Gridinsoft Logo
File Icon

The OpenBullet.exe (OpenBullet) File Analysis

Technical Analysis

File Name OpenBullet.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
SSDEEP Hash
12288:VB3VsPD8jW+OmvzpIW5Ete1zmbqqa1m8BMst6XC+9gyIQ/R7ZPc4eDE+144XejVs:yDqvvh1TfFIH9gYRRcY+TeZ6risSmL
Scanner Version 1.0.175.174
Database Version 2024-05-10 14:00:24 UTC

Suspicious File Detected

Detected by 31 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
42%
Detection Rate
1,255,936
File Size (bytes)
31/73
Engines Detected
2024-05-10
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
314e8e0fc8a779eb1fa67fd939c148ce
SHA1
23e15fe83e1a58c288e421cf95302d8f32b22599
SHA256
f997c8624e10e1f063cebad7a0902fc4164281f4c1b976666ea59aa928753dd4
SHA512
23bc35f1b765d1eb422a0ea3e39bb6606b60fe5630f8272f823b397b5f47fd18a2894383594a1b1e6c6e3cdfebc9553ef723627d828a65e0e0d56545e2ae9e90
ImpHash
f34d5f2d4577ed6d9ceec516c1f5a744

Security Engines with Detections (31 of 73)

Bkav
W32.AIDetectMalware.CS Malicious
Lionic
Trojan.Win32.OpenBullet.4!c Malicious
CAT-QuickHeal
PUA.PuphacktoolFC.S21583429 Malicious
Cylance
unsafe Malicious
Zillya
Tool.OpenBullet.Win32.40 Malicious
Sangfor
Riskware.Msil.Openbullet.Vtkn Malicious
K7AntiVirus
Riskware ( 0058ba6d1 ) Malicious
Alibaba
RiskWare:MSIL/OpenBullet.1b495089 Malicious
K7GW
Riskware ( 0058ba6d1 ) Malicious
VirIT
Trojan.Win32.MSIL_Heur.A Malicious
ESET-NOD32
a variant of MSIL/Riskware.OpenBullet.A Malicious
Paloalto
generic.ml Malicious
SUPERAntiSpyware
Trojan.Agent/Gen-MSILPerseus Malicious
Tencent
Malware.Win32.Gencirc.10bd90f7 Malicious
TrendMicro
HackTool.MSIL.OpenBullet.A Malicious
Sophos
OpenBullet (PUA) Malicious
Ikarus
PUA.MSIL.Openbullet Malicious
Jiangmin
Trojan.Sdum.wl Malicious
Varist
W32/ABRisk.YMDF-1859 Malicious
Antiy-AVL
Trojan/Win32.Sdum Malicious
Microsoft
HackTool:Win32/Keygen Malicious
Google
Detected Malicious
Malwarebytes
Neshta.Virus.FileInfector.DDS Malicious
Panda
PUP/Hacktool Malicious
TrendMicro-HouseCall
HackTool.MSIL.OpenBullet.A Malicious
Rising
Trojan.Sdum!8.1155F (C64:YzY0OhF2b7asbvDL) Malicious
Yandex
Trojan.Igent.bYpQcy.2 Malicious
MaxSecure
Trojan.Malware.95448701.susgen Malicious
Fortinet
Riskware/OpenBullet Malicious
DeepInstinct
MALICIOUS Malicious
alibabacloud
RiskWare:MSIL/Openbullet.A Malicious
42 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

Icon
Hash: 6de5de5e935a5efd8295a47786fa2f53
Fuzzy: a71522152a61b1a233e8ef3d3d8caf4c
dHash: 92517171717171b2
Image Base 0x00400000
Entry Point 0x005326ea
Compilation Time 2020-02-06 02:44:05
Checksum 0x00000000 (Actual: 0x0013b2b2)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
PDB Path C:\Users\wcowa\source\repos\PurityWasHere\Anomaly-Mod\experiemental\OpenBullet\obj\Release\OpenBullet.pdb
Digital Signature The PE file does not contain a certificate table.
Imports 1 libraries
mscoree
Exports 0 functions
Resources 4 Resources
Sections 3 Sections

Version Information

Translation 0x0000 0x04b0
Comments
CompanyName
FileDescription OpenBullet
FileVersion 1.0.0.0
InternalName OpenBullet.exe
LegalCopyright Copyright © 2018
LegalTrademarks
OriginalFilename OpenBullet.exe
ProductName OpenBullet
ProductVersion 1.0.0.0
Assembly Version 1.0.0.0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00002000 1,246,992 bytes 1,247,232 bytes 7.00 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 32136777CFD6078904AEB9619C983CE5
.rsrc 0x00134000 7,516 bytes 7,680 bytes 7.28 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 25B0D372542FE1D50B17EC599169642D
.reloc 0x00136000 12 bytes 512 bytes 0.10 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 36E035D23A56F2A1B24DEF704B63B4D2
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 4 (7,203 bytes)
Resource Type Count Total Size Percentage
RT_ICON 1 5,881 bytes
81.6%
RT_GROUP_ICON 1 20 bytes
0.3%
RT_VERSION 1 812 bytes
11.3%
RT_MANIFEST 1 490 bytes
6.8%

Certificate Chain Analysis

Certificate Information
Product OpenBullet
Description OpenBullet
File Version 1.0.0.0
Original Name OpenBullet.exe
Internal Name OpenBullet.exe
Copyright Copyright © 2018
Certificate Chain Summary
Certificate #1 Primary
Validity Period: 1997-05-12 07:00:00 → 1999-12-31 07:00:00
Signature Algorithm: md5RSA
Serial Number: 13 89 B4 D1 8A E8 A7 C4 BD 35 C7 9B 8D 88 CA 1F CA 53 56 91
Certificate #2 Chain
Validity Period: 1997-05-12 07:00:00 → 1999-12-31 07:00:00
Signature Algorithm: md5RSA
Serial Number: BD 11 9A DA 43 ED 21 FB 46 58 84 89 CA 46 88 90 25 EE 14 60
Microsoft Corporation #3 Chain
Validity Period: 1998-04-16 00:00:00 → 1999-04-16 23:59:59
Signature Algorithm: 1.2.840.113549.1.1.2
Serial Number: 79 66 96 6E 83 B0 D0 B6 01 12 6E 9D C0 B4 65 71

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
31 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware