home

NI License Activator.exe

NI License Activator

www.sonsivri.com

This is a setup program which is used to install the application. The file has been seen being downloaded from docs.google.com and multiple other hosts.
Publisher:
www.sonsivri.com

Product:
NI License Activator

Version:
1.1.0.0

MD5:
4996a8ee6e6d88ec1d84b6a82e3ce8c4

SHA-1:
c1bf05826cd7b06216fc67321fa6c45231c1ccc6

SHA-256:
9cff2c27f5540c58601b4615fbdcda506e031b34a4d4afe6dd85993557f861fb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 11:29:02 AM UTC  (today)

File size:
561 KB (574,464 bytes)

Product version:
1.1.0.0

Copyright:
Copyright (C) 2010 Top

Original file name:
NI License Activator.exe

File type:
Executable application (Win32 EXE)

Language:
English (United Kingdom)

File PE Metadata
Compilation timestamp:
12/11/2010 8:40:14 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:dQiYHdcZHnZqUsoP2COHKSYVEuWIRWG98rov1PLVu89EAMn:dQQ5q9ssK3VeIMG98y1PJu8KAMn

Entry address:
0x1CF380

Entry point:
60, BE, 00, 60, 54, 00, 8D, BE, 00, B0, EB, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89...
 
[+]

Entropy:
7.9261

Packer / compiler:
UPX 2.90LZMA]

Code size:
552 KB (565,248 bytes)

The file NI License Activator.exe has been seen being distributed by the following 19 URLs.

https://docs.google.com/uc?id=0B9wnQtrNl2AZS0dTNnJLVXhNZTA&export=download

http://download1191.mediafire.com/469wd9ds09yg/.../NI License Activator.exe

http://download2137.mediafire.com/uq71hkfk8y5g/.../NI License Activator.exe

https://mega.nz/persistent/.../I4420QxY

https://doc-0s-5c-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/lhd2a8nb7bf8m7c49uh2obk96r5sp441/1476424800000/10239179166110146239/.../0ByLXXu54-LGIS0NzT3phY0JhZTg?e=download

http://download2137.mediafire.com/91m818pzzytg/.../NI License Activator.exe

http://download2137.mediafire.com/kd266kzn91wg/.../NI License Activator.exe

https://www.dropbox.com/sh/c6ex82p6x5j4qf0/AACgVG1ar3zNh0tMuQHzbTtAa/.../NI License Activator.exe

https://doc-0o-b4-docs.googleusercontent.com/docs/securesc/j48smrtnktur4panolh65h6u2r3tchel/ush5knj65uaegnp86e7nom2gop8kgmov/1472774400000/11257742356429476393/.../0B9wnQtrNl2AZS0dTNnJLVXhNZTA?h=04656060410455611538&e=download

http://download2137.mediafire.com/r92nppswd2og/.../NI License Activator.exe

https://dl.dropboxusercontent.com/content_link/.../file?dl=1

https://docs.google.com/a/.../uc?authuser=0&id=0B9wnQtrNl2AZS0dTNnJLVXhNZTA&export=download

https://docs.google.com/uc?authuser=0&id=0B9wnQtrNl2AZS0dTNnJLVXhNZTA&export=download

http://download844.mediafire.com/vlccbdctibtg/.../NI License Activator 1.1.exe

https://dl-mail.ymail.com/ws/download/mailboxes/@.id==VjJ-3ZPOJ9za-XHZjCI4ADpMagbS_g5cOq52RRwWn2RzaKQtme8ZX6ShXgo46Y6n54a8ThvOwSf3J2bcSTBQuCztSw/messages/@.id==AGZVfbwAAG9CVmVVVQRdMAVuMqM/content/parts/@.id==2/raw?appid=YahooMailNeo&token=zitEzqOML3j84e6ealFTT5U7-km5qEQF52lp7AcCuBYMivDfS34way5zuFFRdkFHBRAVXRm_b94jhBD8RAduexh-J5C6LyUnkpuuSevalNc&error=https://fr-mg42.mail.yahoo.com/.../iframemsg?id=264717c3-da1b-3407-7d8b-c1eba02c2da3&ymreqid=68ab93aa-f341-9b4a-0170-1c0017010000

https://mega.nz/temporary/.../I4420QxY

http://download1097.mediafire.com/f9lsbt9429rg/.../NI License Activator 1.1.exe

http://dc524.4shared.com/download/.../ni_license_activator.exe

http://dc476.4shared.com/download/.../ni_license_activator.exe

Scan NI License Activator.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.