Analysis

  • max time kernel
    118s
  • max time network
    145s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/10/2026, 22:49

General

  • Target
    Zapret GUI.bat
  • Size 179B
  • Sample261027-2rvfbshs4k
  • SHA256 788879c5954138800f3b53206ee36d68a95e99c1d13f8353b66fc39a6a0bee8f
  • MD5 SHA1 SHA512 TLSH
Score
8/10

Malware Config

Signatures

  • Badlisted process makes network request 3 IoCs

    Network request originating from process or tool commonly abused by malware.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

    Run Powershell and hide display window.

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • Suspicious behavior: EnumeratesProcesses 30 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\Zapret GUI.bat"
    1⤵
    • Executes a command shell one-liner
    • Suspicious use of WriteProcessMemory
    PID:4292
    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -File "C:\Users\Admin\AppData\Local\Temp\ZapretGUI.ps1"
      2⤵
      • Badlisted process makes network request
      • Command and Scripting Interpreter: PowerShell
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:5540
      • C:\Windows\system32\Robocopy.exe
        "C:\Windows\system32\Robocopy.exe" C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4 C:\Users\Admin\AppData\Local\Temp\zapret-discord-youtube-1.10.4 /E /NFL /NDL /NJH /NJS /NP /R:2 /W:1
        3⤵
        • Suspicious use of AdjustPrivilegeToken
        PID:2672

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        __PSScriptPolicyTest_gfdx0eyw.dcd.ps1

        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_gfdx0eyw.dcd.ps1
        • Size 60B
        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
        • MD5 SHA1 SHA512 TLSH

        ACTIVE_DISCORD_UDP.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\ACTIVE_DISCORD_UDP.bin
        • Size 1KB
        • SHA256 2fe18b3bd20807d36704d0b072092ee49ae84edca907a4420ab9a0f0f28fddcf
        • MD5 SHA1 SHA512 TLSH

        WinDivert.dll

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\WinDivert.dll
        • Size 46KB
        • SHA256 c1e060ee19444a259b2162f8af0f3fe8c4428a1c6f694dce20de194ac8d7d9a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WinDivert64.sys

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\WinDivert64.sys
        • Size 91KB
        • SHA256 8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cygwin1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\cygwin1.dll
        • Size 2.8MB
        • SHA256 103104a52e5293ce418944725df19e2bf81ad9269b9a120d71d39028e821499b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        quic_initial_4pda_to.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\quic_initial_4pda_to.bin
        • Size 1KB
        • SHA256 e065870cb0d13152e6132807bbf42218a9e7cd8d96f5602b61674cc540f3a56e
        • MD5 SHA1 SHA512 TLSH

        quic_initial_5ka_ru.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\quic_initial_5ka_ru.bin
        • Size 1KB
        • SHA256 247dcd97f53bfae5482e4b2b66acdb01e48ee6c29c5ca526c9b241fa38c233b5
        • MD5 SHA1 SHA512 TLSH

        quic_initial_lemana_pro.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\quic_initial_lemana_pro.bin
        • Size 1KB
        • SHA256 c2ff932a40d69a61321c1fa091a6182e16a2fb85f36881b6864f864f07508848
        • MD5 SHA1 SHA512 TLSH

        quic_initial_rutube_ru.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\quic_initial_rutube_ru.bin
        • Size 1KB
        • SHA256 74b1dfbdec125263c9407436658b0a848b8f0a934b8063d11571a6a2146a4a7b
        • MD5 SHA1 SHA512 TLSH

        quic_initial_steam_chat_com.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\quic_initial_steam_chat_com.bin
        • Size 1KB
        • SHA256 1da1407166f5d2ade80f1d3c86d828178e13f08050c40fda2b0a4d276318642a
        • MD5 SHA1 SHA512 TLSH

        quic_initial_steamstatic_com.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\quic_initial_steamstatic_com.bin
        • Size 1KB
        • SHA256 4f1468adcc30ac7ffd9e04627c7289968f8c4ae476626d05f282da8064fe64b4
        • MD5 SHA1 SHA512 TLSH

        quic_initial_tencent_com.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\quic_initial_tencent_com.bin
        • Size 1KB
        • SHA256 d250051d6200946a7ba0629c59c5641432957fa3513081a6c3c5aaa91a62ac03
        • MD5 SHA1 SHA512 TLSH

        quic_initial_www_google_com.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\quic_initial_www_google_com.bin
        • Size 1KB
        • SHA256 f4589c57749f956bb30538197a521d7005f8b0a8723b4707e72405e51ddac50a
        • MD5 SHA1 SHA512 TLSH

        stun.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\stun.bin
        • Size 100B
        • SHA256 9cd5469309780ca56c0bd97266524a48c7ee529d02c3179cfecb20b260a59641
        • MD5 SHA1 SHA512 TLSH

        stun2.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\stun2.bin
        • Size 120B
        • SHA256 b7c2497496039c541f7337ac8536813f0a1cf52363ab2faa5213b7816d458813
        • MD5 SHA1 SHA512 TLSH

        tls_clienthello_4pda_to.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\tls_clienthello_4pda_to.bin
        • Size 284B
        • SHA256 eefeaf09dde8d69b1f176212541f63c68b314a33a335eced99a8a29f17254da8
        • MD5 SHA1 SHA512 TLSH

        tls_clienthello_5ka_ru.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\tls_clienthello_5ka_ru.bin
        • Size 654B
        • SHA256 1e8871e272591c5a277d38a6166af597c1fecb1cf58e85162e8f1968ec08d018
        • MD5 SHA1 SHA512 TLSH

        tls_clienthello_awswaf_com.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\tls_clienthello_awswaf_com.bin
        • Size 1KB
        • SHA256 6405e264eff9f33632e727f6d696ff39503d3652f0f0be00921f06f97720a5b0
        • MD5 SHA1 SHA512 TLSH

        tls_clienthello_max_ru.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\tls_clienthello_max_ru.bin
        • Size 664B
        • SHA256 4ee0870abe0a0128600b0095189987ba1d210dae8bf963bc725aff49cf922624
        • MD5 SHA1 SHA512 TLSH

        tls_clienthello_sochi_park.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\tls_clienthello_sochi_park.bin
        • Size 244B
        • SHA256 ad552922acfe029521da884ea29f4bb28bb6bdcee9b1a70b46adbfd266c11d4d
        • MD5 SHA1 SHA512 TLSH

        tls_clienthello_steam_chat_com.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\tls_clienthello_steam_chat_com.bin
        • Size 1KB
        • SHA256 388e9a09bb2758ebbce34a0e27d8efa41bbd59954c9c32d8fb74b4bce2d99c67
        • MD5 SHA1 SHA512 TLSH

        tls_clienthello_steamstatic_com.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\tls_clienthello_steamstatic_com.bin
        • Size 1KB
        • SHA256 3f8ba0b0de17a3feda593ef2cd82a1b44ca566f96acaa42f6fccd69f2484ecea
        • MD5 SHA1 SHA512 TLSH

        tls_clienthello_teamspeak_com.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\tls_clienthello_teamspeak_com.bin
        • Size 1KB
        • SHA256 1336b7529c050a9c5a4728368430686311c448d4b3ba61bfc8d1e10a15de438a
        • MD5 SHA1 SHA512 TLSH

        tls_clienthello_www_google_com.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\tls_clienthello_www_google_com.bin
        • Size 681B
        • SHA256 936c2bee4cfb80aa3c426b2dcbcc834b3fbcd1adb17172959dc569c73a14275c
        • MD5 SHA1 SHA512 TLSH

        tls_clienthello_www_sferum_ru.bin

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\tls_clienthello_www_sferum_ru.bin
        • Size 661B
        • SHA256 e6dd8d724eecc6a7340bf64e2ebec81c60bc4e078c6f702b4b6ba9bf184180ad
        • MD5 SHA1 SHA512 TLSH

        winws.exe

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\bin\winws.exe
        • Size 199KB
        • SHA256 affb4f69d2ea302a7abccd5325d81826e140ddae014f1e070bc4a6c0dd555188
        • MD5 SHA1 SHA512 SSDEEP TLSH

        general (ALT).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (ALT).bat
        • Size 3KB
        • SHA256 25ecb0460e72af789efc6fac4be43efc35a1860459088ddb166759f180dd6461
        • MD5 SHA1 SHA512 TLSH

        general (ALT10).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (ALT10).bat
        • Size 3KB
        • SHA256 5496b7debf90e82aebdc351c9270600d2e67e43cef44aebb8772b23e9b2d46a8
        • MD5 SHA1 SHA512 TLSH

        general (ALT11).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (ALT11).bat
        • Size 4KB
        • SHA256 0f9d98d8b11b89ad838f4683548b9ae87e53cf250db529315996fc75ca6dbfd8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        general (ALT12).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (ALT12).bat
        • Size 4KB
        • SHA256 edfab77a2b5956a8addb5f8aef929bd6c5a85a1ac30a998740e114034b20ea49
        • MD5 SHA1 SHA512 SSDEEP TLSH

        general (ALT13).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (ALT13).bat
        • Size 3KB
        • SHA256 4dd86f25b8a1088e83bd5839ea9a8b25fafa91def29f79302c5ec64ef8c4d7e8
        • MD5 SHA1 SHA512 TLSH

        general (ALT2).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (ALT2).bat
        • Size 3KB
        • SHA256 63fc833e3a0c5044881185a5f83de5b424a32fceaf12160549012793dd8fac8a
        • MD5 SHA1 SHA512 TLSH

        general (ALT3).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (ALT3).bat
        • Size 3KB
        • SHA256 7c38c688f1fa860f033e0bcc30511d9284a46c0a90ca004a71a3c2f7237963ab
        • MD5 SHA1 SHA512 TLSH

        general (ALT4).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (ALT4).bat
        • Size 3KB
        • SHA256 c677a963f903038b09929721d2f0d9728ef2585d3db093210b3b472d48ae8708
        • MD5 SHA1 SHA512 TLSH

        general (ALT5).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (ALT5).bat
        • Size 2KB
        • SHA256 1e11fa2c84b26f5ca7f08ed15f63c26259d3e8b3c6011baf1bf7f28cdbfc38ca
        • MD5 SHA1 SHA512 TLSH

        general (ALT6).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (ALT6).bat
        • Size 3KB
        • SHA256 c503ed66747411aed65d3e50b69571c0acda6a39d9d7872852dde5ddf1cb18a2
        • MD5 SHA1 SHA512 TLSH

        general (ALT7).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (ALT7).bat
        • Size 3KB
        • SHA256 9801a1bc7bd0be98d2b61535f42f437780876c4a6922e0366d469ed54db42ad8
        • MD5 SHA1 SHA512 TLSH

        general (ALT8).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (ALT8).bat
        • Size 3KB
        • SHA256 a6a882a7b5959a17c9eb8991ce6ba78430e15eb504b1dbc26a716f44a53e312e
        • MD5 SHA1 SHA512 TLSH

        general (ALT9).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (ALT9).bat
        • Size 3KB
        • SHA256 6c1f39d990eb84a7aa8231478e8c6cad64e4a57a94a87168531be20c6d97217d
        • MD5 SHA1 SHA512 TLSH

        general (EXP).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (EXP).bat
        • Size 4KB
        • SHA256 4966b50c438316ca695f01fba71179744bb03e12c3a58f9c0a3163ef7d6828f2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        general (FAKE TLS AUTO ALT).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (FAKE TLS AUTO ALT).bat
        • Size 3KB
        • SHA256 8b3f6b92364265162a60481e41be853567890e6421758d5a145fb3b9f5f3adb1
        • MD5 SHA1 SHA512 TLSH

        general (FAKE TLS AUTO ALT2).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (FAKE TLS AUTO ALT2).bat
        • Size 4KB
        • SHA256 254b784a4637b6f62d93d8249d7cdfd852db283c5450acf0f9b153add4b8a22a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        general (FAKE TLS AUTO ALT3).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (FAKE TLS AUTO ALT3).bat
        • Size 4KB
        • SHA256 f10303e982fa27c5ed3391e3172b1eba9944c5401ac656e54f41a65a5c373ec9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        general (FAKE TLS AUTO).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (FAKE TLS AUTO).bat
        • Size 3KB
        • SHA256 ba069d649fa2cad9b7386c279f689c39ef14540da41e3632a252284b69b21db3
        • MD5 SHA1 SHA512 TLSH

        general (SIMPLE FAKE ALT).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (SIMPLE FAKE ALT).bat
        • Size 3KB
        • SHA256 582e7d22079620a194f71ce9a9f0fbe8e2819269a0e6c31393b63eef85e98015
        • MD5 SHA1 SHA512 TLSH

        general (SIMPLE FAKE ALT2).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (SIMPLE FAKE ALT2).bat
        • Size 3KB
        • SHA256 8f77b7453af71f92b3c379601b639817da1c04641b1cfa7ee004e4aa12532ef1
        • MD5 SHA1 SHA512 TLSH

        general (SIMPLE FAKE).bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general (SIMPLE FAKE).bat
        • Size 3KB
        • SHA256 9c134fcfd3a88900b36f96818d83709e8bb659c6ccdb6e5ba90c5211868c648f
        • MD5 SHA1 SHA512 TLSH

        general.bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\general.bat
        • Size 3KB
        • SHA256 2695fcbda217390fea11206f79b9d377d800ae23bd46ff048b61556bcbba6ee7
        • MD5 SHA1 SHA512 TLSH

        ipset-all.txt.backup

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\lists\ipset-all.txt.backup
        • Size 559KB
        • SHA256 c39bf4e1b151c7d0d42fe7dae4c09e01ac26806a1ff4060ae456c7fb22087651
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ipset-exclude.txt

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\lists\ipset-exclude.txt
        • Size 135B
        • SHA256 96c03954012765ce4ab03b9c30f29ab1ca1b698c6752224d03828e6d182eb0fc
        • MD5 SHA1 SHA512 TLSH

        ipset-game.txt

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\lists\ipset-game.txt
        • Size 18B
        • SHA256 19123a22bf1108815c07bda3cda8df282b30bd63e4939949928969c0fd195873
        • MD5 SHA1 SHA512

        list-exclude-user.txt

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\lists\list-exclude-user.txt
        • Size 69B
        • SHA256 0f445679b51f40a2c31c56f28afdcdad91c24afc8c350c18cce0cdea49b83607
        • MD5 SHA1 SHA512 TLSH

        list-exclude.txt

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\lists\list-exclude.txt
        • Size 1KB
        • SHA256 e2de8403e1d2bd8ebd9de6b2cbfaab488d710681cbdcde2b219e71bc4490a56d
        • MD5 SHA1 SHA512 TLSH

        list-general-user.txt

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\lists\list-general-user.txt
        • Size 51B
        • SHA256 6c622ab155cf403ab8857f3805be8df7acba8b3d7a700ea19e52699260a5bc7f
        • MD5 SHA1 SHA512 TLSH

        list-general.txt

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\lists\list-general.txt
        • Size 1KB
        • SHA256 9ff3ae9e4bf0edbcf8fecb1bba7aac951aace2036cdb732ec3ef65dfc6db443b
        • MD5 SHA1 SHA512 TLSH

        list-google.txt

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\lists\list-google.txt
        • Size 453B
        • SHA256 4104b8f5119f76a3642e3176987bbcf817d98daa4899a7ecf9ee2c254958e33b
        • MD5 SHA1 SHA512 TLSH

        service.bat

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\service.bat
        • Size 38KB
        • SHA256 968cca9bd0ae685f0dababeb75cb9181950da3b64fd4948fb53ee39291baf413
        • MD5 SHA1 SHA512 SSDEEP TLSH

        check_updates.enabled

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\utils\check_updates.enabled
        • Size 9B
        • SHA256 c823a2779ca11474ada5ece9c37cc825f71c54fbc1525d9b0cf3dbc7879abb09
        • MD5 SHA1 SHA512

        targets.txt

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\utils\targets.txt
        • Size 1KB
        • SHA256 c27af6e8ba0a91e772b5b4a8da5f4cde6903b6eb6ab3a5a02b13afe7695d0f31
        • MD5 SHA1 SHA512 TLSH

        test zapret.ps1

        • Path C:\Users\Admin\AppData\Local\Temp\zapret_new_119df3a3466c4f48ae3da04f88718ce2\ex\zapret-discord-youtube-1.10.4\utils\test zapret.ps1
        • Size 40KB
        • SHA256 13ce2b57b35b9a0223b0ea2782752bd2e20f550e2b7f0e9de8ae8d3999bfd402
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/5540-18-0x0000019C80130000-0x0000019C802F2000-memory.dmp

        memory/5540-15-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

        memory/5540-34-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

        memory/5540-35-0x0000019C7D880000-0x0000019C7D88A000-memory.dmp

        memory/5540-36-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

        memory/5540-38-0x0000019C7D880000-0x0000019C7D88A000-memory.dmp

        memory/5540-0-0x00007FFE8A74F000-0x00007FFE8A750000-memory.dmp

        memory/5540-32-0x0000019C00960000-0x0000019C0097E000-memory.dmp

        memory/5540-24-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

        memory/5540-23-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

        memory/5540-22-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

        memory/5540-19-0x0000019C00E30000-0x0000019C01358000-memory.dmp

        memory/5540-37-0x0000019C7FF60000-0x0000019C7FF72000-memory.dmp

        memory/5540-17-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

        memory/5540-16-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

        memory/5540-33-0x0000019C00980000-0x0000019C00A32000-memory.dmp

        memory/5540-14-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

        memory/5540-13-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

        memory/5540-12-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

        memory/5540-11-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

        memory/5540-10-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

        memory/5540-8-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

        memory/5540-7-0x0000019C7D490000-0x0000019C7D4B2000-memory.dmp

        memory/5540-6-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

        memory/5540-272-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

        memory/5540-273-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp

        memory/5540-275-0x0000019C7D870000-0x0000019C7D878000-memory.dmp

        memory/5540-276-0x0000019C7FFC0000-0x0000019C7FFFE000-memory.dmp

        memory/5540-277-0x0000019C7D890000-0x0000019C7D89E000-memory.dmp

        memory/5540-280-0x00007FFE8A5C0000-0x00007FFE8AF64000-memory.dmp