Multi-License Discount Quote

Change Region

English
Threat Database Adware Adware.DealPly.AS

Adware.DealPly.AS

By CagedTech in Adware

Threat Scorecard

Popularity Rank: 24,565
Threat Level: 20 % (Normal)
Infected Computers: 54
First Seen: July 27, 2024
Last Seen: June 27, 2026
OS(es) Affected: Windows

The detection of Adware.DealPly.AS on your system indicates the presence of a potentially unwanted program that may be displaying unwanted advertisements, collecting user data, or engaging in other malicious activities. It is essential to understand the nature of this threat and take immediate action to remove it from your system to prevent further damage.

What Is Adware.DealPly.AS?

Adware.DealPly.AS is a type of adware program that is designed to display unwanted advertisements on infected systems. Adware programs like this one can be bundled with free software downloads, attached to spam emails, or exploited through vulnerabilities in software. Once installed, adware can collect user data, track browsing habits, and display pop-ups, banners, and other types of advertisements.

How Adware.DealPly.AS Operates

Adware.DealPly.AS operates by installing itself on the system and integrating with web browsers, such as Google Chrome, Mozilla Firefox, or Microsoft Edge. It can modify browser settings, add extensions, and inject advertisements into web pages. The program may also collect user data, such as browsing history, search queries, and personal information, which can be used for targeted advertising or sold to third-party companies.

Symptoms of Infection

Systems infected with Adware.DealPly.AS may exhibit several symptoms, including an increase in unwanted advertisements, slow system performance, and unexpected browser behavior. Users may notice that their browser homepage or search engine has been changed, or that new extensions or toolbars have been installed without their consent. In some cases, the adware may also cause system crashes, freezes, or errors.

  • Unwanted advertisements, such as pop-ups, banners, or in-text ads
  • Slow system performance or browser crashes
  • Unexpected browser behavior, such as changed homepage or search engine
  • New extensions or toolbars installed without consent
  • System errors or freezes

How to Remove Adware.DealPly.AS

  1. Boot your system in Safe Mode with Networking to prevent the adware from loading
  2. Perform a full scan of your system using a reputable anti-malware tool, such as SpyHunter, to detect and remove the adware
  3. Uninstall any suspicious programs or applications that may be related to the adware
  4. Reset your web browsers, including Google Chrome, Mozilla Firefox, and Microsoft Edge, to their default settings
  5. Reboot your system and perform another full scan to ensure that the adware has been completely removed

Conclusion

Removing Adware.DealPly.AS from your system requires a combination of technical knowledge and caution. By following the steps outlined above, you can help ensure that your system is free from this potentially unwanted program and prevent further damage. It is essential to remain vigilant and take proactive measures to protect your system from future threats, such as keeping your software up-to-date, avoiding suspicious downloads, and using reputable anti-malware tools.

Analysis Report

General information

Family Name: Adware.DealPly.AS
Signature status: No Signature

Known Samples

MD5: 4dbc82b32a7972c01675158f2ba25f5b
SHA1: 6fe16a35132f5bade871b845a1d739c47c45b0ae
SHA256: 5D7E24B9C3F29DC3E623A4099DFF55FAFFBD51EEFB556FBF7D69E9D1715704F3
File Size: 903.68 KB, 903680 bytes
MD5: 5721e66a8aaa91ca21aa89480415781a
SHA1: 5a3c27ade2b7603c84bb55146c172994f8f0b8c8
SHA256: 1FDFF6B8C778DD98C08E57880CDD17FE4DE7F8378E2044BF7F87F40171BFEF8B
File Size: 2.18 MB, 2179584 bytes
MD5: 5aa80a060bf34e9b2c27b47da249742f
SHA1: 70b515302a2ab93d78c461ced5df72c1d4c828e2
SHA256: 965B54FC0C1B9313FBAFC420334CE2916542A0F7BF0A671CDFE9614E4F5777EB
File Size: 2.24 MB, 2238464 bytes
MD5: 143988e79d1d453f70937a24e9360118
SHA1: 5302f6242d99c2ee7a624571448d31f13f4b379b
SHA256: FD1839BE8B0C6FC18C90A34171598C95FCEA3A375FE7E4B86FB7061FE349A3E9
File Size: 2.15 MB, 2152448 bytes
MD5: 0d09a6dd169a4d63402bc2b3f9abeb08
SHA1: b49e6e5360642ce4a22fc0e53988307f52efa682
SHA256: 42A035E60CD3498A4CBCF603AEA7D09EB0F2D4F7D58F7AC60705E3B3F90A07A3
File Size: 889.86 KB, 889856 bytes
Show More
MD5: e9af02fc42c868c18bc4f9149e0e2a2c
SHA1: 293a31671643a81005182a2583e52cb32e7e31e9
SHA256: 98087D79E5AB776D06A7806B44E0203A7BC0D0156BC3075078EC90C016DC9BA6
File Size: 2.25 MB, 2246656 bytes
MD5: 451cc038af3645dae371b4611766d903
SHA1: b651a3aa64ea575803c1d95eb5f36c096ed24139
SHA256: 47ABB0C31535ABDDB9BB89FD18346C7EF4A8623AE902A8FBC5877F3C304B7C3F
File Size: 2.07 MB, 2067968 bytes
MD5: 95520c97e640a5042bec730e193bddbd
SHA1: cc1772cb63e6e7258215cfa839b6ae006e053ca5
SHA256: C81E1C28DFF338072FA4B96080DBF3C254FB3F23C550A6A603965127430F2BCA
File Size: 2.16 MB, 2164224 bytes
MD5: 10c3c61f324d92ac6347fa282ad3d802
SHA1: 29320d39b02f6ba02030bf3c5471054b67ee21d4
SHA256: 712F45292C9482DB0F16133C0733B0DCC54720164E00D96139F9B4EE3E9632FA
File Size: 2.24 MB, 2240512 bytes
MD5: c623012462af729c027c1831ad5122b5
SHA1: 8bf972b763486f47f3beb321643496826bb5b614
SHA256: 12BA6726A8B42B1F7B2E3149FCD984D7EDC550D247B4BBAC7124EB85D3109CDB
File Size: 679.94 KB, 679936 bytes
MD5: c85d734cea5fceb894df2bd416f093de
SHA1: 094b2bfa1584df52d642f7dc0a06b741acdf1af9
SHA256: BC4D34CB9056E41B537150832C51A34AF44121750911AF25EB6491B6F27D95A9
File Size: 2.15 MB, 2147840 bytes
MD5: 12bdad7aefd89f66be3a841b26b06be3
SHA1: 27fe9e6bfde2e64d8c21d5ac62f3c403f127b1c1
SHA256: C076F95A01520F2247B3486A5E0004780BFAA79F6B7A561C923D83FD5A2726E7
File Size: 1.99 MB, 1988096 bytes
MD5: 6f16dc9c1e785709b629e504a6dbbaf1
SHA1: 1564087604dde9c6163372d1aa57307c5e3ce70c
SHA256: 74232DD8BA6A9D49C14FC613DE7B13FA3A1694D6DE1B236F5BC7B6DBA96B4602
File Size: 2.06 MB, 2057216 bytes
MD5: 9b80b9cb7be33802b9fa39ae59c73c02
SHA1: 2769858b1ead1ee5da154b94e33495467267b318
SHA256: B2CD7BE3C831EDB1C119172EDDFCE7F1B1D357C81152C8D5710B0DDD91FC2531
File Size: 619.52 KB, 619520 bytes
MD5: b889dfc8d7972afa161453dc7476ca9a
SHA1: e2f59cf12f163da880fa921f17fe45d01de079c4
SHA256: 438FEE3D102241FFE72443B20F9FEAAF651F512990A9F144FB8F04F32E9D555C
File Size: 2.22 MB, 2224640 bytes
MD5: 32d7ac6c8ade75f20bea1f61a2775c4d
SHA1: b5a199da80f15f3f45eb41c7620e01c73589d846
SHA256: 8CD928D69603B3B4FE35D106667248AE7599CE1578F7C76E5E3B38BC4ECC2A3B
File Size: 670.72 KB, 670720 bytes
MD5: 1d7a92a902795fb277d85361b6167231
SHA1: 29dbbcd3dc3f930b4156d3a62e55bcbd736769f5
SHA256: C50DCFA6C14CC376E967718E82947054F63A74C3B57E35475926EAEF67199942
File Size: 2.03 MB, 2028032 bytes
MD5: 8381029a47892ea6abade2084de28dea
SHA1: b8beeeb7fffd6f73bc72cdd737df5bcd5bff8d06
SHA256: 56608736E1F695D28E46A2F165142B82D708B20B6DE26700E9A0465E23BBA7C3
File Size: 2.32 MB, 2323456 bytes
MD5: c486d95e75f8f050661b1445f5647014
SHA1: 2b33c9a69f82c112feecfeedd4bdefa96e3ed2d2
SHA256: 4109A07D0A57104EE0D6A9127E64E2E46DAF3953A9F9008FA29AB6491695A80D
File Size: 663.55 KB, 663552 bytes
MD5: 6a3d5515ec933ce278dfeda8db48eb39
SHA1: 4a185ee69ccbe07729da53e9b47a5ab76cd16933
SHA256: D064CFADDC075510963BB0C68236012734242BC2561F5115A2EC0B9B92CD9E0B
File Size: 2.31 MB, 2305024 bytes
MD5: 1b402d8d0b40acfcac73d9474a17511a
SHA1: ddf821a4d80797593925b077ede651fef704d058
SHA256: 3340A11F131FC5CA30CEE48300E58E91C38311C835247BC5551C13F0CEFF3A7E
File Size: 889.86 KB, 889856 bytes
MD5: 02dc62a0170d1229716e050369a98d70
SHA1: 7cb0f3c018ff9b7c593fad4d280f05e7d52589a5
SHA256: 928C33F9937C8E5520A2D81AC41D89B05A93109DC8266FF704D75C31614E13CC
File Size: 912.90 KB, 912896 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have debug information
  • File doesn't have exports table
  • File doesn't have relocations information
  • File doesn't have security information
  • File has been packed
  • File has exports table
  • File has TLS information
  • File is 32-bit executable
  • File is either console or GUI application
Show More
  • File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
  • File is Native application (NOT .NET application)
  • File is not packed
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

File Icons

Windows PE Version Information

Name Value
Company Name
  • Bepadogos Software
  • Cacerob
  • Cedanamofo Ltd.
  • Dedofe Ltd.
  • Fafapom Ltd.
  • Galagekuh Ltd.
  • Gohek Software Ltd.
  • Hopololoc Ltd.
  • Keradadolama
  • Manat
Show More
  • Matasokofene Software
  • Matoh Ltd.
  • Papeleban Ltd.
File Description
  • Bisu
  • Poken
File Version
  • 3.8.41.38
  • 3.8.23.61
  • 3.2.34.26
  • 2.9.40.37
  • 2.9.9.87
  • 2.8.37.94
  • 2.2.4.84
  • 1.7.43.16
  • 1.6.47.73
  • 1.6.46.19
Show More
  • 1.3.4.5
  • 1.2.29.77
  • 1.1.24.46
Internal Name
  • calehlomad
  • Colotid
  • Cupepo
  • Deben
  • Dorur
  • laregos
  • Lepife
  • mugosobecetid
  • Nagede
  • reta
Show More
  • RokidiHananeh
  • saken
  • Tamini
Legal Copyright
  • Cedanamofo Ltd. All Rights Reserved
  • Copyright
  • Copyright All Rights Reserved
  • Copyright © 2011-2015
Legal Trademarks
  • Dedofe Ltd. trademark
  • Hopololoc Ltd. trademark 2009-2017
  • Papeleban Ltd. trademark 2012-2015
Original Filename
  • calehlomad.exe
  • colotidpalo.exe
  • cupepopataduc.exe
  • DebenLoreb.exe
  • Dorur.exe
  • laregos.exe
  • LepifeKopahe.exe
  • mugosobecetid.exe
  • nagedetasor.exe
  • reta.exe
Show More
  • RokidiHananeh.exe
  • saken.exe
  • taminisemoci.exe
Product Name
  • Cafecapa Nufitopud
  • Dulocofa Take
  • Hanedoted Cogogomo Corebugo
  • Kamita Bafodaba
  • Komos Pihasame
  • Nasikafak
  • Noko Cisenas Soma
  • Nosemoc Bimama Pamurakoc
  • Posa Ragi 10
  • Sefes Putetep
Show More
  • Sogago 65 Tocolom
  • Sudic 13
  • Tedol 61 Gaboser
Product Version
  • 3.9.44.72
  • 3.8.27.31
  • 3.8.15.28
  • 3.3.25.15
  • 3.3.7.2
  • 2.7.43.27
  • 2.7.34.11
  • 2.5.39.13
  • 2.3.8.59
  • 2.2.30.54
Show More
  • 1.3.23.89
  • 1.2.24.89
  • 1.2.23.83

File Traits

  • 2+ executable sections
  • HighEntropy
  • No Version Info
  • packed
  • upx
  • UPX!
  • VirtualQueryEx
  • x86

Block Information

Total Blocks: 2,676
Potentially Malicious Blocks: 4
Whitelisted Blocks: 2,666
Unknown Blocks: 6

Visual Map

0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
... Data truncated
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block

Similar Families

  • Agent.DSS
  • Babar.AI
  • Banker.AM
  • Banker.GF
  • Banker.RF
Show More
  • Banload.XG
  • Casbaneiro.A
  • Danabot.DI
  • DealPly.AS
  • DealPly.ASB
  • DealPly.GB
  • Delf.OD
  • Delf.ODB
  • Filecoder.RR
  • Gamehack.BSB
  • HiLevel.A
  • Installmonstr.EC
  • Lamer.B
  • MSIL.Agent.FG
  • MyDoom.A
  • Ropalidia.D

Windows API Usage

Category API
User Data Access
  • GetUserObjectInformation
Anti Debug
  • IsDebuggerPresent

Related Posts

Trending

Most Viewed

Loading...