home

NGM.exe

Nexon Game Manager

NEXON Korea Corporation.

Publisher:
Nexon  (signed by NEXON Korea Corporation.)

Product:
Nexon Game Manager

Version:
1, 0, 11, 26853

MD5:
816b4eccd4a007af2202b649a8db64f5

SHA-1:
9d0eff3f12762ceaf44e5fb42c0b643e65f37345

SHA-256:
cb974e996863ab856c4084a12725839d83fbde56c679d278cd59d0a82773e7b4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 5:07:41 AM UTC  (today)

File size:
252.3 KB (258,320 bytes)

Product version:
1, 0, 11, 26853

Copyright:
(c) Nexon Corporation. All rights reserved.

Original file name:
NGM.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\ngm.exe

Digital Signature
Signed by:
NEXON Korea Corporation.

Authority:
Symantec Corporation

Valid from:
1/19/2016 9:00:00 AM

Valid to:
2/18/2019 8:59:59 AM

Subject:
CN=NEXON Korea Corporation., O=NEXON Korea Corporation., L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
3C9F5BA47A07D8DD185FCA39CF5CFBF4

File PE Metadata
Compilation timestamp:
3/28/2016 12:23:53 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
6144:+g3FFOGUxzTLytaTbAVo3u7D2TBUiOC0a:x3UhTLytkco3u7D2Tmif1

Entry address:
0x144DA

Entry point:
E8, 31, 05, 00, 00, E9, 80, FE, FF, FF, 55, 8B, EC, 81, EC, 24, 03, 00, 00, 53, 56, 6A, 17, E8, 7E, 3F, 01, 00, 85, C0, 74, 05, 8B, 4D, 08, CD, 29, 33, F6, 8D, 85, DC, FC, FF, FF, 68, CC, 02, 00, 00, 56, 50, 89, 35, BC, 90, 43, 00, E8, F7, 1D, 00, 00, 83, C4, 0C, 89, 85, 8C, FD, FF, FF, 89, 8D, 88, FD, FF, FF, 89, 95, 84, FD, FF, FF, 89, 9D, 80, FD, FF, FF, 89, B5, 7C, FD, FF, FF, 89, BD, 78, FD, FF, FF, 66, 8C, 95, A4, FD, FF, FF, 66, 8C, 8D, 98, FD, FF, FF, 66, 8C, 9D, 74, FD, FF, FF, 66, 8C, 85, 70, FD...
 
[+]

Entropy:
6.6015

Code size:
163.5 KB (167,424 bytes)

The file NGM.exe has been seen being distributed by the following URL.

http://platform.nexon.com//NGM/.../NGM.exe

Scan NGM.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.