home

tecdemosetup.exe

Troubleshooting Electrical Circuits Demo

Simutech Multimedia Inc

This is a self-extracting archive and installer. The file has been seen being downloaded from www.google.com and multiple other hosts.
Publisher:
Simutech Multimedia Inc.   (signed by Simutech Multimedia Inc)

Product:
Troubleshooting Electrical Circuits Demo

Description:
Setup Launcher

Version:
4.10.0000

MD5:
f120ba704cf7c69457127490b2dcf76b

SHA-1:
e81045aadc6241add879d9049866c88e77603d0c

SHA-256:
22f1d338ff5def996e22b117f5a056166e62e27d24259f9cfa37ba2605ca6870

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 2:21:04 PM UTC  (today)

File size:
41.3 MB (43,338,704 bytes)

Product version:
4.10.0000

Copyright:
Copyright (C) 2006 Macrovision Corporation

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\tecdemosetup.exe

Digital Signature
Signed by:
Simutech Multimedia Inc

Authority:
The USERTRUST Network

Valid from:
2/18/2008 5:00:00 PM

Valid to:
2/18/2011 4:59:59 PM

Subject:
CN=Simutech Multimedia Inc, O=Simutech Multimedia Inc, STREET=303-1306 Wellington St., L=Ottawa, S=Ontario, PostalCode=K1Y 3B2, C=CA

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
6D5E5AEE8DE730AE22DF2F92179BE450

File PE Metadata
Compilation timestamp:
8/7/2006 11:15:56 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:glwbDJPWMMvl6eXklUirfSWNu9UDeaOj0VU9qIq1iOG5KkYgxkrjAcDI:x+vlDkKc89mOj0VU981Z0YKafDI

Entry address:
0x25CF1

Entry point:
55, 8B, EC, 6A, FF, 68, 20, 30, 43, 00, 68, 28, 90, 42, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, C0, 20, 43, 00, 33, D2, 8A, D4, 89, 15, 74, FF, 43, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 70, FF, 43, 00, C1, E1, 08, 03, CA, 89, 0D, 6C, FF, 43, 00, C1, E8, 10, A3, 68, FF, 43, 00, 6A, 01, E8, 5D, 20, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, 5B, 11, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
7.9990

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
196 KB (200,704 bytes)

The file tecdemosetup.exe has been seen being distributed by the following 6 URLs.

https://www.google.com/url?hl=en&q=https://storage.googleapis.com/simcorman.appspot.com/installers/.../TECDemoSetup.exe&source=gmail&ust=1471544093629000&usg=AFQjCNGx7OejUb3kOYcPI4YcAVmPQvmFLw

https://www.google.com/url?hl=en&q=https://.../click.zt?linkDgs=312b683e8bcbb&mailDgs=312b683e8bcb9&source=gmail&ust=1477455954840000&usg=AFQjCNFzK_CUK5lAW2aqXqWFXJQU2BJ_0g

https://www.google.com/url?hl=ar&q=http://.../TECDemo&source=gmail&ust=1462905210697000&usg=AFQjCNGPp6fUgL7tQ4Qn6LUQ757etG59UA

https://storage.googleapis.com/simcorman.appspot.com/installers/.../TECDemoSetup.exe

http://www.simutechmultimedia.com/TECDemo

http://troubleshooting-electrical-circuits.software.informer.com/.../

Scan tecdemosetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.