» shopperpro64.dll
Overview
Analysis
File Details
Programs (1)

shopperpro64.dll

ShopperPro Extension

Goobzo LTD

The module shopperpro64.dll by Goobzo has been detected as adware by 19 anti-malware scanners. This file is typically installed with the program Shopper-Pro by Goobzo Ltd. which is a potentially unwanted software program.

File name:

shopperpro64.dll

Publisher:

Goobzo Ltd. (signed by Goobzo LTD)

Product:

ShopperPro Extension

Version:

1.0.1.3

MD5:

40031e5858fddca7dd0a70978170f182

SHA-1:

8b9c26bab327e1aa420c94f82ff57a6520c63e5d

SHA-256:

acd4ed0579f6c997c57e0d559e059fef3d7e9dbc12c1e1e440a72321ce1321ad

Scanner detections:

19 / 68

Status:

Adware

Analysis date:

4/24/2024 6:46:36 AM UTC (today)

Scan engine

Detection

Engine version

AhnLab V3 Security

Win-PUP/CrossRider

2014.11.11

Avira AntiVirus

TR/Trash.Gen

7.11.30.172

AVG

Skodna

2015.0.3419

Baidu Antivirus

Adware.Win64.ShopperPro

4.0.3.1478

Dr.Web

Adware.Shopper.799

9.0.1.0123

ESET NOD32

Win64/ShopperPro (variant)

8.10063

Fortinet FortiGate

Adware/ShopperPro

5/3/2015

IKARUS anti.virus

PUA.OptionalInst.Goobzo

t3scan.1.6.1.0

K7 AntiVirus

Trojan

13.183.13198

Kaspersky

not-a-virus:AdWare.Win32.Shopper

14.0.0.2099

Malwarebytes

PUP.Optional.ShopperPro.A

v2014.07.08.12

McAfee

Artemis!273ABF1F130F

5600.7075

Panda Antivirus

Adware/Goobzo

14.08.08.02

Qihoo 360 Security

Unnamed.Threat

1.0.0.1015

Reason Heuristics

PUP.Goobzo

15.5.3.0

Sophos

AppRider

4.98

SUPERAntiSpyware

Trojan.Agent/Gen-Nullo[Short]

10435

Trend Micro House Call

TROJ_GEN.F47V0215

7.2.189

VIPRE Antivirus

Goobzo

31088

File size:

488.9 KB (500,584 bytes)

Product version:

1.0.1.3

Original file name:

ShopperPro.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\ProgramData\shopperpro\shopperpro64.dll

Digital Signature

Signed by:

Goobzo LTD

Authority:

Thawte, Inc.

Valid from:

5/2/2013 7:00:00 AM

Valid to:

5/3/2015 6:59:59 AM

Subject:

CN=Goobzo LTD, O=Goobzo LTD, L=Haifa, S=Israel, C=IL

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

120B25DDE57B88636AD4D97D23B99C88

File PE Metadata

Compilation timestamp:

7/8/2014 3:19:07 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

12288:9iSCqJ27k0IXkKbpFWWn1/Qi1OtEIdfDFEX291:9btrOGQD02T

Entry address:

0x38DC4

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 73, 91, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 48, 83, EC, 38, 48, 8B, 05, 59, 78, 03, 00, 48, 33, C4, 48, 89, 44, 24, 20, 8A, 02, 45, 33, C9, 4C, 8B, DA, 4C, 89, 0C, 24, 4C, 89, 4C, 24, 08, 4C, 89, 4C, 24, 10, 4C, 89, 4C, 24, 18, 4C, 8B, D1, EB, 1C, 44, 0F, B6, C0, 0F, B6, C0, 83, E0, 07, 49, C1, E8... 
[+]

Entropy:

6.1693

Code size:

322 KB (329,728 bytes)

The file shopperpro64.dll has been discovered within the following program.

Shopper-Pro by Goobzo Ltd.

Shopper-Pro is an ad-supported browser extension (adware), and when a user downloads the Plugin they will see various types of advertisements displayed through the browser as they visit various web sites.

68% remove it

Remove shopperpro64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.