Gridinsoft Logo
File Icon

The wzsus53.exe (WinZip System Utilities Suite) File Analysis

Updated 1 month ago
Checked by Malaware Check
wzsus53.exe

Technical Analysis

File Name wzsus53.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Scanner Version 1.0.212.174
Database Version 2025-04-07 18:00:53 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
47,696,672
File Size (bytes)
2025-04-07
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
9deff019a43346d956d016cd91df342a
SHA1
bc2646503a6e9a0c8a726bdf79a24fceb7e82455
SHA256
fc3e420307b05488b75daf5a1e704018dbcf9ba45bd431eb83f06c937a67d505
SHA512
b6122fc7779d8aafbffaca5bb07ee1142fcfcaf01e007f7aa9e003fb1d25c6b4573002551b5cc1c7a8ce1b2434c6a537d50a91eb91a09c798cff13e14a9230dc
ImpHash
bf95d1fc1d10de18b32654b123ad5e1f

PE Analysis

Basic Information

▼
Icon
Hash: f213f8f3821aa5ffba429edcdfed9122
Fuzzy: 91dac4ce3fc9017ba917b40e7c3f5fce
dHash: f4ccd0d8d8ccc0c0
Image Base 0x00400000
Entry Point 0x00403415
Compilation Time 2010-04-10 12:19:38
Checksum 0x02d88d06 (Actual: 0x02d88d06)
OS Version 5.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Digital Signature OK
Imports 8 libraries
KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32, VERSION
Exports 0 functions
Resources 10 Resources
Sections 5 Sections

Version Information

▼
CompanyName Corel Corporation
FileDescription WinZip System Utilities Suite
FileVersion 4.0.3.4
LegalCopyright Copyright © 1991-2023 Corel Corporation. All Rights Reserved.
ProductName WinZip System Utilities Suite
ProductVersion 4.0.3.4
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 26,396 bytes 26,624 bytes 6.50 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ CB807804553819B70F6E16B8A094D327
.rdata 0x00008000 6,614 bytes 6,656 bytes 5.03 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 161B329B4C70CE4FBD9C1143E738896B
.data 0x0000a000 463,772 bytes 512 bytes 1.74 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 140876BA314E7BC36379EE5C6DB80876
.ndata 0x0007c000 577,536 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rsrc 0x00109000 103,360 bytes 103,424 bytes 7.71 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1DD1AE1C53B51C38D29DAF38407ACDB4
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 10 (102,733 bytes)
Resource Type Count Total Size Percentage
RT_ICON 4 100,560 bytes
97.9%
RT_DIALOG 3 636 bytes
0.6%
RT_GROUP_ICON 1 62 bytes
0.1%
RT_VERSION 1 740 bytes
0.7%
RT_MANIFEST 1 735 bytes
0.7%

Certificate Chain Analysis

▼
Certificate Information
Product WinZip System Utilities Suite
Description WinZip System Utilities Suite
File Version 4.0.3.4
Signing Date 06:16 AM 02/15/2024 (473 days ago)
Verification Status Signed
Signers Corel Corporation; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4
Counter Signers Symantec SHA256 TimeStamping Signer - G3; Symantec SHA256 TimeStamping CA; VeriSign Universal Root Certification Authority
Copyright Copyright © 1991-2023 Corel Corporation. All Rights Reserved.
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Corel Corporation #2 Chain
Validity Period: 2022-10-25 00:00:00 → 2024-10-25 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 03 D3 35 CB E6 40 E5 C7 FE CA 77 60 39 01 E5 56
DigiCert Timestamp 2023 #3 Chain
Validity Period: 2023-07-14 00:00:00 → 2034-10-13 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 05 44 AF F3 94 9D 08 39 A6 BF DB 3F 5F E5 61 16
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
Symantec SHA256 TimeStamping CA #6 Chain
Validity Period: 2016-01-12 00:00:00 → 2031-01-11 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 7B 05 B1 D4 49 68 51 44 F7 C9 89 D2 9C 19 9D 12
Symantec SHA256 TimeStamping Signer - G3 #7 Chain
Validity Period: 2017-12-23 00:00:00 → 2029-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 7B D4 E5 AF BA CC 07 3F A1 01 23 04 22 41 4D 12

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware