» cso2installer_v17983.exe
Overview
Analysis
File Details
Downloads (1)

cso2installer_v17983.exe

Nexon Game Manager

Nexon

This is a setup program which is used to install the application. The file has been seen being downloaded from tw.hicdn.csonline2.beanfun.com.

File name:

Publisher:

Nexon

Product:

Nexon Game Manager

Version:

1, 0, 1, 20338

MD5:

35145931f35a537d0dfa2d402b67d4ec

SHA-1:

0066f79cde22a2afc30de7d67dbb0568f4dc2582

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/15/2024 8:31:34 AM UTC (today)

File size:

19.6 MB (20,569,220 bytes)

Product version:

1, 0, 1, 20338

(c)Nexon Corporation. All rights reserverd.

Original file name:

NGMSetup.exe

File type:

Executable application (Win32 EXE)

File PE Metadata

Compilation timestamp:

12/6/2012 7:52:00 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

393216:rLh69QevpXWbPTYaXqvXx6Brrpde/xLzXhgMLE/TgnrLo0G:B69n4DUMq/gRpUJLzXiMLE/TgPo0G

Entry address:

0x22AF8

Entry point:

E8, 88, 7E, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 38, 53, 57, FF, 75, 08, 8D, 4D, C8, E8, AE, D7, FF, FF, 8B, 45, 10, 8B, 7D, 0C, 33, DB, 3B, C3, 74, 02, 89, 38, 3B, FB, 75, 2D, E8, A9, FB, FF, FF, 53, 53, 53, 53, 53, C7, 00, 16, 00, 00, 00, E8, FB, 13, 00, 00, 83, C4, 14, 38, 5D, D4, 74, 07, 8B, 45, D0, 83, 60, 70, FD, 33, C0, 33, D2, E9, 3F, 02, 00, 00, 39, 5D, 14, 74, 0C, 83, 7D, 14, 02, 7C, C8, 83, 7D, 14, 24, 7F, C2, 56, 8B, 75, C8, 89, 5D, F0, 89, 5D, F4, 8A, 07, 47, 83, BE, AC, 00... 
[+]

Entropy:

7.8296 (probably packed)

Code size:

194 KB (198,656 bytes)

The file cso2installer_v17983.exe has been seen being distributed by the following URL.

http://tw.hicdn.csonline2.beanfun.com/.../CSO2Installer_V17983.exe

Scan cso2installer_v17983.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.