» Smartbar.Resources.HistoryAndStatsWrapper.dll
Overview
Analysis
File Details

Smartbar.Resources.HistoryAndStatsWrapper.dll

Smartbar.Resources.HistoryAndStatsWrapper

MY POP SHOP LTD

This is part of the Linkury/SnapDo monetization software, a web browser toolbar used to hijack a user's search in order to collect revenues. The SmartBar is a a potentially unwanted toolbar and Windows Gadget that is advertising supported (adware). The module Smartbar.Resources.HistoryAndStatsWrapper.dll by MY POP SHOP has been detected as adware by 16 anti-malware scanners.

File name:

Publisher:

MY POP SHOP LTD (signed and verified)

Product:

Smartbar.Resources.HistoryAndStatsWrapper

Version:

1.2.0.0

MD5:

773d1e4f827c086eb940dd459fdd25d0

SHA-1:

d4cb3a064d170f3f916b8977dd183af0ac893ef1

SHA-256:

02fda09d33410205b3bc4bab7bf78cab1a03d4d0ffa2a238f645e3e7aa60c7f4

Scanner detections:

16 / 68

Status:

Adware

Analysis date:

4/23/2024 3:27:01 PM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Adware.Smartbar.O

877

Avira AntiVirus

TR/Trash.Gen

7.11.30.172

AVG

MPomp

2015.0.3396

Bitdefender

Adware.Smartbar.O

1.0.20.1265

Emsisoft Anti-Malware

Adware.Smartbar.O

8.14.09.10.02

F-Secure

Adware.Smartbar.O

11.2014-10-09_4

G Data

Adware.Smartbar

14.7.24

IKARUS anti.virus

PUA.Linkury

t3scan.1.6.1.0

McAfee

Artemis!9986619068EA

5600.7052

MicroWorld eScan

Adware.Smartbar.O

15.0.0.759

nProtect

Adware.Smartbar.O

14.08.14.01

Panda Antivirus

PUP/LinkUry

14.07.31.02

Reason Heuristics

PUP.MYPOPSHOP.h

14.8.8.0

SUPERAntiSpyware

Trojan.Agent/Gen-Nullo[Short]

10435

Trend Micro House Call

Suspicious_GEN.F47V0619

7.2.212

VIPRE Antivirus

Adware.Linkury

31144

File size:

153.4 KB (157,056 bytes)

Product version:

1.2.0.0

Original file name:

Smartbar.Resources.HistoryAndStatsWrapper.dll

File type:

Dynamic link library (Win32 DLL)

Language:

Language Neutral

Common path:

C:\Program Files\pennybee\smartbar.resources.historyandstatswrapper.dll

Digital Signature

Signed by:

MY POP SHOP LTD

Authority:

COMODO CA Limited

Valid from:

7/7/2014 1:00:00 AM

Valid to:

7/8/2015 12:59:59 AM

Subject:

CN=MY POP SHOP LTD, O=MY POP SHOP LTD, STREET=14 Shenkar Arie, L=HERZLIYA, S=NA, PostalCode=46725, C=IL

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

4A7D93FD75281A37A4ADCDCD636D3ADB

File PE Metadata

Compilation timestamp:

7/30/2014 12:28:09 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

6.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

3072:mhzIMxHQDwoiB7a1PP28e+9Ew33rf5wFo:QIM+D+B7a12S9b55

Entry address:

0x26436

Entry point:

FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Entropy:

6.4089

Developed / compiled with:

Microsoft Visual C# / Basic .NET

Code size:

145.5 KB (148,992 bytes)

Remove Smartbar.Resources.HistoryAndStatsWrapper.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.