Gridinsoft Logo
File Icon

The zapSetupWeb_158_213_19411.exe (ZoneAlarm) File Analysis

Technical Analysis

File Name zapSetupWeb_158_213_19411.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.220.174
Database Version 2025-07-12 13:00:17 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
5,941,264
File Size (bytes)
2025-07-12
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
8ba0d7f28789395d4451a0083d270b6c
SHA1
f57331ff7e28dc46a3401c1cbf28c2d59014271a
SHA256
62e650f0415f841e7860c1435ff34177254d6f419bc31e4df91692b8eaa4412e
SHA512
d3d8c999d97fb6f4faac5d895a0961371b2aefce407d86cbf79ca74613409c903902b4af03d875789e71daef293c27d1c75232f42be808f0304eae587d12fdbb
ImpHash
1f2f969a5761630dedd90d5b211b3ffd

PE Analysis

Basic Information

Icon
Hash: c4d5080bc6840206b0760cb40a32f7de
Fuzzy: 28d24d9363424f437f00db0f4cd240e4
dHash: 28b4b2496ddcc027
Image Base 0x00400000
Entry Point 0x00476772
Compilation Time 2023-02-23 10:41:38
Checksum 0x005b827a (Actual: 0x005b827a)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path F:\ckp\src\ZA_InstallZML\ZA_May2020_Int_Deploy\CMpub\release\Win32\ReleaseU\Header.pdb
Digital Signature OK
Imports 7 libraries
SHELL32, SHLWAPI, KERNEL32, USER32, ADVAPI32, ole32, OLEAUT32
Exports 5 functions
Resources 32 Resources
Sections 7 Sections

Version Information

CompanyName Check Point Software Technologies Ltd.
FileDescription ZoneAlarm
FileVersion 15.8.213.19411
InternalName Install
LegalCopyright Copyright © 1998-2023, Check Point, LTD
OriginalFilename Install.exe
ProductName ZoneAlarm
ProductVersion 15.8.213.19411
BuildDate Thu, 23 Feb 2023 09:35:17
Translation 0x0409 0x04e4

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 807,470 bytes 807,936 bytes 6.47 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 21E186893C57367240F858122EA3B4CF
.rdata 0x000c7000 187,338 bytes 187,392 bytes 4.99 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2E42702D1410E740848109E3C5364E31
.data 0x000f5000 34,408 bytes 19,968 bytes 4.94 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 203806189F478AB7B95AE4BCFBA6D9E4
.gfids 0x000fe000 504 bytes 512 bytes 3.91 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ B1A7A2332C48F78F5562C7CC49207A54
.tls 0x000ff000 9 bytes 512 bytes 0.02 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 1F354D76203061BFDD5A53DAE48D5435
.rsrc 0x00100000 32,472 bytes 32,768 bytes 4.24 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BB46CC8A58BA27D5DCB2756456214ED7
.reloc 0x00108000 56,840 bytes 57,344 bytes 6.63 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 3968B37CD9B6B2BF91FAF28C84EA9B2B
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 32 (31,066 bytes)
Resource Type Count Total Size Percentage
RT_ICON 8 23,424 bytes
75.4%
RT_DIALOG 1 326 bytes
1%
RT_STRING 20 5,048 bytes
16.2%
RT_GROUP_ICON 1 118 bytes
0.4%
RT_VERSION 1 884 bytes
2.8%
RT_MANIFEST 1 1,266 bytes
4.1%

Certificate Chain Analysis

Certificate Information
Product ZoneAlarm
Description ZoneAlarm
File Version 15.8.213.19411
Original Name Install.exe
Signing Date 10:51 AM 02/23/2023 (870 days ago)
Verification Status Signed
Signers Check Point Software Technologies Ltd.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4
Counter Signers Symantec SHA256 TimeStamping Signer - G3; Symantec SHA256 TimeStamping CA; VeriSign Universal Root Certification Authority
Internal Name Install
Copyright Copyright © 1998-2023, Check Point, LTD
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Check Point Software Technologies Ltd. #2 Chain
Validity Period: 2021-11-25 00:00:00 → 2024-11-26 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 02 78 92 33 00 81 B3 A0 06 3F A6 19 B9 53 9B 76
Symantec SHA256 TimeStamping CA #3 Chain
Validity Period: 2016-01-12 00:00:00 → 2031-01-11 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 7B 05 B1 D4 49 68 51 44 F7 C9 89 D2 9C 19 9D 12
Symantec SHA256 TimeStamping Signer - G3 #4 Chain
Validity Period: 2017-12-23 00:00:00 → 2029-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 7B D4 E5 AF BA CC 07 3F A1 01 23 04 22 41 4D 12

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware