Gridinsoft Logo
File Icon

The BLTools-2.8.3.exe (BLTools Cookies Checker) File Analysis

Updated 6 months ago
Checked by Malware Check
BLTools-2.8.3.exe

Technical Analysis

File Name BLTools-2.8.3.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
SSDEEP Hash
98304:piRD4G0wFrNDSGH8Kll2KKuG0wFrNDSGH8Kll2KKB:piRD4G0wFNSGccZG0wFNSGcc
Scanner Version 1.0.202.174
Database Version 2025-01-06 18:00:29 UTC
⚠

Suspicious File Detected

Detected by 42 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
58%
Detection Rate
4,309,504
File Size (bytes)
42/72
Engines Detected
2025-01-06
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
9818f64775259356229b4927602ddf83
SHA1
3580f517b50abaa5341336efb1c11fb9ded01135
SHA256
20bc523e197d26e560f304f41193ed672587a793e6901d0922aa2edee0f01dec
SHA512
b700bc5d77e655924a1ab496301fe7680db666284dae908b3367a527bede6c8b1a4cd6ce9bedfc4b115a60149f4f868374092cb4e0478310749f02dc12349a7e
ImpHash
f34d5f2d4577ed6d9ceec516c1f5a744

Security Engines with Detections (42 of 72)

Bkav
W32.AIDetectMalware.CS Malicious
Lionic
Trojan.Win32.Generic.4!c Malicious
Elastic
malicious (high confidence) Malicious
MicroWorld-eScan
IL:Trojan.MSILZilla.154010 Malicious
FireEye
Generic.mg.9818f64775259356 Malicious
Skyhigh
BehavesLike.Win32.Generic.rc Malicious
ALYac
IL:Trojan.MSILZilla.154010 Malicious
Cylance
Unsafe Malicious
Zillya
Dropper.Agent.Win32.578895 Malicious
Sangfor
Trojan.Win32.Save.MSIL_Inject Malicious
CrowdStrike
win/malicious_confidence_90% (W) Malicious
Symantec
ML.Attribute.HighConfidence Malicious
ESET-NOD32
a variant of MSIL/Packed.VMProtect.E suspicious Malicious
APEX
Malicious Malicious
Paloalto
generic.ml Malicious
BitDefender
IL:Trojan.MSILZilla.154010 Malicious
Avast
Win32:MalwareX-gen [Trj] Malicious
Emsisoft
IL:Trojan.MSILZilla.154010 (B) Malicious
VIPRE
IL:Trojan.MSILZilla.154010 Malicious
TrendMicro
PAK_Xed-10 Malicious
McAfeeD
Real Protect-LS!9818F6477525 Malicious
SentinelOne
Static AI - Malicious PE Malicious
Trapmine
malicious.high.ml.score Malicious
Sophos
Generic Reputation PUA (PUA) Malicious
Ikarus
PUA.MSIL.Vmprotect Malicious
Webroot
W32.Malware.Gen Malicious
Google
Detected Malicious
Varist
W32/ABApplication.QKAG-4235 Malicious
Antiy-AVL
GrayWare/Win32.Wacapew Malicious
Kingsoft
Win32.Troj.Unknown.a Malicious
Microsoft
Program:Win32/Wacapew.C!ml Malicious
Arcabit
IL:Trojan.MSILZilla.D2599A Malicious
GData
IL:Trojan.MSILZilla.154010 Malicious
McAfee
Artemis!9818F6477525 Malicious
Malwarebytes
Malware.AI.2716837100 Malicious
TrendMicro-HouseCall
PAK_Xed-10 Malicious
CTX
exe.trojan.msil Malicious
MaxSecure
Trojan.Malware.234337199.susgen Malicious
Fortinet
PossibleThreat Malicious
AVG
Win32:MalwareX-gen [Trj] Malicious
DeepInstinct
MALICIOUS Malicious
alibabacloud
VirTool:MSIL/Wacatac.B9nj Malicious
30 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: 291e4ead8da79ea6b9efb801377d6410
Fuzzy: e1b6b5df7fafce35a40b00a09d297b3b
dHash: 014decc84d4d7133
Image Base 0x00400000
Entry Point 0x005d7ade
Compilation Time 2079-02-10 02:50:41
Checksum 0x0042b8cf (Actual: 0x0042b8cf)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 1 libraries
mscoree
Exports 0 functions
Resources 4 Resources
Sections 5 Sections

Version Information

▼
Comments
CompanyName
FileDescription BLTools Cookies Checker
FileVersion 2.8.3.0
InternalName BLTools.exe
LegalCopyright Copyright © 2023
LegalTrademarks
OriginalFilename BLTools.exe
ProductName BLTools Cookies Checker
ProductVersion 2.8.3.0
Assembly Version 2.8.3.0
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
0x00002000 1,925,120 bytes 1,925,120 bytes 7.58 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 3062FF5C72CF284648F3C8249667D1C0
0x001d8000 564,180 bytes 564,224 bytes 5.40 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 0100B0C2C333152A732483E037042EA7
0x00262000 1,733,188 bytes 1,733,632 bytes 7.17 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ DE05CF50EB9A0DACF61F3986610FD5C7
0x0040a000 69,282 bytes 69,632 bytes 4.47 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 14C944C46AD916FAC336D38F0BE0CE7F
0x0041c000 12 bytes 512 bytes 0.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ D6FFBD6192210BF7EC718955FC6A8E39
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 4 (68,978 bytes)
Resource Type Count Total Size Percentage
RT_ICON 1 67,624 bytes
98%
RT_GROUP_ICON 1 20 bytes
0%
RT_VERSION 1 844 bytes
1.2%
RT_MANIFEST 1 490 bytes
0.7%

Certificate Chain Analysis

▼
Certificate Information
Product BLTools Cookies Checker
Description BLTools Cookies Checker
File Version 2.8.3.0
Original Name BLTools.exe
Internal Name BLTools.exe
Copyright Copyright © 2023

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
42 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware