f2b59e443a35ef1b2abcdd1669f5a

    SHA256

    22a707c436d6f1a849dad3244ab663ffb276c448679ca20ca9a98bbe642cd459

    SHA512

    2db6e77f9bdf22f35f6c0154f264e2ba527de1c0c26167a2fc04ad858151fca349e4482f9e121e3c18ba04ad03e61a772c9e830223ac7fd6e49743c082c3581a

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Windows.Forms.dll

    Filesize

    12.7MB

    MD5

    40ebeba76ec2a39637601eaaada6ef8b

    SHA1

    d5d657039adcd0479f5be94cfa13fcd05209bf61

    SHA256

    d103d2a1a3257c74d3d0871f9fab132471769d42bd45853cc2be0c1f93eb0c07

    SHA512

    c4a2b8521315a9fd7f76e97de717fb59792cc54fbf9a87a5da85099f5b84b239353a2749478249e6d57b9ba349ff913ce9222e9626499be3ad67b69704a172e3

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\System.Xaml.dll

    Filesize

    1.4MB

    MD5

    bb95d71600517ef1cfb47b092d6ee811

    SHA1

    cfcfac3ba15035a73de212f34cc91e70bd0dc09c

    SHA256

    03c555da2e02c6a3006abee26d4973f8c976b20b3c039966771b1a0a8075f53b

    SHA512

    a493989745592fc661b4d74197bdcdbda521096a5c1b9b72ded4406668bb3f9f1f9df8f91a74454f8828f759f95fdc4ef267be1c334859fb5b64fe4a1396aac2

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\UIAutomationProvider.dll

    Filesize

    49KB

    MD5

    0bddaf2a14eba4a2e89dccd1e7fecfe7

    SHA1

    cd94d56ce707cbed764ee458d5a0a4f1301f1fdb

    SHA256

    e20edc3d65b60827371868b02b6c0c6fd7b8985cc6d5cb72e3c71f56b02392e1

    SHA512

    3d04be92e7e75d1a3fdd0abe61eb1daccd1f4ad8727ad8f5109881c2d8f00efe28318a5107fc6a1eb63835affdbf65b5a7ad4ef9ffe3729b10edad995a7dd680

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\UIAutomationTypes.dll

    Filesize

    295KB

    MD5

    472aa751892e80e2eb554b5a0e2b490a

    SHA1

    6b56d7e7c8c04efe9466f3a0e9f8794ac4ba0411

    SHA256

    def404fe60fb1be13cca75bf4a6b9799c3f73f3f0dd6ee9a3ff2695bb8cd8608

    SHA512

    b6a3d9833f8507551c3ed84dad0c8f244eafd1ba90871ce6891f045e45a9298ff01d4fec974ba4038400b53eee7c39c573325473228bcad14f434e34ac669429

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\WinRT.Runtime.dll

    Filesize

    1.5MB

    MD5

    b8b6364ff71cc698ae4c67b88f442253

    SHA1

    38526956a823f3ebf5820b61e33f65455b1d1195

    SHA256

    93a4131a43f013e07687edf5463147219523ed79f91669bbbf1f3003bfe58646

    SHA512

    21f16fc4353d2b0c5c6c903562f73cb73ac27d3781b4e5cae599b445eb364659ca06054e6427f06d7cfc5f4d0e33c368c527e7f5595ec21770076d7d65f74c83

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\WindowsBase.dll

    Filesize

    2.2MB

    MD5

    7916384ad43df11c8d2ca45d5fa8c51f

    SHA1

    31c3ab91aa6d4929781c1ef12245052247765b05

    SHA256

    e9f4098b7cf6f3dc79ce4744b8b29a847511dcde9eef1b6df06ee9b67a0f294e

    SHA512

    7d7e2519f10ce80234ef09f1d399ed0ec1489a8f866c890c916c31d9adf785cf9122e2d9614f32ab0cbe65b54db2acfdfd3e9170a158acdb063315f2d6f678c5

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\WindowsFormsIntegration.dll

    Filesize

    201KB

    MD5

    209a9911af5348846e7f2fda78840e69

    SHA1

    e70e7f7c419be041d24c272d6a41dd482e5f7bcb

    SHA256

    b25e8c4744d0d388d7cf0f9f1cd867b3c499fc0306515a76ed32832797a68e9b

    SHA512

    ddb5333dda60a605053113978c06a24ec277a41cec26c6ead930c0fe21d1428076327d7229d306c0b861ba9beaa93478ef44257904f13c93af0106542c78a095

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\YamlDotNet.dll

    Filesize

    688KB

    MD5

    c209d5e9211b6efc4e3837b4ded7275f

    SHA1

    b76a5cd5a4a395a8bbccd62d0f9376eca6c8fc8b

    SHA256

    b186c93aa5f5d814dcf2b4c0c7dc729629ece27dfc370b34839ff9c7e46ce78c

    SHA512

    74926f01a3c78d9f7f98106754a4b594d4ae3f89a5b617ba7185e33ec7018591c91ed5b858afe4d9f626b211fbaabe46d280756c5e9b192b4f0a229e7f898978

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\wpfgfx_cor3.dll

    Filesize

    1.9MB

    MD5

    e4038e8742aaf57929d3e2dfad6edc05

    SHA1

    e267eba3436df366dbca60394f695a6dbb07582c

    SHA256

    4e0730f5dfd424493e45fb91fdabece036e538077dca466699165d3d4ae96eb6

    SHA512

    8434c6b401af5ba72a26255209c18fb2cd51453439df8d8238b4a878ec7fcc0b15941c9aa61c576e97299f5175d95840b1cee29ec0e6e3463b0816ce6231de7b

  • C:\Users\Admin\AppData\Local\Temp\.net\yt-dlp-gui\FZVV6BF5vWZz6QgnFG4SaWG6qGEfjeY=\yt-dlp-gui.dll

    Filesize

    1.4MB

    MD5

    afbb072fbefca8ad3a6420be12511c6a

    SHA1

    034323321b85a1deadbfdbbf33332c8ecf4da9c6

    SHA256

    c4741fa99fdf16026f5cf3cd230edc32e8e854a061a89acc48dd1c75f07ce35e

    SHA512

    fe104a3a7567b5930602277af219e8362fef6adc58968dce3753caaf7e1f7ce82e6c001a72aad4106cdbd43f74bc9e76dbbe5dc066fffa89abda937db8d30e9c

  • memory/3940-459-0x00007FF78941E000-0x00007FF78941F000-memory.dmp

    Filesize

    4KB

  • memory/3940-633-0x00007FF78941E000-0x00007FF78941F000-memory.dmp

    Filesize

    4KB