home

cska poker.exe

Ultra Internet Media S A

The application cska poker.exe by Ultra Internet Media S A has been detected as a potentially unwanted program by 27 anti-malware scanners.
Publisher:
Ultra Internet Media S A  (signed and verified)

MD5:
8a8fa291be2219f4cc6b5072a3218ee0

SHA-1:
6612ac552b13bc722c81606e38605c6dc7f01006

SHA-256:
656448636fd2aa8502e401d9c825e69ca787901dc102e4bd1dcc04a105cacfa6

Scanner detections:
27 / 68

Status:
Potentially unwanted

Analysis date:
2/27/2025 5:56:04 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.1351118
20

Agnitum Outpost
Adware.Casino.W
7.1.1

AhnLab V3 Security
Trojan/Win32.Casino
2015.03.06

Avira AntiVirus
GAME/Casino.Gen
7.11.214.2

Bitdefender
Trojan.Generic.1351118
1.0.20.75

Comodo Security
ApplicUnwnt.Win32.Adware.CasOnline.4
21306

Dr.Web
Trojan.Fakealert
9.0.1.015

Emsisoft Anti-Malware
Trojan.Generic.1351118
8.17.01.15.01

ESET NOD32
Win32/Casino potentially unwanted (variant)
11.11276

Fortinet FortiGate
Adware/Casino
1/15/2017

F-Prot
W32/Adware.DCX
v6.4.7.1.166

F-Secure
Trojan.Generic.1351118
11.2017-15-01_1

G Data
Trojan.Generic.1351118
17.1.25

IKARUS anti.virus
not-a-virus:OnlineCasino
t3scan.1.8.6.0

K7 AntiVirus
Unwanted-Program
13.200.15176

McAfee
Artemis!8A8FA291BE22
5600.6154

MicroWorld eScan
Trojan.Generic.1351118
18.0.0.45

NANO AntiVirus
Trojan.Win32.Fakealert.brkaek
0.30.0.296

Norman
Casino.B!genr
11.20170115

nProtect
Trojan/W32.Agent.290368
15.03.05.01

Panda Antivirus
Generic Suspicious
17.01.15.01

Rising Antivirus
PE:Adware.Win32.Casino.y!1074250198
23.00.65.17113

SUPERAntiSpyware
Adware.CasinoGames
8653

Total Defense
Win32/CasOnline!Adware
37.0.11478

Trend Micro House Call
ADW_CASINOLINE
7.2.15

Trend Micro
ADW_CASINOLINE
10.465.15

Zillya! Antivirus
Adware.Win32.9C870F99
2.0.0.2089

File size:
283.6 KB (290,368 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\beautiful teen anal sex collection iv [www.sexdevelopment.com]\multilanguage casino and poker setup files\cska poker.exe

Digital Signature
Signed by:
Ultra Internet Media S A

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
6/29/2007 1:05:18 AM

Valid to:
7/18/2008 1:53:36 AM

Subject:
CN=Ultra Internet Media S A, OU=Ultra Internet Media S A, O=Ultra Internet Media S A, L=Charlestown, S=Saint Paul Charlestown, C=KN

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
5578C5AB47E3E933476E53AF9D95ECDD

File PE Metadata
Compilation timestamp:
12/13/2006 2:10:33 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x844B

Entry point:
B8, 98, 9B, 50, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 47, 2D, D8, EA, CE, 10, A6, 97, 59, 4F, F4, DB, 6B, 6B, BF, BF, F3, 50, 2A, DA, 14, 88, 51, 0E, B9, CA, FF, FA, 22, 13, D1, 1A, 0B, DD, 4C, 7D, 61, 5F, F4, E1, A9, 27, 95, 4C, F8, 0F, 5E, 97, 41, CD, 8A, EE, 05, 69, 5C, F6, 49, 6D, 4E, 3E, EB, 0D, 96, 47, 38, 0E, 3F, FF, DC, 1A, 40, 92, 53, 93, 0B, 1B, 90, A2, DB, BE, 49, CD, E5, FE, 24, 60, C7, 38, 61, BB, 78, 9E, 78...
 
[+]

Entropy:
7.8382

Packer / compiler:
PECompact v2

Code size:
84 KB (86,016 bytes)

Remove cska poker.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.