» shopperpro64.dll
Overview
Analysis
File Details
Programs (1)

shopperpro64.dll

ShopperPro Extension

Goobzo LTD

The module shopperpro64.dll by Goobzo has been detected as adware by 19 anti-malware scanners. This file is typically installed with the program Shopper-Pro by Goobzo Ltd. which is a potentially unwanted software program.

File name:

shopperpro64.dll

Publisher:

Goobzo Ltd. (signed by Goobzo LTD)

Product:

ShopperPro Extension

Version:

1.0.1.4

MD5:

eb879ce3de797fd5050053447039116f

SHA-1:

f1ec85675e93dcc6c18fc468efb3fbb7c4914f4d

SHA-256:

e9674e45fff204f017ae0d4fde34debd0acd0280edd336899e33640c70366492

Scanner detections:

19 / 68

Status:

Adware

Analysis date:

4/19/2024 10:18:28 PM UTC (today)

Scan engine

Detection

Engine version

AhnLab V3 Security

Win-PUP/CrossRider

2014.12.22

Avira AntiVirus

TR/Trash.Gen

7.11.30.172

AVG

Skodna

2015.0.3254

Baidu Antivirus

Adware.Win64.ShopperPro

4.0.3.141221

Dr.Web

Adware.Shopper.799

9.0.1.0355

ESET NOD32

Win64/ShopperPro (variant)

8.10910

Fortinet FortiGate

Adware/Shopper

12/21/2014

IKARUS anti.virus

PUA.ShopperPro

t3scan.1.8.5.0

K7 AntiVirus

Trojan

13.183.13198

Kaspersky

not-a-virus:AdWare.Win32.Shopper

14.0.0.2763

Malwarebytes

PUP.Optional.ShopperPro.A

v2014.12.21.10

McAfee

Artemis!EB879CE3DE79

5600.6910

Panda Antivirus

Generic Malware

14.12.21.10

Qihoo 360 Security

Unnamed.Threat

1.0.0.1015

Reason Heuristics

PUP.Goobzo

15.5.3.0

Sophos

AppRider

4.98

SUPERAntiSpyware

Trojan.Agent/Gen-Nullo[Short]

10164

Trend Micro House Call

TROJ_GEN.F47V0215

7.2.355

VIPRE Antivirus

Goobzo

35948

File size:

489.9 KB (501,608 bytes)

Product version:

1.0.1.4

Original file name:

ShopperPro.dll

File type:

Dynamic link library (Win64 DLL)

Language:

English (United States)

Common path:

C:\ProgramData\shopperpro\shopperpro64.dll

Digital Signature

Signed by:

Goobzo LTD

Authority:

Thawte, Inc.

Valid from:

5/2/2013 2:00:00 AM

Valid to:

5/3/2015 1:59:59 AM

Subject:

CN=Goobzo LTD, O=Goobzo LTD, L=Haifa, S=Israel, C=IL

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

120B25DDE57B88636AD4D97D23B99C88

File PE Metadata

Compilation timestamp:

12/20/2014 7:11:37 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

12288:rSzywSjA8DUaS2R3JHRXzWiai+Ymo3P3LQd7SR:r2arRJcYv3vUd7C

Entry address:

0x39024

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, 77, 91, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, A7, FE, FF, FF, CC, CC, CC, 48, 83, EC, 38, 48, 8B, 05, F9, 75, 03, 00, 48, 33, C4, 48, 89, 44, 24, 20, 8A, 02, 45, 33, C9, 4C, 8B, DA, 4C, 89, 0C, 24, 4C, 89, 4C, 24, 08, 4C, 89, 4C, 24, 10, 4C, 89, 4C, 24, 18, 4C, 8B, D1, EB, 1C, 44, 0F, B6, C0, 0F, B6, C0, 83, E0, 07, 49, C1, E8... 
[+]

Code size:

322.5 KB (330,240 bytes)

The file shopperpro64.dll has been discovered within the following program.

Shopper-Pro by Goobzo Ltd.

Shopper-Pro is an ad-supported browser extension (adware), and when a user downloads the Plugin they will see various types of advertisements displayed through the browser as they visit various web sites.

68% remove it

Remove shopperpro64.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.