home

novamind-express-5-7-4-en-win.exe

NovaMind 5

NMS Global Pty Ltd

This is a setup program which is used to install the application. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
Publisher:
NMS Global Pty Ltd  (signed and verified)

Product:
NovaMind 5

Version:
1.9.5931.0

MD5:
e3abc7b82b66bdc8b2d312fd0d695514

SHA-1:
5670673a6a071db421ebb69c0a191b8b7846f963

SHA-256:
9d273acc81e20f2a9abb5215f6c17ae5f59cd706bdc3473db49c50054c12a3fd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 12:44:08 AM UTC  (today)

File size:
13.9 MB (14,568,608 bytes)

Product version:
5.7.4

Copyright:
Copyright(c) NMS Global Pty Ltd

Trademarks:
All Rights Reserved

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\novamind-express-5-7-4-en-win.exe

Digital Signature
Signed by:
NMS Global Pty Ltd

Authority:
The Code Project

Valid from:
4/22/2010 7:00:00 PM

Valid to:
4/22/2013 6:59:59 PM

Subject:
CN=NMS Global Pty Ltd, O=NMS Global Pty Ltd, STREET=3/61 Commercial Drive, L=Shailer Park, S=QLD, PostalCode=4128, C=AU

Issuer:
CN=The Code Project Code Signing CA, O=The Code Project, C=CA

Serial number:
00E9033B386EB6A18DB2C7A0782BB391BD

File PE Metadata
Compilation timestamp:
3/22/2010 4:58:42 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:qKEcdJmU41ZQrqHTWhKBfpLWk0ShOXSNRuEaDZEm7jZ6aJCA8UgpyBZR:3EcdJc1pL6ZimEaDanrvUgpSR

Entry address:
0x82C1E

Entry point:
E8, 34, CB, 00, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 53, 56, 8B, 75, 08, 57, 33, FF, 39, 7D, 14, 75, 10, 3B, F7, 75, 10, 39, 7D, 0C, 75, 12, 33, C0, 5F, 5E, 5B, 5D, C3, 3B, F7, 74, 07, 8B, 5D, 0C, 3B, DF, 77, 1B, E8, E7, 43, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 03, 12, 00, 00, 83, C4, 14, 8B, C6, EB, D5, 39, 7D, 14, 75, 05, 66, 89, 3E, EB, C9, 8B, 55, 10, 3B, D7, 75, 05, 66, 89, 3E, EB, CF, 83, 7D, 14, FF, 8B, C6, 75, 14, 0F, B7, 0A, 66, 89, 08, 40, 40, 42, 42, 66, 3B, CF, 74, 24, 4B, 75, EE...
 
[+]

Code size:
784 KB (802,816 bytes)

The file novamind-express-5-7-4-en-win.exe has been seen being distributed by the following 4 URLs.

https://dw.uptodown.com/dwn/GZ2WO6d_eJcAbZvPSynmWVdkXyTnvocnWI55mIfKn9dshmXpTeFBgRamr5i7PL-wbX6oG4zAT8JL_4uKlEP3JuPn6LPhSXCYdLCEt8aE8E-S4LhpNxYB-RhjVb9yooj-/PUMcb5WPDG7g5v7_LN4hajbYAUfVlg6cts_h4x6YIWc0UWIy2f9TUYIzgtlvc0d0-FLad6ePU9IpkrCWxJnVlNFX5M8vBYAYHx66UMt2IxZiRFSukzs-xjjddO_Dz21n/sr8yMj_l6e07rseTydbHXLNhfBuKA7brOyyqbpznQ5NXaoBfaiLJYp1l-ubKZFF8F_aIiWiBIlpkQcAoYoFt0o-DwOhiEYjoAauBxP1mgluyhzlTw5ATIEFvosAIr1KX/.../

http://dw.uptodown.com/dwn/_HZBy42hDKgY-KwEYaFfTsSlwTTNPBBF6Tmxu6yt5OdnJsHceGL7Fmno_lYFFEhH-NkGiX-Wq9TXU4hOjtleYNNzcoLvspn8FFy3RkuRjRTisCZxQmMYSvxbFhhzt38E/Epd8p0Aw4nrM2e8_1L9wXUAz4jASDH-I9qxLDDA5xxYPgYvIWy3TsH8dBpyvE05PmZZOeAF9N8TZu8qqUVU68s6RHhuB6brxvklM5gbqR82hiLrRv2MPecFauEKeSbEX/2C6il_kxefxIDcQ6ZAnhrMf1W7SXBIQ2YxOGXswvaVihTasdODJEr6740f6wqLVqAb3FDt63ZZQE_uscKHttF8dJHNVcNOZmTGGHCTA2A2hvxTBtP72KlKfLzMvdgwYa/.../

https://dw.uptodown.com/dwn/XeKY9OraPyyENZMnwJ0wL4czYxIgRs0P6md1s4pVB6cBWN34S3anOUtVE-xPH-l9IBz7MfYMFUEnWJcskNX2Kzs--rHRntryiNJEaaNiNPfZk3OuQ6iN4ivpw6TP7YnL/q_25t38t0PRb1oHGXa9jLwa-M8gRxv8yTdL5GPEE1PIFYDBo5f85okH7JVN_4EXPNkhEJKeF1fS9DkSOeWTEa0A7-7YnYTCqLVjje_7kfFmsi4RtdMqW2urF8U_C7LAF/97fSPv6MkAWFTAYlREPBI9-kgG7ybCjbR5u5hU6vUPRvH8Bb7SadPksN5Pn-jm3xjBpi5pMoDaKUDcCDpjCUC6gINBE8ENRlH3mgweUY7KjmTBOhukKn7xIK3VPCAIiJ/.../

https://dw.uptodown.com/dwn/s__P2tPBYMzFjGTq7ioivaGReVK3zDm7WYDavofnRoqpZPKFpo26x5dSv6eW4xltiLBtSVges0EMZz6HxOZh5kUfsjnba7V7q9-vpnKceivn9zyy2M0S9Ss50MFVJm4H/dIRxJBlwlBrXGMuv9i8fbGFpcAuvT95WT4DxSpAYeImkSlrmVX59KMDMR50-9r3prR9uW8zmKpQqaPSGJxGSpyLNrUTe9Z8YLSj8nrjkz_crFYozmvaGYji3djgEMG0D/2uAHqNva5ll9-jpsSdaoBO-H47X5JReKI6bei6ps9s_7nO0S0IefmAYB8SQUesNb02ZzbvWMGCt56rcEXm0WXeBxC4XmhQGf095VAA-6fmbeJxkwysfrlKJhaMHtNhCQ/.../

Scan novamind-express-5-7-4-en-win.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.