home

setup_nwc2_demo.exe

NoteWorthy Composer 2

Noteworthy Software, Inc.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Noteworthy Software, Inc.  (signed and verified)

Product:
NoteWorthy Composer 2

Description:
NoteWorthy Composer 2 Installer

Version:
Demo Version 2.0

MD5:
de07f4c573a58729b3026db3bd8be79e

SHA-1:
b1319b488d45c2a445a0202962d0a158d4911ebd

SHA-256:
eea762c419022733006828de4fdec45ecd8757e7183a5ce7cd8d8dca1bb5b6d7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 5:48:28 AM UTC  (today)

File size:
989 KB (1,012,704 bytes)

Copyright:
© 2008 Noteworthy Software, Inc. All rights reserved.

Trademarks:
NoteWorthy Composer is a trademark of Noteworthy Software, Inc.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\Program Files\noteworthy software\noteworthy composer 2\setups\setup_nwc2_demo.exe

Digital Signature
Signed by:
Noteworthy Software, Inc.

Authority:
The USERTRUST Network

Valid from:
9/3/2008 1:00:00 AM

Valid to:
9/4/2011 12:59:59 AM

Subject:
CN="Noteworthy Software, Inc.", O="Noteworthy Software, Inc.", STREET=PO Box 995, L=Fuquay-Varina, S=North Carolina, PostalCode=27526-0995, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
53C6388B8C9E199DB4D7E1E81B62B3DF

File PE Metadata
Compilation timestamp:
2/17/2007 12:48:39 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:/fGZi9cokiin6sv5H732l6+ZgG7Nrldn8SPxugC+2CLnmE:HIi9cokiijH6l6CgG7F38SP++2CaE

Entry address:
0x312C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 14, 40, 92, 40, 00, 33, F6, C6, 44, 24, 10, 20, FF, 15, 30, 70, 40, 00, 53, FF, 15, 74, 72, 40, 00, A3, F0, 47, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, F8, FC, 41, 00, FF, 15, 5C, 71, 40, 00, 68, 30, 92, 40, 00, 68, 40, 3F, 42, 00, E8, 31, 28, 00, 00, FF, 15, B4, 70, 40, 00, BF, 00, A0, 42, 00, 50, 57, E8, 1F, 28, 00, 00, 53, FF, 15, 0C, 71, 40, 00, 80, 3D, 00, A0, 42, 00, 22, A3, 40, 47, 42, 00, 8B, C7, 75, 0A...
 
[+]

Entropy:
7.9896

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file setup_nwc2_demo.exe has been seen being distributed by the following 15 URLs.

http://gsf-cf.softonic.com/b13/19b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10887&instance=softonic_es&type=PROGRAM&Expires=1465108558&Signature=TkgA~UnKCEgV2XMYSHjmu7KO6dLFpI5nE73a-~WmVaXnX4gdi4CoaaF6~6XtuzqIvtk0OhnrXXy5qsNMHLri-3oL~5AydF94NjeyBsOLsWp3eG4kKYQN3vu1vQbKZdD6ro-8OmciDBbWrtTNQX9bDLEgfm~tjl94pGgNaHtxuO8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_nwc2_demo.exe

http://gsf-cf.softonic.com/b13/19b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10887&instance=softonic_fr&type=PROGRAM&Expires=1486010785&Signature=MKFP5nBFxdCIZUYwMMvVYwhJlVK858Kmaa0J9wD3WLkyMFNq3NHBIYWJHXpOssa4-Pklgn~15srpK2klakozBDN2kUDBCV2xZYUe~UnG06FBE4KQE6xsOeYsGen6nk06QN817kaMEACVMgSTvLNI9Pgi3MjEr6wWsMExHjWRh2w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_nwc2_demo.exe

http://gsf-cf.softonic.com/b13/19b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10887&instance=softonic_es&type=PROGRAM&Expires=1477261772&Signature=WdBzCrjg4gfy9a6DGJ7WEd~E4M684oYc0~0jSeqFmDRE6~KD6HAGZpglA3NQaaTF-Sg8rN1Ig3rN0xy0GzWC7S4zA00yo6izH6oX1swCHTJXD6WS~9UnFFn-2Suuglgv-kOHxOPm0YHfXVKOLbi1XHhilP19YM5b-yH5vbjK~Hw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_nwc2_demo.exe

http://gsf-cf.softonic.com/b13/19b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10887&instance=softonic_es&type=PROGRAM&Expires=1477397967&Signature=daYDk8X6hwf3FYvMaKB4wEcMMevAlfDofW062ew-R-93CI7SXGkwe1M9BOp~rIqVzQk2Re-irr5ol~3u6jgvXZMdxiBm8cetRUdUdJPWEAan2wAna2jqDbcutlaRs9tnsHNOFq0r4AnH8oMw7jlqri~xjK3rd1Z~noUxuCNbNtI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_nwc2_demo.exe

http://gsf-cf.softonic.com/b13/19b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10887&instance=softonic_es&type=PROGRAM&Expires=1476964053&Signature=VG2j4o1MOWYEq8kr3seTIdDwXzbzaILhf0-Te5rE2n9mT6SrFtQiam2a2amieOcmU-T8SXoRs9WdwQPUypkjaAoziKJLst53HBg2CI1OvgU1Y~W9tQju-Zmi72Wi3n6L4WocFKanhFktmnsZh1aqOqRI2gmOZ6Xtr2EihXH0kqQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_nwc2_demo.exe

http://gsf-cf.softonic.com/b13/19b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10887&instance=softonic_es&type=PROGRAM&Expires=1426166516&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Gw2CfCS0lfD5oVb0JeIhS-Yxq6GwdcRPsuIMnn6Tom9Vsavn3wKgQs5mvo4WvviitUq-okTyyziKg~Wl~y5J5jYHMNk2bW4O18yYUXn3oRmcfDK3tiws5hNLCV2hOGGTzGL-M5CGkW0b6iL7K16zBXWdCrTZy9cojaRpnpBIZpI_&filename=setup_nwc2_demo.exe

http://down01.waxoo.com/descargando/024/4067/noteworthy-composer/.../noteworthy-composer.exe

http://gsf-cf.softonic.com/b13/19b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10887&instance=softonic_es&type=PROGRAM&Expires=1458989885&Signature=HdLMDi9BrXHpMU1LQyTZTm56SU6Qvzd6Wn0hDddFTt7ml6wute6Uh7fZpQ61RLTnoaW82IMOed-q47bHc7~z9ACcBiaMri0SOW646fxPmX9UOeNFZui1a6hF8CzSmAxfYVZAuEglJZO9~s7tSPYxY9f9fZVOqjxihGFIwBpfDVc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_nwc2_demo.exe

http://down01.wxsrv.com/descargando/024/4067/noteworthy-composer/.../noteworthy-composer.exe

http://files.downloadnow.com/s/software/40/73/.../setup_nwc2_demo.exe

http://gsf-cf.softonic.com/b13/19b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10887&instance=softonic_es&type=PROGRAM&Expires=1446063951&Signature=LhQj~YKaLYiL0AQutkdMyZMhmPvluEn1jQCuKaMmvA4yjvmNPNPFLiFQ5I9CUxoQxwOFxx1M2fUN5xlE9qb~4aCKcd2RGUHS-6xc~svALVK8Qe0tBHftBHqupRUnxxkeSD8wvca46UwvPeGzwdzfeSapyIPgpQeDb41oK5f~doM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_nwc2_demo.exe

http://gsf-cf.softonic.com/b13/19b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10887&instance=softonic_es&type=PROGRAM&Expires=1455019099&Signature=eUKPw0Ls17bJuOFVacuGZtZgJYFAHXsO55z0a4AvrohfR7p3fklWdFFlebkRhaau~IOJ8a4IpAoMkKxmrO3q4HJRYXe2phPqFaTW4-2~TKjDlbbX~-kCnonFoxJhIweU3kk3DQEI56Q-2TpiKVAwEFzBHY5ZxSuo3oiesotOFeI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=setup_nwc2_demo.exe

http://gsf-cf.softonic.com/b13/19b/.../file?SD_used=0&channel=WEB&fdh=no&id_file=10887&instance=softonic_fr&type=PROGRAM&Expires=1434937943&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=SvgG-8iol~db~MInQAJAafmWqXWlHm1fViwWr666lLRaXMUZE1RWIpAfEpsa9y3wtE0X5QTU62FRs~qk6rTShQLWWg0UAwgF7WL2i2rug1ul-CvOJ1LUQKM-sS66liRQodvmfTCCymZPdyvQYqywxRvk5DauwjR7Fz48jR9pWp4_&filename=setup_nwc2_demo.exe

http://z.track351.com/dl/?z=1156&c=23583&name=NoteWorthy Composer&file=http://www.noteworthysoftware.com/.../setup_nwc25_demo.exe

http://software-files-a.cnet.com/s/software/40/73/.../setup_nwc2_demo.exe

Scan setup_nwc2_demo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.