» spyzooka.exe.new
Overview
Analysis
File Details
Programs (1)

spyzooka.exe.new

SpyZooka

ZookaWare

The file spyzooka.exe.new by ZookaWare has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program SpyZooka by ZookaWare.

File name:

spyzooka.exe.new

Publisher:

ZookaWare, LLC. (signed by ZookaWare)

Product:

SpyZooka

Version:

2.8.6.10

MD5:

26ebab17ea457055d34b057016ff8961

SHA-1:

e3e9ddcc39fe0ca42e8d87cbfa9ee03f10f32eb0

SHA-256:

f76762a9b5857935305875899cae81b08db3b82b1e0471662962ef309fed0ca6

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

4/25/2024 10:51:49 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.ZookaWare.L

14.12.17.21

File size:

4 MB (4,178,832 bytes)

Product version:

2.8

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\virtualstore\Program Files\spyzooka\spyzooka.exe.new

Digital Signature

Signed by:

ZookaWare

Authority:

VeriSign, Inc.

Valid from:

7/5/2011 9:30:00 AM

Valid to:

7/5/2013 9:29:59 AM

Subject:

CN=ZookaWare, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ZookaWare, L=Mesa, S=Arizona, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5C919F843F8BEFEEEEDBC47E1EBC96A8

File PE Metadata

Compilation timestamp:

6/20/1992 7:52:17 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:rYc//////Tq0JN8y3ASw/4nodFZII0ZavgmT56Qcoddx1V4H:rYc//////W0JN8qsfvgmB5k

Entry address:

0x181FB0

Entry point:

55, 8B, EC, 83, C4, F0, 53, B8, C8, 17, 58, 00, E8, EF, 58, E8, FF, 8B, 1D, 4C, F6, 58, 00, 8B, 03, E8, 42, 03, F5, FF, 8B, 03, BA, FC, 20, 58, 00, E8, 1E, FF, F4, FF, 8B, 0D, 3C, F1, 58, 00, 8B, 03, 8B, 15, 8C, DE, 55, 00, E8, 3B, 03, F5, FF, 8B, 0D, 44, F4, 58, 00, 8B, 03, 8B, 15, B8, 68, 4F, 00, E8, 28, 03, F5, FF, 8B, 0D, 70, F2, 58, 00, 8B, 03, 8B, 15, D4, D7, 55, 00, E8, 15, 03, F5, FF, 8B, 0D, E8, F8, 58, 00, 8B, 03, 8B, 15, D4, 28, 50, 00, E8, 02, 03, F5, FF, 8B, 0D, 44, F5, 58, 00, 8B, 03, 8B, 15... 
[+]

Entropy:

6.0913

Developed / compiled with:

Microsoft Visual C++

Code size:

1.5 MB (1,577,472 bytes)

The file spyzooka.exe.new has been discovered within the following program.

SpyZooka by ZookaWare

Publisher's description - “SpyZooka doesn’t detect safe cookies to give the appearance that there is more spyware on your computer than there really is. We only detect real advertising cookies that track what you do online and display ads to you.”

zookaware.com/spyzooka

57% remove it

Remove spyzooka.exe.new - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.