Gridinsoft Logo

The Bandizip Command line tool (Bandizip Command line tool) File Analysis

Technical Analysis

File Name uploaded
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.139.174
Database Version 2023-09-22 06:05:51 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
538,320
File Size (bytes)
2023-09-22
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
5c583c3a7b6993f7f7369c0c002fad63
SHA1
1c3439a2ebcd154d2ffa5fde74410cca2527c75a
SHA256
00a47a51fc1651076970eb909cb7b318912507001ee135bc0e90290d8bfc7b6c
SHA512
3fcdc4e77b4158b8064d48ac5a73d3577bc7c89e15ee3f1540221819a6f0a15ed2db8e53084e79d17b3edcb8696c5adac57a48a6683f2b3b752f9832c37b21b7
ImpHash
bf3f50a6cdc88a8cd5b1875ca35d592f

PE Analysis

Basic Information

Image Base 0x140000000
Entry Point 0x14002ab0c
Compilation Time 2023-01-19 07:16:38
Checksum 0x000922dd (Actual: 0x000922dd)
OS Version 6.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
PDB Path C:\devel\ark7\bin.win32\bz.x64.pdb
Digital Signature OK
Imports 6 libraries
KERNEL32, USER32, ADVAPI32, SHLWAPI, VERSION, WININET
Exports 0 functions
Resources 2 Resources
Sections 7 Sections

Digital Signatures

Symantec Class 3 SHA256 Code Signing CA Bandisoft (KR)
VeriSign Class 3 Public Primary Certification Authority - G5 Symantec Corporation (US)

Version Information

CompanyName Bandisoft International Inc.
FileDescription Bandizip Command line tool
FileVersion 7.30.0.1
InternalName Bandizip Command line tool
LegalCopyright Copyright(C) 2011-2023 Bandisoft International Inc. All rights reserved.
OriginalFilename Bandizip.exe
ProductName Bandizip
ProductVersion 7.30.0.1
Translation 0x0000 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 385,636 bytes 386,048 bytes 6.46 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 3DAD5182AF4CB3367B1C69D9749072B8
.rdata 0x00060000 110,038 bytes 110,080 bytes 5.40 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2B0D2FF1219C73B4BCE8452B8FCAE523
.data 0x0007b000 15,436 bytes 6,144 bytes 3.52 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE EEC319BC6FC9752692B54DA8A3FC6FE0
.pdata 0x0007f000 15,420 bytes 15,872 bytes 5.61 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C0C272D6E1B89EBF29F6DA13ED849FF2
_RDATA 0x00083000 348 bytes 512 bytes 3.32 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ CC9B66C20923C213E38E77973CCBE648
.rsrc 0x00084000 1,456 bytes 1,536 bytes 3.94 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 181AC68BC8383453FC5980BEC9CAF9C8
.reloc 0x00085000 2,620 bytes 3,072 bytes 5.05 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 94A2CCBA9DE8EC124F6183BC13244A86

Resource Analysis

Total Resources: 2 (1,289 bytes)
Resource Type Count Total Size Percentage
RT_VERSION 1 908 bytes
70.4%
RT_MANIFEST 1 381 bytes
29.6%

Certificate Chain Analysis

Certificate #1
Subject Bandisoft
Bandisoft
KR
Issuer Symantec Class 3 SHA256 Code Signing CA
Serial Number 42476327080540214500565453353377712970
Certificate #2
Subject Symantec Class 3 SHA256 Code Signing CA
Symantec Corporation
US
Issuer VeriSign Class 3 Public Primary Certification Authority - G5
Serial Number 81710363848389238104995526639509734954
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware