File scan report
Verdict Safe
Is Reallusion Installer safe? Yes, no threats found.
The verified Reallusion installer drew no detections from 75 engines, while observed execution and fully checked contacted domains produced no corroborating malware indicators.
Read the whole reasonShow less
Strong evidence · A verified publisher signature, and no engine flags it.
Good practice2 tips
We found nothing harmful in this file.
Install it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 69 flagged
- Flagged 0
- No detection 69
- No result 6
- Code signing Reallusion Inc.
- Test run Completed
- First seen 1mo ago
Chapter 02
Why we think so
2 points against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
None of the 69 antivirus engines that checked it flagged this verified Reallusion Inc. installer, including all 17 major antivirus engines. One sandbox recorded mostly installer-common activity.
The sample has a valid signature from Reallusion Inc., and its branding does not conflict with that signer. No engine among 75 reported a malicious or suspicious result, with all 17 reporting major antivirus engines remaining silent. One completed sandbox run recorded alongside 17 techniques common in legitimate software but did not produce a malicious conclusion. Both observed domains were covered by the host-reputation check, and neither matched malicious or suspicious cache entries. The seven dropped files were not individually resolved beyond unknown, but none was identified as malicious. Similar-file history is mostly favorable, although those matches on the import table alone involve different signers and therefore provide only weak support.
What We Detected
The executable is a signed installer with a verified certificate naming Reallusion Inc. None of the 69 antivirus engines that checked it flagged it, including the 17 reporting major antivirus engines, and no conflicting brand identity was detected.
Threat Behavior
One completed sandbox run recorded mainly installer-common activity. T1134, a token-related technique, was the only offensive technique identified, but the run produced no malicious sandbox conclusion. The host-reputation check covered both observed domains—api.reallusion.com and file.reallusion.com—and found no malicious or suspicious matches. Seven extracted children were inspected without any identified malicious child, although their individual verdicts remain unknown.
What To Do Now
Use the installer only if it came from Reallusion's official website or another authorized release channel, and confirm that Windows still reports the Reallusion Inc. signature as valid. Keep security software enabled during installation.
Where this verdict could be wrong4 caveats
- appeared during execution; although token manipulation can be security-sensitive, it was not accompanied by a malicious sandbox conclusion or antivirus detection.
- This signer has no saved history, so there is no established historical sample record for 'Reallusion Inc.' in the local signer dataset.
- All seven files it created have individual verdicts of unknown; the absence of a known-malicious dropped file reflects no identified malicious child, not seven independently cleared files.
- One of five import-table fingerprint-similar files previously received a suspicious result, though its signer did not match this sample.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- 0/69 antivirus engines reported a malicious or suspicious result.
- All 17 reporting major antivirus engines were undetected.
- The code signature is verified for Reallusion Inc.
- No brand mismatch or packing indicators were detected.
- Both observed domains were covered by the host check with no malicious or suspicious matches.
- token-related activity was recorded in one sandbox run.
- No historical signer statistics are available for Reallusion Inc. in the local dataset.
6 sources checked · 5 complete · 1 partial. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 18sandbox rule tags
- 1spawned processes
- 4network contacts
- 21filesystem & mutex artifacts
Includes the sandbox verdicts, 18 mapped techniques, every process, file, registry and network entry and 7 dropped files.
Show the technical evidenceChapter 04
Technical details
None of the 69 antivirus engines that checked it flag it; signed by Reallusion Inc..
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 partial. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 8, 2026, 11:42 PM UTC
- SHA-256
f300ab36d5b536c1bcffc09e4740d1d403b3c09c37e9c25aeb35098713905a9f- SHA-1
294ea85a3dea4c25fd87fa19a5322e9f4b8aced0- MD5
e4b89940e3e28ad0b708a26cb1f48af0
About this file
Reallusion Installer is a Win32 EXE file of 1.1 MB.
- Type and size
- Win32 EXE · 1.1 MB
- Signer
- Reallusion Inc.Valid code signature.
- First seen
- Sep 1, 2026On VirusTotal.
- Submitted by
- 2 distinct sourcesRarely seen: few people have submitted this exact file.
- Packer
- None detected
- Entropy
- 3.98 of 8
First scanned
Includes every engine result (75), PE section entropy and packers and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 7 questions people ask most about this file.
Is Reallusion Installer safe?
What is Reallusion Installer?
How many antivirus engines detected Reallusion Installer?
Is Reallusion Installer digitally signed?
What is the SHA-256 hash of Reallusion Installer?
Is it safe to install Reallusion Installer?
How up to date is this analysis of Reallusion Installer?
Community
Member reviews and reports for this exact file hash.