» avc-free.exe
Overview
Analysis
File Details
Programs (2)
Downloads (7)

avc-free.exe

Any Video Converter

AnvSoft Co., Ltd.

This is a setup and installation application. The file has been seen being downloaded from www.filehippo.com and multiple other hosts.

File name:

avc-free.exe

Publisher:

Any-Video-Converter.com (signed by AnvSoft Co., Ltd.)

Product:

Any Video Converter

Description:

Any Video Converter Setup

Version:

5.5.6

MD5:

8655439fe974d2d2440d14d21d71c152

SHA-1:

d4125c286d1bac3567149a60561eee7793ca90b0

SHA-256:

ecaaf8b69cd966ba11e860699cd70a2a7ced1e2c6f2d0d5ad5a798f853f25386

Scanner detections:

3 / 68

Status:

Inconclusive (not enough data for an accurate detection)

Analysis date:

11/25/2024 4:51:39 PM UTC (today)

Scan engine

Detection

Engine version

Emsisoft Anti-Malware

JS:Trojan.Script.WF

8.14.03.22.11

ESET NOD32

Win32/OpenCandy

8.9535

Trend Micro House Call

TROJ_GEN.F47V0228

7.2.81

File size:

29.9 MB (31,380,056 bytes)

Product version:

5.5.6

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\avc-free.exe

Digital Signature

Signed by:

AnvSoft Co., Ltd.

Authority:

VeriSign, Inc.

Valid from:

6/15/2012 2:00:00 AM

Valid to:

8/15/2014 1:59:59 AM

Subject:

CN="AnvSoft Co., Ltd.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="AnvSoft Co., Ltd.", L=Shenzhen, S=Guang Dong, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

765E3E079F21928954D8BEC66D023B52

File PE Metadata

Compilation timestamp:

10/13/2013 10:19:32 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

786432:kvWHppIaLLE5uEFOhbQj0wUVyApJYa2+V6VjVj0:kuHlPYFcQmy8xZV6RVY

Entry address:

0x113BC

Entry point:

55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86... 
[+]

Entropy:

7.9997

Developed / compiled with:

Microsoft Visual C++

Code size:

63.5 KB (65,024 bytes)

The file avc-free.exe has been discovered within the following programs.

360Amigo System Speedup Free by 360Amigo

360Amigo is registry optimizer. 360Amigo System Speedup bundles a branded version of the Conduit Toolbar, designed to deliver search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar (on by default).

www.360amigo.com

53% remove it

ASUS Wireless Router RT-AC66U Manuals by ASUS

8% remove it

The file avc-free.exe has been seen being distributed by the following 7 URLs.

http://www.filehippo.com/download/file/.../

http://fs31.filehippo.com/6348/.../avc-free.exe

http://www.filehippo.com/fr/download/file/.../

http://www8.any-video-converter.com/avc-free.exe

http://sp.any-video-converter.com/avc-free.exe

http://www.any-video-converter.com/avc-free.exe

Scan avc-free.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.