Gridinsoft Logo
File Icon

The ZoneAlarmNGSetup_ZANG3_FREE_79JXW1.exe (CheckPoint Update Setup) File Analysis

Updated 2 months ago
Checked by Malaware Check
ZoneAlarmNGSetup_ZANG3_FREE_79JXW1.exe

Technical Analysis

File Name ZoneAlarmNGSetup_ZANG3_FREE_79JXW1.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.212.174
Database Version 2025-04-02 16:00:45 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
1,130,984
File Size (bytes)
2025-04-02
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
acec75e5d2db6d34a0c64d38362fa56e
SHA1
a1b0dab9a08b41e8f7cdfc2f20fdc0323cd9755f
SHA256
47d17fe5f97be6953c807943195c769b5c483882071f688496c67e6502676e5a
SHA512
775969e467d7d1f7a979a3d3610a9f380dfbce5934d5452baeebeb9dffcd2ad0e851c3a8ad574a2835ac279080783e801c3879d3f13e653a1888070b9c5dc440
ImpHash
03320c8f977e564eba6504bbb2197b3f

PE Analysis

Basic Information

▼
Icon
Hash: 07f3bc7b1d9b8486eb9467e3e2f48d61
Fuzzy: 9ca6a67aa190ef8314bd4b2f1c189c05
dHash: b48bcf8492232fd0
Image Base 0x00400000
Entry Point 0x00404fdc
Compilation Time 2022-05-24 22:08:41
Checksum 0x00118dfa (Actual: 0x0011d0b1)
OS Version 5.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path mi_exe_stub.pdb
Digital Signature OK
Imports 6 libraries
KERNEL32, SHLWAPI, ADVAPI32, ole32, SHELL32, USER32
Exports 0 functions
Resources 61 Resources
Sections 6 Sections

Version Information

▼
CompanyName CheckPoint Software Technologies Ltd.
FileDescription CheckPoint Update Setup
FileVersion 1.3.99.0
InternalName CheckPoint Update Setup
LegalCopyright Copyright 2007-2010 Google Inc.
OriginalFilename ZoneAlarmUpdateSetup.exe
ProductName CheckPoint Update
ProductVersion 1.3.99.0
LanguageId en
PrivateBuild
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 84,693 bytes 84,992 bytes 6.64 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ B275B72F6067523EDA99CBF8C5EB227C
.rdata 0x00016000 28,074 bytes 28,160 bytes 5.29 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ DC7A0D1AC46923C7679D881AE374DB9B
.data 0x0001d000 4,760 bytes 2,048 bytes 2.40 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 39173EC430B035785681F8B52139BB86
.gfids 0x0001f000 220 bytes 512 bytes 1.70 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A02EDFA73654ABD021F1567ADA493546
.rsrc 0x00020000 991,520 bytes 991,744 bytes 7.97 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ AF165C5C4C4EA7D02D905D759CFC013F
.reloc 0x00113000 4,316 bytes 4,608 bytes 6.37 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 4C49A206131B65AAF8C9F0FD56F92DA1
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 61 (989,619 bytes)
Resource Type Count Total Size Percentage
B 1 951,355 bytes
96.1%
GOOGLEUPDATE 1 4 bytes
0%
RT_ICON 1 16,936 bytes
1.7%
RT_STRING 55 19,206 bytes
1.9%
RT_GROUP_ICON 1 20 bytes
0%
RT_VERSION 1 932 bytes
0.1%
RT_MANIFEST 1 1,166 bytes
0.1%

Certificate Chain Analysis

▼
Certificate Information
Product CheckPoint Update
Description CheckPoint Update Setup
File Version 1.3.99.0
Original Name ZoneAlarmUpdateSetup.exe
Signing Date 10:17 PM 05/24/2022 (1109 days ago)
Verification Status Signed
Signers Check Point Software Technologies Ltd.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4
Counter Signers DigiCert Timestamp 2022 - 2; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4
Internal Name CheckPoint Update Setup
Copyright Copyright 2007-2010 Google Inc.
Certificate Chain Summary
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #1 Primary
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #2 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
DigiCert Timestamp 2022 - 2 #3 Chain
Validity Period: 2022-03-29 00:00:00 → 2033-03-14 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0A 7A 4A 88 9E C9 99 42 90 06 63 38 4D 86 97 9D
Check Point Software Technologies Ltd. #4 Chain
Validity Period: 2021-11-25 00:00:00 → 2024-11-26 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 02 78 92 33 00 81 B3 A0 06 3F A6 19 B9 53 9B 76
Dummy certificate #5 Chain
Validity Period: 2013-01-01 10:00:00 → 2013-04-01 10:00:00
Signature Algorithm: sha1RSA
Serial Number: 01

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware