avc-free-upgrade.exe

Anvsoft Inc.

This is a setup program which is used to install the application. The file has been seen being downloaded from www.any-video-converter.com.
Publisher:
Anvsoft Inc.  (signed and verified)

MD5:
032463778cc73c5694473cf1757ac2ab

SHA-1:
7ea930a7455d5ebf2e2924aeeb21047711044310

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 12:03:22 PM UTC  (today)

File size:
41.5 MB (43,475,163 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Documents and Settings\{user}\Local settings\temporary internet files\content.ie5\{random}\avc-free-upgrade.exe

Digital Signature
Signed by:

Authority:
COMODO CA Limited

Valid from:
10/30/2014 7:00:00 AM

Valid to:
10/30/2016 6:59:59 AM

Subject:
CN=Anvsoft Inc., O=Anvsoft Inc., STREET=1706 Overseas Chinese Venture Bldg., L=Shenzhen, S=Guangdong, PostalCode=518057, C=CN

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00C8DFA6D1F2E129D329AB37C4C454DA9A

File PE Metadata
Compilation timestamp:
2/25/2012 2:19:59 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
786432:C/OGzUSZws5QkWlQZgDTJNQo9nV2YRGsGq9yLmRwFnIPH3rVnhh:2OGisiOC7Qo9VDGk//3r1v

Entry address:
0x39E3

Entry point:
60, E8, 00, 00, 00, 00, 5B, 81, EB, D0, 48, 1F, 01, 83, EC, 74, 8B, EC, 8B, 83, AB, 4B, 1F, 01, 89, 45, 00, 8B, 83, B3, 4B, 1F, 01, 03, 45, 00, 89, 45, 2C, 8B, 83, B7, 4B, 1F, 01, 03, 45, 00, 89, 45, 30, C7, 45, 14, 00, 00, 00, 00, C7, 45, 18, 00, 00, 00, 00, C7, 45, 1C, 00, 00, 00, 00, 8B, 45, 14, FF, 45, 14, 66, 33, C9, 8A, 8C, 03, FF, 4B, 1F, 01, 84, C9, 74, 7A, 8B, 45, 1C, 66, 01, 4D, 1C, 03, C3, 05, 13, 4C, 1F, 01, 50, 8B, 45, 2C, FF, 10, 85, C0, 0F, 84, 5E, 02, 00, 00, 89, 45, 10, 8B, 45, 1C, 03, C3...
 
[+]

Entropy:
7.9999

Packer / compiler:
ASPack v1.08.04

Code size:
28 KB (28,672 bytes)

The file avc-free-upgrade.exe has been seen being distributed by the following URL.

Scan avc-free-upgrade.exe - Powered by Reason Core Security