home

bollywood poker.exe

Ultra Internet Media S A

The application bollywood poker.exe by Ultra Internet Media S A has been detected as a potentially unwanted program by 23 anti-malware scanners.
Publisher:
Ultra Internet Media S A  (signed and verified)

MD5:
18f6e468835921f4ed47e8288180e680

SHA-1:
d6f189fef4a4cf39bb8867cbb72d983286025742

SHA-256:
378c707665bd146b72eb035797144a0fbc899b586331708800d3583a47dcb920

Scanner detections:
23 / 68

Status:
Potentially unwanted

Analysis date:
1/9/2025 4:47:04 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Adware.Casino.W
7.1.1

AhnLab V3 Security
Trojan/Win32.Casino
2013.08.25

Avira AntiVirus
GAME/Casino.Gen
7.11.98.0

Bitdefender
Adware.Generic.108117
1.0.20.75

Comodo Security
ApplicUnwnt.Win32.Adware.CasOnline.4
16816

Dr.Web
Trojan.Fakealert
9.0.1.015

Emsisoft Anti-Malware
Adware.Generic.108117
8.17.01.15.01

ESET NOD32
Win32/Casino (variant)
11.8723

Fortinet FortiGate
Adware/Casino
1/15/2017

F-Prot
W32/Adware.DCX
v6.4.7.1.166

G Data
Adware.Generic.108117
17.1.22

IKARUS anti.virus
not-a-virus:OnlineCasino
t3scan.2.0.127

McAfee
Artemis!18F6E4688359
5600.6154

MicroWorld eScan
Adware.Generic.108117
18.0.0.45

NANO AntiVirus
Trojan.Win32.Fakealert.brkaek
0.26.0.53954

Norman
Casino.B!genr
11.20170115

nProtect
Trojan/W32.Agent.289352
13.08.23.03

Panda Antivirus
Suspicious file
17.01.15.01

Rising Antivirus
Adware.Win32.Casino.y
23.00.65.17113

SUPERAntiSpyware
Adware.CasinoGames
8653

Total Defense
Win32/CasOnline!Adware
37.0.10498

Trend Micro House Call
ADW_CASINOLINE
7.2.15

Trend Micro
ADW_CASINOLINE
10.465.15

File size:
282.6 KB (289,352 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\beautiful teen anal sex collection iv [www.sexdevelopment.com]\multilanguage casino and poker setup files\bollywood poker.exe

Digital Signature
Signed by:
Ultra Internet Media S A

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
6/29/2007 1:05:18 AM

Valid to:
7/18/2008 1:53:36 AM

Subject:
CN=Ultra Internet Media S A, OU=Ultra Internet Media S A, O=Ultra Internet Media S A, L=Charlestown, S=Saint Paul Charlestown, C=KN

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
5578C5AB47E3E933476E53AF9D95ECDD

File PE Metadata
Compilation timestamp:
12/13/2006 2:10:33 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x844B

Entry point:
B8, 98, 9B, 50, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 47, 2D, D8, EA, CE, 10, A6, 97, 59, 4F, F4, DB, 6B, 6B, BF, BF, F3, 50, 2A, DA, 14, 88, 51, 0E, B9, CA, FF, FA, 22, 13, D1, 1A, 0B, DD, 4C, 7D, 61, 5F, F4, E1, A9, 27, 95, 4C, F8, 0F, 5E, 97, 41, CD, 8A, EE, 05, 69, 5C, F6, 49, 6D, 4E, 3E, EB, 0D, 96, 47, 38, 0E, 3F, FF, DC, 1A, 40, 92, 53, 93, 0B, 1B, 90, A2, DB, BE, 49, CD, E5, FE, 24, 60, C7, 38, 61, BB, 78, 9E, 78...
 
[+]

Entropy:
7.8376

Packer / compiler:
PECompact v2

Code size:
84 KB (86,016 bytes)

Remove bollywood poker.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.