home

internet download manager downloader - jalantikus.exe

Namen

PT MP Games

The application internet download manager downloader - jalantikus.exe, “Namen Setup ” by PT MP Games has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.safeapplicationsfun.com and multiple other hosts.
Publisher:
PT MP Games  (signed and verified)

Product:
Namen

Description:
Namen Setup

MD5:
634b19b43580faa5fc5d1db7c07cd08a

SHA-1:
32007c70142f022e98fd049b86fd5773d884de62

SHA-256:
70ea9775419911dbfeed3c36a82b01408240b9cbd653e5cacbc15258f8a7d090

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/27/2024 1:10:28 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore.PTMPGame.Installer (M)
16.4.15.21

File size:
1.1 MB (1,159,552 bytes)

Product version:
1.8

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\internet download manager downloader - jalantikus.exe

Digital Signature
Signed by:
PT MP Games

Authority:
GlobalSign nv-sa

Valid from:
1/20/2016 5:49:25 PM

Valid to:
1/20/2017 5:49:25 PM

Subject:
CN=PT MP Games, O=PT MP Games, S=Jakarta, C=ID

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112196D38C2D01B48C24B0EE5080C33055F9

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:1j+P4FWIgJpj1DF8k3KHiv39Db3hSsXNLS6pVhIP/qs8w:1aP4MIgLxv6GNDrQs9+s/IXqE

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
7.7021

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file internet download manager downloader - jalantikus.exe has been seen being distributed by the following 11 URLs.

http://www.safeapplicationsfun.com/c?x=8mGtlvLJjn/M0mS6M/ARaS OK74gDo2L7k8wQnzqo5k=&c=w9ViFzm1ub4gulPuMNlzHMhr/j 1VGzTSO4kinaBfnS1nlyQkLeCUI0pHJQRNT6/HfCwm05fJETx/P Qlb2lGnqYbYfYRtpbNIKjNMBnur3sq83hPhN70BIHWw3J7I8o&downloadAs=Internet Download Manager Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/54/.../idman625build14-JalanTikus.exe

http://www.safeapplicationsfun.com/c?x=fLWqCYl3npDVhKjy5bZMas221w0OJks2TQndzuBwAPM=&c=W4ykXI7kTdIdarE a1igCToe4i2Pg1apNbdrMaSHbmPwbBSBJSybAdg4Wjcy7zycHvX7I9LEaGtrpHZxLZB3fNviI1QC pDauZs/fjf9OLnKuT sC6gEu2Xl6hzxHiTZ&downloadAs=Internet Download Manager Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/54/.../idman625build14-JalanTikus.exe

http://www.safeapplicationsfun.com/c?x=dKXSFUnUP8UpIKyxpCr4nGmoBWukDB6qKqnmuH7XujQ=&c=rKh C9KjIP5QFHdrJRNyUvNQVhpcqS66mZycB/gju HkTOplCSr1tFbBGZLeTR8RwvPBAxTkdwK6MRavoabLOg8BX7v p694Mt9Y AspntpijnNRTT/aTTsd9PyPwcLQ&downloadAs=Internet Download Manager Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/54/.../idman625build14-JalanTikus.exe

http://www.safeapplicationsfun.com/c?x=rXRhSj2wlVrw18GhWdaDlf6TYRe1CzOXe4JIIG5raXg=&c=/GCANrEQ49L/rKzuuoISGe6patTt/sdeo50dJJXf r6b9 qtNDvXHdbDUsXHPi8vZrDFvFLbB1Wb32kMtUPctpDosuIQCAEQN0vh6GaK2o2 fjDcva9OhRcf JC7wudX&downloadAs=Internet Download Manager Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/54/.../idman625build14-JalanTikus.exe

http://www.safeapplicationsfun.com/c?x=OdEiDXrexYl OBi6LB1UFPDTyHo/PWaKEVOvp8W2mxM=&c=F3/LIccCSmxTIvymB0I/Ns32KQhh 764P1jr5xikb/iSOpVnwCQoHuifOIeSjKA BpQik oyotGakddZximXZSo84BaPxWcoXzjZDKBFqyfa4nw6qwqTAe/zEDib/W q&downloadAs=Internet Download Manager Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/54/.../idman625build14-JalanTikus.exe

http://www.safeapplicationsfun.com/c?x=s8CIiMVXDfj9vKqk39UweqnGEOPXr1/MPS/G7dDAxhk=&c=SFhmRD0YOkGEiQGTDy8wyILw/YgZJI9MgJ86//IQhrzgeR8Rrukd9XXdDWSuCqsufIE tM 4x0 ivveqw4tkVl2 nxHwtj5weB 82svAUcO1DcTGz5AYAwBgO /BgV5o&downloadAs=Internet Download Manager Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/54/.../idman625build14-JalanTikus.exe

http://www.safeapplicationsfun.com/c?x=7UQyuUY2q2y4ObB9nvQbWMQw8wffgjw76s29onbu3dQ=&c=jcAXvU5viUoY4 isomi05w0EZlQopElzXT2/AY wo9pxWoWZ0KOqV28K2x 95M2q7c8csYnD7AQcGXCfxxUySjDoYGXvdSLnL eU8Z/V659BxWx1bKmnY1PlzqVDxYNi&downloadAs=Internet Download Manager Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/54/.../idman625build14-JalanTikus.exe

http://www.safeapplicationsfun.com/c?x=0sLk3cLTYLcGWz8CyT0K/q8GU27SCcLNzg0bHsUCVNw=&c=Sav33pxNimCaMZnTrp707sS l8JKMcQy44QB4bAlVbrTPNOFlSUVccDuBbqKUb3DzttbBZSHB7e2v/5hDDgFrfsuj7YNf/ozptaSsu9aNuwB/jbKsF5cEcbbB1syZeJA&downloadAs=Internet Download Manager Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/54/.../idman625build14-JalanTikus.exe

http://www.safeapplicationsfun.com/c?x=o/32TMRCr/Y2xnVshc4MI1RLkW1lffFuM5zM0y2ab6E=&c=OCUHsuDu2IjLO/lF5L1PjfwU636EUqpCMx aZQA8dmlSo9ErqXPq2NiGU7MtKTmbrPc8a9ketaQMhYW72m2q s192U1D83VTn7oo8MmYabsPL6Aas2 wLIY9L5qaZzfZ&downloadAs=Internet Download Manager Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/54/.../idman625build14-JalanTikus.exe

http://www.safeapplicationsfun.com/c?x=yFiCByGDDZ2BD/OzO/VBtgCdaKeS7yfY878nkOZN60A=&c=km5h0AVikYeNCs1t9wWfJhFPKHCy3x5ELNEoLwN4hGmgfW8LvvMCqF0eWYWpN4SP76KrVf1 SAdD8Kq1Je0duHfU8PYZ9rNhV4OdDgcE4aL meq1vWH9XlDmVFF//S7z&downloadAs=Internet Download Manager Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/54/.../idman625build14-JalanTikus.exe

http://www.safeapplicationsfun.com/c?x=ztWD sldnQPuBceNnzV/MD0EGVk6L3ijNxKnwjUhvtI=&c=tjskKKP8N6BKaC/xg8q5hLSNF0L8XjiUXpE 1iTC4 fXPLtB6QJx12CZpsZtfS8XmuLNVAzmJ6ezfKV6ez/n9DX1aA3G8zCoXL8qnlQcxd5ezcvIbgTCxwESfNYOb79r&downloadAs=Internet Download Manager Downloader - JalanTikus.exe&fallback_url=http://files.jalantikus.com/dde/54/.../idman625build14-JalanTikus.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.