Detection Details
Threat name: PDM:Trojan.Win32.Generic
Threat level: High
Detection component: System Monitoring (behavioral, PDM)
Object: OpenChamber.exe
MD5: 635B5C2545D265AD07DF1FA8882AD996
Path: C:\Users\MSI111\AppData\Local\Programs\@openchamberelectron\
Trigger: Detection occurs only when the application is first launched and then closed. Static/passive scanning does NOT detect any threat.
Files Quarantined
openchamber.exe
electron-log-preload.js
openchambber-pluin.js
Why We Believe This Is a False Positive
VirusTotal: 0 detections on the installer
SHA256: 7969530E750C5BB786323DA5DAFC10680980378B775FC0EA2DE2BF72841F5A7F
Link: https://www.virustotal.com/gui/file/7969530e750c5bb786323da5dafc10680980378b775fc0ea2de2bf72841f5a7f/detection
The file is unsigned and unpacked (no packer, no cryptor) — typical of a clean Electron build.
The issue reproduces with all historical versions of the software, suggesting a behavioral heuristic (PDM) false positive on standard Electron runtime behavior (cache writes, JS plugin loading).
The application is an open-source project: https://github.com/openchamber/openchamber
Release installer: https://github.com/openchamber/openchamber/releases/download/v1.18.0/OpenChamber-1.18.0-win-x64.exe
Latest: https://github.com/openchamber/openchamber/releases/download/v1.18.1/OpenChamber-1.18.1-win-x64.exe
Request
Please re-analyze the samples and whitelist OpenChamber.exe / the Electron runtime behavior if confirmed as a false positive. Auto-quarantine currently breaks the application and forces users to disable protection.
卡巴斯基漏洞疑似对 OpenChamber 问题造成误报
https://github.com/openchamber/openchamber/releases/download/v1.18.0/OpenChamber-1.18.0-win-x64.exe
最新版本
https://github.com/openchamber/openchamber/releases/download/v1.18.1/OpenChamber-1.18.1-win-x64.exe
您好，我在安装 OpenChamber 时遇到了问题。OpenChamber 的最新版本是 1.18.0，运行在 Windows 11 系统上，我使用的是卡巴斯基高级版。
历史版本的EXE文件也会出现这个问题。
被动扫描 EXE 文件无法检测病毒或木马，但首次打开文件和安装后关闭文件时会检测到病毒。
卡巴斯基在 window.exe 文件中检测到病毒。
electron-log-preload.js
openchambber-plun.js
openchamber.exe
我使用https://opentip.kaspersky.com/上传了文件，网站
显示文件安全，但当我在本地重现问题时，仍然触发了病毒警告。本地扫描安装程序包后未发现任何病毒。首次安装后，卡巴斯基在重新打开程序时自动阻止了 OpenChamber.exe 进程。请帮我解决这个问题。谢谢。
报告
概述
尊敬的卡巴斯基团队：
我们正在报告合法应用程序 OpenChamber（版本 1.18.0 和 1.18.1，Windows 11 x64）疑似出现误报。
Detection Details
Threat name: PDM:Trojan.Win32.Generic
Threat level: High
Detection component: System Monitoring (behavioral, PDM)
Object: OpenChamber.exe
MD5: 635B5C2545D265AD07DF1FA8882AD996
Path: C:\Users\MSI111\AppData\Local\Programs\@openchamberelectron\
Trigger: Detection occurs only when the application is first launched and then closed. Static/passive scanning does NOT detect any threat.
Files Quarantined
openchamber.exe
electron-log-preload.js
openchambber-pluin.js
Why We Believe This Is a False Positive
VirusTotal: 0 detections on the installer
SHA256: 7969530E750C5BB786323DA5DAFC10680980378B775FC0EA2DE2BF72841F5A7F
Link: https://www.virustotal.com/gui/file/7969530e750c5bb786323da5dafc10680980378b775fc0ea2de2bf72841f5a7f/detection
The file is unsigned and unpacked (no packer, no cryptor) — typical of a clean Electron build.
The issue reproduces with all historical versions of the software, suggesting a behavioral heuristic (PDM) false positive on standard Electron runtime behavior (cache writes, JS plugin loading).
The application is an open-source project: https://github.com/openchamber/openchamber
Release installer: https://github.com/openchamber/openchamber/releases/download/v1.18.0/OpenChamber-1.18.0-win-x64.exe
Latest: https://github.com/openchamber/openchamber/releases/download/v1.18.1/OpenChamber-1.18.1-win-x64.exe
Request
Please re-analyze the samples and whitelist OpenChamber.exe / the Electron runtime behavior if confirmed as a false positive. Auto-quarantine currently breaks the application and forces users to disable protection.
Thank you for your time.
此致，[您的姓名] 卡巴斯基高级版用户
事件：无法删除应用程序：OpenChamber.exe
用户：PC\MSI111
用户类型：发起程序
组件：系统监控
结果描述：无法删除
类型：木马
名称：PDM:Trojan.Win32.Generic
威胁级别：高
对象类型：进程
对象路径：C:\Users\MSI111\AppData\Local\Programs@openchamberelectron
对象名称：OpenChamber.exe
MD5：635B5C2545D265AD07DF1FA8882AD996
事件：无法删除应用程序：OpenChamber.exe
用户：PC\MSI111
用户类型：发起程序
组件：系统监控
结果描述：无法删除
类型：木马
名称：PDM:Trojan.Win32.Generic
威胁级别：高
对象类型：进程
对象路径： C:\Users\MSI11\AppData\Local\Programs\@openchamberelectron
对象名称：OpenChamber.exe
MD5：635B5C2545D265AD07DF1FA8882AD996
发生位置？
桌面 Web
版本（如果已知）
1.18.0
屏幕截图/录制（可选）
无响应
日志（可选）
今天，2026/8/4 19:59:05；检测到恶意对象；OpenChamber；OpenChamber.exe；C:\Users\MSI111\AppData\Local\Programs\@openchamberelectron；35184；PC\MSI111；发起者；检测到：PDM:Trojan.Win32.Generic；已检测到；PDM:Trojan.Win32.Generic；木马；高危；已确认；OpenChamber.exe；OpenChamber.exe； C:\Users\MSI111\AppData\Local\Programs\@openchamberelectron；已终止：PDM:Trojan.Win32.Generic；已终止；PDM:Trojan.Win32.Generic；木马；高危；精确；OpenChamber.exe；OpenChamber.exe；C:\Users\MSI111\AppData\Local\Programs\@openchamberelectron；进程；C:\Users\MSI111\AppData\Local\Programs\@openchamberelectron；35184；PC\MSI111；发起者；已创建备份副本：PDM:Trojan.Win32.Generic；C:\Users\MSI111\AppData\Local\Programs\@openchamberelectron；进程；
今天，2026/8/4 20:00:01；对象已删除；OpenChamber；OpenChamber.exe； C:\Users\MSI111\AppData\Local\Programs\@openchamberelectron; 35184; PC\MSI111; 发起程序; PDM:Trojan.Win32.Generic; 木马; 高危;