home

notationmusician263trialsetup.exe

Windows Internet Explorer

Notation Software Germany

This is a self-extracting archive and installer. The file has been seen being downloaded from www.notation.com.
Publisher:
Microsoft Corporation  (signed by Notation Software Germany)

Product:
Windows® Internet Explorer

Description:
Win32 Cabinet Self-Extractor

Version:
10.00.9200.16521 (win8_gdr_soc_ie.130216-2100)

MD5:
7a926378dd3a68e71fc1c83065354c45

SHA-1:
3042619a394e5ceb79115f36a16b99c206d6c0c8

SHA-256:
6594ba2503e9068a1720e3420bc127e85facbde7ca5f55a664c429e5120c3401

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
7/13/2025 6:05:28 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
TROJ_GEN.F47V1128
7.2.363

File size:
8.5 MB (8,863,928 bytes)

Product version:
10.00.9200.16521

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
WEXTRACT.EXE .MUI

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\notationmusician263trialsetup.exe

Digital Signature
Signed by:
Notation Software Germany

Authority:
COMODO CA Limited

Valid from:
8/21/2013 3:00:00 AM

Valid to:
8/21/2016 2:59:59 AM

Subject:
CN=Notation Software Germany, O=Notation Software Germany, STREET=Eduard-Thoeny-Str. 6, L=Utting am Ammersee, S=Bavaria, PostalCode=86919, C=DE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
3144A30A168EE187921395826A488259

File PE Metadata
Compilation timestamp:
2/17/2013 9:00:50 AM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
196608:2YsM8xhGZPN1zzJZ4Mbd/6YiP0dzKP+Zw3tTLirgi:21TbClVVGO6VPyGGZGtTLiT

Entry address:
0x6926

Entry point:
E8, 06, 08, 00, 00, E9, 0D, FE, FF, FF, CC, CC, CC, CC, CC, 3B, 0D, 00, 80, 40, 00, 75, 03, C2, 00, 00, E9, 05, 00, 00, 00, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 81, EC, 24, 03, 00, 00, A3, 20, 87, 40, 00, 89, 0D, 1C, 87, 40, 00, 89, 15, 18, 87, 40, 00, 89, 1D, 14, 87, 40, 00, 89, 35, 10, 87, 40, 00, 89, 3D, 0C, 87, 40, 00, 66, 8C, 15, 38, 87, 40, 00, 66, 8C, 0D, 2C, 87, 40, 00, 66, 8C, 1D, 08, 87, 40, 00, 66, 8C, 05, 04, 87, 40, 00, 66, 8C, 25, 00, 87, 40, 00, 66, 8C, 2D, FC, 86, 40, 00, 9C, 8F, 05, 30...
 
[+]

Entropy:
7.9961  (probably packed)

Code size:
25.5 KB (26,112 bytes)

The file notationmusician263trialsetup.exe has been seen being distributed by the following URL.

http://www.notation.com/.../NotationMusician263TrialSetup.exe

Scan notationmusician263trialsetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.