» MY POP SHOP LTD
Digital Signature
Analysis
Files (88)
Domains (1)
Related (7)

MY POP SHOP LTD

Publisher Information

MY POP SHOP LTD is a software developer located in HERZLIYA, Israel*. The company is a primary distributor of unwanted software. Thre are 3 additional code signing certificates issued to this publisher.

Authority:

COMODO CA Limited

Valid from:

7/22/2014 2:00:00 AM

Valid to:

7/23/2015 1:59:59 AM

Subject:

CN=MY POP SHOP LTD, O=MY POP SHOP LTD, STREET=14 Shenkar Arie, L=HERZLIYA, S=NA, PostalCode=46725, C=IL

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00b739c4f756ee55fb750952ce570be48b

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.MYPOPSHOP.G, PUP.MYPOPSHOP.K, PUP.MYPOPSHOP.I, PUP.UpdateProc.Task.K, PUP.MYPOPSHOP.J, PUP.MYPOPSHOP.W, PUP.Resoft.Installer, PUP.Resoft.MYPOPSHOP (M), Adware.Smartbar.Resoft (M), PUP.UpdateProc.Resoft (M), PUP.Resoft.MYPOPSHO (M), PUP.Resoft (M)

100.00%

AVG

Mypopshop, Adware Generic6.FIX, MPomp

52.00%

Baidu Antivirus

Adware.Win32.PennyBee, Adware.Win32.DealPly, PUA.MSIL.Linkury, Adware.Win32.Linkury

26.00%

VIPRE Antivirus

Trojan.Win32.Generic, Threat.4729122, Adware.Smartbar, Threat.4150696, Threat.5189619

20.00%

Avira AntiVirus

APPL/Linkury.Gen2, TR/Trash.Gen, TR/Crypt.XPACK.Gen8, ADWARE/PennyBee.A.29

16.00%

G Data

Adware.Smartbar, Adware.Agent.PLL, Win32.Application.PennyBeeLinkury

16.00%

ESET NOD32

Win32/DealPly (variant), MSIL/Toolbar.Linkury (variant), MSIL/Toolbar.Linkury.H potentially unwanted (variant)

16.00%

Dr.Web

Adware.Linkury.8, Trojan.Revizer.725

14.00%

Panda Antivirus

PUP/LinkUry, Trj/CI.A

14.00%

McAfee

Artemis!CE6A4F757F2C, Artemis!BCD560460690, Artemis!6D892422625F, Artemis!C6F595E1F9A5, Trojan.Generic PUP.x, Artemis!EF475F027FFF

14.00%

1 / 68 (Adware)

OfferBoulevardW.exe (PennyBee) (f11f17f8900614e6ac83ecc69fd1c0e0)

1 / 68 (Adware)

OfferBoulevardW.exe (PennyBee) (f11f17f8900614e6ac83ecc69fd1c0e0)

1 / 68 (Adware)

OfferBoulevardW.exe (PennyBee) (f11f17f8900614e6ac83ecc69fd1c0e0)

1 / 68 (Adware)

tmp00000002422c545f5fdc00da (984b53fc9501250f1ceb2a5f60d8021a)

3 / 68 (Adware)

tmp00000001fbceb04903a8497f (723ed4e75908065a30be5635402c65b7)

1 / 68 (Adware)

updatetask.exe (920cd568bd84e7fa5fbdaacafde69457)

1 / 68 (Adware)

tmp000000023291e1ecfb2d02ac (06144934b4d810d2766db08472b45556)

1 / 68 (Adware)

ntdis_32.dll (b8d8b0de4810e20522fcffd7654b3448)

1 / 68 (Adware)

smia64.exe (Smartbar.Monetization.InjectApp) (c6a362a8109980b9221cff302cbe9a07)

1 / 68 (Adware)

ntdis_64.dll (4068c07b399f3be914a40470057935df)

1 / 68 (Adware)

ntdisie_32.dll (aca76e8c4b4d256179a0d06b4238eaa8)

1 / 68 (Adware)

smia64.exe (Smartbar.Monetization.InjectApp) (c83a3bee915e3c7e0e9599116000a4b1)

1 / 68 (Adware)

ntdis_32.dll (fc6b701e007145cecfead1a6b7d5e723)

1 / 68 (Adware)

updatetask.exe (48d3138e692c049c80eefff95dc34210)

1 / 68 (Adware)

dphelper.dll (32bb83fd57fbe6fda327d34b3cd2b053)

1 / 68 (Adware)

PennyBeeW.exe (PennyBee) (8fa0e8fcac828d223db9dc9cdb17f9d1)

1 / 68 (Adware)

ntdis_64.dll (c74bb86007d615d14d30bd0bb1db6d00)

1 / 68 (Adware)

ntdisie_32.dll (6e9c394ae8b359814d2dda5f4c624ea4)

1 / 68 (Adware)

dphelper.dll (bc08007fb46dc4af4cfb21c2f0fcf50b)

1 / 68 (Adware)

ntdis_64.dll (432c8b9cf1810b8dbb2a8eb69c9ef564)

1 / 68 (Adware)

ntdis_32.dll (ca2cb9e85ef597f3c9b475d24eb63225)

1 / 68 (Adware)

ntdisie_32.dll (6f889c7132cfaa2b930bfef469555339)

15 / 68 (Adware)

smia64.exe (Smartbar.Monetization.InjectApp) (25cd618c3529ec8016c7d5fa9bf2becb)

1 / 68 (Adware)

pennybeeu.exe (549e52a44f3b8ececec82503589fe426)

1 / 68 (Adware)

dphelper.dll (fb6cd55af86c4bb2faa6ec3cc0aac918)

19 / 68 (Adware)

PennyBeeW.exe (PennyBee) (e572a56a5757effc30e5b758eab01f4e)

19 / 68 (Adware)

PennyBeeW.exe (PennyBee) (ef475f027ffff8ce70ee48f30b37e9aa)

35 / 68 (Adware)

pb.exe (PennyBee) (b3c232e53ff8c4645b47762b7420aa79)

3 / 68 (Adware)

ntdisie_32.dll (a928729e5af28ec5340cccf67f7a2cef)

14 / 68 (Adware)

smia64.exe (Smartbar.Monetization.InjectApp) (aba4e61128c01b30858235604e1667e1)

Latest 30 of 88 files

Domains

Top-level domains owned by MY POP SHOP LTD.

shopop.me

The certificates below are also signed by MY POP SHOP LTD.

00958B06B6A7C969725A449A396AFA1FDB (Nov 18, 2013 to Nov 19, 2015)

35094C1DF20178F98B53D36DE3005002 (Jul 21, 2014 to Jul 22, 2015)

4A7D93FD75281A37A4ADCDCD636D3ADB (Jul 07, 2014 to Jul 08, 2015)

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to MY POP SHOP LTD by COMODO CA Limited on July 22, 2014 with the serial number '00b739c4f756ee55fb750952ce570be48b'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.