Malware

Application.OpenSUpdater.100 (file analysis)

Malware Removal

The Application.OpenSUpdater.100 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Application.OpenSUpdater.100 virus can do?

  • Presents an Authenticode digital signature
  • Unconventionial language used in binary resources: Arabic (Qatar)
  • Network activity detected but not expressed in API logs

How to determine Application.OpenSUpdater.100?


File Info:

crc32: 810F58EF
md5: c48d079e4d73b2c762465a69450c51bf
name: C48D079E4D73B2C762465A69450C51BF.mlw
sha1: 3c767b5045fa71ab0e85ac0e8a6138d0666e54cd
sha256: d927e7047b2789f4ca958f47faa71bc6c19ed318253de577b01c578e93fe19cf
sha512: a0ee29578c104579f538ad8e3537b6bdfe5c7fc9a804311cbe3ffe41e04f4db1ceb36e8ffdd997ca16c79dbdde821fe12da60c45d8a55c9416e4d621fa7cda95
ssdeep: 12288:n71SUvbW7ZLUBFhmUhFNsx9JLoPbe8abiRHJNNOicx8fMRHExtis/SrpiOiZY0Y0:n71RbW7ZLUBFqiR2kMRHExDNOi4q
type: PE32 executable (console) Intel 80386, for MS Windows

Version Info:

LegalCopyright: BravoTech LLC. 2018
InternalName: bravotech.exe
FileVersion: 1.0.0.1
CompanyName: BravoTech LLC.
ProductName: BravoTech
ProductVersion: 1.0.0.1
FileDescription: BravoTech
OriginalFilename: bravotech.exe
Translation: 0x4009 0x04b0

Application.OpenSUpdater.100 also known as:

LionicTrojan.Win32.OpenSUpdater.4!c
Elasticmalicious (high confidence)
ALYacGen:Variant.Application.OpenSUpdater.100
SangforTrojan.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaAdWare:Win32/OpenSUpdater.94101e1e
K7GWAdware ( 005459ed1 )
K7AntiVirusAdware ( 005459ed1 )
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Adware.OpenSUpdater.DO
APEXMalicious
AvastWin32:Malware-gen
CynetMalicious (score: 99)
BitDefenderGen:Variant.Application.OpenSUpdater.100
MicroWorld-eScanGen:Variant.Application.OpenSUpdater.100
TencentWin32.Trojan.Falsesign.Sxyb
Ad-AwareGen:Variant.Application.OpenSUpdater.100
SophosGeneric PUA DM (PUA)
McAfee-GW-EditionPUP-XGK-SJ
FireEyeGeneric.mg.c48d079e4d73b2c7
EmsisoftApplication.Updater (A)
SentinelOneStatic AI – Malicious PE
AviraHEUR/AGEN.1141222
MicrosoftTrojan:Win32/Wacatac.A!ml
GDataGen:Variant.Application.OpenSUpdater.100
AhnLab-V3PUP/Win.Agent.R415035
McAfeePUP-XGK-SJ
VBA32BScope.Adware.Agent
MalwarebytesPUP.Optional.SpecialSearchOffer
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002H0CIT21
FortinetRiskware/PUP_XGK
AVGWin32:Malware-gen
Paloaltogeneric.ml

How to remove Application.OpenSUpdater.100?

Application.OpenSUpdater.100 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment