home

ngfmsmanager.exe

Navigraph FMS Data Manager

Navigraph

The application ngfmsmanager.exe by Navigraph has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Publisher:
Navigraph  (signed and verified)

Product:
Navigraph FMS Data Manager

Version:
1.6.2.0206

MD5:
04e1871d331ed566816a887e707a103d

SHA-1:
9647b486cac9de826a411c0facfdcf8e41f8d4e1

SHA-256:
c37e6f3ccd5f93bccb28e85de5ecb83326bdf3d80a8e93e715b131bcfa5c8d9f

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
12/27/2024 9:26:11 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore (L)
17.2.9.12

File size:
3.3 MB (3,490,408 bytes)

Product version:
1.6.2.0206

Copyright:
(C) 2017 Navigraph

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\navigraph\fms data manager\ngfmsmanager.exe

Digital Signature
Signed by:
Navigraph

Authority:
thawte, Inc.

Valid from:
12/19/2016 10:00:00 PM

Valid to:
1/13/2020 9:59:59 PM

Subject:
CN=Navigraph, O=Navigraph, L=Stockholm, S=Stockholm, C=SE

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
5B22BBAFF7DEA4C523DF44FF51F1B12D

File PE Metadata
Compilation timestamp:
2/6/2017 11:20:54 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

Entry address:
0x342C

Entry point:
E9, 14, 38, 0B, 00, E9, BA, 1A, 04, 00, E9, D5, 1E, 06, 00, E9, 40, F1, 06, 00, E9, 86, 2B, 0B, 00, E9, C6, 94, 02, 00, E9, 91, 2A, 01, 00, E9, CC, D3, 0A, 00, E9, D7, 5C, 0A, 00, E9, 52, 53, 00, 00, E9, ED, 7F, 02, 00, E9, D8, 9C, 07, 00, E9, B3, 58, 0A, 00, E9, EE, 8F, 07, 00, E9, 69, 21, 08, 00, E9, B4, 58, 03, 00, E9, 4F, AA, 07, 00, E9, 2A, 5E, 07, 00, E9, 75, 75, 0A, 00, E9, E0, 22, 08, 00, E9, 0B, 32, 01, 00, E9, 96, 5F, 05, 00, E9, 51, 7D, 07, 00, E9, 3C, B0, 07, 00, E9, 57, DB, 02, 00, E9, F2, 78...
 
[+]

Entropy:
6.9094

Developed / compiled with:
Microsoft Visual C++ 8.0 (Debug)

Code size:
858 KB (878,592 bytes)

Remove ngfmsmanager.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.