home

cska casino.exe

Ultra Internet Media S A

The application cska casino.exe by Ultra Internet Media S A has been detected as a potentially unwanted program by 23 anti-malware scanners.
Publisher:
Ultra Internet Media S A  (signed and verified)

MD5:
2102ecfee5f886f5b07dcb1895842d29

SHA-1:
772929b195b5fb0f3e196c12fa16864d62afe871

SHA-256:
b1190326f0d2dd7d2e0791dade7839c041b456c0f951e1ebc98c7e7ca2d7b6c3

Scanner detections:
23 / 68

Status:
Potentially unwanted

Analysis date:
1/9/2025 5:00:03 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Adware.Casino.W
7.1.1

AhnLab V3 Security
Trojan/Win32.Casino
2013.09.29

Avira AntiVirus
GAME/Casino.Gen
7.11.105.20

Bitdefender
Trojan.Generic.1351118
1.0.20.75

Comodo Security
ApplicUnwnt.Win32.Adware.CasOnline.4
17020

Dr.Web
Trojan.Fakealert
9.0.1.015

Emsisoft Anti-Malware
Trojan.Generic.1351118
8.17.01.15.01

ESET NOD32
Win32/Casino (variant)
11.8855

Fortinet FortiGate
Adware/Casino
1/15/2017

F-Prot
W32/Adware.DCX
v6.4.7.1.166

F-Secure
Trojan.Generic.1351118
11.2017-15-01_1

G Data
Trojan.Generic.1351118
17.1.22

IKARUS anti.virus
not-a-virus:OnlineCasino
t3scan.2.0.127

McAfee
Artemis!2102ECFEE5F8
5600.6154

MicroWorld eScan
Trojan.Generic.1351118
18.0.0.45

NANO AntiVirus
Trojan.Win32.Fakealert.brkaek
0.26.0.55041

nProtect
Trojan/W32.Agent.290368
13.09.27.03

Panda Antivirus
Suspicious file
17.01.15.01

Rising Antivirus
Adware.Win32.Casino.y
23.00.65.17113

SUPERAntiSpyware
Adware.CasinoGames
8653

Total Defense
Win32/CasOnline!Adware
37.0.10498

Trend Micro House Call
ADW_CASINOLINE
7.2.15

Trend Micro
ADW_CASINOLINE
10.465.15

File size:
283.6 KB (290,368 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\beautiful teen anal sex collection iv [www.sexdevelopment.com]\multilanguage casino and poker setup files\cska casino.exe

Digital Signature
Signed by:
Ultra Internet Media S A

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
6/29/2007 1:05:18 AM

Valid to:
7/18/2008 1:53:36 AM

Subject:
CN=Ultra Internet Media S A, OU=Ultra Internet Media S A, O=Ultra Internet Media S A, L=Charlestown, S=Saint Paul Charlestown, C=KN

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
5578C5AB47E3E933476E53AF9D95ECDD

File PE Metadata
Compilation timestamp:
12/13/2006 2:10:33 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x844B

Entry point:
B8, 98, 9B, 50, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 47, 2D, D8, EA, CE, 10, A6, 97, 59, 4F, F4, DB, 6B, 6B, BF, BF, F3, 50, 2A, DA, 14, 88, 51, 0E, B9, CA, FF, FA, 22, 13, D1, 1A, 0B, DD, 4C, 7D, 61, 5F, F4, E1, A9, 27, 95, 4C, F8, 0F, 5E, 97, 41, CD, 8A, EE, 05, 69, 5C, F6, 49, 6D, 4E, 3E, EB, 0D, 96, 47, 38, 0E, 3F, FF, DC, 1A, 40, 92, 53, 93, 0B, 1B, 90, A2, DB, BE, 49, CD, E5, FE, 24, 60, C7, 38, 61, BB, 78, 9E, 78...
 
[+]

Entropy:
7.8383

Packer / compiler:
PECompact v2

Code size:
84 KB (86,016 bytes)

Remove cska casino.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.