forensicnoob
Re:Is yt-dlp/yt-dlp compromised?
on Monday November 04, 2024 @06:51AM (#42040689)
Look at other tabs https://www.virustotal.com/gui/file/3f6ab524d899f39ef46004a9... at the bottom you can see the commands that looks like the program trying to delete down syslogs.
Look also in the relations tab that shows some tor nodes.
Re:Is yt-dlp/yt-dlp compromised?
on Monday November 04, 2024 @06:34AM (#42040601)
The last linux binaries ( yt-dlp_linux ) are contacting tor exit nodes and attempting to shutdown syslog starting from release 2024.10.22 according to virustotal.
3f6ab524d899f39ef46004a9db1f09ac8983aa5bd96243c417edf7c0c00627d7 yt-dlp_linux 2024.11.04 dcca6afb6ac9770d4d3425c35e415f4a8fc69b626c60f12ca899bfc05f6a72fc yt-dlp_linux 2024.10.22