File scan report
Verdict Safe
Is Black
This verified Pearl Abyss-signed Black Desert installer was flagged by none of the 70 antivirus engines that checked it and is widely submitted, and its sandbox run showed an…
Read the whole reasonShow less
Strong evidence · A verified publisher signature, and no engine flags it.
This installer can be used normally. Download future copies only from official Black Desert channels and keep your security software enabled.
Good practice2 tips
We found nothing harmful in this file.
Install it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 70 flagged
- Flagged 0
- No detection 70
- No result 5
- Code signing Pearl Abyss Corp.
- Test run Completed
- First seen 7mo ago
Chapter 02
Why we think so
2 points against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
It has been seen from over 100 sources for months. In the sandbox it installed the game launcher and patcher and contacted only Pearl Abyss and captcha services.
A valid Pearl Abyss Corp. signature matches the claimed product, and no brand conflict exists. The file is common and long-observed, and no external threat-intelligence source matched it. Its single sandbox run was clean and showed a normal Inno Setup installation that registered an uninstaller and started the game launcher. All 31 contacted hosts were checked against our URL reputation records with no malicious or suspicious hits. Technique mappings such as injection and file encryption have no supporting target or detection and fit patcher behaviour.
What We Detected
None of the 70 antivirus engines that checked it flagged this file. The code signature from Pearl Abyss Corp., developer of Black Desert, is verified. The file has been submitted by 105 distinct sources over 228 days, and no threat-intelligence feed or YARA rule matched it.
Threat Behavior
In one sandbox run, the installer unpacked through Inno Setup and wrote game files into C:\Pearlabyss\BlackDesert. It created a standard uninstall registry entry and launched the Black Desert launcher and patcher. Network contacts went to Pearl Abyss game and CDN domains and to hCaptcha, and all 31 checked hosts had no malicious or suspicious reputation. Automated technique mappings for injection and file modification named no injected process and are consistent with patching activity.
What To Do Now
The installer appears to be the official game installer. For future downloads, obtain it from the official Black Desert site or Steam, and keep your antivirus enabled during installation.
Where this verdict could be wrong2 caveats
- The sandbox mapped T1485/T1486 (data destruction/encryption) and injection techniques; these mappings commonly arise from installers and game patchers overwriting files and are unaccompanied by any detection or injected target.
- Pearl Abyss Corp. has no signer history in our records yet, so the signature has not been checked against prior samples from this publisher.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 70 antivirus engines that checked it flagged the file
- Verified code signature from Pearl Abyss Corp., matching the Black Desert product
- Widely seen across more than 100 sources over several months
- The sandbox run was clean, with network contacts limited to Pearl Abyss services and hCaptcha
- All 31 contacted hosts were checked with no malicious or suspicious hits
- Automated behaviour mapping listed injection and file-encryption techniques, though no injected process or detection supports them
- This publisher has no prior signing history in our records
6 sources checked · all complete. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 29sandbox rule tags
- 6spawned processes
- 23network contacts
- 36filesystem & mutex artifacts
Includes the sandbox verdicts, 29 mapped techniques, every process, file, registry and network entry and 10 dropped files.
Show the technical evidenceChapter 04
Technical details
None of the 70 antivirus engines that checked it flag it; signed by Pearl Abyss Corp..
Sources checked
Every check behind this verdict
6 sources checked · all complete. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 17, 2026, 3:54 PM UTC
- SHA-256
d7506f18ad97cb9b88a38cf80a8ffd20a0ffe9e764c2c0cab2d0d6ee8b4117d6- SHA-1
8c678ca3b4dd631d9fc91ff05ca0ca9733529e87- MD5
604790c8727e86373b5d8c54a1e8b1d0
About this file
BlackDesert_Installer_NAEU.exe is a Win32 EXE file of 37.0 MB.
- Type and size
- Win32 EXE · 37.0 MB
- Signer
- Pearl Abyss Corp.Valid code signature.
- First seen
- Mar 3, 2026On VirusTotal.
- Submitted by
- 105 distinct sources
- Packer
- None detected
- Entropy
- 6.65 of 8
First scanned
Includes every engine result (75), 1 matched signature rule, PE section entropy and packers and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 7 questions people ask most about this file.
Is BlackDesert_Installer_NAEU.exe safe?
What is BlackDesert_Installer_NAEU.exe?
How many antivirus engines detected BlackDesert_Installer_NAEU.exe?
Is BlackDesert_Installer_NAEU.exe digitally signed?
What is the SHA-256 hash of BlackDesert_Installer_NAEU.exe?
Is it safe to install BlackDesert_Installer_NAEU.exe?
How up to date is this analysis of BlackDesert_Installer_NAEU.exe?
Community
Member reviews and reports for this exact file hash.
