home

installer.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from www.wallsave.com.
MD5:
e1d8781566b5097a7cdfd0767803b48f

SHA-1:
00df72a19962e98631efab722214bd3a929b5a71

SHA-256:
f1fb61bce3dd308e0c9fdf950c6f47c13f8a5e8ff127a287fa075625ff2ff4be

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 2:36:27 AM UTC  (today)

File size:
21 Bytes

File type:
Executable application (Win64 EXE)

Common path:
C:\windows\temp\installer.exe

File PE Metadata
Compilation timestamp:
1/11/2026 10:20:23 PM

OS bitness:
Win64

CTPH (ssdeep):
3:BOzJpMiL:Uz7L

Entry point:
46, 61, 69, 6C, 65, 64, 20, 6C, 6F, 61, 64, 69, 6E, 67, 20, 64, 6F, 6D, 61, 69, 6E...
 
[+]

Packer / compiler:
RLPack FullEdition V1.1X * Sign.By.fly

Code size:
107 MB (112,230,444 bytes)

The file installer.exe has been seen being distributed by the following URL.

http://www.wallsave.com/.../5009458

Scan installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.