Advice Request is this exe screensaver safe?

[Brie]

it is from www.screensaversplanet.com.

it said that the screensaver was repackaged to work on windows 10.

it is midnight-beach-v2.exe.

 

[roger_m]

it is from www.screensaversplanet.com.

It should be clean. It was not detected by anything when scanned at VirusTotal.

 

[Brie]

thank you roger. i appreciate your response, time and effort.

 

[roger_m]

thank you roger. i appreciate your response, time and effort.

You're welcome.

 

[Brie]

i can't get this to install. it might be bitdefender stopping it. which folder do you put it in? it stops me from putting it in every thing except 'programdata'.

 

[roger_m]

i can't get this to install. it might be bitdefender stopping it. which folder do you put it in? it stops me from putting it in every thing except 'programdata'.

You need to install it to C:\Windows, which is selected by default.

After it copies the screensaver there, it opens the Windows screensaver dialogue box.

 

[Brie]

i excluded the screensaver 3 different ways on bitdefender TS. it still said it deleted it. then the screensaver worked any way.

thank you very much for your help.

 

[upnorth]

It should be clean. It was not detected by anything when scanned at VirusTotal.

Today both the installer and domain is flagged on VT but I wouldn't say that's conclusive because it's too few vendors at the moment.

 

[ForgottenSeer 69673]

I also checked the file today on VT and none were falgging it. I then draged and droped the file to Voodooshield and it said it looked ok by black list but AI flagged it as avery bad.

 

[Brie]

i scanned it with bitdefender TS each time. it scanned clean. [shrugs shoulders].

thank you for your time and effort.

 

[ForgottenSeer 58943]

 

[ForgottenSeer 58943]

HA analysis determination - malicious.

Free Automated Malware Analysis Service - powered by Falcon Sandbox - Login

This file does a lot of things I am extremely uncomfortable with. Most specifically, it creates a terminal server user for remote access. It also wants to see keyboard input and clipboard contents.