home

Setup.exe

Nexon Game Manager

NEXON Korea Corporation.

This is a self-extracting archive and installer. The file has been seen being downloaded from mmdzz.playnow.samplefireman.eu and multiple other hosts.
Publisher:
Nexon  (signed by NEXON Korea Corporation.)

Product:
Nexon Game Manager

Version:
1, 0, 1, 20795

MD5:
850cc1f57702650bd3eeab04b26311ca

SHA-1:
ad8fa0ddae744f636cc236b098d070a42f0abfd1

SHA-256:
fab75bd17d47cd9df8f286e8c3f03ce9c7257d0488ecec4b3c2cb7c0a965cec0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/28/2024 4:53:40 PM UTC  (today)

File size:
3.6 MB (3,754,328 bytes)

Product version:
1, 0, 1, 20795

Copyright:
(c)Nexon Corporation. All rights reserverd.

Original file name:
NGMSetup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
NEXON Korea Corporation.

Authority:
VeriSign, Inc.

Valid from:
1/16/2013 2:00:00 AM

Valid to:
1/17/2016 1:59:59 AM

Subject:
CN=NEXON Korea Corporation., OU=IT engineering Team, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=NEXON Korea Corporation., L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1471D2BA4957C042096673E3D3B47932

File PE Metadata
Compilation timestamp:
7/15/2013 8:17:49 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
49152:a8ATmpm3vD41fZxxAwmKU8BXSvIgTy1JkS8TnqAwmKU8BXSvIgTy1JQvD41fZxr9:awm741f6wmiXSvTtwmiXSvb41fnmYFj

Entry address:
0x6AB2

Entry point:
6A, 60, 68, 38, 2B, 41, 00, E8, 72, 04, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, 16, E8, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, 98, F0, 40, 00, 8B, 4E, 10, 89, 0D, 4C, 65, 41, 00, 8B, 46, 04, A3, 58, 65, 41, 00, 8B, 56, 08, 89, 15, 5C, 65, 41, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 50, 65, 41, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 50, 65, 41, 00, C1, E0, 08, 03, C2, A3, 54, 65, 41, 00, 33, F6, 56, 8B, 3D, 70, F1, 40, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v7.0

Code size:
56 KB (57,344 bytes)

The file Setup.exe has been discovered within the following program.

Pinnacle Game Profiler  by PowerUp Software
Publisher's description - “Pinnacle is a software program that enables you to play your favorite games with any gamepad, joystick, or other type of game controller. Pinnacle comes preconfigured for most popular game titles and gamepads, which means setup is quick and easy.”
pinnaclegameprofiler.com
9% remove it
 
Powered by Should I Remove It?

The file Setup.exe has been seen being distributed by the following 5 URLs.

http://mmdzz.playnow.samplefireman.eu/AIRsoftwareupdatercpaCA.html

http://www.fraps.com/.../setup.exe

http://www.murgee.com/auto-clicker/.../setup.exe

http://www.official-drivers.com/setup.exe

http://ngm.nexoneu.com/cbangm/NGM/.../Setup.exe

Scan Setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.