chemsk12.exe

ACD/Installer

Advanced Chemistry Development Inc.

This is a setup and installation application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Advanced Chemistry Development Inc.

Product:
ACD/Installer

Description:
ACD/Installer application file

Version:
12.01.0.31258

MD5:
4cf42176c743890739b1350f67456a8a

SHA-1:
4364c30cb6496404e672c179475fd0f6ad636323

SHA-256:
7c2f79c1eaa8fd3f65f28c1ff6d27d5d709e7041a29dcba2859d192e3e113d7c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 11:40:00 AM UTC  (today)

File size:
39 MB (40,879,952 bytes)

Product version:
12.0

Copyright:
Copyright © ACD Inc. 1995-2009

Original file name:
SETUP.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\evernote\evernote\databases\attachments\chemsk12.exe

File PE Metadata
Compilation timestamp:
6/20/1992 6:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
786432:F6oa8bmAsdxC/pZUDhp9qbscD899jHk62o6RXoVjtMJScf9owJaOGxLnH:goa8bmZTCcDhp9qbDS5DVjtMJSkCwQ7H

Entry address:
0x108E94

Entry point:
55, 8B, EC, 83, C4, F4, B8, 3C, 86, 50, 00, E8, AC, E1, EF, FF, E8, 9F, F6, FF, FF, E8, F2, AD, EF, FF, 8B, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9934  (probably packed)

Code size:
1 MB (1,081,344 bytes)

The file chemsk12.exe has been discovered within the following program.

ClustalX2  by University College Dublin
www.clustal.org
About 1% of users remove it
 
Powered by Should I Remove It?

The file chemsk12.exe has been seen being distributed by the following 48 URLs.

http://gsf-cf.softonic.com/436/4c3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64469&instance=softonic_fr&type=PROGRAM&Expires=1485412400&Signature=SHuP1QgNYRlgUfurQ3TT3j37Lw6kCPkD~yFeb7W6UDatR08zezhOYn7wcsDJmjAQY-uCIGXEjc3fsk5kvxb6~cAssU0xqtXiVyuRRlhedRt13HENKb58P8oGSI4ZIkZKmeKNg--kU3hOuyyqMqsTuvDBd~7nb2EuiEfUv-67dYg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=chemsk12.exe

http://www.kirp.chtf.stuba.sk/moodle/mod/.../view.php?id=21317

http://gsf-cf.softonic.com/436/4c3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64469&instance=softonic_fr&type=PROGRAM&Expires=1487670336&Signature=PUEqKapvxHGKOlgtv5AC2fFc3Sfn27vPvWeiT7QhFqoBi~aBqLfVOCrnUUTWqI6E3-KPF9C3I~fxMxkvtWfI0DjIM75ifSp2YOKoXjmz5NzBNgnk9mCH7QN8yhwtJFoN97nHdl5rHU5cHleIxPbWCS1YKoWwYr9OTyBXVgVhLtk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=chemsk12.exe

http://gsf-cf.softonic.com/436/4c3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64469&instance=softonic_fr&type=PROGRAM&Expires=1478462018&Signature=Nxw1yZs2Tb52DYbK-5hTgU~9kFshp9TRcxg2DUu2Tqci7UoGXhVLC6hSZrbKwybtZkhI4NNEs~ML-OLE8BN6ujbw3bME~obz4VBV9Gj6a5BsgrKcVO4LFTtgZwmmB~lNYhKp2SS~j-1a3veEclFhX9e13B~hpuMkjrTXn8bQ7tQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=chemsk12.exe

http://gsf-cf.softonic.com/436/4c3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64469&instance=softonic_fr&type=PROGRAM&Expires=1447387881&Signature=OP568Vi-sFLJKhTP1OwYjbnBGOYgdlB2qXRBKKgZLA~4Kl0NTNFxi3bAB~rGvPe4ioMtcl7pt8AKesOdG78hemneL5W1OdnVvA4Vvmo9rWswLACuJJ-l6Pa382Gl5cUTfet8p07635mHCf2HFHnxa79C7OGU71fqoswdLq06KzM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=chemsk12.exe

http://chemsketch.soft32.com/goto/file/id/.../?iframe=true&width=420&height=200&javascript=true&no_download_manager=1

http://gsf-cf.softonic.com/436/4c3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64469&instance=softonic_fr&type=PROGRAM&Expires=1479252507&Signature=HKmH8cr~0f3qns-ga~o8iBTDM-QRdy7pBK0z3NDNeRsQ0EgZSnNCfqqfEVaz7Igvi-mKPJPLWsuwALELTvwD7TI-lAtjNvILsPgJAHyJjVZqaXFV1NfQPU3B6gAVaus2kwi3nug2Lf5aMIxWKtnU5YYCRjuIwD-wlXev007GOW8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=chemsk12.exe

https://files.vklass.se/7C9B01D9-DC3D-47BE-A6D3-5ECCC69BD0DF.exe

http://gsf-cf.softonic.com/436/4c3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64469&instance=softonic_fr&type=PROGRAM&Expires=1433629995&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=NvFhW3lTObFcoxu4lI7mi2t7zhTWf7D1DI49mDi-a4SxeUT7KGl4I99Nf8UWCJnwJysd2jWfDZ2U9EmTl8mqZKN0WBJZiuWKXbwHD15bh5fjR3NRsMT6h~m1wpz~qI7ViukJK2L8cFjAs5EK8DleN6MYcKK3qkI~xyA5t-Iz7N8_&filename=chemsk12.exe

http://files.downloadnow.com/s/software/13/45/78/.../chemsk12.exe

http://gsf-cf.softonic.com/436/4c3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64469&instance=softonic_de&type=PROGRAM&Expires=1478589010&Signature=ST15eiu1AG181S6RcQhJRzcca37Krc9Jh~q-fF-NSYgMvvQZIIdBytDgcZsMx8-Z0WVjPqMDIGSDq3bg8kcX36OKLKXrNx0UiIWKlvUeuD5UB5Haulm84UXVBBLEQhO1VEmg6BzkPz70xYXjhHim0FGR3uyptcoypFjCPqNYrCs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=chemsk12.exe

http://gsf-cf.softonic.com/436/4c3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64469&instance=softonic_fr&type=PROGRAM&Expires=1447144094&Signature=YYwU6QfmuDyW-h4t5ZCotbYEmTEIhx3AfQatFasrzYwAJwfPcKm7RHDX8u0fPSDISpi3DiAQeJ5xvZOcUWw69v88HGeHIXHLYu3TPbHG0ZQp79LTypxXSq3-gjFLQyxYiPGcoEA8ffzvks3jjv1zCLjwyRgbmjy1OuP0zrQIbD4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=chemsk12.exe

http://download878.mediafire.com/tyo7dp8b3mrg/.../chemsk12.exe

http://chemsketch.soft32.es/get/file/id/.../

http://gsf-cf.softonic.com/436/4c3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64469&instance=softonic_fr&type=PROGRAM&Expires=1452073093&Signature=N4Bqlmvd6eRkCP7V1Wg899JotdhmUcsAL9mwdUCvNLyGoR3aXwgbFeuKSla~wkVjDLhazHDuXLidHNCZkVE981LOYT0bqg77RyesCyOdmM-Cl6-FK3y1HFWspzINjNcbYX1NQfc~hB-3F4uOvfUR309yeZWbTmZa9XzkF~~en58_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=chemsk12.exe

http://global-shared-files-l3.softonic.com/436/4c3/.../file?nvb=20150121230456&nva=20150122110556&token=0cd8c86cafc4e93f21d28&SD_used=0&channel=WEB&fdh=no&id_file=64469&instance=softonic_fr&type=PROGRAM&filename=chemsk12.exe

http://gsf-cf.softonic.com/436/4c3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64469&instance=softonic_fr&type=PROGRAM&Expires=1478940692&Signature=FIQc1EYdwX28YCeZuxMW8yYmUzdWqsJ1uvCx75kZkx43c7GggseJqsFXoo-YEsxEvbzzmGd~-yml-OyxiA4utGqoc0oByxrpdFq59K-3ewTGwyBOWN6vfG033V2PwINZnumC83BzYe8PKbwm6xhluFo7pGfunOsxdVxG6j~lhGg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=chemsk12.exe

http://gsf-cf.softonic.com/436/4c3/.../file?SD_used=0&channel=WEB&fdh=no&id_file=64469&instance=softonic_fr&type=PROGRAM&Expires=1474687773&Signature=haBOF4lzRhHbFoE~92RPPo-4A1eFQmii0l~GTMgi-z9Jj85WdoiCwn1XljCwQFSH4QQkYfxHGyW0f1yFtX3GcX6TsB7mwhSHOSIjvAScDclZOrntnbanfOngVtii4PGLA2fvpEH0AS18c~p3L3~nDgaW2p4c0yrnhdXglobk2t4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=chemsk12.exe

http://download.s32cdn.com/41/404911/.../chemsk12.exe

https://d1ob5g40gc5b6g.cloudfront.net/41/404911/.../chemsk12.exe

Latest 30 of 48 download URLs

Scan chemsk12.exe - Powered by Reason Core Security