Analysis

  • user interaction
    yes
  • max time kernel
    66s
  • max time network
    73s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    17/04/2026, 15:43

General

  • Target
    install_zaprethub_1.3.0.exe
  • Size 189.4MB
  • Sample260417-s58qfaev9v
  • SHA256 9b3ab810e7f50f561feb91cc48caa2ec4803ac97ed14c641cf3c4cb425f86e1f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Command and Scripting Interpreter: PowerShell 1 TTPs 10 IoCs

    Using powershell.exe command.

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 6 IoCs
  • Loads dropped DLL 64 IoCs
  • Stops running service(s) 4 TTPs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Network Service Discovery 1 TTPs 2 IoCs

    Attempt to gather information on host's network.

  • Enumerates processes with tasklist 1 TTPs 12 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 2 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

  • Launches sc.exe 6 IoCs

    Sc.exe is a Windows utlilty to control services on the system.

  • Detects Pyinstaller 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Kills process with taskkill 11 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 33 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 6 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 50 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\install_zaprethub_1.3.0.exe
    "C:\Users\Admin\AppData\Local\Temp\install_zaprethub_1.3.0.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4216
    • C:\Users\Admin\AppData\Local\Temp\install_zaprethub_1.3.0.exe
      "C:\Users\Admin\AppData\Local\Temp\install_zaprethub_1.3.0.exe"
      2⤵
      • Checks computer location settings
      • Loads dropped DLL
      • Drops file in Program Files directory
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of WriteProcessMemory
      PID:1920
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
          PID:4088
        • C:\Windows\SYSTEM32\schtasks.exe
          schtasks /Delete /F /TN ZapretHub
          3⤵
            PID:5064
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            powershell -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -Command " $paths = @( 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Run', 'HKLM:\Software\Microsoft\Windows\CurrentVersion\Run' ) $names = @('ZapretHub', 'Zapret Hub', 'zapret_hub') foreach ($path in $paths) { foreach ($name in $names) { try { Remove-ItemProperty -Path $path -Name $name -ErrorAction SilentlyContinue } catch {} } } "
            3⤵
            • Command and Scripting Interpreter: PowerShell
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:2896
          • C:\Windows\SYSTEM32\sc.exe
            sc stop zapret
            3⤵
            • Launches sc.exe
            PID:2196
          • C:\Windows\SYSTEM32\sc.exe
            sc delete zapret
            3⤵
            • Launches sc.exe
            PID:5528
          • C:\Windows\SYSTEM32\taskkill.exe
            taskkill /F /T /IM zapret_hub.exe
            3⤵
            • Kills process with taskkill
            • Suspicious use of AdjustPrivilegeToken
            PID:5588
          • C:\Windows\SYSTEM32\taskkill.exe
            taskkill /F /T /IM TgWsProxy_windows.exe
            3⤵
            • Kills process with taskkill
            • Suspicious use of AdjustPrivilegeToken
            PID:2084
          • C:\Windows\SYSTEM32\taskkill.exe
            taskkill /F /T /IM winws.exe
            3⤵
            • Kills process with taskkill
            • Suspicious use of AdjustPrivilegeToken
            PID:2100
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            powershell -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -Command " $needle = 'c:\program files\zapret hub' $selfPid = 1920 Get-CimInstance Win32_Process | ForEach-Object { if ($_.ProcessId -eq $selfPid) { return } $exe = '' $cmd = '' try { $exe = [string]$_.ExecutablePath } catch {} try { $cmd = [string]$_.CommandLine } catch {} $joined = ($exe + ' ' + $cmd).ToLowerInvariant() if ($joined.Contains($needle)) { try { Stop-Process -Id $_.ProcessId -Force -ErrorAction SilentlyContinue } catch {} } } "
            3⤵
            • Command and Scripting Interpreter: PowerShell
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:5196
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            powershell -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -Command " $paths = @('c:\program files\zapret hub\merged_runtime', 'c:\program files\zapret hub\merged_runtime\active_zapret') $selfPid = 1920 Get-CimInstance Win32_Process | ForEach-Object { if ($_.ProcessId -eq $selfPid) { return } $exe = '' $cmd = '' try { $exe = [string]$_.ExecutablePath } catch {} try { $cmd = [string]$_.CommandLine } catch {} $joined = ($exe + ' ' + $cmd).ToLowerInvariant() foreach ($path in $paths) { if ($joined.Contains($path)) { try { Stop-Process -Id $_.ProcessId -Force -ErrorAction SilentlyContinue } catch {} break } } } "
            3⤵
            • Command and Scripting Interpreter: PowerShell
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:2524
          • C:\Windows\SYSTEM32\schtasks.exe
            schtasks /Delete /F /TN ZapretHub
            3⤵
              PID:2084
            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
              powershell -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -Command " $paths = @( 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Run', 'HKLM:\Software\Microsoft\Windows\CurrentVersion\Run' ) $names = @('ZapretHub', 'Zapret Hub', 'zapret_hub') foreach ($path in $paths) { foreach ($name in $names) { try { Remove-ItemProperty -Path $path -Name $name -ErrorAction SilentlyContinue } catch {} } } "
              3⤵
              • Command and Scripting Interpreter: PowerShell
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              PID:5876
              • C:\Windows\System32\Conhost.exe
                \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                4⤵
                  PID:2100
              • C:\Windows\SYSTEM32\sc.exe
                sc stop zapret
                3⤵
                • Launches sc.exe
                PID:4424
              • C:\Windows\SYSTEM32\sc.exe
                sc delete zapret
                3⤵
                • Launches sc.exe
                PID:6128
              • C:\Windows\SYSTEM32\taskkill.exe
                taskkill /F /T /IM zapret_hub.exe
                3⤵
                • Kills process with taskkill
                • Suspicious use of AdjustPrivilegeToken
                PID:2172
              • C:\Windows\SYSTEM32\taskkill.exe
                taskkill /F /T /IM TgWsProxy_windows.exe
                3⤵
                • Kills process with taskkill
                • Suspicious use of AdjustPrivilegeToken
                PID:4820
              • C:\Windows\SYSTEM32\taskkill.exe
                taskkill /F /T /IM winws.exe
                3⤵
                • Kills process with taskkill
                • Suspicious use of AdjustPrivilegeToken
                PID:5044
              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                powershell -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -Command " $needle = 'c:\program files\zapret hub' $selfPid = 1920 Get-CimInstance Win32_Process | ForEach-Object { if ($_.ProcessId -eq $selfPid) { return } $exe = '' $cmd = '' try { $exe = [string]$_.ExecutablePath } catch {} try { $cmd = [string]$_.CommandLine } catch {} $joined = ($exe + ' ' + $cmd).ToLowerInvariant() if ($joined.Contains($needle)) { try { Stop-Process -Id $_.ProcessId -Force -ErrorAction SilentlyContinue } catch {} } } "
                3⤵
                • Command and Scripting Interpreter: PowerShell
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of AdjustPrivilegeToken
                PID:2372
              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                powershell -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -Command " $paths = @('c:\program files\zapret hub\merged_runtime', 'c:\program files\zapret hub\merged_runtime\active_zapret') $selfPid = 1920 Get-CimInstance Win32_Process | ForEach-Object { if ($_.ProcessId -eq $selfPid) { return } $exe = '' $cmd = '' try { $exe = [string]$_.ExecutablePath } catch {} try { $cmd = [string]$_.CommandLine } catch {} $joined = ($exe + ' ' + $cmd).ToLowerInvariant() foreach ($path in $paths) { if ($joined.Contains($path)) { try { Stop-Process -Id $_.ProcessId -Force -ErrorAction SilentlyContinue } catch {} break } } } "
                3⤵
                • Command and Scripting Interpreter: PowerShell
                • Suspicious behavior: EnumeratesProcesses
                PID:4812
              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                powershell -NoProfile -WindowStyle Hidden -Command "$WScriptShell = New-Object -ComObject WScript.Shell; $Shortcut = $WScriptShell.CreateShortcut('C:\Users\Admin\Desktop\Zapret Hub.lnk'); $Shortcut.TargetPath = 'C:\Program Files\Zapret Hub\zapret_hub.exe'; $Shortcut.WorkingDirectory = 'C:\Program Files\Zapret Hub'; $Shortcut.IconLocation = 'C:\Program Files\Zapret Hub\zapret_hub.exe,0'; $Shortcut.Save();"
                3⤵
                • Command and Scripting Interpreter: PowerShell
                • Suspicious behavior: EnumeratesProcesses
                PID:2964
              • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                powershell -NoProfile -WindowStyle Hidden -Command "$WScriptShell = New-Object -ComObject WScript.Shell; $Shortcut = $WScriptShell.CreateShortcut('C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zapret Hub.lnk'); $Shortcut.TargetPath = 'C:\Program Files\Zapret Hub\zapret_hub.exe'; $Shortcut.WorkingDirectory = 'C:\Program Files\Zapret Hub'; $Shortcut.IconLocation = 'C:\Program Files\Zapret Hub\zapret_hub.exe,0'; $Shortcut.Save();"
                3⤵
                • Command and Scripting Interpreter: PowerShell
                • Suspicious behavior: EnumeratesProcesses
                PID:3732
              • C:\Program Files\Zapret Hub\zapret_hub.exe
                "C:\Program Files\Zapret Hub\zapret_hub.exe"
                3⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Drops file in Program Files directory
                • Suspicious behavior: AddClipboardFormatListener
                • Suspicious behavior: GetForegroundWindowSpam
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of SendNotifyMessage
                • Suspicious use of WriteProcessMemory
                PID:1856
                • C:\Program Files\Zapret Hub\zapret_hub.exe
                  "C:\Program Files\Zapret Hub\zapret_hub.exe" "--multiprocessing-fork" "parent_pid=1856" "pipe_handle=1252"
                  4⤵
                  • Executes dropped EXE
                  • Drops file in Program Files directory
                  • Modifies registry class
                  • Suspicious use of WriteProcessMemory
                  PID:4276
                  • C:\Windows\SYSTEM32\tasklist.exe
                    tasklist /FI "IMAGENAME eq winws.exe"
                    5⤵
                    • Enumerates processes with tasklist
                    PID:1276
                  • C:\Windows\SYSTEM32\sc.exe
                    sc query zapret
                    5⤵
                    • Launches sc.exe
                    PID:2920
                  • C:\Windows\SYSTEM32\taskkill.exe
                    taskkill /IM winws.exe /F /T
                    5⤵
                    • Kills process with taskkill
                    PID:4264
                  • C:\Windows\SYSTEM32\tasklist.exe
                    tasklist /FI "IMAGENAME eq winws.exe"
                    5⤵
                    • Enumerates processes with tasklist
                    PID:4352
                  • C:\Windows\SYSTEM32\tasklist.exe
                    tasklist /FI "IMAGENAME eq winws.exe"
                    5⤵
                    • Enumerates processes with tasklist
                    PID:3980
                  • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    powershell -NoProfile -ExecutionPolicy Bypass -Command " $patterns = @('nekobox','nekoray','v2rayn','xray','xrayw','sing-box','singbox','clash','mihomo','hiddify','outline','wireguard','openvpn','amnezia','warp') $adapterPatterns = @('wintun','wireguard','openvpn','tap-','tap_windows','vpn','v2ray','xray','nekobox','nekoray','sing-box','clash','mihomo','tun') $procById = @{} Get-CimInstance Win32_Process | ForEach-Object { $name = ([string]$_.Name).ToLowerInvariant() $path = ([string]$_.ExecutablePath).ToLowerInvariant() $cmd = ([string]$_.CommandLine).ToLowerInvariant() foreach ($pattern in $patterns) { if ($name.Contains($pattern) -or $path.Contains($pattern) -or $cmd.Contains($pattern)) { $procById[[int]$_.ProcessId] = $true break } } } $remoteIps = New-Object System.Collections.Generic.HashSet[string] Get-NetTCPConnection -State Established -ErrorAction SilentlyContinue | ForEach-Object { $pid = [int]$_.OwningProcess if (-not $procById.ContainsKey($pid)) { return } $ip = ([string]$_.RemoteAddress).Trim() if (-not $ip) { return } if ($ip -in @('127.0.0.1','0.0.0.0','::','::1')) { return } [void]$remoteIps.Add($ip) } $adapterIndexes = New-Object System.Collections.Generic.HashSet[int] Get-NetAdapter -ErrorAction SilentlyContinue | ForEach-Object { $joined = (([string]$_.Name) + ' ' + ([string]$_.InterfaceDescription)).ToLowerInvariant() foreach ($pattern in $adapterPatterns) { if ($joined.Contains($pattern)) { [void]$adapterIndexes.Add([int]$_.ifIndex) break } } } [pscustomobject]@{ adapter_indexes = @($adapterIndexes | Sort-Object) remote_ips = @($remoteIps | Sort-Object) } | ConvertTo-Json -Compress "
                    5⤵
                    • Command and Scripting Interpreter: PowerShell
                    • Network Service Discovery
                    • Hide Artifacts: Ignore Process Interrupts
                    • Suspicious behavior: EnumeratesProcesses
                    PID:5836
                  • C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\bin\winws.exe
                    "C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\bin\winws.exe" --wf-tcp=80,443,2053,2083,2087,2096,8443,12 --wf-udp=443,19294-19344,50000-50100,12 --filter-udp=443 "--hostlist=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\list-general.txt" "--hostlist=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\list-general-user.txt" "--hostlist-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\list-exclude.txt" "--hostlist-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\list-exclude-user.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\ipset-exclude.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\ipset-exclude-user.txt" --dpi-desync=fake --dpi-desync-repeats=6 "--dpi-desync-fake-quic=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\bin\quic_initial_www_google_com.bin" --new --filter-udp=19294-19344,50000-50100 --filter-l7=discord,stun --dpi-desync=fake --dpi-desync-repeats=6 --new --filter-tcp=2053,2083,2087,2096,8443 --hostlist-domains=discord.media --dpi-desync=multisplit --dpi-desync-split-seqovl=681 --dpi-desync-split-pos=1 "--dpi-desync-split-seqovl-pattern=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\bin\tls_clienthello_www_google_com.bin" --new --filter-tcp=443 "--hostlist=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\list-google.txt" --ip-id=zero --dpi-desync=multisplit --dpi-desync-split-seqovl=681 --dpi-desync-split-pos=1 "--dpi-desync-split-seqovl-pattern=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\bin\tls_clienthello_www_google_com.bin" --new --filter-tcp=80,443 "--hostlist=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\list-general.txt" "--hostlist=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\list-general-user.txt" "--hostlist-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\list-exclude.txt" "--hostlist-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\list-exclude-user.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\ipset-exclude.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\ipset-exclude-user.txt" --dpi-desync=multisplit --dpi-desync-split-seqovl=568 --dpi-desync-split-pos=1 "--dpi-desync-split-seqovl-pattern=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\bin\tls_clienthello_4pda_to.bin" --new --filter-udp=443 "--ipset=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\ipset-all.txt" "--hostlist-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\list-exclude.txt" "--hostlist-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\list-exclude-user.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\ipset-exclude.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\ipset-exclude-user.txt" --dpi-desync=fake --dpi-desync-repeats=6 "--dpi-desync-fake-quic=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\bin\quic_initial_www_google_com.bin" --new --filter-tcp=80,443,8443 "--ipset=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\ipset-all.txt" "--hostlist-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\list-exclude.txt" "--hostlist-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\list-exclude-user.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\ipset-exclude.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\ipset-exclude-user.txt" --dpi-desync=multisplit --dpi-desync-split-seqovl=568 --dpi-desync-split-pos=1 "--dpi-desync-split-seqovl-pattern=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\bin\tls_clienthello_4pda_to.bin" --new --filter-tcp=12 "--ipset=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\ipset-all.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\ipset-exclude.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\ipset-exclude-user.txt" --dpi-desync=multisplit --dpi-desync-any-protocol=1 --dpi-desync-cutoff=n3 --dpi-desync-split-seqovl=568 --dpi-desync-split-pos=1 "--dpi-desync-split-seqovl-pattern=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\bin\tls_clienthello_4pda_to.bin" --new --filter-udp=12 "--ipset=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\ipset-all.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\ipset-exclude.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\lists\ipset-exclude-user.txt" --dpi-desync=fake --dpi-desync-repeats=12 --dpi-desync-any-protocol=1 "--dpi-desync-fake-unknown-udp=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\bin\quic_initial_www_google_com.bin" --dpi-desync-cutoff=n2
                    5⤵
                    • Executes dropped EXE
                    PID:2924
                  • C:\Windows\SYSTEM32\tasklist.exe
                    tasklist /FI "IMAGENAME eq winws.exe"
                    5⤵
                    • Enumerates processes with tasklist
                    PID:3804
                  • C:\Windows\SYSTEM32\taskkill.exe
                    taskkill /IM TgWsProxy_windows.exe /F /T
                    5⤵
                    • Kills process with taskkill
                    PID:5848
                  • C:\Windows\SYSTEM32\taskkill.exe
                    taskkill /IM TgWsProxy_windows.exe /F /T
                    5⤵
                    • Kills process with taskkill
                    PID:5296
                  • C:\Program Files\Zapret Hub\zapret_hub.exe
                    "C:\Program Files\Zapret Hub\zapret_hub.exe" --worker tg-ws-proxy --tg-host 127.0.0.1 --tg-port 1443 --tg-secret 8663819abb7fbe68f03de53edf4717ef
                    5⤵
                    • Executes dropped EXE
                    PID:1700
                  • C:\Windows\SYSTEM32\tasklist.exe
                    tasklist /FI "IMAGENAME eq winws.exe"
                    5⤵
                    • Enumerates processes with tasklist
                    PID:5028
                  • C:\Windows\SYSTEM32\tasklist.exe
                    tasklist /FI "IMAGENAME eq winws.exe"
                    5⤵
                    • Enumerates processes with tasklist
                    PID:5652
                  • C:\Windows\SYSTEM32\tasklist.exe
                    tasklist /FI "IMAGENAME eq winws.exe"
                    5⤵
                    • Enumerates processes with tasklist
                    PID:4492
                  • C:\Windows\SYSTEM32\taskkill.exe
                    taskkill /PID 2924 /F /T
                    5⤵
                    • Kills process with taskkill
                    PID:1472
                  • C:\Windows\SYSTEM32\sc.exe
                    sc query zapret
                    5⤵
                    • Launches sc.exe
                    PID:4364
                  • C:\Windows\SYSTEM32\taskkill.exe
                    taskkill /IM winws.exe /F /T
                    5⤵
                    • Kills process with taskkill
                    PID:1020
                  • C:\Windows\SYSTEM32\tasklist.exe
                    tasklist /FI "IMAGENAME eq winws.exe"
                    5⤵
                    • Enumerates processes with tasklist
                    PID:2604
                  • C:\Windows\SYSTEM32\tasklist.exe
                    tasklist /FI "IMAGENAME eq winws.exe"
                    5⤵
                    • Enumerates processes with tasklist
                    PID:5076
                  • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                    powershell -NoProfile -ExecutionPolicy Bypass -Command " $patterns = @('nekobox','nekoray','v2rayn','xray','xrayw','sing-box','singbox','clash','mihomo','hiddify','outline','wireguard','openvpn','amnezia','warp') $adapterPatterns = @('wintun','wireguard','openvpn','tap-','tap_windows','vpn','v2ray','xray','nekobox','nekoray','sing-box','clash','mihomo','tun') $procById = @{} Get-CimInstance Win32_Process | ForEach-Object { $name = ([string]$_.Name).ToLowerInvariant() $path = ([string]$_.ExecutablePath).ToLowerInvariant() $cmd = ([string]$_.CommandLine).ToLowerInvariant() foreach ($pattern in $patterns) { if ($name.Contains($pattern) -or $path.Contains($pattern) -or $cmd.Contains($pattern)) { $procById[[int]$_.ProcessId] = $true break } } } $remoteIps = New-Object System.Collections.Generic.HashSet[string] Get-NetTCPConnection -State Established -ErrorAction SilentlyContinue | ForEach-Object { $pid = [int]$_.OwningProcess if (-not $procById.ContainsKey($pid)) { return } $ip = ([string]$_.RemoteAddress).Trim() if (-not $ip) { return } if ($ip -in @('127.0.0.1','0.0.0.0','::','::1')) { return } [void]$remoteIps.Add($ip) } $adapterIndexes = New-Object System.Collections.Generic.HashSet[int] Get-NetAdapter -ErrorAction SilentlyContinue | ForEach-Object { $joined = (([string]$_.Name) + ' ' + ([string]$_.InterfaceDescription)).ToLowerInvariant() foreach ($pattern in $adapterPatterns) { if ($joined.Contains($pattern)) { [void]$adapterIndexes.Add([int]$_.ifIndex) break } } } [pscustomobject]@{ adapter_indexes = @($adapterIndexes | Sort-Object) remote_ips = @($remoteIps | Sort-Object) } | ConvertTo-Json -Compress "
                    5⤵
                    • Command and Scripting Interpreter: PowerShell
                    • Network Service Discovery
                    • Hide Artifacts: Ignore Process Interrupts
                    • Suspicious behavior: EnumeratesProcesses
                    PID:5176
                  • C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\bin\winws.exe
                    "C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\bin\winws.exe" --wf-tcp=80,443,2053,2083,2087,2096,8443,12 --wf-udp=443,19294-19344,50000-50100,12 --filter-udp=443 "--hostlist=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\list-general.txt" "--hostlist=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\list-general-user.txt" "--hostlist-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\list-exclude.txt" "--hostlist-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\list-exclude-user.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\ipset-exclude.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\ipset-exclude-user.txt" --dpi-desync=fake --dpi-desync-repeats=6 "--dpi-desync-fake-quic=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\bin\quic_initial_www_google_com.bin" --new --filter-udp=19294-19344,50000-50100 --filter-l7=discord,stun --dpi-desync=fake --dpi-desync-repeats=6 --new --filter-tcp=2053,2083,2087,2096,8443 --hostlist-domains=discord.media --dpi-desync=hostfakesplit --dpi-desync-repeats=4 --dpi-desync-fooling=ts --dpi-desync-hostfakesplit-mod=host=www.google.com --new --filter-tcp=443 "--hostlist=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\list-google.txt" --ip-id=zero --dpi-desync=hostfakesplit --dpi-desync-repeats=4 --dpi-desync-fooling=ts --dpi-desync-hostfakesplit-mod=host=www.google.com --new --filter-tcp=80,443 "--hostlist=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\list-general.txt" "--hostlist=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\list-general-user.txt" "--hostlist-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\list-exclude.txt" "--hostlist-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\list-exclude-user.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\ipset-exclude.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\ipset-exclude-user.txt" --dpi-desync=hostfakesplit --dpi-desync-repeats=4 --dpi-desync-fooling=ts,md5sig --dpi-desync-hostfakesplit-mod=host=ozon.ru --new --filter-udp=443 "--ipset=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\ipset-all.txt" "--hostlist-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\list-exclude.txt" "--hostlist-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\list-exclude-user.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\ipset-exclude.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\ipset-exclude-user.txt" --dpi-desync=fake --dpi-desync-repeats=6 "--dpi-desync-fake-quic=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\bin\quic_initial_www_google_com.bin" --new --filter-tcp=80,443,8443 "--ipset=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\ipset-all.txt" "--hostlist-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\list-exclude.txt" "--hostlist-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\list-exclude-user.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\ipset-exclude.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\ipset-exclude-user.txt" --dpi-desync=hostfakesplit --dpi-desync-repeats=4 --dpi-desync-fooling=ts --dpi-desync-hostfakesplit-mod=host=ozon.ru --new --filter-tcp=12 "--ipset=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\ipset-all.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\ipset-exclude.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\ipset-exclude-user.txt" --dpi-desync=hostfakesplit --dpi-desync-repeats=4 --dpi-desync-any-protocol=1 --dpi-desync-cutoff=n3 --dpi-desync-fooling=ts --dpi-desync-hostfakesplit-mod=host=ozon.ru --new --filter-udp=12 "--ipset=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\ipset-all.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\ipset-exclude.txt" "--ipset-exclude=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\lists\ipset-exclude-user.txt" --dpi-desync=fake --dpi-desync-repeats=12 --dpi-desync-any-protocol=1 "--dpi-desync-fake-unknown-udp=C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441544204\bin\quic_initial_www_google_com.bin" --dpi-desync-cutoff=n2
                    5⤵
                    • Executes dropped EXE
                    PID:5976
                  • C:\Windows\SYSTEM32\tasklist.exe
                    tasklist /FI "IMAGENAME eq winws.exe"
                    5⤵
                    • Enumerates processes with tasklist
                    PID:116
                  • C:\Windows\SYSTEM32\tasklist.exe
                    tasklist /FI "IMAGENAME eq winws.exe"
                    5⤵
                    • Enumerates processes with tasklist
                    PID:4136
                • C:\Windows\SYSTEM32\tasklist.exe
                  tasklist /FI "IMAGENAME eq winws.exe"
                  4⤵
                  • Enumerates processes with tasklist
                  PID:3044
                • C:\Windows\SYSTEM32\schtasks.exe
                  schtasks /Delete /F /TN ZapretHub
                  4⤵
                    PID:2080
                  • C:\Windows\SYSTEM32\schtasks.exe
                    schtasks /Query /TN ZapretHub
                    4⤵
                      PID:3812
              • C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\bin\WinDivert64.sys
                "C:\Program Files\Zapret Hub\merged_runtime\active_zapret_1776441527694\bin\WinDivert64.sys"
                1⤵
                • Executes dropped EXE
                PID:4732
              • C:\Windows\system32\OpenWith.exe
                C:\Windows\system32\OpenWith.exe -Embedding
                1⤵
                • Suspicious use of SetWindowsHookEx
                PID:5080

              Network

                    MITRE ATT&CK Enterprise v16

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    MSVCP140.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\MSVCP140.dll
                    • Size 536KB
                    • SHA256 90a1b0709fae970fe62072b7a322ebf713a956228f99bf5b46b3bdc980290b7e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Qt6Network.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\Qt6Network.dll
                    • Size 1.7MB
                    • SHA256 0e7dfc2c0495e87e5fa451499f9af2105f8a5f09ed4a09123b86ca125263eed5
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Qt6OpenGL.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\Qt6OpenGL.dll
                    • Size 1.9MB
                    • SHA256 d9fe875307794cfc10145236428d0e49d429744c537b650034cc83c38113733e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Qt6Pdf.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\Qt6Pdf.dll
                    • Size 4.4MB
                    • SHA256 4fbf84097d5b4527e7e77c1a2b7f0d44635d3e74ce07d807d01df401aa30f583
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Qt6Qml.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\Qt6Qml.dll
                    • Size 5.1MB
                    • SHA256 09c39c68d5d3267b3403c386f82caaf788719b012aa8afa8c268b66345f0486c
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Qt6QmlMeta.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\Qt6QmlMeta.dll
                    • Size 156KB
                    • SHA256 b3b1a1b2effa76b9b2047050e1cd61337612ea4507f5d9a2a8e7114af9b5bd46
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Qt6QmlModels.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\Qt6QmlModels.dll
                    • Size 968KB
                    • SHA256 96643d47e2db823711f01430e83efe18055e000c617f867462be63cd10021876
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Qt6QmlWorkerScript.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\Qt6QmlWorkerScript.dll
                    • Size 78KB
                    • SHA256 a0929be1179c2853855965fc88140ea0ac16808905f8671b1d72dc6809f04442
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Qt6Quick.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\Qt6Quick.dll
                    • Size 6.3MB
                    • SHA256 ed165c155cba166ea23de0157af875033e8a5ccf2894bff1620e10619cb2e2c3
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Qt6Svg.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\Qt6Svg.dll
                    • Size 625KB
                    • SHA256 8d38e9bdf7ce0b08ef0f9a7ce19b7817f76d34289845008a08d7743223ee7991
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Qt6VirtualKeyboard.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\Qt6VirtualKeyboard.dll
                    • Size 430KB
                    • SHA256 62acb00cad8f1f97e83eb96c26baee7b535724451153c67a8539155994bcb593
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    QtNetwork.pyd

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\QtNetwork.pyd
                    • Size 983KB
                    • SHA256 0c15fdf840b01621d52cb1e463d4853d0f0d873d87836ba0cc370d3425a522c3
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    VCRUNTIME140.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\VCRUNTIME140.dll
                    • Size 113KB
                    • SHA256 90b16bd48994b1373cfa5fbeded5996a4e999845958a3cd04992f50b6aaf71b3
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    VCRUNTIME140_1.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\VCRUNTIME140_1.dll
                    • Size 40KB
                    • SHA256 ccda43d3b89f251253bbcda9fdea6a1844bbb39f0f44471b4fa77fedaf56f8b8
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    opengl32sw.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\opengl32sw.dll
                    • Size 19.7MB
                    • SHA256 f67385109e5e5f195034243ab57e6d162c0ee972a58c2bd528da02d97c5aea53
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtuiotouchplugin.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\plugins\generic\qtuiotouchplugin.dll
                    • Size 100KB
                    • SHA256 2622444cb327ff788ac70a557e026029ec30230fc55d5d6d454177798215b615
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qjpeg.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\plugins\imageformats\qjpeg.dll
                    • Size 563KB
                    • SHA256 a00273bbd70e9582989e09c11c15c92ea32402798a0980b1e00ef9d55fd87d1a
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qpdf.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\plugins\imageformats\qpdf.dll
                    • Size 41KB
                    • SHA256 679908cae8bb885e0ebda06b1fc87942e25e5daae8a151cdcf1b0b8ef177a3c3
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qsvg.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\plugins\imageformats\qsvg.dll
                    • Size 38KB
                    • SHA256 4eb18dbfc255b9d180c01695c65c55a5830a25d676d9c86526fd205501844a68
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtga.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\plugins\imageformats\qtga.dll
                    • Size 37KB
                    • SHA256 77a602e4a88f54db804921f4051e0bd11b90a854d9b9ffdada9793c2e2de19b2
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtiff.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\plugins\imageformats\qtiff.dll
                    • Size 431KB
                    • SHA256 a3c9b982d9332f78fd131725d7a7cb43fd0728e1ce87278539819deda693fbc8
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qwbmp.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\plugins\imageformats\qwbmp.dll
                    • Size 35KB
                    • SHA256 4bd7b7f7bd890a570489f0e55261bcee559e76d09a82a7ca4320c1b310082cb4
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qwebp.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\plugins\imageformats\qwebp.dll
                    • Size 549KB
                    • SHA256 ab176a6b6dfce8c9886b9a5fcc51877daffa3b49fe0f1480faf332e74757cbb6
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qnetworklistmanager.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\plugins\networkinformation\qnetworklistmanager.dll
                    • Size 69KB
                    • SHA256 f97ceaaa4bbb38bcb7d957372d859d2498b4b9d17ebafc7a6a95da4e7c8f79fd
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtvirtualkeyboardplugin.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\plugins\platforminputcontexts\qtvirtualkeyboardplugin.dll
                    • Size 32KB
                    • SHA256 e88a0b1af3a7be1b9d152151ebbc8fe3c44b8993b1b3898164e493f6f365e916
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qcertonlybackend.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\plugins\tls\qcertonlybackend.dll
                    • Size 100KB
                    • SHA256 8293b522206bd47933d42316a7af44a869744ed9d2a9d75881ffd0f914f5920e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qopensslbackend.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\plugins\tls\qopensslbackend.dll
                    • Size 310KB
                    • SHA256 5df405fe5d74edfcbc2e8288182f1891eab9fe56c7351558a915372e20b5e193
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qschannelbackend.dll

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\plugins\tls\qschannelbackend.dll
                    • Size 257KB
                    • SHA256 ad8d88a72abd775a59a8a267094b517812342b4641cafe80576e18571ceaac03
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_ar.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_ar.qm
                    • Size 104B
                    • SHA256 b11333c520ccd8e375cde20985df402d586a1a95e0796313bbeb9f717d4db22e
                    • MD5 SHA1 SHA512 TLSH

                    qt_bg.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_bg.qm
                    • Size 91B
                    • SHA256 1e22ee126ec9f76031d880285a907b3a0c4510392319ff700dcdee964abbb1ad
                    • MD5 SHA1 SHA512 TLSH

                    qt_ca.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_ca.qm
                    • Size 91B
                    • SHA256 17ab2623c7f6e8def44b3dbcb517544185817d65f1298ddb10ef71136f232bdc
                    • MD5 SHA1 SHA512 TLSH

                    qt_cs.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_cs.qm
                    • Size 95B
                    • SHA256 c585918fb1d4821a054ea40bdcf279f275ca76c88a5793f433dac6a611ac7e8f
                    • MD5 SHA1 SHA512 TLSH

                    qt_da.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_da.qm
                    • Size 91B
                    • SHA256 f6773c672acb73fdef6e092060d69d1e5dfee840012bac912d1e92de28714386
                    • MD5 SHA1 SHA512 TLSH

                    qt_de.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_de.qm
                    • Size 91B
                    • SHA256 0401c316aa3b50a172eb44a4ff1ec384924073beec7c928ef888ec48e4612688
                    • MD5 SHA1 SHA512 TLSH

                    qt_es.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_es.qm
                    • Size 91B
                    • SHA256 648ed4519bc45d7a4779479a7626ea16cf9aa23e93a0b178546cc47bea0591ab
                    • MD5 SHA1 SHA512 TLSH

                    qt_fa.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_fa.qm
                    • Size 84B
                    • SHA256 3f4c989c6b2990d80cc6299408214b31698923b52f154483b3371875de91f88e
                    • MD5 SHA1 SHA512 TLSH

                    qt_fi.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_fi.qm
                    • Size 91B
                    • SHA256 342d01c7eeb234e431d0506821c4cd03c0433115d8d63fee3357be2331858879
                    • MD5 SHA1 SHA512 TLSH

                    qt_fr.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_fr.qm
                    • Size 91B
                    • SHA256 c896a38892a92346b033793d56440993236b23e47e06f3974afdb0552f628387
                    • MD5 SHA1 SHA512 TLSH

                    qt_gd.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_gd.qm
                    • Size 70B
                    • SHA256 49df855a004a17950338af3146466f6df4d5852410bd0b58ea80e0d0203a9d24
                    • MD5 SHA1 SHA512 TLSH

                    qt_gl.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_gl.qm
                    • Size 316KB
                    • SHA256 204a01ac7deb6b5bae193afecbd1e50d18c73bf7d94badeb2bbfdf6123c4ed93
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_he.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_he.qm
                    • Size 57B
                    • SHA256 36f01fff2f25e116d4b7af78097b7e49520fd5b7fb6fb120e40be228c05c045f
                    • MD5 SHA1 SHA512 TLSH

                    qt_help_ar.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_ar.qm
                    • Size 8KB
                    • SHA256 222088c9752d1cc3bab985ef2dc77e5ae78578dce18a61ec15b39f02e588163d
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_bg.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_bg.qm
                    • Size 10KB
                    • SHA256 cbcdd1e0bbae332d80ddb0a286056f17c824fa28d353d7fdf12fc97d9f6fe054
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_ca.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_ca.qm
                    • Size 7KB
                    • SHA256 8c98b5ee246e18397d0de7bd76b2891773a975553ec5dcdce42f8a696e5b34de
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_cs.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_cs.qm
                    • Size 14KB
                    • SHA256 4ac56fc63e400943bab13f1d4c418502138908e1d488c24aee6131d3d17552aa
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_da.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_da.qm
                    • Size 4KB
                    • SHA256 6bb092552a398687119f6d52145f04bf8373977446d8f00c0dcbd56b96829f0f
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_de.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_de.qm
                    • Size 7KB
                    • SHA256 037bc99abf98571ae9375c2513536c15b571d66406c36c1de447b547ff539c07
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_es.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_es.qm
                    • Size 10KB
                    • SHA256 fd16b279f8cf69077f75e94d90c9c07a2afff3948a579e3789f5ffb5e5f4202d
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_fr.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_fr.qm
                    • Size 3KB
                    • SHA256 875ee2dcdc64e3dea888d84048e382d3921a175f12847de2e6b1cb12ad9add50
                    • MD5 SHA1 SHA512 TLSH

                    qt_help_gl.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_gl.qm
                    • Size 10KB
                    • SHA256 7399a248609974773f60866c87b78ea7dfbc4f750313d692f7886cd763883c9f
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_hr.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_hr.qm
                    • Size 5KB
                    • SHA256 8c8cc3c5b1ab2b074f82937001b896603420ef75592b3b78172177360dd7ea61
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_hu.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_hu.qm
                    • Size 7KB
                    • SHA256 7be32e015119c969453abb6e8f3fb377963a69fafb10c27b796737b5eb283eaf
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_it.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_it.qm
                    • Size 10KB
                    • SHA256 316fe8d0815e2b4b396895beb38ef1a40431915b5e054df80f4c0cd556f26e4b
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_ja.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_ja.qm
                    • Size 7KB
                    • SHA256 ae603b2c0d434d40cde433ffcba65f9ee27978a9e19316007be7fe782a5b8b47
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_ka.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_ka.qm
                    • Size 6KB
                    • SHA256 159c74f94b384b5ee6afdf38b6cfc4806bc99ecf73be02d4a7021d4ceba7ec7e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_ko.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_ko.qm
                    • Size 5KB
                    • SHA256 f11c64694e8e34e1d2c46c1a1d15d6ba9f2db7b61de4fdf54eca5ab977c3e052
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_nl.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_nl.qm
                    • Size 4KB
                    • SHA256 44a8a0daf775d14352180052d13f623814d7bdf98e2c5c80144b7bf74214e3b0
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_nn.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_nn.qm
                    • Size 6KB
                    • SHA256 4c8a7213942078e4f72f5babd26c41b77ace70189714a58b5504a7d5ad0193dc
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_pl.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_pl.qm
                    • Size 9KB
                    • SHA256 cc6cb4d8c54086224672f2e49e623c8cb7c0c1cd65b8d5ecd42fc9ba3a6065bd
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_pt_BR.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_pt_BR.qm
                    • Size 15KB
                    • SHA256 b4015c5d519b4fe93c00bf734d1742e4f0094d89862664d548eb64a46a2feae7
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_ru.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_ru.qm
                    • Size 7KB
                    • SHA256 557b644e6da5f1ec720ef93965617087e4d1f40b2494cc5aa524cf3796108de7
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_sk.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_sk.qm
                    • Size 10KB
                    • SHA256 f41e33e1d790bd0d3eb180f1f875bc191fe74773628f25c2cad95e1402e66867
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_sl.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_sl.qm
                    • Size 10KB
                    • SHA256 2ec955e662407ebcd8dcdae5aaa21e4108e0b5b0aee0e9db712c27072943535f
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_sv.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_sv.qm
                    • Size 6KB
                    • SHA256 95bdb03dbaa6dbdfda46c249e9ccce9a353f71ddb8b112961e8b005b2c60b13c
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_tr.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_tr.qm
                    • Size 6KB
                    • SHA256 81da2f88cd624097581f2d29b10311796bcd9ab289e65883346d276110542d28
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_uk.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_uk.qm
                    • Size 9KB
                    • SHA256 497cfc473684692ee44d7a3795e8fb2270c57069fd9eb98a615dd29ab9be8a7c
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_zh_CN.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_zh_CN.qm
                    • Size 4KB
                    • SHA256 e256d1f6034a5a5521c62f129f91731216e474f71e1d9caea3d3dcb11b670deb
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_help_zh_TW.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_help_zh_TW.qm
                    • Size 5KB
                    • SHA256 40112812abb43853d678cc6d97729f21f21b3a7321c827fc9d18f6c936447d1e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_hr.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_hr.qm
                    • Size 102B
                    • SHA256 fc9e4146f33be3d09b234be01e56235d3037d8d82d64f0700b4d4a6e253a61a7
                    • MD5 SHA1 SHA512 TLSH

                    qt_hu.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_hu.qm
                    • Size 84B
                    • SHA256 c2fa649f167cdb801d1cc0cb69c1d93594fd5bf8c0b7e79b969935da5c3e19aa
                    • MD5 SHA1 SHA512 TLSH

                    qt_it.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_it.qm
                    • Size 91B
                    • SHA256 9e7a18bc20ebeec54baaaf41c918a74534511271f796dffffd0f9b9ec31c68d3
                    • MD5 SHA1 SHA512 TLSH

                    qt_ja.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_ja.qm
                    • Size 84B
                    • SHA256 0f5fe50452947d1ee9755249d860354bff6977279b4c496a5bc77e5b89dd745e
                    • MD5 SHA1 SHA512 TLSH

                    qt_ka.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_ka.qm
                    • Size 94B
                    • SHA256 00b67c6dfc255079b5b98a5640f82519c96b2520a028682fba4078b39d743eaa
                    • MD5 SHA1 SHA512 TLSH

                    qt_ko.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_ko.qm
                    • Size 84B
                    • SHA256 1d254b535e1cb35cbcad8210b15b89f4488159826bf35b4504696263dd102fa3
                    • MD5 SHA1 SHA512 TLSH

                    qt_lg.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_lg.qm
                    • Size 57B
                    • SHA256 6ba668501f4c040c66da1bdc022362da3c8cf663da6aa484cbdb599028da98ed
                    • MD5 SHA1 SHA512 TLSH

                    qt_lt.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_lt.qm
                    • Size 161KB
                    • SHA256 47eb5f97467df769261421d54a5bea1131c9fb9b6388791d38bb6574335b64bf
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_lv.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_lv.qm
                    • Size 63B
                    • SHA256 addeca285282338294f24ca50d37d08a5f68d3785d0a94af86dd4ec8f2a3b449
                    • MD5 SHA1 SHA512 TLSH

                    qt_nl.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_nl.qm
                    • Size 91B
                    • SHA256 39e870cbd25c0f97fa9b1828d5ea1ed9849857a2e26c5321b3f13c76be8f0548
                    • MD5 SHA1 SHA512 TLSH

                    qt_nn.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_nn.qm
                    • Size 91B
                    • SHA256 4e544e23f75eafe1553dc896973db23b5795cd243786d5c653cc0f36a46ca74f
                    • MD5 SHA1 SHA512 TLSH

                    qt_pl.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_pl.qm
                    • Size 99B
                    • SHA256 e6890afa0caf0f6db0248e4c94f6016b8ec8bc266f1e0e9b8f01e8ea912cf968
                    • MD5 SHA1 SHA512 TLSH

                    qt_pt_BR.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_pt_BR.qm
                    • Size 106B
                    • SHA256 0e24c58e35271853f8cdfb3f0f7b0741b5a9a588e43cdec62ae85a3842771e0a
                    • MD5 SHA1 SHA512 TLSH

                    qt_pt_PT.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_pt_PT.qm
                    • Size 68KB
                    • SHA256 2c1e7bbf5168a64b43752dd4c547601c0bde6d610f8671fa3e3af38597e84783
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_ru.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_ru.qm
                    • Size 102B
                    • SHA256 1b388e2d6d1bd405603e794e498c6d7ec5f5a5ad819243546f6399181da36758
                    • MD5 SHA1 SHA512 TLSH

                    qt_sk.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_sk.qm
                    • Size 95B
                    • SHA256 840c3b01c89df976fc1d2e5bfc6fc84b65666b8a3ceb4cbf5aa0c22af3d2a383
                    • MD5 SHA1 SHA512 TLSH

                    qt_sl.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_sl.qm
                    • Size 223KB
                    • SHA256 c44e0313a9414cc0e490b65b0c036fa11bca959353b228886547bc2c8492034f
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qt_sv.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_sv.qm
                    • Size 91B
                    • SHA256 daaae448e0814b469ac3d7a91096fde15491600a6b8bc6c01508425fb5e8b3ec
                    • MD5 SHA1 SHA512 TLSH

                    qt_tr.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_tr.qm
                    • Size 84B
                    • SHA256 59e8a0c411be3b0802a68561b090f182099d6b75c4fe46f398e55f11528e11b9
                    • MD5 SHA1 SHA512 TLSH

                    qt_uk.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_uk.qm
                    • Size 102B
                    • SHA256 053ec1f677c4dba48c6a97eb28f4fc78c1511324d1843d7f4cec2c7c00a66145
                    • MD5 SHA1 SHA512 TLSH

                    qt_zh_CN.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_zh_CN.qm
                    • Size 99B
                    • SHA256 c0e29d32c9540a7e78643b74214e633c56f6ab11f018e516629f2c11b1fb09fc
                    • MD5 SHA1 SHA512 TLSH

                    qt_zh_TW.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qt_zh_TW.qm
                    • Size 99B
                    • SHA256 24e226954491689549a1a1990db3b8cb78888008d8163b2fd2442b772b6d1b5f
                    • MD5 SHA1 SHA512 TLSH

                    qtbase_ar.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_ar.qm
                    • Size 156KB
                    • SHA256 e03fe68d83201543698fd7fe267dd5dfc5bfd195147e74ff2f19ac3491401263
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_bg.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_bg.qm
                    • Size 161KB
                    • SHA256 e448ac9e3f16c29eb27af3012efe21052daa78fabfb34cd6dff2f69ee3bd3cdb
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_ca.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_ca.qm
                    • Size 204KB
                    • SHA256 005b0aa0c9a5b930dfdd870661958a8069bbec862d75f98bce20bf7401bea13d
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_cs.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_cs.qm
                    • Size 170KB
                    • SHA256 03028b42df5479270371e4c3bdc7df2f56cbbe6dda956a2864ac6f6415861fe8
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_da.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_da.qm
                    • Size 177KB
                    • SHA256 7d1e5ca3310b54d104c19bf2abd402b38e584e87039a70e153c4a9af74b25c22
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_de.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_de.qm
                    • Size 218KB
                    • SHA256 ed828a83dfaa51944f166c842155b48ab3bd7cb2c46dcd96269eb5d48af4f63f
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_es.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_es.qm
                    • Size 161KB
                    • SHA256 4ffda56ba3bb5414ab0482d1dde64a6f226e3488f6b7f3f11a150e01f53fa4c8
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_fa.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_fa.qm
                    • Size 144KB
                    • SHA256 f78e59b5bdd586181a999034ba418868ed17fe9c05707fb65e523f70e92253d2
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_fi.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_fi.qm
                    • Size 175KB
                    • SHA256 e47fe13713e184d07fa4495dde0c589b0e8f562e91574a3558a9363443a4fa72
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_fr.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_fr.qm
                    • Size 155KB
                    • SHA256 314243a55c32679ad473fdfe48dc7d66e973ad0fc8bf2164480c58dddb50c1a7
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_gd.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_gd.qm
                    • Size 185KB
                    • SHA256 63b439dd44139aa3aed54c2ebe03fa9bc77f22c14ed8fba8eff2608445bb233d
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_he.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_he.qm
                    • Size 135KB
                    • SHA256 e1ebca16afe8994356f81ca007fbdb9ddf865842010fe908923d873b687cad3f
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_hr.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_hr.qm
                    • Size 146KB
                    • SHA256 bb9eec9a9a652c1340dc75eb2e749be50df00f885b3d6900dfc76799c45b244d
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_hu.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_hu.qm
                    • Size 201KB
                    • SHA256 98463295539d769c8645a0b7fb95ad38454cfd0b14f36af485513f036ddbbbc6
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_it.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_it.qm
                    • Size 157KB
                    • SHA256 7808ed542a7833c4bd94ec8bdfbbca00bb4f2fe15979b9121ce3249323687300
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_ja.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_ja.qm
                    • Size 126KB
                    • SHA256 2b9581c69b975f59be505b127cd3c19d403ef3d12e0e8386fb97238223e9c1df
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_ka.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_ka.qm
                    • Size 196KB
                    • SHA256 e55e4b72fa620bebee5297ca59dfe2f49894a1e544f2b7485b1cfd8829289d6f
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_ko.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_ko.qm
                    • Size 153KB
                    • SHA256 0179ed1b136e1cb3f583351eaa2c545ba3d83a6ee3f82c32505926a1a5f5f183
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_lg.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_lg.qm
                    • Size 308KB
                    • SHA256 31c0cc4ce13b1d74fe0c19ed0b47638fb31e20c93ee08092533e884007aebfb5
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_lv.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_lv.qm
                    • Size 150KB
                    • SHA256 846e047573ae40c83671c3ba7f73e27efc24b98c82701da0df9973e574178bb2
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_nl.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_nl.qm
                    • Size 198KB
                    • SHA256 f61513bcdbb6ad800585f9437a95d018aab17fa12ee414aa31462ff279d8240e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_nn.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_nn.qm
                    • Size 191KB
                    • SHA256 f9f2fb7c60e7fcb38bbd3c1314ef122145594265e20b0659ff00004baab13ac7
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_pl.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_pl.qm
                    • Size 159KB
                    • SHA256 3cf6b5c14d5eb0cf81e9af2066e66b3aa579a6b9b3c323ed670761f6254a8c54
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_pt_BR.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_pt_BR.qm
                    • Size 284KB
                    • SHA256 3475d61604b938d459949801a906dbd34a8ca824ade94120015d676e208da859
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_ru.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_ru.qm
                    • Size 198KB
                    • SHA256 3da6605668f9178d11a838c4515478084dcfb4f9cf22f99d7a92b492db9c224b
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_sk.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_sk.qm
                    • Size 122KB
                    • SHA256 d586ae2c314074cf398417fdecb40709d5478dfeb0a67c2fe60d509ee9b59ed7
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_sv.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_sv.qm
                    • Size 193KB
                    • SHA256 ed7786bb4fec609e99e98c5c91fa468add90093e95079b9eb7ff2e01371c6abe
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_tr.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_tr.qm
                    • Size 242KB
                    • SHA256 353fdfd7165659a49212e7a25bf91c0a71588e52c836f7496640f26782414634
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_uk.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_uk.qm
                    • Size 154KB
                    • SHA256 51b8ff55b37dc5907d637a8ddda12fbe816852b0244c74eb4f0fb84867a786e0
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_zh_CN.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_zh_CN.qm
                    • Size 143KB
                    • SHA256 0481a9b92a6f0578400e960a7d5ee70217a6a450eaf7f98b7d32b8dbd0d58616
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qtbase_zh_TW.qm

                    • Path C:\Program Files\Zapret Hub\_internal\PySide6\translations\qtbase_zh_TW.qm
                    • Size 123KB
                    • SHA256 21012b2b427f8d09d31ce9cae582ca27955b478ca3dc2ec18a3068d808638c6a
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    _asyncio.pyd

                    • Path C:\Program Files\Zapret Hub\_internal\_asyncio.pyd
                    • Size 63KB
                    • SHA256 746bc8fa88282afe19dc60e426cc0a75bea3bd137cca06a0b57a30bd31459403
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    _cffi_backend.cp311-win_amd64.pyd

                    • Path C:\Program Files\Zapret Hub\_internal\_cffi_backend.cp311-win_amd64.pyd
                    • Size 174KB
                    • SHA256 8100f667a3f64eeb37b9326d0c53a931e0ea3cea4ade5dbdc638c368355c0948
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    _multiprocessing.pyd

                    • Path C:\Program Files\Zapret Hub\_internal\_multiprocessing.pyd
                    • Size 33KB
                    • SHA256 975c1947798e3c39898c86675ca1eb68249f77361f41f172f9800275227213b9
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    _overlapped.pyd

                    • Path C:\Program Files\Zapret Hub\_internal\_overlapped.pyd
                    • Size 50KB
                    • SHA256 ca106e4dfdeafeabf9e98956d3d8d0cb73e109f1a96f1a7e35bc47dbd7c7e164
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    _queue.pyd

                    • Path C:\Program Files\Zapret Hub\_internal\_queue.pyd
                    • Size 31KB
                    • SHA256 3f8e7e6aa13b417acc78b63434fb1144e6319a010a9fc376c54d6e69b638fe4c
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    _ssl.pyd

                    • Path C:\Program Files\Zapret Hub\_internal\_ssl.pyd
                    • Size 174KB
                    • SHA256 ba5388d6a6557d431e086734a3323621dc447f63ba299b0a815e5837cf869678
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    _uuid.pyd

                    • Path C:\Program Files\Zapret Hub\_internal\_uuid.pyd
                    • Size 24KB
                    • SHA256 e6aa7f1637e211251c9d6f467203b2b6d85e5bc2d901699f2a55af637fa89250
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    base_library.zip

                    • Path C:\Program Files\Zapret Hub\_internal\base_library.zip
                    • Size 1.4MB
                    • SHA256 a6e436902719dba0ecef9f6df03455d7c65f4a4e26bb0ccb53ed1ed9d83ad82e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    INSTALLER

                    • Path C:\Program Files\Zapret Hub\_internal\cryptography-46.0.7.dist-info\INSTALLER
                    • Size 4B
                    • SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
                    • MD5 SHA1 SHA512

                    METADATA

                    • Path C:\Program Files\Zapret Hub\_internal\cryptography-46.0.7.dist-info\METADATA
                    • Size 5KB
                    • SHA256 cd6e7fad3b9e42368313d459aa4914bd59f39893828145a00219fbc61c75cff1
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    RECORD

                    • Path C:\Program Files\Zapret Hub\_internal\cryptography-46.0.7.dist-info\RECORD
                    • Size 15KB
                    • SHA256 07b51e2650ac95f0525588739f41bf616b3be73041c9293d75deeba75d44c1d2
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    WHEEL

                    • Path C:\Program Files\Zapret Hub\_internal\cryptography-46.0.7.dist-info\WHEEL
                    • Size 95B
                    • SHA256 f2111ff0dcccd459e633bec08d5b7987c9c3b9890ddd4a99efd2e82001d77911
                    • MD5 SHA1 SHA512 TLSH

                    LICENSE

                    • Path C:\Program Files\Zapret Hub\_internal\cryptography-46.0.7.dist-info\licenses\LICENSE
                    • Size 197B
                    • SHA256 3e0c7c091a948b82533ba98fd7cbb40432d6f1a9acbf85f5922d2f99a93ae6bb
                    • MD5 SHA1 SHA512 TLSH

                    LICENSE.APACHE

                    • Path C:\Program Files\Zapret Hub\_internal\cryptography-46.0.7.dist-info\licenses\LICENSE.APACHE
                    • Size 11KB
                    • SHA256 aac73b3148f6d1d7111dbca32099f68d26c644c6813ae1e4f05f6579aa2663fe
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    LICENSE.BSD

                    • Path C:\Program Files\Zapret Hub\_internal\cryptography-46.0.7.dist-info\licenses\LICENSE.BSD
                    • Size 1KB
                    • SHA256 602c4c7482de6479dd2e9793cda275e5e63d773dacd1eca689232ab7008fb4fb
                    • MD5 SHA1 SHA512 TLSH

                    _rust.pyd

                    • Path C:\Program Files\Zapret Hub\_internal\cryptography\hazmat\bindings\_rust.pyd
                    • Size 8.7MB
                    • SHA256 fe5c4cdb5512f792fb0f5b3ce0cd8c1484614851d56ff5d1e7215213eb9e0bca
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    libssl-3.dll

                    • Path C:\Program Files\Zapret Hub\_internal\libssl-3.dll
                    • Size 768KB
                    • SHA256 2e9fbcd8f7fdc13a5179533239811456554f2b3aa2fb10e1b17be0df81c79006
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    pyexpat.pyd

                    • Path C:\Program Files\Zapret Hub\_internal\pyexpat.pyd
                    • Size 194KB
                    • SHA256 c7c7564f7f874fb660a46384980a2cf28bc3e245ca83628a197ccf861eab5560
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    VCRUNTIME140.dll

                    • Path C:\Program Files\Zapret Hub\_internal\shiboken6\VCRUNTIME140.dll
                    • Size 113KB
                    • SHA256 9fabc4d1fd2ffbe1dbb7590d4c660fcbfc9f551a3e4233d2b70d8e6406c6a46d
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    settings.json

                    • Path C:\Program Files\Zapret Hub\data\settings.json
                    • Size 704B
                    • SHA256 857a5929aea1b0fe343f662f00d8c857202c3a45896027f918dd1a80507b7c36
                    • MD5 SHA1 SHA512 TLSH

                    .dockerignore

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\.dockerignore
                    • Size 258B
                    • SHA256 2bcde9f353a74d1385ef09f778f7406f2f875e6ce3eeca84ecef0c80a198632a
                    • MD5 SHA1 SHA512 TLSH

                    .gitattributes

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\.gitattributes
                    • Size 117B
                    • SHA256 a6f3790a201f2d85a1059e6e2c76264a78fd9743451adffd0a93d9c284401452
                    • MD5 SHA1 SHA512 TLSH

                    FUNDING.yml

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\.github\FUNDING.yml
                    • Size 53B
                    • SHA256 76eb5d4c7cc356e1954c4e3990b6b936eaf98def26c73912934a6d2774e833b8
                    • MD5 SHA1 SHA512 TLSH

                    bug_report.yml

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\.github\ISSUE_TEMPLATE\bug_report.yml
                    • Size 811B
                    • SHA256 64bc76bc75c5bce637cc698bb77eb46ede9d7c4bd97423c48de03e2e3716f20c
                    • MD5 SHA1 SHA512 TLSH

                    cfproxy-domains.txt

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\.github\cfproxy-domains.txt
                    • Size 68B
                    • SHA256 523cfaed4b9eca86afa2f82c347d24822f4c90ae90ea8f9a538b095bcb07385a
                    • MD5 SHA1 SHA512 TLSH

                    build.yml

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\.github\workflows\build.yml
                    • Size 12KB
                    • SHA256 3abb6f9ad8d6be1c40026228e67e8d8b953ffab0a23a4256e5b08f7c0d24d852
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    .gitignore

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\.gitignore
                    • Size 296B
                    • SHA256 cdfad5ad9b3c73acffd9277a1619a7e744a638e7da3bf8df00bbe4076838856a
                    • MD5 SHA1 SHA512 TLSH

                    Dockerfile

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\Dockerfile
                    • Size 1KB
                    • SHA256 9f425cad2a6280c003994e7effa3241696016578b9421b34bdafe15eef6344c4
                    • MD5 SHA1 SHA512 TLSH

                    LICENSE

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\LICENSE
                    • Size 1KB
                    • SHA256 2a98256df06052c3b132cf522e356da90ade2f749b6f7435f7cdafd1d9123fa2
                    • MD5 SHA1 SHA512 TLSH

                    TgWsProxy_windows.exe

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\bin\TgWsProxy_windows.exe
                    • Size 19.3MB
                    • SHA256 95636514e84f595489862cdf0689bf0854b7d7a703b8e3f725eb581595e1a4d1
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    CfProxy.md

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\docs\CfProxy.md
                    • Size 2KB
                    • SHA256 d7d08e3ecdd23950ee08cd453fc2c41c62da65dc4cab8e8b1acf1667212821a6
                    • MD5 SHA1 SHA512 TLSH

                    README.md

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\docs\README.md
                    • Size 13KB
                    • SHA256 a8591284e6e95e46220bf90522e926c5589eb893a01d959a5d16b9b0b3b38a7e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    icon.ico

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\icon.ico
                    • Size 473B
                    • SHA256 0e228430885976ede0853c1cb22b93b21b4d0228acfdef31506161dba14fcf55
                    • MD5 SHA1 SHA512 TLSH

                    linux.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\linux.py
                    • Size 8KB
                    • SHA256 9dd1ae31ed099bd89c0e20b49b99ab172953cfae835e8eb6db13cdd15c740708
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    macos.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\macos.py
                    • Size 19KB
                    • SHA256 901a937fabd85c895f3f56a239780f6fc99ce391a758825ba50f135a93965093
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    linux.spec

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\packaging\linux.spec
                    • Size 2KB
                    • SHA256 7cef429f08b1b209d83a6d67335b9f868d3b973eeac37403b49f22fed8728844
                    • MD5 SHA1 SHA512 TLSH

                    macos.spec

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\packaging\macos.spec
                    • Size 2KB
                    • SHA256 acd5399a95599f6f2e8ac3530b08cb71dc81c45ddd9e521188d06bf0fe92d1bd
                    • MD5 SHA1 SHA512 TLSH

                    version_info.txt

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\packaging\version_info.txt
                    • Size 1KB
                    • SHA256 e39ed2a46ccc99ccd18cd6d7aa6bf8183018011adf521645893e9b57b2ca8415
                    • MD5 SHA1 SHA512 TLSH

                    windows.spec

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\packaging\windows.spec
                    • Size 1KB
                    • SHA256 1366e202d6872a28812c607e46cc6eaa189c5bc80b125dd90a6e8f77940cf983
                    • MD5 SHA1 SHA512 TLSH

                    __init__.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\proxy\__init__.py
                    • Size 186B
                    • SHA256 faae28bdd622886949174597a9f9c96b685231915d3a24ba843af1971ee85fd4
                    • MD5 SHA1 SHA512 TLSH

                    bridge.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\proxy\bridge.py
                    • Size 11KB
                    • SHA256 8006fca87db8d8e115ee8f9a5a66a97f9c48f78e9c57790d42ece7adf725e574
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    config.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\proxy\config.py
                    • Size 3KB
                    • SHA256 696766df63961c24497226b27a44ca72e5ba47b7570a1a0455cf18ebe2d2d708
                    • MD5 SHA1 SHA512 TLSH

                    fake_tls.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\proxy\fake_tls.py
                    • Size 7KB
                    • SHA256 01754365236656658c4b5138c1bd1e27da58daffab058a1d92d67db54e52afaf
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    raw_websocket.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\proxy\raw_websocket.py
                    • Size 7KB
                    • SHA256 fb1684e2b54a5c323c820096607c82faf3bdead1541c6605f23633f64800503f
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    stats.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\proxy\stats.py
                    • Size 1KB
                    • SHA256 c816a902199b77930970ba1a992712c67bb92d9e7c8ce94299545e8de3a22e5a
                    • MD5 SHA1 SHA512 TLSH

                    tg_ws_proxy.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\proxy\tg_ws_proxy.py
                    • Size 27KB
                    • SHA256 1a83ae4aa843b3ae6676a45a4dbf95c24cdbd9e6c07bdcd4f5893bd23c28917c
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    utils.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\proxy\utils.py
                    • Size 1KB
                    • SHA256 2c823f18db2799df862b184c34e026621dd54b4919d11abec515bf5c0c4a59d5
                    • MD5 SHA1 SHA512 TLSH

                    pyproject.toml

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\pyproject.toml
                    • Size 2KB
                    • SHA256 454b1e85cc83e8dc53375a9a84b5b4ba1f73e9e25f4b9722f419b83267a6323f
                    • MD5 SHA1 SHA512 TLSH

                    __init__.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\ui\__init__.py
                    • Size 158B
                    • SHA256 fed04f479d8cf53d45ebd42984d094ae681810049eebfa08b62592a8e60501f0
                    • MD5 SHA1 SHA512 TLSH

                    ctk_theme.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\ui\ctk_theme.py
                    • Size 2KB
                    • SHA256 9d5470556d4b6254f9eed909ea62ee7152cfbbb11f06f9087732bd2bb6073066
                    • MD5 SHA1 SHA512 TLSH

                    ctk_tooltip.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\ui\ctk_tooltip.py
                    • Size 2KB
                    • SHA256 66ff3fe90857e1a3b8bd80539ee2b82dfb9c599d125b988a9806917603c4b2d9
                    • MD5 SHA1 SHA512 TLSH

                    ctk_tray_ui.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\ui\ctk_tray_ui.py
                    • Size 30KB
                    • SHA256 acd614f902f33a98dbd48cac721561fb8c9c4f9b243b706759247711e20a1fa2
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    __init__.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\utils\__init__.py
                    • Size 230B
                    • SHA256 7df9f1e7bf1ebb6ca917c28d6a03174dc04de9b5cf5c47f9028484e37ffef5b2
                    • MD5 SHA1 SHA512 TLSH

                    default_config.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\utils\default_config.py
                    • Size 864B
                    • SHA256 54174329254d6970cf79eaab1c00c344f8f7a5bdbab51251ea80a686e24eed14
                    • MD5 SHA1 SHA512 TLSH

                    tray_common.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\utils\tray_common.py
                    • Size 13KB
                    • SHA256 7db8fff528c9f327acb49a7ec703f9ab737bee033fc598ebc5e222fe7453c53a
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    update_check.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\utils\update_check.py
                    • Size 7KB
                    • SHA256 1f76e07c0c58d92808437c15c8873e52ee71f70398ba923acb83e535aaba3842
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    win32_theme.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\utils\win32_theme.py
                    • Size 929B
                    • SHA256 b3fb1b9c50b8da616498777424f29b98a96e8a91dfa95d06b8a2b974c4de18f9
                    • MD5 SHA1 SHA512 TLSH

                    windows.py

                    • Path C:\Program Files\Zapret Hub\runtime\tg-ws-proxy\windows.py
                    • Size 12KB
                    • SHA256 6b44be338d22e0decafa44ba16ba13094149d4bf5cd6dd3d1b30f5e5b46e0d0b
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    .gitattributes

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\.gitattributes
                    • Size 40B
                    • SHA256 ea23d58c9059b3c7ec439890635357b8cc6ad36daa8448c36147a6cc3f3152bf
                    • MD5 SHA1 SHA512

                    bug_report.yml

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\.github\ISSUE_TEMPLATE\bug_report.yml
                    • Size 1KB
                    • SHA256 205e9b217bfc0efb36a5f57afba9f056434015b739d555166d64fd4c452660ea
                    • MD5 SHA1 SHA512 TLSH

                    comment.yml

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\.github\workflows\comment.yml
                    • Size 4KB
                    • SHA256 881939f0abd4e9947cd0cbc64083b912b9c7b7452e952a5a8afda2aca10c606e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    stale.yml

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\.github\workflows\stale.yml
                    • Size 991B
                    • SHA256 e357be2202f354a06cf628170a3e481c9b7acbdb4cd3bb00d5f54289103e253b
                    • MD5 SHA1 SHA512 TLSH

                    .gitignore

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\.gitignore
                    • Size 138B
                    • SHA256 a00145c4fa3b5290672682f8a9810bd2b9b2bdc5edd86a785b7b63ff374e273f
                    • MD5 SHA1 SHA512 TLSH

                    hosts

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\.service\hosts
                    • Size 9KB
                    • SHA256 42dfcc9a7c8568fdcd5b87c04025aee16f5b5f971b4d68ef49019bfa1a876885
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ipset-service.txt

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\.service\ipset-service.txt
                    • Size 273KB
                    • SHA256 5e27d465047fbeed62062985d9760461a5fe4553bdb593cf5fd2f7a673a30b0a
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    version.txt

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\.service\version.txt
                    • Size 6B
                    • SHA256 0f0f8d67294ac053c009f478ca91fc05c5d6991d74adafdc408b82df4bdf7d1a
                    • MD5 SHA1 SHA512

                    LICENSE.txt

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\LICENSE.txt
                    • Size 2KB
                    • SHA256 8ea76af265366af6ef96595705ad21cafab82f2786203ae70d29a970260434dc
                    • MD5 SHA1 SHA512 TLSH

                    README.md

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\README.md
                    • Size 18KB
                    • SHA256 843d1113210afe05dbd16d3670cd34816419dcdc5c7a1a981e7d476f1c7c4f29
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    WinDivert64.sys

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\bin\WinDivert64.sys
                    • Size 91KB
                    • SHA256 8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    quic_initial_www_google_com.bin

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\bin\quic_initial_www_google_com.bin
                    • Size 1KB
                    • SHA256 f4589c57749f956bb30538197a521d7005f8b0a8723b4707e72405e51ddac50a
                    • MD5 SHA1 SHA512 TLSH

                    stun.bin

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\bin\stun.bin
                    • Size 100B
                    • SHA256 9cd5469309780ca56c0bd97266524a48c7ee529d02c3179cfecb20b260a59641
                    • MD5 SHA1 SHA512 TLSH

                    tls_clienthello_4pda_to.bin

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\bin\tls_clienthello_4pda_to.bin
                    • Size 284B
                    • SHA256 eefeaf09dde8d69b1f176212541f63c68b314a33a335eced99a8a29f17254da8
                    • MD5 SHA1 SHA512 TLSH

                    tls_clienthello_max_ru.bin

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\bin\tls_clienthello_max_ru.bin
                    • Size 664B
                    • SHA256 4ee0870abe0a0128600b0095189987ba1d210dae8bf963bc725aff49cf922624
                    • MD5 SHA1 SHA512 TLSH

                    tls_clienthello_www_google_com.bin

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\bin\tls_clienthello_www_google_com.bin
                    • Size 681B
                    • SHA256 936c2bee4cfb80aa3c426b2dcbcc834b3fbcd1adb17172959dc569c73a14275c
                    • MD5 SHA1 SHA512 TLSH

                    winws.exe

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\bin\winws.exe
                    • Size 199KB
                    • SHA256 affb4f69d2ea302a7abccd5325d81826e140ddae014f1e070bc4a6c0dd555188
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    general (ALT).bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general (ALT).bat
                    • Size 3KB
                    • SHA256 1c0b20341128ca2dff78902acf5270a071d7ea65c7694549d4269c7730b61d1e
                    • MD5 SHA1 SHA512 TLSH

                    general (ALT10).bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general (ALT10).bat
                    • Size 3KB
                    • SHA256 9ce4a37ad5535b7b6316a0b8fb578d42af87dfbe5077cdd077ed67901e603dbc
                    • MD5 SHA1 SHA512 TLSH

                    general (ALT11).bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general (ALT11).bat
                    • Size 3KB
                    • SHA256 c9ba68454e647c69d62a96eca3b378e3bb60cd22cd66d759c945ee24fb073e2f
                    • MD5 SHA1 SHA512 TLSH

                    general (ALT2).bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general (ALT2).bat
                    • Size 3KB
                    • SHA256 3dfab68519b23c747a6de957c197c467b2dbe5c932ac24713b5d5e31f18f4af2
                    • MD5 SHA1 SHA512 TLSH

                    general (ALT3).bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general (ALT3).bat
                    • Size 3KB
                    • SHA256 5e50cbd4e74796a8fb42555b076cb1b7d5abcf5ffe1227c8d82f17826732b37a
                    • MD5 SHA1 SHA512 TLSH

                    general (ALT4).bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general (ALT4).bat
                    • Size 3KB
                    • SHA256 2ce749c1db9918215833af6cc116be096ea0e1c07181f81b064ef0f61c396cf4
                    • MD5 SHA1 SHA512 TLSH

                    general (ALT5).bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general (ALT5).bat
                    • Size 2KB
                    • SHA256 bcf8bdb486cb76150436010495e3a034b4568326add99ed44522050adb58e97a
                    • MD5 SHA1 SHA512 TLSH

                    general (ALT6).bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general (ALT6).bat
                    • Size 3KB
                    • SHA256 683d210becf3926d0ebd0bf76de6ddd6204bdb27bff0d90c5df30aaeea6843e5
                    • MD5 SHA1 SHA512 TLSH

                    general (ALT7).bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general (ALT7).bat
                    • Size 2KB
                    • SHA256 ff49bd6c4281da322925375465d57143e00ea9ea6d17b79e388801150c973802
                    • MD5 SHA1 SHA512 TLSH

                    general (ALT8).bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general (ALT8).bat
                    • Size 3KB
                    • SHA256 c561a5c35b7295488a5e2c3b45ada9868268177c3b0c397c9b5f02f7a4f955d6
                    • MD5 SHA1 SHA512 TLSH

                    general (ALT9).bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general (ALT9).bat
                    • Size 3KB
                    • SHA256 ae85bfe4fdf55f39abd09bf15d8b1e8ad73f0887560d3215e672985b4a07a74a
                    • MD5 SHA1 SHA512 TLSH

                    general (FAKE TLS AUTO ALT).bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general (FAKE TLS AUTO ALT).bat
                    • Size 3KB
                    • SHA256 c10d3818ead3efb0f26dc80d35a2a2735d577737ce38cd45055791ee29836231
                    • MD5 SHA1 SHA512 TLSH

                    general (FAKE TLS AUTO ALT2).bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general (FAKE TLS AUTO ALT2).bat
                    • Size 4KB
                    • SHA256 c5dc0eb693b704ace4995e19a148c2c9c41a75f1e2cefd074541d035a3b72e17
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    general (FAKE TLS AUTO ALT3).bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general (FAKE TLS AUTO ALT3).bat
                    • Size 3KB
                    • SHA256 da4cb05eef4f66356384beada9302ba2acb269d74a789a0fac50a44a2b357655
                    • MD5 SHA1 SHA512 TLSH

                    general (FAKE TLS AUTO).bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general (FAKE TLS AUTO).bat
                    • Size 3KB
                    • SHA256 6326284fff6fffdb101f9027c9a1b8bd9a62b03da4605561f908c2e1e98a8a13
                    • MD5 SHA1 SHA512 TLSH

                    general (SIMPLE FAKE ALT).bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general (SIMPLE FAKE ALT).bat
                    • Size 3KB
                    • SHA256 e825a469e2ff34a74c5a2bda7346f35b75ac1f58993daa340d03c8a4dfb63405
                    • MD5 SHA1 SHA512 TLSH

                    general (SIMPLE FAKE ALT2).bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general (SIMPLE FAKE ALT2).bat
                    • Size 3KB
                    • SHA256 0d0dfa6269823a049fcbb76d0736fe2302fdb5a33fd3af83bbc96ee7c492061f
                    • MD5 SHA1 SHA512 TLSH

                    general (SIMPLE FAKE).bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general (SIMPLE FAKE).bat
                    • Size 3KB
                    • SHA256 5b8648d0b44253397e68b8c2d5870ffc2d908d2abca947da7b8d068a0eeddf8f
                    • MD5 SHA1 SHA512 TLSH

                    general.bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\general.bat
                    • Size 3KB
                    • SHA256 47fac0d6b08bcac349e28141de2ca14df9f7cbbd83e16e4d126153c1df777dc7
                    • MD5 SHA1 SHA512 TLSH

                    ipset-exclude.txt

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\lists\ipset-exclude.txt
                    • Size 135B
                    • SHA256 96c03954012765ce4ab03b9c30f29ab1ca1b698c6752224d03828e6d182eb0fc
                    • MD5 SHA1 SHA512 TLSH

                    list-exclude.txt

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\lists\list-exclude.txt
                    • Size 573B
                    • SHA256 c2c40df272c85fe67155914086d0361da7f46be7a0fc85ee86ddf9b801432154
                    • MD5 SHA1 SHA512 TLSH

                    list-general.txt

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\lists\list-general.txt
                    • Size 870B
                    • SHA256 dc1e8a53b5ba3044bbe9ff91cb3283de05491076f5f7e0e49f5b7d5d1be86053
                    • MD5 SHA1 SHA512 TLSH

                    list-google.txt

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\lists\list-google.txt
                    • Size 379B
                    • SHA256 2bcb70db05d71fd1bc2445dcb543ea13d6d1818f46d968c34be14c14575763f3
                    • MD5 SHA1 SHA512 TLSH

                    service.bat

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\service.bat
                    • Size 28KB
                    • SHA256 29c9a2e1a543be1abcc18ced7ad52dfde17c6586579fab18bd602968cd20b8f6
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    check_updates.enabled

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\utils\check_updates.enabled
                    • Size 10B
                    • SHA256 02fa0e83883800772ec3462347e9a9f623fa3e13be7d4de7e0b2cb7e425ab212
                    • MD5 SHA1 SHA512

                    targets.txt

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\utils\targets.txt
                    • Size 1KB
                    • SHA256 4c953196e2649478c267450fc80cef121ef96bc50656ef75336b9589c0808cea
                    • MD5 SHA1 SHA512 TLSH

                    test zapret.ps1

                    • Path C:\Program Files\Zapret Hub\runtime\zapret-discord-youtube\utils\test zapret.ps1
                    • Size 37KB
                    • SHA256 9e9e69d1299f60f9189cfbd93db15d052ebce70781a0cbdf4b984b85db6e6824
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    general (ALT10.1).bat

                    • Path C:\Program Files\Zapret Hub\sample_data\default_mods\unified-by-goshkow\general (ALT10.1).bat
                    • Size 2KB
                    • SHA256 9e186e075ff89ada6db33445105216639fa7765d8e9c8088d9f3b550ee2c54ba
                    • MD5 SHA1 SHA512 TLSH

                    general (ALT11.1).bat

                    • Path C:\Program Files\Zapret Hub\sample_data\default_mods\unified-by-goshkow\general (ALT11.1).bat
                    • Size 3KB
                    • SHA256 8cceab95e9be7a2d08216ea0ca2e161a14405e004a0d4cfa6ff5ac84c759cef3
                    • MD5 SHA1 SHA512 TLSH

                    general (ALT11.2).bat

                    • Path C:\Program Files\Zapret Hub\sample_data\default_mods\unified-by-goshkow\general (ALT11.2).bat
                    • Size 2KB
                    • SHA256 8eec181da7a86fd41d41109d766790135e4f15a3c329be7dd6c5d366b80a2c8c
                    • MD5 SHA1 SHA512 TLSH

                    general (ALT7.1).bat

                    • Path C:\Program Files\Zapret Hub\sample_data\default_mods\unified-by-goshkow\general (ALT7.1).bat
                    • Size 2KB
                    • SHA256 11cbb5f42aaf4d71641342c1658dd30212a5b7967393f22edaa4d32c72555e24
                    • MD5 SHA1 SHA512 TLSH

                    general (ALT9.1).bat

                    • Path C:\Program Files\Zapret Hub\sample_data\default_mods\unified-by-goshkow\general (ALT9.1).bat
                    • Size 2KB
                    • SHA256 fee4936cf860621658a63f64fe815ec05e54c5a750236cb483b136024a3de574
                    • MD5 SHA1 SHA512 TLSH

                    ipset-all.txt

                    • Path C:\Program Files\Zapret Hub\sample_data\default_mods\unified-by-goshkow\lists\ipset-all.txt
                    • Size 6KB
                    • SHA256 0164922b1c2613a701945d601f2adaf6ff1847eb0e2a3f895e777634bd8cb398
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    list-exclude.txt

                    • Path C:\Program Files\Zapret Hub\sample_data\default_mods\unified-by-goshkow\lists\list-exclude.txt
                    • Size 428B
                    • SHA256 c0d18e836ed7f700cec109dae40c46ea74147b7b2dc24376e3aab045c2f525dd
                    • MD5 SHA1 SHA512 TLSH

                    list-general.txt

                    • Path C:\Program Files\Zapret Hub\sample_data\default_mods\unified-by-goshkow\lists\list-general.txt
                    • Size 8KB
                    • SHA256 3d943f8ca98d8baba17f2592df12883bb2ee0b62ac9f3c09da9682f991d094b6
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    list-google.txt

                    • Path C:\Program Files\Zapret Hub\sample_data\default_mods\unified-by-goshkow\lists\list-google.txt
                    • Size 362B
                    • SHA256 36ec86bbe19b9e5815d807d6b25dffd01bdf69e9cf6c05d7cf60cd7c9bf036d8
                    • MD5 SHA1 SHA512 TLSH

                    metadata.json

                    • Path C:\Program Files\Zapret Hub\sample_data\default_mods\unified-by-goshkow\metadata.json
                    • Size 388B
                    • SHA256 897c73ece0dd2546144f6ffbc3769e3fef8c7d01fb2fbac18fe66a86026dc45c
                    • MD5 SHA1 SHA512 TLSH

                    game_filter.enabled

                    • Path C:\Program Files\Zapret Hub\sample_data\default_mods\unified-by-goshkow\utils\game_filter.enabled
                    • Size 4B
                    • SHA256 722cdd399249d70c5dac1ff2b103a0b271d8fb9816fa52af6ce6b88eda1d389a
                    • MD5 SHA1 SHA512

                    app.png

                    • Path C:\Program Files\Zapret Hub\ui_assets\icons\app.png
                    • Size 450KB
                    • SHA256 a12e686fda340bdb756d28be291dcea7823b072a3348fd42ccdf62b7614cd249
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    zapret_hub.exe

                    • Path C:\Program Files\Zapret Hub\zapret_hub.exe
                    • Size 2.9MB
                    • SHA256 0cbac71083090cc43c6b197b3e312eac4cd0c9db2528d4a94fe104021bcafa6e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    MSVCP140_1.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\PySide6\MSVCP140_1.dll
                    • Size 26KB
                    • SHA256 3402e3b5d062f4959c9255c543c81ef6a8e836a13d55f887ab5c8dfeb7c904cc
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    MSVCP140_2.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\PySide6\MSVCP140_2.dll
                    • Size 265KB
                    • SHA256 9af161c91b5285562e0a0b637e802da007e9b7ffcfbc5d35a846075b5446fa3e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Qt6Core.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\PySide6\Qt6Core.dll
                    • Size 10.0MB
                    • SHA256 89383ca8aa134bd228eac80c879e4048d2f7982f646eda53fee35547c20d0c3c
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Qt6Gui.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\PySide6\Qt6Gui.dll
                    • Size 9.1MB
                    • SHA256 5731a1d41f60ab686859943225848973726f4b00fd5e8e420453a12b1a2d1b95
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Qt6Widgets.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\PySide6\Qt6Widgets.dll
                    • Size 6.3MB
                    • SHA256 0bc3f3d90e6090023210887ea5748d0b0800727cb407bef5090aa338089ea22a
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    QtCore.pyd

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\PySide6\QtCore.pyd
                    • Size 3.2MB
                    • SHA256 9d9ec6d5244ec8cc93156386394fe9d0fc96e749c2969fe013bf15f5c5a9784d
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    QtGui.pyd

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\PySide6\QtGui.pyd
                    • Size 3.7MB
                    • SHA256 f58a2f83833ff32beb8729cbcf7d17a1a0386d7b535ba1ec60c20478f68bc2bf
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    QtWidgets.pyd

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\PySide6\QtWidgets.pyd
                    • Size 4.6MB
                    • SHA256 f14f92c99618246ee9a08632b46fc2493fb82607edb2f75318e44731ddcc7187
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qsvgicon.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\PySide6\plugins\iconengines\qsvgicon.dll
                    • Size 70KB
                    • SHA256 f73ce2be52363e6b97a7e7f1f3dbf877542659963b452ee472e5bd34517d68cb
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qgif.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\PySide6\plugins\imageformats\qgif.dll
                    • Size 46KB
                    • SHA256 1cfc07dbff333db31fa4df426eed42f3e8c080cf315209f710dc92b48d0f63c0
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qicns.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\PySide6\plugins\imageformats\qicns.dll
                    • Size 54KB
                    • SHA256 daa1ef48bdeaf5ea7f179b2f70b1626f1eee7050228be51241c21fc6ffb4c17a
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qico.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\PySide6\plugins\imageformats\qico.dll
                    • Size 44KB
                    • SHA256 740fb392ede2f70ee1d0ac0f5ee56e1fa29db8cf319e0efc40466712048d6933
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qdirect2d.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\PySide6\plugins\platforms\qdirect2d.dll
                    • Size 1.0MB
                    • SHA256 79bc6ad89693f1806a5df78de90144eab62a3c899a9bba98c19ab5cc08a4280d
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qminimal.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\PySide6\plugins\platforms\qminimal.dll
                    • Size 60KB
                    • SHA256 690dafa73c039ffed32a71215c96a8c0e8dc3a14ab69ce1fa6753d15e7117502
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qoffscreen.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\PySide6\plugins\platforms\qoffscreen.dll
                    • Size 111KB
                    • SHA256 53b6c5447c1055d75be99e17b2e84bae323ef6da2954cf8f874eeb8009aa0159
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qwindows.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\PySide6\plugins\platforms\qwindows.dll
                    • Size 976KB
                    • SHA256 f857f6b5675bf70ce582fb166108285f31870a83d87b44bbc4b6da98a10b687b
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    qmodernwindowsstyle.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\PySide6\plugins\styles\qmodernwindowsstyle.dll
                    • Size 223KB
                    • SHA256 b6cef67376d8fd43a73e7ebe8745634f3ab2bbf42790c699b3aa1a95d8c512b4
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    pyside6.abi3.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\PySide6\pyside6.abi3.dll
                    • Size 261KB
                    • SHA256 1d737937c8335025d5a3cd44fecc70000a8fd2e46bb8e1f031f2bd16cbd9b5c0
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    VCRUNTIME140.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\VCRUNTIME140.dll
                    • Size 116KB
                    • SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    VCRUNTIME140_1.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\VCRUNTIME140_1.dll
                    • Size 48KB
                    • SHA256 a113f192195f245f17389e6ecbed8005990bcb2476ddad33f7c4c6c86327afe5
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    _bz2.pyd

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\_bz2.pyd
                    • Size 82KB
                    • SHA256 00b8ca9a338d2b47285c9e56d6d893db2a999b47216756f18439997fb80a56e3
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    _ctypes.pyd

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\_ctypes.pyd
                    • Size 121KB
                    • SHA256 c148292328f0aab7863af82f54f613961e7cb95b7215f7a81cafaf45bd4c42b7
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    _decimal.pyd

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\_decimal.pyd
                    • Size 249KB
                    • SHA256 980a63f2b39cf16910f44384398e25f24482346a482addb00de42555b17d4278
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    _hashlib.pyd

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\_hashlib.pyd
                    • Size 63KB
                    • SHA256 87dd0c858620287454fd6d31d52b6a48eddbb2a08e09e8b2d9fdb0b92200d766
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    _lzma.pyd

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\_lzma.pyd
                    • Size 155KB
                    • SHA256 f5e01b516c2c23035f7703e23569dec26c5616c05a929b2580ae474a5c6722c5
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    _socket.pyd

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\_socket.pyd
                    • Size 77KB
                    • SHA256 a19e3c7c03ef1b5625790b1c9c42594909311ab6df540fbf43c6aa93300ab166
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    base_library.zip

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\base_library.zip
                    • Size 1.4MB
                    • SHA256 cab713fde0615207022acacd9e06e9805146650631f3929346f7ffb2266c6842
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    libcrypto-3.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\libcrypto-3.dll
                    • Size 5.0MB
                    • SHA256 05fe080eab7fc535c51e10c1bd76a2f3e6217f9c91a25034774588881c3f99de
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    libffi-8.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\libffi-8.dll
                    • Size 38KB
                    • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    python3.DLL

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\python3.DLL
                    • Size 65KB
                    • SHA256 db84bc052cfb121fe4db36242ba5f1d2c031b600ef5d8d752cf25b7c02b6bac6
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    python311.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\python311.dll
                    • Size 5.5MB
                    • SHA256 0817a2a657a24c0d5fbb60df56960f42fc66b3039d522ec952dab83e2d869364
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    select.pyd

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\select.pyd
                    • Size 29KB
                    • SHA256 bae0974390945520eb99ab32486c6a964691f8f4a028ac408d98fa8fb0db7d90
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    MSVCP140.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\shiboken6\MSVCP140.dll
                    • Size 536KB
                    • SHA256 929357e3ca461248daf7a68e2dd49d44d734f28eb8f76959a2cdba3b42ddb1d6
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Shiboken.pyd

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\shiboken6\Shiboken.pyd
                    • Size 32KB
                    • SHA256 5bfd3f7dad7c9dd7aaf66c4893cf5e5f073613c03a5c35c0625721556cfc5c5c
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    VCRUNTIME140_1.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\shiboken6\VCRUNTIME140_1.dll
                    • Size 40KB
                    • SHA256 92aa4b4fffc5c3c7b7b52a85e665853259c25041ccf527016996622aa769b1f7
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    shiboken6.abi3.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\shiboken6\shiboken6.abi3.dll
                    • Size 374KB
                    • SHA256 7c94a10ac0b916fbf46ec7494aa578064d63636737e7081c6b969716c7dc7c9f
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    app.ico

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\ui_assets\icons\app.ico
                    • Size 83KB
                    • SHA256 93afe49f36cd2b815f5f1cd33565b3ec237c3e4d0338fa4a1d63f6d27aa1d4a6
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    unicodedata.pyd

                    • Path C:\Users\Admin\AppData\Local\Temp\_MEI42162\unicodedata.pyd
                    • Size 1.1MB
                    • SHA256 37c68617fa02a2cadced17ef724e2d450ef12a8a37215da789a4679fde1c5c02
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    __PSScriptPolicyTest_bguobvxq.jvs.ps1

                    • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_bguobvxq.jvs.ps1
                    • Size 60B
                    • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                    • MD5 SHA1 SHA512 TLSH

                    qt_en.qm

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\_internal\PySide6\translations\qt_en.qm
                    • Size 33B
                    • SHA256 494ac9a2b2cb2fdeced353f4a9f898ed8dcf616e9bc667438c62681e3f7f79cf
                    • MD5 SHA1 SHA512

                    ipset-exclude-user.txt

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\_internal\runtime\zapret-discord-youtube\lists\ipset-exclude-user.txt
                    • Size 18B
                    • SHA256 19123a22bf1108815c07bda3cda8df282b30bd63e4939949928969c0fd195873
                    • MD5 SHA1 SHA512

                    list-exclude-user.txt

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\_internal\runtime\zapret-discord-youtube\lists\list-exclude-user.txt
                    • Size 20B
                    • SHA256 9d9832f02f42e60be30f94a7a1b051342db0b1b0092c656a7bc10e730d63b234
                    • MD5 SHA1 SHA512

                    WinDivert.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\_internal\sample_data\default_mods\unified-by-goshkow\bin\WinDivert.dll
                    • Size 46KB
                    • SHA256 c1e060ee19444a259b2162f8af0f3fe8c4428a1c6f694dce20de194ac8d7d9a2
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    cygwin1.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\_internal\sample_data\default_mods\unified-by-goshkow\bin\cygwin1.dll
                    • Size 2.8MB
                    • SHA256 103104a52e5293ce418944725df19e2bf81ad9269b9a120d71d39028e821499b
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    power.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\_internal\ui_assets\icons\power.svg
                    • Size 240B
                    • SHA256 054310265b4eeabfc3517c36ad151c57242dcbded663f8b6356c2b4f1bba97f6
                    • MD5 SHA1 SHA512 TLSH

                    window_close.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\_internal\ui_assets\icons\window_close.svg
                    • Size 157B
                    • SHA256 04f3b83b833f29e16a2425b4ae2b33512aafc825fd2da0713622d9c4453a3d8b
                    • MD5 SHA1 SHA512 TLSH

                    window_min.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\_internal\ui_assets\icons\window_min.svg
                    • Size 145B
                    • SHA256 a86fd2b692b91b563e9811fdaa72979b7d32bf47c258a1352c9248649c80422a
                    • MD5 SHA1 SHA512 TLSH

                    app.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\app.svg
                    • Size 956B
                    • SHA256 c63546b75064c82d229e9e178a1335a200ff855b91b8d8f3b90adbd717ca73b5
                    • MD5 SHA1 SHA512 TLSH

                    back.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\back.svg
                    • Size 240B
                    • SHA256 1693bca92e6d61a8efa63950cb96c25a658ea11d14810377c805e6857767085a
                    • MD5 SHA1 SHA512 TLSH

                    check.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\check.svg
                    • Size 197B
                    • SHA256 9ae294d7ecf47f34dd99ca39bd5945c2f26301bcd9f155695b15f11118732445
                    • MD5 SHA1 SHA512 TLSH

                    chevron_down.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\chevron_down.svg
                    • Size 185B
                    • SHA256 aca8cfd570a8b4c74eb0bea0d63d7d6e9d27ff858faee846970a852e5dadb27e
                    • MD5 SHA1 SHA512 TLSH

                    component_tg.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\component_tg.svg
                    • Size 298B
                    • SHA256 31317a99b58c9677379a9d20e93092df0253ba825cb5d49b6d2ac0aeb7e298cb
                    • MD5 SHA1 SHA512 TLSH

                    component_zapret.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\component_zapret.svg
                    • Size 142B
                    • SHA256 df4d3b81d62e1433e330cb2ee190e3f673b90bd0639787f5e0328975002918dc
                    • MD5 SHA1 SHA512 TLSH

                    components.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\components.svg
                    • Size 318B
                    • SHA256 ad94dea9eff0c74cfd4b42c7b7a1be99701f8514f1e36c5d816117df8c0fd8d3
                    • MD5 SHA1 SHA512 TLSH

                    edit.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\edit.svg
                    • Size 237B
                    • SHA256 4eec714e4d1b8b99a67c2cf80185754ace18a616a6adefcbe12344be37348d72
                    • MD5 SHA1 SHA512 TLSH

                    files.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\files.svg
                    • Size 146B
                    • SHA256 03e516f7eb25e1059be490948693626538dcdf01c54dccf490f9a18a359dffe7
                    • MD5 SHA1 SHA512 TLSH

                    files_domains.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\files_domains.svg
                    • Size 226B
                    • SHA256 2da941dc1460f9fd0d9104da8f628d120a4e3e5e4ee0755766c1c0bec2784f3d
                    • MD5 SHA1 SHA512 TLSH

                    files_editor.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\files_editor.svg
                    • Size 273B
                    • SHA256 751818dc296fd9034712bf03a8654a60fc14915d8279fcc6670d909037fe9844
                    • MD5 SHA1 SHA512 TLSH

                    files_exclude.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\files_exclude.svg
                    • Size 180B
                    • SHA256 37862f1be45ab6c2c2f13fb936154eb58e0e9a1b1c0ed0023408119d22db5093
                    • MD5 SHA1 SHA512 TLSH

                    files_ip.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\files_ip.svg
                    • Size 290B
                    • SHA256 a8c8ddf2cb74184ce8421be64dd09b44600847a1adbf090baef24f7d1dc6c4b7
                    • MD5 SHA1 SHA512 TLSH

                    home.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\home.svg
                    • Size 200B
                    • SHA256 c3d50e70d07ebf316a0baed16f161d728eb0c1f8489cfea9af72c66ae36438b0
                    • MD5 SHA1 SHA512 TLSH

                    logs.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\logs.svg
                    • Size 300B
                    • SHA256 8a9c7a2dd5a58b59d2a2bb4a9f5515012234cf93ae9cca721bdd17317abd3ac9
                    • MD5 SHA1 SHA512 TLSH

                    mods.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\mods.svg
                    • Size 486B
                    • SHA256 6659bd5eff67f153457e66da58d80ea58c4eb2e64c6ed6e6819a46b553ae4f11
                    • MD5 SHA1 SHA512 TLSH

                    plus.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\plus.svg
                    • Size 163B
                    • SHA256 7d60a5c8e61487d47de9e911e80443baf160ca9b77173b2cb28d3f4b9c26324d
                    • MD5 SHA1 SHA512 TLSH

                    power_light.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\power_light.svg
                    • Size 240B
                    • SHA256 11c29dfb69d46a6740ce263e52ee91da3c5e0757d2ad4fbb07653383984ef00a
                    • MD5 SHA1 SHA512 TLSH

                    settings.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\settings.svg
                    • Size 468B
                    • SHA256 e05456747ea627d3d73074f6ec8da761a17ff8df01f69fece5388602127920c6
                    • MD5 SHA1 SHA512 TLSH

                    star_filled.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\star_filled.svg
                    • Size 199B
                    • SHA256 7617e91241c1b1ed8fda978be92e3821ae1fbad2af7bd2b9bda1a197b86b21bc
                    • MD5 SHA1 SHA512 TLSH

                    star_outline.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\star_outline.svg
                    • Size 298B
                    • SHA256 3e15cec0146af281b5b5c14e722fcd1932c3fcc04303db06a34d091330f1618d
                    • MD5 SHA1 SHA512 TLSH

                    status_mod.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\status_mod.svg
                    • Size 119B
                    • SHA256 8adab7697e84d7a0d323d2d74bacd85adcd77eb54d9dbf48b979b9a343783db0
                    • MD5 SHA1 SHA512 TLSH

                    status_off.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\status_off.svg
                    • Size 174B
                    • SHA256 aeda13d901bcfdca019f464128cf0f1f240ddf8adb445121ee63829617539790
                    • MD5 SHA1 SHA512 TLSH

                    status_ok.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\status_ok.svg
                    • Size 181B
                    • SHA256 597fb44b8a294baf85dff0e59983e372066f3b428f5524409227321f294c8c41
                    • MD5 SHA1 SHA512 TLSH

                    status_sun.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\status_sun.svg
                    • Size 435B
                    • SHA256 f2944b6aa7198a7233ea76f15ce8b0bf8b9ad46e43a7f02918a4521c8a6bea68
                    • MD5 SHA1 SHA512 TLSH

                    status_theme.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\status_theme.svg
                    • Size 127B
                    • SHA256 33df489acfd130a6a47c377d83b417561b63bb96ced63c73e057f200d3b125f8
                    • MD5 SHA1 SHA512 TLSH

                    status_warn.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\status_warn.svg
                    • Size 210B
                    • SHA256 c767d697ab75236970bc775d51b1eb35121cae16f6cd8d89c70d3ad3df8be9b4
                    • MD5 SHA1 SHA512 TLSH

                    tool.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\tool.svg
                    • Size 395B
                    • SHA256 0f39fe381283aeabde73a3e12f1388b9b126329e9b6ec47394d91621047a714f
                    • MD5 SHA1 SHA512 TLSH

                    window_close_light.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\window_close_light.svg
                    • Size 157B
                    • SHA256 f3e3b30844feb75ed5394ad9f8b7ed7f9d99110f856473b817555a1adf8f2df4
                    • MD5 SHA1 SHA512 TLSH

                    window_min_light.svg

                    • Path C:\Users\Admin\AppData\Local\Temp\zapret_hub_install_h61htii0\ui_assets\icons\window_min_light.svg
                    • Size 145B
                    • SHA256 bff019f3a8b008a989a7744ce3c52533bc84da25a208cf0220b0d258504470a0
                    • MD5 SHA1 SHA512 TLSH

                    memory/1700-3667-0x00007FFF703C0000-0x00007FFF706F2000-memory.dmp

                    memory/1700-3677-0x00000270493A0000-0x00000270494CA000-memory.dmp

                    memory/1700-3668-0x00007FFF6F0F0000-0x00007FFF6F4A9000-memory.dmp

                    memory/1856-3294-0x00007FFF703C0000-0x00007FFF706F2000-memory.dmp

                    memory/1856-3657-0x0000027DE81B0000-0x0000027DE82DA000-memory.dmp

                    memory/1856-3295-0x00007FFF6F0F0000-0x00007FFF6F4A9000-memory.dmp

                    memory/1920-3293-0x0000019111370000-0x0000019111380000-memory.dmp

                    memory/1920-1201-0x0000019111370000-0x0000019111380000-memory.dmp

                    memory/1920-256-0x00007FFF6E220000-0x00007FFF6E6D9000-memory.dmp

                    memory/1920-263-0x0000019111370000-0x0000019111380000-memory.dmp

                    memory/1920-257-0x00007FFF6DBD0000-0x00007FFF6E21A000-memory.dmp

                    memory/1920-251-0x00007FFF6F010000-0x00007FFF6F3C9000-memory.dmp

                    memory/1920-3292-0x00000191105E0000-0x000001911070A000-memory.dmp

                    memory/1920-244-0x00007FFF6FDE0000-0x00007FFF70112000-memory.dmp

                    memory/1920-811-0x00000191105E0000-0x000001911070A000-memory.dmp

                    memory/2372-809-0x000001F22A060000-0x000001F22A18A000-memory.dmp

                    memory/2372-810-0x000001F22BA90000-0x000001F22BA9C000-memory.dmp

                    memory/2524-301-0x0000011C6CBE0000-0x0000011C6CD0A000-memory.dmp

                    memory/2524-302-0x0000011C6CE10000-0x0000011C6CE1C000-memory.dmp

                    memory/2896-282-0x000002BEB2C00000-0x000002BEB2C0C000-memory.dmp

                    memory/2896-281-0x000002BEB2AA0000-0x000002BEB2AD0000-memory.dmp

                    memory/2896-271-0x000002BEB4A50000-0x000002BEB4A72000-memory.dmp

                    memory/2924-3662-0x0000000000600000-0x0000000000630000-memory.dmp

                    memory/2924-3658-0x00007FFF6C040000-0x00007FFF6C342000-memory.dmp

                    memory/2924-3659-0x0000000100400000-0x000000010043C000-memory.dmp

                    memory/2924-3663-0x00007FFF6C040000-0x00007FFF6C342000-memory.dmp

                    memory/2924-3661-0x0000000062800000-0x0000000062813000-memory.dmp

                    memory/2964-3280-0x0000015643700000-0x000001564370C000-memory.dmp

                    memory/2964-3279-0x00000156434D0000-0x00000156435FA000-memory.dmp

                    memory/3732-3290-0x0000021365C40000-0x0000021365D6A000-memory.dmp

                    memory/3732-3291-0x0000021367660000-0x000002136766C000-memory.dmp

                    memory/4276-3423-0x00007FFF703C0000-0x00007FFF706F2000-memory.dmp

                    memory/4276-3424-0x00007FFF6F0F0000-0x00007FFF6F4A9000-memory.dmp

                    memory/4276-3676-0x0000028198630000-0x000002819875A000-memory.dmp

                    memory/4276-3669-0x0000028198630000-0x000002819875A000-memory.dmp

                    memory/4812-819-0x000001A5AAFD0000-0x000001A5AB0FA000-memory.dmp

                    memory/4812-820-0x000001A5AB240000-0x000001A5AB24C000-memory.dmp

                    memory/5080-3673-0x0000014086110000-0x000001408623A000-memory.dmp

                    memory/5176-3899-0x000002965EFE0000-0x000002965F010000-memory.dmp

                    memory/5176-3900-0x0000029660C20000-0x0000029660C2C000-memory.dmp

                    memory/5196-290-0x000002956F5F0000-0x000002956F61A000-memory.dmp

                    memory/5196-292-0x000002956D370000-0x000002956D49A000-memory.dmp

                    memory/5196-291-0x000002956F5F0000-0x000002956F614000-memory.dmp

                    memory/5196-293-0x000002956D570000-0x000002956D57C000-memory.dmp

                    memory/5836-3651-0x0000015741290000-0x0000015741452000-memory.dmp

                    memory/5836-3652-0x0000015741990000-0x0000015741EB8000-memory.dmp

                    memory/5836-3654-0x0000015726A90000-0x0000015726BBA000-memory.dmp

                    memory/5836-3655-0x0000015728480000-0x000001572848C000-memory.dmp

                    memory/5876-801-0x00000208A97D0000-0x00000208A97DC000-memory.dmp

                    memory/5876-800-0x00000208A7E20000-0x00000208A7F4A000-memory.dmp

                    memory/5976-3902-0x00007FFF6B780000-0x00007FFF6BA82000-memory.dmp

                    memory/5976-3903-0x0000000100400000-0x000000010043C000-memory.dmp

                    memory/5976-3907-0x00007FFF6B780000-0x00007FFF6BA82000-memory.dmp

                    memory/5976-3906-0x0000000000600000-0x0000000000630000-memory.dmp