home

chemsk2015.exe

ACD/Installer 2014

Advanced Chemistry Development, Inc

This is a setup and installation application. The file has been seen being downloaded from www.acdlabs.com and multiple other hosts.
Publisher:
Advanced Chemistry Development Inc.  (signed by Advanced Chemistry Development, Inc)

Product:
ACD/Installer 2014

Description:
ACD/Installer application file

Version:
14.0.0.76927

MD5:
fe70c2d86df7bb5e0183f5a4adfc058c

SHA-1:
8a1953d92f91e26189aee49a9e5097e4d00bffba

SHA-256:
c2da9a1e9fb643bcfa5e799075d18c55302948b83710c535b5140c5010609387

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 7:35:02 AM UTC  (today)

File size:
37.3 MB (39,164,136 bytes)

Product version:
14

Copyright:
Copyright © ACD Inc. 1995-2015

Original file name:
SETUP.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\chemsk2015.exe

Digital Signature
Signed by:
Advanced Chemistry Development, Inc

Authority:
Thawte, Inc.

Valid from:
1/4/2015 7:00:00 PM

Valid to:
1/15/2018 6:59:59 PM

Subject:
CN="Advanced Chemistry Development, Inc", OU=ACD Toronto, O="Advanced Chemistry Development, Inc", L=Toronto, S=Ontario, C=CA

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
4538EAE5F02357E78BF4DE8445BDB752

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
786432:siKBQG3ubykw7vHrW6lSisdVsLyuvSrXux5NLAVZgsHWIdKtwUJa:sihuIyPH6oSisbubSyxD0gAOlJa

Entry address:
0x19C088

Entry point:
55, 8B, EC, 83, C4, F4, B8, 80, B3, 59, 00, E8, 30, B5, E6, FF, E8, EF, F1, FF, FF, E8, 22, 7D, E6, FF, 8B, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9874

Developed / compiled with:
Microsoft Visual C++

Code size:
1.6 MB (1,683,968 bytes)

The file chemsk2015.exe has been seen being distributed by the following 8 URLs.

http://www.acdlabs.com/download/.../chemsk2012.exe

http://download.softpedia.com/dl/a4b15c17810039ba8665bd2f33d23f1b/56e45174/100113891/software/.../chemsk2015.exe

http://download1620.mediafire.com/tmurdmb5datg/.../chemsk2015.exe

http://my2.tmu.edu.tw/.../read_attach.php?id=1427377

http://download1620.mediafire.com/7e2la0w1sbeg/.../chemsk2015.exe

http://chemsketch.software.informer.com/.../

http://download1620.mediafire.com/065h5nd9aehg/.../chemsk2015.exe

http://www.acdlabs.com/download/.../chemsk2015.exe

Scan chemsk2015.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.