General

  • Target

    Program.Waifu.zip

  • Size

    39.0MB

  • MD5

    6ab878112b32cf0e4825a4a4757cb540

  • SHA1

    471e5028139e530fb5cbbf1dbdc07f43c1859dfe

  • SHA256

    709c5b4e207594ce16343abb847a13d8c12438c44e5fb152369a37eb792635ad

  • SHA512

    5cd44327f67782ceca37e47b4c2617cf84e9536d5b36fe11291abf6e5ab30f06a587744dfca80ccb537cbd4d5062d122c63f4b746cb916b78fcb3bfb080198b0

  • SSDEEP

    786432:133s+l+IXJ79TEnjRayZL42LECWkiFK00GjQdtLiiTuxcgL9+mg9/HzbNeaW/q85:tlD+tZhRiFK0CbTuxccAfzbTWS8Gw

Score
3/10

Malware Config

Signatures

  • Unsigned PE 57 IoCs

    Checks for missing Authenticode signature.

Files

  • Program.Waifu.zip
    .zip
  • Autofac.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • CachedImage.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • CharacterAI.Client.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • CharacterAI.Client.pdb
  • ElevenLabs-DotNet.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • HardwareInformation.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Humanizer.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • ICSharpCode.AvalonEdit.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • LLamaSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MaterialDesignColors.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MaterialDesignThemes.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MdXaml.Plugins.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MdXaml.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Microsoft.Bcl.AsyncInterfaces.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.CodeAnalysis.CSharp.Workspaces.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.CodeAnalysis.CSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.CodeAnalysis.Workspaces.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.CodeAnalysis.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Data.Sqlite.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.EntityFrameworkCore.Abstractions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.EntityFrameworkCore.Design.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.EntityFrameworkCore.Relational.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.EntityFrameworkCore.Sqlite.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.EntityFrameworkCore.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Extensions.Caching.Abstractions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Extensions.Caching.Memory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Extensions.Configuration.Abstractions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Extensions.DependencyInjection.Abstractions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Extensions.DependencyInjection.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Extensions.DependencyModel.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Extensions.Logging.Abstractions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Extensions.Logging.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Extensions.Options.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Extensions.Primitives.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Xaml.Behaviors.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Mono.TextTemplating.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NAudio.Asio.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NAudio.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NAudio.Extras.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NAudio.Midi.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NAudio.Wasapi.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NAudio.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NAudio.WinMM.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • NAudio.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • NvAPIWrapper.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Pastel.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • PuppeteerExtraSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • PuppeteerLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • PuppeteerLib.pdb
  • PuppeteerSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Resources/Images/128_Icon.png
    .png
  • Resources/Images/Icon.ico
  • Resources/Images/default.jpg
    .jpg
  • RestSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SQLitePCLRaw.batteries_v2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SQLitePCLRaw.core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SQLitePCLRaw.provider.e_sqlite3.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Serilog.Extensions.Autofac.DependencyInjection.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Serilog.Extensions.Logging.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Serilog.Sinks.Console.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Serilog.Sinks.File.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Serilog.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SharedUtils.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SharedUtils.pdb
  • SharpHook.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • SuperSocket.ClientEngine.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • System.Composition.AttributedModel.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Composition.Convention.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Composition.Hosting.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Composition.Runtime.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Composition.TypedParts.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.IO.Pipelines.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • System.Management.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • VTS.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • VTS.pdb
  • VTS.xml
    .xml
  • Vulkan.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Waifu.deps.json
  • Waifu.dll
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • Waifu.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • Waifu.pdb
  • Waifu.runtimeconfig.json
  • WebSocket4Net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Whisper.net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • runtimes/browser-wasm/nativeassets/net8.0/e_sqlite3.a
  • runtimes/linux-arm/native/libe_sqlite3.so
    .elf linux arm
  • runtimes/linux-arm/native/libuiohook.so
    .elf linux arm
  • runtimes/linux-arm64/native/libe_sqlite3.so
    .elf linux aarch64
  • runtimes/linux-arm64/native/libuiohook.so
    .elf linux aarch64
  • runtimes/linux-armel/native/libe_sqlite3.so
    .elf linux arm
  • runtimes/linux-mips64/native/libe_sqlite3.so
    .elf linux mipsel
  • runtimes/linux-musl-arm/native/libe_sqlite3.so
    .elf linux arm
  • runtimes/linux-musl-arm64/native/libe_sqlite3.so
    .elf linux aarch64
  • runtimes/linux-musl-x64/native/libe_sqlite3.so
    .elf linux x64
  • runtimes/linux-ppc64le/native/libe_sqlite3.so
    .elf linux ppc64
  • runtimes/linux-s390x/native/libe_sqlite3.so
    .elf linux s390
  • runtimes/linux-x64/native/avx/libllama.so
    .elf linux x64
  • runtimes/linux-x64/native/avx2/libllama.so
    .elf linux x64
  • runtimes/linux-x64/native/avx512/libllama.so
    .elf linux x64
  • runtimes/linux-x64/native/cuda12/libllama.so
    .elf linux x64
  • runtimes/linux-x64/native/libe_sqlite3.so
    .elf linux x64
  • runtimes/linux-x64/native/libllama.so
    .elf linux x64
  • runtimes/linux-x64/native/libuiohook.so
    .elf linux x64
  • runtimes/linux-x86/native/libe_sqlite3.so
    .elf linux x86
  • runtimes/maccatalyst-arm64/native/libe_sqlite3.dylib
    .dylib macos arch:arm64
  • runtimes/maccatalyst-arm64/native/libuiohook.dylib
    .dylib macos arch:arm64
  • runtimes/maccatalyst-x64/native/libe_sqlite3.dylib
    .dylib macos arch:x64
  • runtimes/maccatalyst-x64/native/libuiohook.dylib
    .dylib macos arch:x64
  • runtimes/osx-arm64/native/ggml-metal.metal
  • runtimes/osx-arm64/native/libe_sqlite3.dylib
    .dylib macos arch:arm64
  • runtimes/osx-arm64/native/libllama.dylib
    .dylib macos arch:arm64
  • runtimes/osx-arm64/native/libuiohook.dylib
    .dylib macos arch:arm64
  • runtimes/osx-x64/native/libe_sqlite3.dylib
    .dylib macos arch:x64
  • runtimes/osx-x64/native/libllama.dylib
    .dylib macos arch:x64
  • runtimes/osx-x64/native/libuiohook.dylib
    .dylib macos arch:x64
  • runtimes/win-arm/native/e_sqlite3.dll
    .dll windows:6 windows

    dab35201755e491cbcf8aa679afb8970


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-arm/whisper.dll
    .dll windows:6 windows

    e76481c74047dfccc216872c951aaf59


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-arm64/native/e_sqlite3.dll
  • runtimes/win-arm64/native/uiohook.dll
  • runtimes/win-arm64/whisper.dll
  • runtimes/win-x64/native/avx/libllama.dll
    .dll windows:6 windows x64 arch:x64

    6a456a2cb960d573d749ff13c887e7e1


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/native/avx2/libllama.dll
    .dll windows:6 windows x64 arch:x64

    6a456a2cb960d573d749ff13c887e7e1


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/native/avx512/libllama.dll
    .dll windows:6 windows x64 arch:x64

    6a456a2cb960d573d749ff13c887e7e1


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/native/cuda12/libllama.dll
    .dll windows:6 windows x64 arch:x64

    aeb1232b2a403d9ebdbb17494dfd70a0


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/native/e_sqlite3.dll
    .dll windows:6 windows x64 arch:x64

    0fb20445d5d7bb0c6cc4c3e775f04999


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/native/libllama.dll
    .dll windows:6 windows x64 arch:x64

    185e4d0b8c56e6e2fcf14459c0b5a435


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/native/uiohook.dll
    .dll windows:6 windows x64 arch:x64

    32b001f50daae1013b74ec761c5e2fe8


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x64/whisper.dll
    .dll windows:6 windows x64 arch:x64

    0f4c77f2546087cf12f9038819e9cebc


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x86/native/e_sqlite3.dll
    .dll windows:6 windows x86 arch:x86

    158cc953fedf08e39792879c4273221a


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x86/native/uiohook.dll
    .dll windows:6 windows x86 arch:x86

    54f9554bc34e0f8d5b242ac72eead972


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x86/whisper.dll
    .dll windows:6 windows x86 arch:x86

    79df84b6d570ba2f287e37f9449467d0


    Headers

    Imports

    Exports

    Sections

  • runtimes/win/lib/netcoreapp2.0/System.Management.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • update.json
  • websocket-sharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections