avc-free.exe

Any Video Converter

Any-Video-Converter.com

The application avc-free.exe, “Any Video Converter Setup ” has been detected as a potentially unwanted program by 3 anti-malware scanners. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars.
Publisher:
Any-Video-Converter.com

Product:
Any Video Converter

Description:
Any Video Converter Setup

Version:
3.0.5

MD5:
f40c7bf30dcc82726f5cddc0fbf08a96

SHA-1:
eec1420bb439bfe873722df2840df2c9efaae405

SHA-256:
ea4690c6e9f92693d0946a4d73636a4256a31d4949b2ecf41a0d2b3c3e97f05c

Scanner detections:
3 / 68

Status:
Potentially unwanted

Explanation:
Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:
1/13/2025 8:05:24 AM UTC  (today)

Scan engine
Detection
Engine version

Baidu Antivirus
Adware.Win32.OpenCandy
4.0.3.14326

ESET NOD32
8.9376

Reason Heuristics
PUP.OpenCandy.Installer (L)
16.11.29.13

File size:
16 MB (16,822,223 bytes)

Product version:
3.0.5

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\avc-free.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:quVUW8jlyNdMi3T607I21Ed4ls2YBhxk18Bh0JvC:quVpswz3T60UgEdnBhyOfEC

Entry address:
0x9B24

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, A2, 95, FF, FF, E8, A9, A7, FF, FF, E8, D4, C9, FF, FF, E8, 1B, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, DB, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, A4, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 04, D0, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 53, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file avc-free.exe has been seen being distributed by the following 16 URLs.

http://s10612.chomikuj.pl/File.aspx?e=sPCy8qxLHBqsdvyoClJVLbh38aBEfwERRPWT90KuXhIO9CAmDdJLONjU4AaZ8G0N6DT62cme6YJuq5xWOnlgrgxZ6-dIz995pXeR8tVDlE1AVlB7ESmXZ6lFwM9Ye2HSepMN5QAQ7S2PUoDzF__JG7dD1ElgS6OWk3vh15OcYFk&pv=2

http://s7899.chomikuj.pl/File.aspx?e=sPCy8qxLHBqsdvyoClJVLbh38aBEfwERRPWT90KuXhI0Am00xLE3ea2L8PNa-A0LqZwNDdXwpVArdXRYb1R2BvVKOwk26g3amgBZqBDaoRVNT37uPrEx2WZ1pnUqCF2ho9iC5VYork3nbtzUWHP10pAp0u32zW8S9fTO6XrirkM&pv=2

http://s7899.chomikuj.pl/File.aspx?e=sPCy8qxLHBqsdvyoClJVLbh38aBEfwERRPWT90KuXhLtEFqaeju8c3MpJNlgkoqrO7JGqL78OO0-4fOCjg_Ec_lpHjf6RKRRBzPqm0787bSaomxQLL7OrBxkUjti6MfNZBobQKbxsiWyYWfztsLH2j-HOS7sLLgKge29MyeI4hY&pv=2

http://s10612.chomikuj.pl/File.aspx?e=sPCy8qxLHBqsdvyoClJVLbh38aBEfwERRPWT90KuXhJLCe0NkD-5hCx2Ac_6Bxah_TbE6X_1ew6YTWGpJICBLQjiVl7OGI_d7AS0vyyEW3kIJ6C_M9fv7RyURoqbzjp_EeKFs6UrzRxTEUbeOckunqafvsn_gpexBqvMpcJQqVE&pv=2

http://s10612.chomikuj.pl/File.aspx?e=sPCy8qxLHBqsdvyoClJVLbh38aBEfwERRPWT90KuXhJKH7JQw_MV3akvrfP6DOieLI239oSiDPVnkpNe-xoF3YHeiPPaZ4UY9JE37zbiKNC9uk7noF9bxXvC8OT0GaXw4dvl7GT4jqjH4IOC_AcF-Yi4hd03EgPgfkYYNhlL-_U&pv=2

http://s10612.chomikuj.pl/File.aspx?e=sPCy8qxLHBqsdvyoClJVLbh38aBEfwERRPWT90KuXhIEGQzTXEDqWQ0Nlnmp1kN3XAyEK2ym1-DQlFitKg0bUfPYSynDG1gS1Gf5438YDVr-gH-Ntf_yVtfkA9QJg5vaiY9wx2iCKXCLyal0VMaUJ9o_ETXmLIplxzLYUdNIOgo&pv=2

Remove avc-free.exe - Powered by Reason Core Security