Gridinsoft Logo
File Icon

The ZoneAlarmNGSetup_ZANG_FW_FR_AR8ZNP.exe (CheckPoint Update Setup) File Analysis

Updated 3 months ago
Checked by Malaware Check
ZoneAlarmNGSetup_ZANG_FW_FR_AR8ZNP.exe

Technical Analysis

File Name ZoneAlarmNGSetup_ZANG_FW_FR_AR8ZNP.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.209.174
Database Version 2025-03-02 22:00:36 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
1,133,424
File Size (bytes)
2025-03-02
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
6e9187e870238ad2d00866a47264e109
SHA1
78e7cf585cbc9d02b6fab6f268d49559e696b17a
SHA256
7befc08954b8847b35e82bb40e6aec8f69807c5a5c8861c35463c818f4628377
SHA512
8ed3431c8787f7996ee85345eb69508f2a13449955b07917277a1c5584d78c751252e936d9ae1c51975947f7ccea13c0e609a07d7088582dce3dc7237ba12b09
ImpHash
03320c8f977e564eba6504bbb2197b3f

PE Analysis

Basic Information

▼
Icon
Hash: 07f3bc7b1d9b8486eb9467e3e2f48d61
Fuzzy: 9ca6a67aa190ef8314bd4b2f1c189c05
dHash: b48bcf8492232fd0
Image Base 0x00400000
Entry Point 0x00404fdc
Compilation Time 2022-09-30 20:28:31
Checksum 0x00119731 (Actual: 0x00121109)
OS Version 5.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path mi_exe_stub.pdb
Digital Signature OK
Imports 6 libraries
KERNEL32, SHLWAPI, ADVAPI32, ole32, SHELL32, USER32
Exports 0 functions
Resources 61 Resources
Sections 6 Sections

Version Information

▼
CompanyName CheckPoint Software Technologies Ltd.
FileDescription CheckPoint Update Setup
FileVersion 1.3.99.0
InternalName CheckPoint Update Setup
LegalCopyright Copyright 2007-2010 Google Inc.
OriginalFilename ZoneAlarmUpdateSetup.exe
ProductName CheckPoint Update
ProductVersion 1.3.99.0
LanguageId en
PrivateBuild
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 84,693 bytes 84,992 bytes 6.64 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ B275B72F6067523EDA99CBF8C5EB227C
.rdata 0x00016000 28,074 bytes 28,160 bytes 5.29 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9A37A97AE7F530067791147D8516C38E
.data 0x0001d000 4,760 bytes 2,048 bytes 2.40 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 39173EC430B035785681F8B52139BB86
.gfids 0x0001f000 220 bytes 512 bytes 1.70 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A02EDFA73654ABD021F1567ADA493546
.rsrc 0x00020000 992,660 bytes 992,768 bytes 7.97 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1AD48CD17EDBA5F7D954B8552E29383B
.reloc 0x00113000 4,316 bytes 4,608 bytes 6.37 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 4C49A206131B65AAF8C9F0FD56F92DA1
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 61 (990,759 bytes)
Resource Type Count Total Size Percentage
B 1 952,495 bytes
96.1%
GOOGLEUPDATE 1 4 bytes
0%
RT_ICON 1 16,936 bytes
1.7%
RT_STRING 55 19,206 bytes
1.9%
RT_GROUP_ICON 1 20 bytes
0%
RT_VERSION 1 932 bytes
0.1%
RT_MANIFEST 1 1,166 bytes
0.1%

Certificate Chain Analysis

▼
Certificate Information
Product CheckPoint Update
Description CheckPoint Update Setup
File Version 1.3.99.0
Original Name ZoneAlarmUpdateSetup.exe
Signing Date 08:37 PM 09/30/2022 (980 days ago)
Verification Status Signed
Signers Check Point Software Technologies Ltd.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4; DigiCert
Counter Signers DigiCert Timestamp 2022 - 2; DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA; DigiCert Trusted Root G4; DigiCert
Internal Name CheckPoint Update Setup
Copyright Copyright 2007-2010 Google Inc.
Certificate Chain Summary
DigiCert Trusted Root G4 #1 Primary
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #2 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #3 Chain
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
DigiCert Timestamp 2022 - 2 #4 Chain
Validity Period: 2022-09-21 00:00:00 → 2033-11-21 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 0C 4D 69 72 4B 94 FA 3C 2A 4A 3D 29 07 80 3D 5A
Check Point Software Technologies Ltd. #5 Chain
Validity Period: 2021-11-25 00:00:00 → 2024-11-26 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 02 78 92 33 00 81 B3 A0 06 3F A6 19 B9 53 9B 76
Dummy certificate #6 Chain
Validity Period: 2013-01-01 10:00:00 → 2013-04-01 10:00:00
Signature Algorithm: sha1RSA
Serial Number: 01

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware