home

psuser.dll

DealPlyLive Update

DealPly Technologies Ltd

The module psuser.dll by DealPly Technologies has been detected as adware by 5 anti-malware scanners.
Publisher:
DealPly Technologies Ltd  (signed and verified)

Product:
DealPlyLive Update

Version:
1.3.23.0

MD5:
de05974e88f189f008b165d86cbb1097

SHA-1:
0c415da3de3eee3027cbef3ecf139da987fa9108

SHA-256:
589483c69dc653fab743b17e0c4b1417f880e0fb9bd762bd2cad0a57e4d4133d

Scanner detections:
5 / 68

Status:
Adware

Analysis date:
4/26/2024 9:30:32 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.Clod0df.Trojan
1.3.0.4923

herdProtect (fuzzy)
variant of psmachine.dll (Adware)
2014.3.14.23

Malwarebytes
PUP.Optional.DealPly.A
v2014.01.23.05

Reason Heuristics
PUP.DealPly.G
14.8.7.17

VIPRE Antivirus
Adware.DealPly
25654

File size:
154.5 KB (158,240 bytes)

Product version:
1.3.23.0

Copyright:
Copyright (C) 2013 DealPly Technologies Ltd

Original file name:
goopdate.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\dealplylive\update\1.3.23.0\psuser.dll

Digital Signature
Signed by:
DealPly Technologies Ltd

Authority:
COMODO CA Limited

Valid from:
6/14/2012 7:00:00 AM

Valid to:
6/15/2015 6:59:59 AM

Subject:
CN=DealPly Technologies Ltd, O=DealPly Technologies Ltd, STREET=13 Barth St., L=Tel Aviv, S=Israel, PostalCode=69104, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
016DFA78310264827B57EAD4F620C264

File PE Metadata
Compilation timestamp:
6/4/2013 1:12:48 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:2xwsUw7VSFT56BD/+N4xBb2S4vBt513D+RRlR:2BUwJSF16+JD3aTl

Entry address:
0x9062

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 32, 46, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 57, 56, 8B, 75, 0C, 8B, 4D, 10, 8B, 7D, 08, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, A4, 01, 00, 00, 81, F9, 00, 01, 00, 00, 72, 1F, 83, 3D, 00, 1B, 02, 10, 00, 74, 16, 57, 56, 83, E7, 0F, 83, E6, 0F, 3B, FE, 5E, 5F, 75, 08, 5E, 5F, 5D, E9, EA, 46, 00, 00, F7, C7, 03, 00, 00, 00, 75, 15, C1, E9, 02...
 
[+]

Entropy:
6.2639

Code size:
77.5 KB (79,360 bytes)

Remove psuser.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.