[Security] Potential Malware Version 0.11.1

[razvanazamfirei]

Description

Potential malware in windows version. See link for analysis.

http://www.hybrid-analysis.com/sample/fc1e1c107ce5abed0793c1fda89baa841bb52e431fa2c3bb5a621b9ab249c37c

Motivation

No response

Alternatives

No response

Additional context

No response

[razvanazamfirei]

Exec from obtained from the lencx/ChatGPT repo.
hxxps://github.com/lencx/ChatGPT/releases/download/v0.11.1/ChatGPT_0.11.1_windows_x86_64.msi

[mike-lowski]

Same with v0.12.0

https://www.hybrid-analysis.com/sample/ed09b660a16215844f5072e6ea4821c17dcaa3eb9e3a48e864d9428850d48973

[GreenTeaBD]

This is the 2nd time this has happened. The last time it happened I got a malware alert from a version obtained by using the auto update in the program.

[Vulcanraven91]

Microsoft is known for persistently installing the Edge browser into the system. And that this may be the source of some users' concerns. However, the Webview2 version can be downloaded directly from Microsoft's website to ensure that it is a safe and legitimate installation.

You can install the latest Webview2 version from Microsoft directly.
https://developer.microsoft.com/de-de/microsoft-edge/webview2/#download-section

I also scanned it with Hybrid-analysis which got flagged too.
https://www.hybrid-analysis.com/sample/65f6efdf6df4095971a95f4bf387590ae63109388344632a22458265ab7dd289

Virustotal says its clean:
https://www.virustotal.com/gui/file/65f6efdf6df4095971a95f4bf387590ae63109388344632a22458265ab7dd289