File scan report
Verdict Safe
Is Untitled safe? Yes, no threats found.
Windows Installer package validly signed by Check Point that installs its SSL Network Extender VPN client; none of the 62 antivirus engines that checked it flagged it and sandbox…
Read the whole reasonShow less
Strong evidence · A verified publisher signature, and no engine flags it.
This package appears to be Check Point's SSL Network Extender installer and can be used if you expect that VPN client. Obtain it from your organisation or from Check Point, and keep your antivirus protection enabled.
Good practice2 tips
We found nothing harmful in this file.
Open it only if you trust the person or website it came from.
Keep your security software and system updates switched on.
No scanner can promise a file is 100% safe.
Antivirus results
0 of 62 flagged
- Flagged 0
- No detection 62
- No result 14
- Code signing Check Point Software Technologies Ltd.
- Test run Completed
- First seen 3y ago
Chapter 02
Why we think so
1 point against it and 5 in its favour, checked against the scan evidence.
The reasoning behind this verdict
This installer carries a valid Check Point Software Technologies signature, and none of the 62 antivirus engines that checked it flagged it. In sandbox runs it installed the Check Point SSL Network Extender, including its virtual network driver and service. Its only network contacts were certificate-revocation checks.
Across three sandbox runs, the package installed Check Point's SSL Network Extender, registered a virtual network adapter driver and set up its own service. No injection into other processes was recorded, and the credential and injection technique labels appeared without any supporting artefact. The only contacted hosts were certificate CRL and OCSP servers, none of them known bad, and two dropped files match known-software reference entries.
What We Detected
None of the 62 antivirus engines that checked it flagged this Windows Installer package, and all 18 major antivirus engines reported it clean. It carries a valid digital signature from Check Point Software Technologies Ltd. It was first seen on Sep 7, 2023 and has been submitted by 11 different sources. No public malware database or community rule set lists it.
Threat Behavior
In three sandbox runs, the package installed Check Point's SSL Network Extender. This included a virtual network adapter driver, a COM component registered with regsvr32 and a product service. These steps are expected for a VPN client. No injection into other processes was observed. Network activity was limited to certificate revocation checks against certificate-authority servers, none of which are known to be malicious. Two of the dropped files match known-software reference entries.
What To Do Now
If you intended to install Check Point's VPN client, this package matches that product. Get installers from your organisation or from Check Point directly, and keep your antivirus protection enabled.
Where this verdict could be wrong2 caveats
- A community annotation tagged the hash as malware, but it cites only generic YARA indicators such as debugger and VM checks and a firewall-related rule, which VPN client installers commonly match.
- The Check Point signer has no history in our records and is not on our curated publisher list, so the signature is a weaker anchor than a known publisher match.
These are the assessment's weak points. If you believe one applies to your file, report the verdict and we'll re-review it.
- None of the 62 antivirus engines that checked it flagged the file, including all major antivirus engines.
- It carries a valid digital signature from Check Point Software Technologies Ltd.
- Sandbox runs showed a standard VPN client installation with no injection into other processes.
- Its only network contacts were certificate revocation servers, none of them known to be malicious.
- Two dropped files match known-software reference entries.
- The installer adds a network driver and a persistent service, which is expected for a VPN client but changes system networking.
6 sources checked · all complete. See every source
Chapter 03
What it did in our test
It ran in 3 isolated tests; no test environment rated what it did as risky.
Test run summary
Capture complete- 3isolated sandbox runs
- 29sandbox rule tags
- 13spawned processes
- 4network contacts
- 40filesystem & mutex artifacts
Includes 29 mapped techniques, every process, file, registry and network entry and 10 dropped files.
Show the technical evidenceChapter 04
Technical details
None of the 62 antivirus engines that checked it flag it; signed by Check Point Software Technologies Ltd..
Sources checked
Every check behind this verdict
6 sources checked · all complete. Complete means the check returned a usable result; it does not mean the file is safe.
File fingerprint
- Last analyzed
- Oct 21, 2026, 3:01 PM UTC
- SHA-256
6c0f81d4319de34d8f56cf7f872f1a943ee8a396c9707af21cac3cf8a45f2aaa- SHA-1
61986cdd73f876ab63517b4b02cd0be799a41097- MD5
35be571db3914843aa61753c590f3150
About this file
Untitled is a Windows Installer file of 1.6 MB.
- Type and size
- Windows Installer · 1.6 MB
- Signer
- Check Point Software Technologies Ltd.Valid code signature.
- First seen
- Sep 7, 2023On VirusTotal.
- Submitted by
- 11 distinct sources
First scanned
Includes every engine result (76), 3 matched signature rules and how widely the file has been seen.
Show the technical evidenceChapter 05
Questions & answers
Short answers to the 7 questions people ask most about this file.
Is Untitled safe?
What is Untitled?
How many antivirus engines detected Untitled?
Is Untitled digitally signed?
What is the SHA-256 hash of Untitled?
Is it safe to open Untitled?
How up to date is this analysis of Untitled?
Community
Member reviews and reports for this exact file hash.