» ACDWiff.exe
Overview
Analysis
File Details

ACDWiff.exe

ACD/Wiff Servers installer 2012

Advanced Chemistry Development Inc

File name:

ACDWiff.exe

Publisher:

Advanced Chemistry Development, Inc. (signed by Advanced Chemistry Development Inc)

Product:

ACD/Wiff Servers installer 2012

Description:

Wiff Servers installer

Version:

14.0.0.51083

MD5:

62eeaa6cae105aef866fe28a254301d1

SHA-1:

ffa66000d59e2b3b58dce21541c28d08639867c7

SHA-256:

c0a27a9faba4ca5ad19703c397df3fb696d2e14b33409bd1ce953c1ac4e613c1

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 7:46:42 AM UTC (today)

File size:

538.7 KB (551,608 bytes)

Product version:

Original file name:

ACDWiff.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\acd2012\smfilter\analyst\acdwiff.exe

Digital Signature

Signed by:

Advanced Chemistry Development Inc

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

3/25/2009 2:18:34 AM

Valid to:

3/24/2012 2:18:34 AM

Subject:

CN=Advanced Chemistry Development Inc, OU=ACD Toronto, O=Advanced Chemistry Development Inc, L=Toronto, S=Ontario, C=CA

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

218518C2F7E9DA220654EFAE024B9E1E

File PE Metadata

Compilation timestamp:

6/20/1992 8:22:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

12288:Xc9pfepqI14N4DQFu/U3buRKlemZ9DnGAe1JEDj+y1R/s33Is49wEiAhtrX5UjvA:Xcpfe11JOj+I9wJAHNUjvTYp

Entry address:

0x72A8C

Entry point:

55, 8B, EC, 83, C4, B8, 33, C0, 89, 45, B8, 89, 45, BC, 89, 45, C8, 89, 45, D4, 89, 45, D0, 89, 45, CC, 89, 45, F0, 89, 45, DC, 89, 45, D8, B8, EC, 26, 47, 00, E8, 8B, 3C, F9, FF, 33, C0, 55, 68, 9D, 2C, 47, 00, 64, FF, 30, 64, 89, 20, E8, E4, 00, F9, FF, 83, E8, 01, 72, 0B, 0F, 84, F2, 00, 00, 00, E9, 87, 01, 00, 00, A1, C4, 57, 47, 00, BA, B4, 2C, 47, 00, E8, BD, 18, F9, FF, E8, E3, 33, F9, FF, A1, C4, 57, 47, 00, BA, D4, 2C, 47, 00, E8, A9, 18, F9, FF, E8, CF, 33, F9, FF, A1, C4, 57, 47, 00, BA, 0C, 2D... 
[+]

Entropy:

6.3778

Developed / compiled with:

Microsoft Visual C++

Code size:

455.5 KB (466,432 bytes)

Scan ACDWiff.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.