File scan report
Verdict Safe
Is UMT_
No antivirus engine flagged this signed installer, while the completed sandbox run showed mostly installer activity with two unconfirmed offensive-technique mappings.
Read the whole reasonShow less
Strong evidence · A verified publisher signature, and no engine flags it.
Good practice2 tips
We found nothing harmful in this file.
Install it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 68 flagged
- Flagged 0
- No detection 68
- No result 7
- Code signing Pryze Software LLC
- Test run Completed
- First seen 1mo ago
Chapter 02
Why we think so
3 points against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
None of the 68 antivirus engines that checked it flagged the file, and its signature from Pryze Software LLC verifies correctly. One sandbox run mapped possible process injection and token manipulation, but named no injection target, returned a clean result, and contacted no host known as malicious or suspicious.
The strongest evidence is the absence of detections: none of the 68 antivirus engines that checked it flagged the installer, including the reporting major antivirus engines. The executable carries a verified Pryze Software LLC signature, and its product-related registry paths align with the publisher and Universal Minecraft Tool name. The test run completed once and showed a conventional temporary installer process followed by the installed application. and mappings warrant caution, but no injected process was identified and the sandbox did not issue a malicious result. The complete host cross-check found no malicious or suspicious entries, while two other contacts were explicitly attributed to sandbox background activity. The two unclassified dropped files and lack of signer history modestly limit certainty, but neither supplies affirmative threat evidence.
What We Detected
None of the 68 antivirus engines that checked it flagged the executable. The file is signed with a verified certificate belonging to Pryze Software LLC, and there is no detected conflict between the claimed product and signer.
Threat Behavior
One completed sandbox run launched the setup program, created temporary installer files, and started UniversalMinecraftTool.exe. It mapped T1055 and T1134, which can indicate process injection and token manipulation, but no injected target process was recorded and the run itself returned a clean result. All three distinct observed hosts or IPs were covered by the reputation check, with none known as malicious or suspicious; two additional contacts were identified as analysis-environment background traffic.
What To Do Now
Use the installer only if it came from the publisher's expected distribution channel and its Windows signature still validates as Pryze Software LLC. Keep security software enabled, especially because two dropped files lack individual saved verdicts and the publisher has no established signing history in the available evidence.
Where this verdict could be wrong3 caveats
- The sandbox mapped possible process injection and token manipulation techniques, but it did not identify an injected target process or return a malicious verdict.
- The publisher certificate is verified, but there is no established sample history for Pryze Software LLC.
- Two dropped files lack saved verdicts, leaving their individual nature unconfirmed.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 68 antivirus engines that checked it flagged the file.
- The executable has a verified Pryze Software LLC signature with no detected brand conflict.
- The completed sandbox run did not return a malicious result.
- The complete observed-host reputation check found no known malicious or suspicious destinations.
- No packing or high-entropy code was identified.
- The test run mapped possible process injection and token manipulation techniques without identifying a target process.
- The verified publisher has no established historical sample record in the available evidence.
- Two files created by the installer have not received individual saved verdicts.
6 sources checked · all complete. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 19sandbox rule tags
- 6spawned processes
- 2network contacts
- 14filesystem & mutex artifacts
Includes the sandbox verdicts, 19 mapped techniques, every process, file, registry and network entry and 1 dropped file.
Show the technical evidenceChapter 04
Technical details
None of the 68 antivirus engines that checked it flag it; signed by Pryze Software LLC.
Sources checked
Every check behind this verdict
6 sources checked · all complete. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 10, 2026, 1:41 PM UTC
- SHA-256
8a380d4631c51e11b16e5bbb261888a0eee9d97951e4d6941e15b03289f9d5b1- SHA-1
e3f3424bc18be047f577f1b99988262bee93cdca- MD5
a484f5132a36a9beb06876f6d3fc96d7
About this file
UMT_setup.exe is a Win32 EXE file of 11.7 MB.
- Type and size
- Win32 EXE · 11.7 MB
- Signer
- Pryze Software LLCValid code signature.
- First seen
- Sep 15, 2026On VirusTotal.
- Submitted by
- 45 distinct sources
- Packer
- None detected
- Entropy
- 6.27 of 8
First scanned
Includes every engine result (75), 1 matched signature rule, PE section entropy and packers and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 7 questions people ask most about this file.
Is UMT_setup.exe safe?
What is UMT_setup.exe?
How many antivirus engines detected UMT_setup.exe?
Is UMT_setup.exe digitally signed?
What is the SHA-256 hash of UMT_setup.exe?
Is it safe to install UMT_setup.exe?
How up to date is this analysis of UMT_setup.exe?
Community
Member reviews and reports for this exact file hash.