File scan report
Verdict Low Risk
Is PSFLab
This zipped macOS installer has no antivirus detections, but its code signature claiming The MathWorks, Inc. fails verification and the file has almost no distribution history.
Read the whole reasonShow less
Why not Safe? Its signature could not be verified and only one source had seen it when we scanned it.
Limited evidence · Nothing points to a problem, but little confirms who made it.
Get this installer directly from the vendor's official site instead of running this copy, because its signature failed verification. Keep macOS Gatekeeper protections enabled.
Good practice2 tips
Low Risk: no threat found, but we could not fully confirm this file.
Get it from the publisher's own website or app store, not from a re-upload or a link someone sent you.
Keep your security software on, and stop if the file does anything you didn't expect.
Reads the latest antivirus results for this file's hash. Nothing is uploaded.
Antivirus results
0 of 66 flagged
- Flagged 0
- No detection 66
- No result 9
- Code signing Signer not verified
- Test run Completed
- First seen 4mo ago
Chapter 02
Why we think so
3 points against it and 2 in its favour, checked against the scan evidence.
The reasoning behind this verdict
None of the 66 antivirus engines that checked it flagged this macOS app archive, and the sandbox summary shows no high-risk techniques. However, its signature claims The MathWorks, Inc. but failed verification. It has been submitted by only one source, so we cannot confirm where it came from.
None of the 66 antivirus engines that checked it flagged the archive, including all major antivirus engines that returned a result. The embedded app carries a signature that claims The MathWorks, Inc., but verification failed. A failed signature can mean the app was modified after signing. The file was first seen on Jun 1, 2026, and only one source has submitted it, so no wider reputation backs it. The sandbox summary mapped only techniques common in legitimate software and no injection. Host-reputation coverage is partial because only one of the contacted addresses was checked.
What We Detected
None of the 66 antivirus engines that checked it flagged this ZIP archive containing a macOS application. The app's code signature claims The MathWorks, Inc. but failed verification, so it cannot be attributed to that publisher.
Threat Behavior
The combined sandbox summary recorded only techniques common in legitimate software. It showed no process injection and no persistence, and no sandbox verdict was recorded. Several network addresses were contacted, but only one was checked against our host reputation data, so no complete host-reputation result is available.
What To Do Now
Download this installer only from the vendor's official site, and compare it with the official copy. Do not run a copy whose signature fails verification. If macOS Gatekeeper warns about the app, do not bypass the warning.
Where this verdict could be wrong1 caveat
- No engine detected anything and the sandbox recorded no high-risk techniques, so the invalid signature may come from a damaged or re-packaged legitimate build rather than tampering.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 66 antivirus engines that checked it flagged the file
- No high-risk techniques or process injection appeared in the sandbox summary
- The code signature claims The MathWorks, Inc. but failed verification
- Submitted by only one source, with no established distribution history
- Only one of the contacted network addresses was checked for reputation
6 sources checked · 5 complete · 1 partial. See every source
Chapter 03
What it did in our test
It ran in our isolated test environment; no test environment rated what it did as risky.
Test run summary
Capture complete- 5sandbox rule tags
- 7spawned processes
- 14network contacts
- 4filesystem & mutex artifacts
Includes 5 mapped techniques and every process, file, registry and network entry.
Show the technical evidenceChapter 04
Technical details
None of the 66 antivirus engines that checked it flag it; a signature that did not verify.
Sources checked
Every check behind this verdict
6 sources checked · 5 complete · 1 partial. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 17, 2026, 1:32 PM UTC
- SHA-256
690a81e4241dc71740175f0bef30c48a9092ee9bf515af88949757100be7777b- SHA-1
b861b62ce4ba41c458b956a5344dd06725405a51- MD5
fd399556549d3f0240c939b63852f0cf
About this file
PSFLabInstaller-macOS.app.zip is a ZIP file of 2.5 MB.
- Type and size
- ZIP · 2.5 MB
- Signer
- The MathWorks, Inc. (unverified signature)Worth noting: Malware sometimes copies or steals a company's signature, so this does not mean that company made it.
- First seen
- Jun 1, 2026On VirusTotal.
- Submitted by
- 1 sourceRarely seen: few people have submitted this exact file.
First scanned Updated
Verdict history
- Safe
- Low Riskafter a re-check of the saved evidence
Ratings change when antivirus engines, our checks or MalwareTips staff learn more about a file.
Includes every engine result (75) and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 6 questions people ask most about this file.
Is PSFLabInstaller-macOS.app.zip safe?
What is PSFLabInstaller-macOS.app.zip?
How many antivirus engines detected PSFLabInstaller-macOS.app.zip?
Is PSFLabInstaller-macOS.app.zip digitally signed?
What is the SHA-256 hash of PSFLabInstaller-macOS.app.zip?
How up to date is this analysis of PSFLabInstaller-macOS.app.zip?
Community
Member reviews and reports for this exact file hash.