home

absolucasino.exe

Ultra Internet Media S A

The application absolucasino.exe by Ultra Internet Media S A has been detected as a potentially unwanted program by 4 anti-malware scanners.
Publisher:
Ultra Internet Media S A  (signed and verified)

MD5:
2b9101125323127a2a49a179597d6578

SHA-1:
5b25437e72087a5e19210134bafd3d20b73c1d06

SHA-256:
9b312bda80de31f27e2502aa7ddbd8aaa35c7890bff07743b37a2ec29381ee8c

Scanner detections:
4 / 68

Status:
Potentially unwanted

Analysis date:
1/9/2025 4:33:25 PM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Trojan.Fakealert
9.0.1.05190

ESET NOD32
Win32/Casino potentially unwanted application
8.0.319.0

F-Prot
W32/Casino.F
4.6.5.141

McAfee
Program.Artemis!2B9101125323
18.0.204.0

File size:
231.4 KB (236,904 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\absolucasino.exe

Digital Signature
Signed by:
Ultra Internet Media S A

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
6/29/2006 12:33:10 AM

Valid to:
7/19/2007 12:53:36 AM

Subject:
CN=Ultra Internet Media S A, OU=Ultra Internet Media S A, O=Ultra Internet Media S A, L=Charlestown, S=Saint Paul Charlestown, C=KN

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
09DA0BBA350B766614380DB5F6C5CE41

File PE Metadata
Compilation timestamp:
8/19/2006 12:54:42 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:XOvuH5hUTqeLFPyBpPnX0nWjeeAkPOm3n3UXf3fwBa:XOvAEyXnX0oTAkPOmnm3IBa

Entry address:
0x844B

Entry point:
B8, 5C, 54, 50, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, B5, AB, C9, 5A, 33, 83, 13, 5F, 5D, E4, 44, D7, B3, 68, 00, 72, AB, F7, 4B, A3, 94, 65, D6, 53, DE, 1F, 16, 0F, E6, D1, 25, 7A, 0A, 22, 7D, 96, 53, 61, 9F, C8, AB, CE, 36, F1, 93, D3, 9B, 97, BB, 1A, 08, FD, D4, 86, C7, 61, B9, 50, F5, 70, 38, D9, C7, 7E, 28, 37, 6E, 01, 09, E9, 21, 14, ED, 0D, 21, 62, AE, 57, 47, 60, AA, C5, 74, B2, 6A, C2, 8A, 78, 35, 6E, 9C, 41, 07...
 
[+]

Packer / compiler:
PECompact v2

Code size:
84 KB (86,016 bytes)

Remove absolucasino.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.