forensicnoob

2 ms·

1. 1.▲
   by forensicnoob 2y ago

   Look at other tabs https://www.virustotal.com/gui/file/3f6ab524d899f39ef46004a9... at the bottom you can see the commands that looks like the program trying to delete down syslogs. Look also in the relations tab
2. 2.▲
   Is yt-dlp/yt-dlp compromised?(github.com)

   78 points by forensicnoob 2y ago|37 comments
3. 3.▲
   by forensicnoob 2y ago

   The last linux binaries ( yt-dlp_linux ) are contacting tor exit nodes and attempting to shutdown syslog starting from release 2024.10.22 according to virustotal. 3f6ab524d899f39ef46004a9db1f09ac8983aa5bd96243c417edf7c0c00627d7 yt-dlp_linu