» Smartbar.Resources.HistoryAndStatsWrapper.dll
Overview
Analysis
File Details

Smartbar.Resources.HistoryAndStatsWrapper.dll

Smartbar.Resources.HistoryAndStatsWrapper

MY POP SHOP LTD

This is part of the Linkury/SnapDo monetization software, a web browser toolbar used to hijack a user's search in order to collect revenues. The SmartBar is a a potentially unwanted toolbar and Windows Gadget that is advertising supported (adware). The module Smartbar.Resources.HistoryAndStatsWrapper.dll by MY POP SHOP has been detected as adware by 9 anti-malware scanners.

File name:

Publisher:

MY POP SHOP LTD (signed and verified)

Product:

Smartbar.Resources.HistoryAndStatsWrapper

Version:

1.2.0.0

MD5:

51d9033cf1814454a8259d040c3f618f

SHA-1:

cf86c1283007fc57e52f2d22e33264ed8c3b9848

SHA-256:

df91a3ac251c16a60cf1583c4ae5bd39ea41d974e6e100b018e1fdcdbebf49f9

Scanner detections:

9 / 68

Status:

Adware

Analysis date:

4/25/2024 9:31:03 AM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

APPL/Linkury.Gen2

7.11.164.206

AVG

MPomp

2015.0.3389

G Data

Win32.Application.Linkury

14.8.24

IKARUS anti.virus

PUA.Linkury

t3scan.1.6.1.0

McAfee

Artemis!9986619068EA

5600.7045

Panda Antivirus

PUP/LinkUry

14.08.08.12

Reason Heuristics

PUP.MYPOPSHOP.h

14.8.8.0

Trend Micro House Call

Suspicious_GEN.F47V0619

7.2.220

VIPRE Antivirus

Adware.Linkury

25482

File size:

110 KB (112,688 bytes)

Product version:

1.2.0.0

Original file name:

Smartbar.Resources.HistoryAndStatsWrapper.dll

File type:

Dynamic link library (Win32 DLL)

Language:

Language Neutral

Common path:

C:\users\{user}\appdata\local\smartbar\application\smartbar.resources.historyandstatswrapper.dll

Digital Signature

Signed by:

MY POP SHOP LTD

Authority:

COMODO CA Limited

Valid from:

11/18/2013 4:00:00 PM

Valid to:

11/19/2015 3:59:59 PM

Subject:

CN=MY POP SHOP LTD, O=MY POP SHOP LTD, STREET=14 Shenkar Arie, L=HERZLIYA, S=NA, PostalCode=46733, C=IL

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00958B06B6A7C969725A449A396AFA1FDB

File PE Metadata

Compilation timestamp:

12/31/2013 6:37:48 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

8.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

1536:v54zGEQE5z+YkeGak+3XsiVSip4isBW8GmiLtEcwaleX7mrQFoxkf+lsGz7JzOgy:vu3QE5z+YuKXsNXBW8yEta2Nv5KM

Entry address:

0x1B39E

Entry point:

FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 01, 00, 10, 00, 00, 00, 18, 00, 00, 80, 00, 00, 00, 00, 00, 00... 
[+]

Entropy:

6.1270

Developed / compiled with:

Microsoft Visual C# / Basic .NET

Code size:

101 KB (103,424 bytes)

Remove Smartbar.Resources.HistoryAndStatsWrapper.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.