» setup-ziggygames.exe
Overview
Analysis
File Details
Downloads (6)

setup-ziggygames.exe

ZiggyTV

SCCE Development Inc

The application setup-ziggygames.exe, “ZiggyTV Setup Program” by SCCE Development Inc has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars.

File name:

Publisher:

MP3Rocket (signed by SCCE Development Inc)

Product:

ZiggyTV

Description:

ZiggyTV Setup Program

Version:

5.1.2

MD5:

9005040cabc489d7f4bd37f071454040

SHA-1:

d0eedc10e76a4b804a4aeb5462bd788688d26c10

Scanner detections:

1 / 68

Status:

Potentially unwanted

Explanation:

Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:

12/25/2024 12:38:40 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.OpenCandy.SCCE.Installer.Meta (M)

16.4.12.3

File size:

1.2 MB (1,217,656 bytes)

Product version:

5.1.2

Original file name:

ZiggyTVSetup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Documents and Settings\{user}\My documents\downloads\setup-ziggygames.exe

Digital Signature

Signed by:

SCCE Development Inc

Authority:

COMODO CA Limited

Valid from:

11/1/2015 7:00:00 PM

Valid to:

11/1/2016 7:59:59 PM

Subject:

CN=SCCE Development Inc, O=SCCE Development Inc, STREET=3051 W Maple Loop Ste 201, L=Lehi, S=Utah, PostalCode=84043, C=US

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00EE6BCFEEB3DE758C0292441353CB7413

File PE Metadata

Compilation timestamp:

1/29/2016 12:27:53 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

14.0

CTPH (ssdeep):

24576:HeMTCNix5ykhnKfca+OT0v4q0+7doGm8OphcBmvS4:H1FxQkh/a+OT0v7paGQvKCS4

Entry address:

0x4F6F2

Entry point:

E8, DD, 04, 00, 00, E9, 80, FE, FF, FF, 55, 8B, EC, 83, 25, 2C, AE, 4A, 00, 00, 83, EC, 2C, 53, 33, DB, 43, 09, 1D, D0, 82, 4A, 00, 6A, 0A, E8, D2, 84, 02, 00, 85, C0, 0F, 84, 74, 01, 00, 00, 83, 65, EC, 00, 33, C0, 83, 0D, D0, 82, 4A, 00, 02, 33, C9, 56, 57, 89, 1D, 2C, AE, 4A, 00, 8D, 7D, D4, 53, 0F, A2, 8B, F3, 5B, 89, 07, 89, 77, 04, 89, 4F, 08, 89, 57, 0C, 8B, 45, D4, 8B, 4D, E0, 89, 45, F4, 81, F1, 69, 6E, 65, 49, 8B, 45, DC, 35, 6E, 74, 65, 6C, 0B, C8, 8B, 45, D8, 35, 47, 65, 6E, 75, 0B, C8, F7, D9... 
[+]

Entropy:

7.2768

Code size:

527 KB (539,648 bytes)

The file setup-ziggygames.exe has been seen being distributed by the following 6 URLs.

http://www.ziggytv.com/downloads/.../setup-ziggytv.exe

http://www.ziggygames.com/downloads/.../setup-ziggygames.exe

http://download.roro44.com/.../Download-4557-ziggy-tv-pro-.html?sdi=13818

http://www.ziggytv.com/.../setup-ziggytv.exe

http://www.ziggytv.com/.../ziggytv.exe

http://www.ziggygames.com/downloads/.../setup-ziggygames.exe

Remove setup-ziggygames.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.