home

nwpset16.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from noteworthycomposer.com and multiple other hosts.
MD5:
0f1fee7cb3f834447b015fa2078cec11

SHA-1:
6ddbec907c6d8912e04e27902d1dda695d4a67bc

SHA-256:
8c77c5e76c35e6c542e12ae4032cc507834bb9db83499a9210d7b1ec310b8dc4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 10:15:06 AM UTC  (today)

File size:
510.4 KB (522,663 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\nwpset16.exe

File PE Metadata
OS version:
77.10861

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
2.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:pLZCpGt0Jaw+nmjllRb1ETR3dBhcUrVCFxzGwVgsaR:jnt8atnapbMRtBjVCFxaw/aR

Entry address:
0xA0009A

Entry point:
4D, 5A, 9A, 00, 03, 00, 03, 00, 20, 00, 00, 00, FF, FF, 48, 00, FF, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 01, 00, FB, 30, 6A, 72, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 00, AA, 01, 00, 00, AE, 01, 00, 00, B2, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9952  (probably packed)

Code size:
192 KB (196,610 bytes)

The file nwpset16.exe has been seen being distributed by the following 2 URLs.

https://noteworthycomposer.com/.../nwpset16.exe

http://www.noteworthysoftware.com/.../nwpset16.exe

Scan nwpset16.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.