home

DolphinDealsBrowserFilter.exe

Dolphin Deals

Installed as part of the Yontoo Dolphin Deals branded web browser extension, the BrowserFilter component is responsible for injecting advertising in the browser based on the context of the HTML being rendered. Ads are injected in the browser in the form of inline text, coupons, multi-site searching and additional offers. The application DolphinDealsBrowserFilter.exe by Dolphin Deals has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Dolphin Deals  (signed and verified)

Version:
0.0.0.0

MD5:
115b9ef7c5aa7ecd8614ba16b504d23e

SHA-1:
3d150c3bcce0c2c7527c44c1b68f60a945e0592e

SHA-256:
e2abe0ee59081e3802a2e430a879cc22f22aa8a750acdb66e207fd253557080e

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Part of the Yontoo ad injection web browser add-on.

Analysis date:
11/23/2024 6:18:32 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Yontoo (M)
17.3.13.15

File size:
41.3 KB (42,280 bytes)

Product version:
0.0.0.0

Original file name:
DolphinDealsBrowserFilter.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\dolphin deals\dolphindealsbrowserfilter.exe

Digital Signature
Signed by:
Dolphin Deals

Authority:
VeriSign, Inc.

Valid from:
4/29/2014 5:30:00 AM

Valid to:
4/30/2015 5:29:59 AM

Subject:
CN=Dolphin Deals, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Dolphin Deals, L=Santa Monica, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7B2BB0FC5A785F21B05232FFFBC2969A

File PE Metadata
Compilation timestamp:
8/15/2014 6:07:55 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

Entry address:
0xA026

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.0433

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
32.5 KB (33,280 bytes)

Remove DolphinDealsBrowserFilter.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.