64-bit
msimachine scopedownload.winzip.com · publisher-owned- File name
- winzip290-64.msi
- SHA-256
- 9cace8d99ffa8b467fe23b2b083cd6d155c9f8021c07495da6d0477e31cd21f1
by Corel Corporation · Proprietary
WinZip Compression Utility
These URLs are the ones Corel Corporation declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
Run this against the file on disk. If the output does not match the hash below, the file is not what Corel Corporation published. Delete it.
Windows · PowerShell
Get-FileHash "winzip290-64.msi" -Algorithm SHA256macOS · Linux
shasum -a 256 "winzip290-64.msi"Expected output
9cace8d99ffa8b467fe23b2b083cd6d155c9f8021c07495da6d0477e31cd21f1
This installer is an MSI package, so it takes the standard Windows Installer switches. That is a property of MSI itself rather than something the publisher declared.
64-bit · machine scope · MSI convention
msiexec /i "winzip290-64.msi" /qn /norestartRun it from the folder holding the downloaded file, in a terminal opened as administrator when the package installs for all users. Silent means no window and no prompts, so check the exit code rather than waiting for something to appear: 0 is success and 3010 means it worked but wants a reboot.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 1 of 1 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 1 on a domain owned by the publisherThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 1 of 1 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 22 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 7 / 15 |
| Licence declared | ProprietaryA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
The version history of WinZip, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
406453EC93FB15E4F47A35812EE3BBEBA01E2A622B3912AD88E40BEC212F08C6
574189B3F3AC089E65B55D0417E75F53EA72A8B2EDB4DAAE026A8AA4D09A6054
22C74BD850CA24D3B40ADD1F6333F8168E8030247B86F40B750698013AFB42DE
DC774B67DA9A51DD37C57C5B9BBEAB16E35257ECC50A9C677AA0718A9ED02020
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every WinZip version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.