home

ni_circuit_design_suite_11_0_1.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from doc-08-7k-docs.googleusercontent.com.
MD5:
058dfab7e19e3b2cc01bd1fe64199899

SHA-1:
4cc6023b29d7b8c5efb0b7445b4bc05f1d5e32a4

SHA-256:
ec15ced7db2a5aeb73bc8ba052ebf52b1bf50760b47392e509326cc7fb277f63

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 12:31:54 AM UTC  (today)

File size:
438.6 KB (449,120 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\ni_circuit_design_suite_11_0_1.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
12288:esiBNRKgLKrCIVM+cOBzFOVOzxSi9hAYlV:esULKrA+JQvi9hASV

Entry point:
0F, EA, AE, BD, C6, 61, 82, ED, 4A, B9, C5, 94, 28, 68, 64, 7D, F1, 01, 8B, 82, 1D, AD, 99, 7D, 52, A1, 57, 68, 26, 6E, 66, 6F, C5, 83, FA, 46, 7F, E5, BA, CB, 53, 82, 49, 1D, CE, B3, 0E, A1, 4F, 7F, 66, CF, 74, 9C, 34, D5, 29, 1D, 74, 6E, 3E, C4, CC, 22, 7A, BE, 0E, 3D, BA, C0, 58, 95, EF, 69, 5D, DB, AF, C3, 01, D1, 7A, D8, 5F, B6, C2, D9, E0, 06, 8E, 16, 55, F7, 36, E1, D9, 74, D2, 91, 5D, E5, 0B, 21, F2, 69, B4, 8D, 31, C4, 30, 4D, 46, 8B, 98, AD, 1B, 25, 49, 22, 07, D9, E5, 90, A5, 5B, 21, 94, 4E, CB...
 
[+]

Entropy:
7.9346  (probably packed)

The file ni_circuit_design_suite_11_0_1.exe has been seen being distributed by the following URL.

https://doc-08-7k-docs.googleusercontent.com/docs/securesc/4jvdeff8j0dopu7cdfrej0bj37vqsu0r/u07pgev6i4m918nid87kvkv0bne403so/1463464800000/.../08846230977067622976/0B7d49qv5gUGRWGU1NEpJeHlJcm8?e=download

Scan ni_circuit_design_suite_11_0_1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.