» spyzooka.exe.new
Overview
Analysis
File Details
Programs (1)

spyzooka.exe.new

SpyZooka

ZookaWare

The file spyzooka.exe.new by ZookaWare has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program SpyZooka by ZookaWare.

File name:

spyzooka.exe.new

Publisher:

ZookaWare, LLC. (signed by ZookaWare)

Product:

SpyZooka

Version:

2.94.15.0

MD5:

a7159bd81eee7f525056aa10d7d12d0b

SHA-1:

f349cdfc2bb164219e061b868b46a480c76b543f

SHA-256:

04277a22f03d6803d72f885b26075d19b729c5625e124684ffd955a95130d873

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

12/26/2024 2:02:40 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Win32.Generic

16.9.21.10

File size:

4.2 MB (4,444,048 bytes)

Product version:

2.94

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\virtualstore\Program Files\spyzooka\spyzooka.exe.new

Digital Signature

Signed by:

ZookaWare

Authority:

VeriSign, Inc.

Valid from:

7/4/2011 7:00:00 PM

Valid to:

7/4/2013 6:59:59 PM

Subject:

CN=ZookaWare, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ZookaWare, L=Mesa, S=Arizona, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5C919F843F8BEFEEEEDBC47E1EBC96A8

File PE Metadata

Compilation timestamp:

6/19/1992 5:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:HOc//////3iNCpRyLaE2L72+LZ8/epe1TcolrQRcW98kZKyX:HOc//////3iNCvNL3+dlMRzgE

Entry address:

0x1869E4

Entry point:

55, 8B, EC, 83, C4, F0, 53, B8, 04, 62, 58, 00, E8, BB, 0E, E8, FF, 8B, 1D, 28, 39, 59, 00, 8B, 03, E8, 3E, D7, F4, FF, 8B, 03, BA, 40, 6B, 58, 00, E8, 1A, D3, F4, FF, 8B, 0D, F0, 33, 59, 00, 8B, 03, 8B, 15, 8C, 0E, 56, 00, E8, 37, D7, F4, FF, 8B, 0D, 18, 37, 59, 00, 8B, 03, 8B, 15, B0, 86, 4F, 00, E8, 24, D7, F4, FF, 8B, 0D, 30, 35, 59, 00, 8B, 03, 8B, 15, 68, 04, 56, 00, E8, 11, D7, F4, FF, 8B, 0D, DC, 3B, 59, 00, 8B, 03, 8B, 15, 8C, 4A, 50, 00, E8, FE, D6, F4, FF, 8B, 0D, 20, 38, 59, 00, 8B, 03, 8B, 15... 
[+]

Entropy:

5.9473

Developed / compiled with:

Microsoft Visual C++

Code size:

1.5 MB (1,596,416 bytes)

The file spyzooka.exe.new has been discovered within the following programs.

SpyZooka by ZookaWare

Publisher's description - “SpyZooka doesn’t detect safe cookies to give the appearance that there is more spyware on your computer than there really is. We only detect real advertising cookies that track what you do online and display ads to you.”

zookaware.com/spyzooka

57% remove it

Remove spyzooka.exe.new - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.