» spyzooka.exe.new
Overview
Analysis
File Details
Programs (1)

spyzooka.exe.new

SpyZooka

ZookaWare

The file spyzooka.exe.new by ZookaWare has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program SpyZooka by ZookaWare.

File name:

spyzooka.exe.new

Publisher:

BluePenguin Software Inc. (signed by ZookaWare)

Product:

SpyZooka

Version:

2.5.9.8

MD5:

c9a5bd31067087b9fbf871b8b5b52279

SHA-1:

7c506accd676d5350a95ee2362e01599f0f59e9d

SHA-256:

b31833ed31d45719c95448232c4cabe3f0176e40937d38ca513f07072440bfa7

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

4/26/2024 10:31:56 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Win32.Generic

16.5.9.5

File size:

769.6 KB (788,032 bytes)

Product version:

2.5

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\virtualstore\Program Files\spyzooka\spyzooka.exe.new

Digital Signature

Signed by:

ZookaWare

Authority:

VeriSign, Inc.

Valid from:

7/5/2011 1:00:00 AM

Valid to:

7/5/2013 12:59:59 AM

Subject:

CN=ZookaWare, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ZookaWare, L=Mesa, S=Arizona, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5C919F843F8BEFEEEEDBC47E1EBC96A8

File PE Metadata

Compilation timestamp:

6/19/1992 11:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:Rw4yPQhDnRTbP//QQn+SbBuTgKYlgT7E+:apohFTbn/QC4ETlgT7E+

Entry address:

0x288460

Entry point:

60, BE, 00, F0, 5C, 00, 8D, BE, 00, 20, E3, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89... 
[+]

Packer / compiler:

UPX 2.90LZMA

Code size:

744 KB (761,856 bytes)

The file spyzooka.exe.new has been discovered within the following program.

SpyZooka by ZookaWare

Publisher's description - “SpyZooka doesn’t detect safe cookies to give the appearance that there is more spyware on your computer than there really is. We only detect real advertising cookies that track what you do online and display ads to you.”

zookaware.com/spyzooka

57% remove it

Remove spyzooka.exe.new - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.