multisim.exe

NI Downloader

National Instruments Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from www.bundletagshare.com and multiple other hosts.
Publisher:
National Instruments  (signed by National Instruments Corporation)

Product:
NI Downloader

Version:
1.0.1.168

MD5:
baafc5c4b48e93af47cedfd3e843d109

SHA-1:
75fc54180b88b5eccc6d287c74844f93040fef26

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 12:39:46 PM UTC  (today)

File size:
151.7 KB (155,368 bytes)

Product version:
1.0.1

Copyright:
Copyright © 2008-2011. All Rights Reserved.

Original file name:
Downloader.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\documents and settings\edvan\meus documentos\downloads\multisim.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
3/12/2010 9:00:00 PM

Valid to:
5/24/2013 8:59:59 PM

Subject:
CN=National Instruments Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=National Instruments Corporation, L=Austin, S=Texas, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
548C9198118FCD3764735D5F861512B1

File PE Metadata
Compilation timestamp:
1/18/2011 2:51:30 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:KK62PXJLEGlSJH/BAA92VkMSNx3mUgeslGhobQm:KKX/JLEGkJH/uNkMegeKkm

Entry address:
0x67E00

Entry point:
60, BE, 00, 70, 44, 00, 8D, BE, 00, A0, FB, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89...
 
[+]

Packer / compiler:
UPX 2.90LZMA]

Code size:
136 KB (139,264 bytes)

The file multisim.exe has been seen being distributed by the following 13 URLs.

http://www.bundletagshare.com/FL hMkUD4pnce4eKl5ZkhxnbQPIilN_H7cVggWHOjIOzWnc3O582PuSreWf1UVqRhYethvZ62QC 6YX1bs7NHzCAg7bgo169PwVp G9hvyBj9EEw01hz0oqirjAz5Y0IOr1Jcqb7ZkSRr2ADx_8LHpNGBWyoByivCk5LQ9F7bDzyhlNoSYnhI9wG8iNVPk2LAXbEnHVq-G08AAGRkm63RXBujmcgPG3DgklgW6IB2Zxv3qb_vfQnwCw3rutWzkY4FNz5fwwI1v0a bpF2skdrA_acjb_56FQzhqCuAo2IEjTLUBhCow==

http://www.filescityhost.com/lKHd3Hs_o4NC4f4KNSjd4lmSjnf0stlPlF8y5Rb5yQmSEctvqhzwcz53BIZcjkXPtuI8aiBtFIE7vny_rQIsJnmc2UgHG2OpWrt7L9p3 oazHBYlLM89NUo8CrDW7dD54ZOOLeNPQBuxyt7vGEi i0yoFlVxUCmShGTp1LKK5B5cFluo2T50n1WcdjdLRplzTJ6oDaJpj au3sQdm204pA3Qq2vRjWjGPt0QBMgfmZnAtqYDy 3CLeGgTTncjHEzyWp QPr3fH5EPrr5kReUUpRw2XokbLEzFb6qa6N fjoc5TvChCn8mCJEzD6gNcuyjOcLMU2rUegT1SCCrkwzjf9klQTP0IrF0dqCKC8S7_FJBGPEtv8RQAIsLPAHaWRK4tMmdCJtU_uzIItlSoc1D2TQIr3LcskazD5vrxK4ZHSROjl8z9nk_5Tt_AGqvRhhhI3ao4gHydX pH9iM78klYKRN7pE5YtOGn6_FdTGrtCSCX8F4mg=-G08AAGRwXmtr2yE2dUCwAQcuiWWBDmh3tnGf vvelwC_aFjXrZ6NzBKs8fkaFtT8jXbdSmeVCVHFsFyGfLiW4j o0 9AoxA0xzMMS Ak-e

http://www.signssoftwarenew.com/MiKs4yDdKwlbnWHFeGn47iRWTTsgZxSkZqOei2sVWzGERIopkhRQK3rxr_YJhjTuuqugyfie446Y8cjLQafzaS6MbQFnBoOdSyIU0oc 2 eXqf_M82LjTLxLepHB9JetznbeA0Ik6hm_73LXEsAZo40YfmyvMyFii E0WBuuEICnlIkgtWp8N8eYMR_H0XHYGU5YFEdhudJlKPYZv9pG_pcNJwwZofvW6Vt5kh_XWqNUhLNd9V75kca64bVmKtdV919E0V OyEjCzk_OwPXmtazTF77f0TncrfvQaWSW_u7y2YngmRr2uXYZWLuRt TdiSU9sjew1gFkMZZAp4HUer4yq3qekbcZpCtrSQvpn9cW2qAJD8EzXO6PxZg3e196ICkmcf99YgLZAqc0XXns455HbvWc2EGxknakqF1BPoNzxhOCv HCOKK2cp59L67iQP3BUUw_S_rqvVyedrOORODEf rUj9tYjtmUzfh90Izp8Fagy g=-G08AAGRwXmuLtxodAcAGHLgklgU6oN3Zxn3q73tfAvxCw7pu9WxkHMKNz9ewQM3fyNct5q9VlZ6Wsy1aF2uUvwFz6D5oRJRgMIYmCJQC-e

http://www.downloadscycleranch.com/DG8KFVoJisginQITHZj_J77bynayGTk3LAJAACM2ayVvd7kHdel1cMT5goO7lTmebrtIItxaRpNFX5ul6vWY5kZSXaftMOhAIeM7NERHKQ hy2E_oZjj9NLI_BGCRLvnuNL3T7x7kyuFWBi69NUVZS1xceS5jUuZ2zZHpN9pAo0zyUGxPkLJjRePNCBpT86PIUhvjJYu1alx9H4iIn0h1Bigoj_2qX5kgh4xre0R4R9Qy0H wQCw5nuhKknJk0h2cgs1VnGsSb25sApEY2RmzIsdvwmINMLuP72puHRa0uUDYMxHAXzUPj4WowAKfuqIf6fZpKqLZRjhXYfRfxdA3owaifOWOtr4DwiorLdMPJW_lp_9EUfaSSE3YlV72eRvq5t6bCsgAzpDtpjkdQavDJma8ycXFVDjL8vGYtKbo_40MrAysI0blNdoP1gZVtsqcD P_RDLOeLy1GB4MStOAAFFTgkXPvYA71kXDAGK XQs4MKKv7I=-G08AAGRgnq0tQk6AL8IGHLhEgW6DDkjDxpjnikHd3u_7JdAvuF vt lclDiENj6 9gs4_2fp9RZgbz3fCex pnPULM5_Wpnauw_MAoJTDIUiCQ==-e

http://www.cityclearflash.com/4Cw4I p7c3BagY3C7c1wSXrZ ODptrvSqxUkvMajPriCDaDYlhV17Pjq1nm0YhqarQTIwEsSlOW8gNtE6okS_Qz5QWRJJxXs8CxdibYoLoAD3FbVXrpInNoQ74_Hk_zV2URMYVnv8xLZdyRqqykNZ ipJ59xBZAGK_QpQG0Mkb14ittYh2XJDWC8GVs2WaD55P2NGstG-G08AAGTymtmw4quAdgP5btiAA5fEskAHtDvbuE_9fe9LgF84rOtWz0Zagxqfr2GBzd9E1x2U fcttc0dU1XF3NRHW0zvB5qAcI2F4pIJ

https://secure.innodl.com/.../multisim.exe

http://www.clearheartgift.com/Gi969 WBjOxgwkogbE4MYoetbB75gLtikJHtJ9g8xm685vsbZC56qowDm3Vx18lxDB9A14JTzcHLu9m9W0nWwKBzQ8zDoi7lVczXRPtZeajBw2ho4mW5MyfXVLpnsdknZ_vg_QvephVl 3W4Xn75UNephWg8OKO_GPuVNPMoVNCAQ5bRDqhUeyJh24XigRCh4Q7OKpfr-G08AAGRsXWsX8XKi1wHABhy4JJYFOqDd2cZ96u97XwL8wmFdt3o2Mk9R4_M1LLD5G 26lY3wmGhwwjf99YL l778jvEDjULQHCeQHMlR

http://www.clearheartgift.com/E2E5fzYuEVh8RpuldXkWRIMw_iWz70vqasxVTbIABCPN1oskkVZHuu_gH93PHkJ31McS_XzsD5Cc1eMQxPtn1Kdeu_rooqwuEEQdHQSKie6a3CtTai1Rbd8lbbfIFvN4tKvQ2wENavve5haQwxrIvdVf0uHpfPpdneXGm3KPuU7_ZfawtD2 axYAyCa3peGicKJdDxOH-G08AAGRgu_ea9LQmQNiAA5fEskAHtDvbuE_tea5LgF wm elHI0Mfajx egmsHor6TgF TUTohw2GO2NfyLyJci8rgEqAcEpCsZpkkQA

http://www.giftchuckleflash.com/oJmhMtSQKck49bj_twhhFXqHq_ pLGIO9npT3ePGDZ3 1ONrV2lnj2fIP3FGaeNwKX6aXYrIR8WKqF7k8AeDrKwUP6wNwW03RND_CXSpEonDzfQve6JF7EeZTcJnLirmg3xXS1RaC6v20zVml14di2qDAdV8eIQmAWBcuag_EBj8whIVPIjL_qK9VaMKBtMnxDppx1DQ-G08AAGRqXmsfpc3p 3QdAGzAgUtiWaAD2p1t3Kf vvclwC8c1nWrZyPzFDU X8MCm78Jr9v_itJi3lRvZ99zOtqhSbMkBo1PuMJSG0UM