File scan report
Verdict Safe
Is ultradmg.
Validly signed SYSGeeker UltraDMG installer with no detections from 75 engines and sandbox runs showing only a normal application install.
Read the whole reasonShow less
Strong evidence · A verified publisher signature, and no engine flags it.
This installer appears safe to use when obtained from SYSGeeker's official download page. Keep security software enabled and verify the signature on future downloads.
Good practice2 tips
We found nothing harmful in this file.
Run it only if it came from the developer's own website or an official app store.
Keep your antivirus and Windows updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 71 flagged
- Flagged 0
- No detection 71
- No result 4
- Code signing SYSGeeker Technology Limited
- Test run Completed
- First seen 6mo ago
Chapter 02
Why we think so
1 point against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
None of the 71 antivirus engines that checked it flagged this installer, and it carries a valid signature from SYSGeeker Technology Limited. Three sandbox runs showed a standard Inno Setup installation of the UltraDMG app into Program Files, with no high-risk techniques and no malicious network contacts.
No engine, including all 18 major antivirus engines, detected the file. The valid signature names SYSGeeker Technology Limited, which matches the program folder created during installation. Sandbox runs recorded ordinary installer activity: extracting a setup helper, writing Qt libraries and a download utility, and registering an uninstall entry. The only contact attributable to the sample was a certificate-status check, and every observed host was checked with no malicious or suspicious result. The publisher has little track record with us and a protector signature was reported, but nothing hostile corroborates either point.
What We Detected
None of the 71 antivirus engines that checked it flagged the file, and all major antivirus engines returned clean results. It has a valid code signature from SYSGeeker Technology Limited and has been seen by 67 submitters over about six months. No public malware databases or community rules matched it.
Threat Behavior
In three sandbox runs, the program behaved like a standard Inno Setup installer. It unpacked a temporary setup helper, installed the UltraDMG application with Qt libraries into Program Files, and added an uninstall registry entry. No persistence, injection targets or high-risk techniques were recorded. Its only network contact was a certificate-status server, and every contacted host checked clean.
What To Do Now
If you downloaded this installer from SYSGeeker's official site, it appears fine to use. Keep your antivirus enabled and re-scan future versions as usual.
Where this verdict could be wrong3 caveats
- The publisher has very little history in our records, so the signature identifies the vendor but does not by itself vouch for it.
- A protector signature was reported on the setup program, though the code is not high-entropy and the layout matches an ordinary installer stub.
- Similar files built with the same installer framework have received mixed verdicts, but they come from unrelated publishers and do not reflect this file.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 71 antivirus engines that checked it flagged the file.
- Valid code signature from SYSGeeker Technology Limited, matching the installed product folder.
- Sandbox runs showed only normal installer activity with no high-risk techniques.
- All contacted hosts were checked and none were known malicious or suspicious.
- Seen by 67 distinct submitters over roughly six months with no public malware listings.
- The publisher has very limited history in our records.
6 sources checked · all complete. See every source
Chapter 03
What it did in our test
It ran in 3 isolated tests; no test environment rated what it did as risky.
Test run summary
Capture complete- 3isolated sandbox runs
- 15sandbox rule tags
- 7spawned processes
- 1network contact
- 40filesystem & mutex artifacts
Includes the sandbox verdicts, 15 mapped techniques, every process, file, registry and network entry and 10 dropped files.
Show the technical evidenceChapter 04
Technical details
None of the 71 antivirus engines that checked it flag it; signed by SYSGeeker Technology Limited.
Sources checked
Every check behind this verdict
6 sources checked · all complete. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 19, 2026, 4:00 PM UTC
- SHA-256
b02f81f8f6cf2583b34479c826ff76aaeb03428fa63471a9c48c73d35337df55- SHA-1
2e6990bce337b15552a003ee52f84c5dbf4a0e5a- MD5
ae45f178762b7aedf0b7b370c826429c
About this file
ultradmg.exe says it is SYSGeeker UltraDMG Setup (SYSGeeker UltraDMG), 27.8 MB.
- Claims to be
- SYSGeeker UltraDMG Setup (SYSGeeker UltraDMG)From the file's own version information, written by whoever built it.
- Type and size
- Win32 EXE · 27.8 MB
- Signer
- SYSGeeker Technology LimitedValid code signature.
- First seen
- Apr 8, 2026On VirusTotal.
- Submitted by
- 67 distinct sources
- Packer
- .NET Reactor 2.X-3.X (DetectItEasy protector)Packing hides code; legitimate installers use it too.
- Entropy
- 6.49 of 8
First scanned
Includes every engine result (75), 1 matched signature rule, PE section entropy and packers and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 7 questions people ask most about this file.
Is ultradmg.exe safe?
What is ultradmg.exe?
How many antivirus engines detected ultradmg.exe?
Is ultradmg.exe digitally signed?
What is the SHA-256 hash of ultradmg.exe?
Is it safe to run ultradmg.exe?
How up to date is this analysis of ultradmg.exe?
Community
Member reviews and reports for this exact file hash.