home

pokki.exe

Pokki

Publisher:
Pokki  (signed and verified)

Product:
Pokki

Version:
0.266.1.172

MD5:
d3f53c3fcba03e557424b48a32481980

SHA-1:
7fa847413b974152c49cb3b77e2f351f3d87ce62

SHA-256:
f641af1ffd81b88f79fe0617802f9000aebd041722db13a8787c84a542f0ec55

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:52:05 AM UTC  (today)

File size:
7.9 MB (8,252,744 bytes)

Product version:
0.266.1.172

Copyright:
Copyright (C) 2010-2012 - SweetLabs, Inc

Original file name:
pokki.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\pokki\engine\pokki.exe

Digital Signature
Signed by:
Pokki

Authority:
VeriSign, Inc.

Valid from:
2/27/2012 9:00:00 PM

Valid to:
4/25/2015 8:59:59 PM

Subject:
CN=Pokki, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Pokki, L=San Diego, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7F0C02A0B2F2B0727327296C8736183B

File PE Metadata
Compilation timestamp:
11/1/2013 3:30:06 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:/l9igJqOqQpEStmtVFbKglDVcVhVnF+Rq4z6j5k2CUmuErYgIeTtOWjzEBtgA2pw:d9iSPEvXf6kq4Wj6Sm463zWgFp9AY8JP

Entry address:
0x397142

Entry point:
E8, FD, 83, 01, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, A3, D4, F8, 9E, 00, 5D, C3, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A1, 94, 20, 9E, 00, 33, C5, 89, 45, FC, 53, 8B, 5D, 08, 57, 83, FB, FF, 74, 07, 53, E8, 5F, 84, 01, 00, 59, 83, A5, E0, FC, FF, FF, 00, 6A, 4C, 8D, 85, E4, FC, FF, FF, 6A, 00, 50, E8, B8, DC, FF, FF, 8D, 85, E0, FC, FF, FF, 89, 85, D8, FC, FF, FF, 8D, 85, 30, FD, FF, FF, 83, C4, 0C, 89, 85, DC, FC, FF, FF, 89, 85, E0, FD, FF, FF, 89, 8D, DC, FD, FF, FF, 89, 95, D8...
 
[+]

Code size:
4.9 MB (5,185,024 bytes)

Startup File (User Run Once)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

Name:
Application Restart #1

Command:
C:\users\{user}\appdata\local\pokki\engine\pokki.exe --disable-internal-flash --noerrdialogs --no-message-box --disable-extensions --disable-web-security --disable-web-resources --disable-client-side-p


The file pokki.exe has been discovered within the following programs.

Dragons of Atlantis  by SweetLabs, Inc.
Dragons of Atlantis is an app for the Pokki desktop platform. The app itself runs as an embedded HTML5 program within the Pokki software outside of the web browser.
www.pokki.com/app/Dragons-of-Atlantis
48% remove it
Field Runners  by SweetLabs, Inc.
Field Runners is an app for the Pokki desktop platform. The app itself runs as an embedded HTML5 program within the Pokki software outside of the web browser.
www.pokki.com
24% remove it
Game Arcade  by SweetLabs, Inc.
Game Arcade is an app for the Pokki desktop platform. The app itself runs as an embedded HTML5 program within the Pokki software outside of the web browser.
40% remove it
Google Maps  by SweetLabs, Inc.
Google Maps is an app for the Pokki desktop platform. The app itself runs as an embedded HTML5 program within the Pokki software outside of the web browser.
www.pokki.com/app/Google%20Maps
26% remove it
Little Alchemy  by SweetLabs, Inc.
Little Alchemy is an app for the Pokki desktop platform. The app itself runs as an embedded HTML5 program within the Pokki software outside of the web browser.
18% remove it
My To-Do List  by SweetLabs, Inc.
My To-Do List is an app for the Pokki desktop platform. The app itself runs as an embedded HTML5 program within the Pokki software outside of the web browser.
42% remove it
Pirate Storm  by SweetLabs, Inc.
Pirate Storm is an app for the Pokki desktop platform. The app itself runs as an embedded HTML5 program within the Pokki software outside of the web browser.
www.pokki.com/app/Pirate%20Storm
41% remove it
Pixsta  by SweetLabs, Inc.
Pixsta is an app for the Pokki desktop platform. The app itself runs as an embedded HTML5 program within the Pokki software outside of the web browser. Some versions of the software are bundled with OpenCandy installers.
25% remove it
Rising Cities  by SweetLabs, Inc.
Rising Cities is an app for the Pokki desktop platform. The app itself runs as an embedded HTML5 program within the Pokki software outside of the web browser.
www.pokki.com/app/Rising-Cities
42% remove it
Toshiba Start  by SweetLabs, Inc.
This is a white labeled version of Pokki.
42% remove it
 
Latest 20 of 20 programs
Powered by Should I Remove It?

Scan pokki.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.