CatTuber

приятная игра особенно когда можно ее подрубать когда болтаешь с кем то мне особенно а*** когда болтаю с лизой и на фоне эта имба. в войсе она вообще была довольна этой покупкой поэтому это самая лучшая покупка за такую чудесную цену. я тебя люблю лиз

Идея крутая, но программа работает с определёнными моделями сделанными в лайв2д. Техническая документация и как делать модель пока что только на китайском.

I have noticed there is activity on the product's github (last update on 28th of april) that said, I'm not entirely sure if this is accurate or not but the exe file is seen as a virus. It could be because unsigned certificates or because at the end of the day it is a keylogger (tracking keys to display them) but here are my findings: Verdict High Risk Origin input file Found API reference FindWindowW@USER32.dll Found API reference GetWindowLongW@USER32.dll Found API reference SetWindowLongW@USER32.dll MITRE Techniques Tactic Defense Evasion Technique Process Injection Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process. Found indicators for heavy vm detection or system enumeration Verdict High Risk Origin input file The file is potentially trying to avoid defenses by detecting a sandbox environment OSINT source detected malicious resource Verdict High Risk Origin input file OSINT provider OPSWAT_REPUTATION detected FILE_HASH_SHA256 resource 415D5FCA9897069547C498F658123ACCD858493923F52DBA86311E6CAEF33448 as LIKELY_MALICIOUS PE imports APIs used to access or modify privilege levels Discovery (1) Defense Evasion (1) Verdict High Risk Origin input file Found API reference OpenProcessToken@ADVAPI32.dll High Risk Found API reference GetTokenInformation@ADVAPI32.dll Low Risk Found API reference CheckTokenMembership@ADVAPI32.dll High Risk MITRE Techniques Tactic Discovery Technique System Owner/User Discovery Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using [OS Credential Dumping](https://attack.mitre.org/techniques/T1003). The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions. Tactic Defense Evasion Technique Access Token Manipulation Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.