the-sims-4-gamemanager.exe

Game Manager

The application the-sims-4-gamemanager.exe has been detected as a potentially unwanted program by 4 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer, however the file is not signed with an authenticode signature from a trusted source. The installer uses the InstallMonetizer platform which will donwload and install adware toolbars and other potentially unwanted software offers during setup. The file has been seen being downloaded from tmpfile3338.s3.amazonaws.com and multiple other hosts.
Publisher:
Game Manager

Product:
Game Manager

Version:
2

MD5:
f3655045ed131ff704b658e359558168

SHA-1:
0398d1d57975b690e69b4454f1e4a403a10922e8

SHA-256:
22423f24b215a43ecb5711017465187d50b18f496a628b70d3ada27ab5d442ff

Scanner detections:
4 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallMonetizer distribution platform to bundle adware.

Analysis date:
11/6/2024 12:41:21 AM UTC  (today)

Scan engine
Detection
Engine version

Clam AntiVirus
Win.Trojan.Ramnit-8178
0.98/21511

ESET NOD32
Win32/InstallMonetizer.AN potentially unwanted application
8.0.319.0

Microsoft Security Essentials
Threat.Undefined
1.215.1302.0

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
3.12.26.4

File size:
1.2 MB (1,213,817 bytes)

Product version:
2

Copyright:
Game Manager

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\the-sims-4-gamemanager.exe

File PE Metadata
Compilation timestamp:
12/5/2009 5:50:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:2fHWk11HtGId7zpft9IIZo+xBw/b7g2XxPimkvZ8rHE:pkV9zpft9/3zwTM2Xxr/A

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, F1, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file the-sims-4-gamemanager.exe has been seen being distributed by the following 19 URLs.

Remove the-sims-4-gamemanager.exe - Powered by Reason Core Security