home

airdroid_desktop_client_3.3.2.0.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from dw.uptodown.com and multiple other hosts.
MD5:
ce0b126973ddbbd9fcc9cee1c6fcf1d1

SHA-1:
45d13d12889c0da618885c02e70b551f0210c907

SHA-256:
4c9bac68053a1e09b1ba1ce1bf514b3b2753f87025cf1c96977d9ac808456765

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 5:19:09 PM UTC  (today)

File size:
17.3 MB (18,105,874 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\airdroid_desktop_client_3.3.2.0.exe

File PE Metadata
Compilation timestamp:
4/10/2010 8:19:31 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
393216:0zULC3K86f2OPw+73jZYUN9cf+cQjrOWmF/5D8TNdQh:0bd6f2G3jZYUN5cQjrOWABD0Ndi

Entry address:
0x354B

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 84, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, 06, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, 05, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 86, 40, 00, FF, 15, 80, 81, 40, 00, 68, 04, 86, 40, 00, 68, A0, 85, 46, 00, E8, 35, 26, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 10, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Entropy:
7.9923

Packer / compiler:
Nullsoft install system v2.x

Code size:
25 KB (25,600 bytes)

The file airdroid_desktop_client_3.3.2.0.exe has been seen being distributed by the following 21 URLs.

http://dw.uptodown.com/dwn/KopcBWXmGTJgFCYr3GstcPE4jblGIRxyPifik6DktDtapvPgb5N4dllfnVX7ejpz-qa9ypnsh6EDTT7vB8KW7kp6ywVb771Bmigc6WwmOAW-dpdCb0Byvh3GhohFG8LL/wCSPSHms1cAF4PQdtxalF9ecKOLKyiDyxwaut_nlOuqvt6VZRHYgcByBLpFXKIXkAF64szrS_-kamsybwGZKNfaMA6euMWemlBxYFTMrkKaFvxZAo4zm96DUQo0U_C1D/.../

https://dw.uptodown.com/dwn/efow4liA8vc53ywgp5X05C97nDR7mpyQQ5ULslCjASt3431DGkJ-kn3RAtjSp-cjFFe8nHbM_3vRNuALJbJ-tGdc_HWJQp7E5qHILcPIzN6Bu_6LQxp1kEfUBvbn1N5F/AnctR8e0vkABuPLRpFeVgXijiFP1wfxBO_mYucqZdJiaIIVcpVhRJx3KAL-H2xfLB86PK7T-koaTI2DewXV6IMAkbCK6M_uZTw-hz91hwUle0UEhCPfjMQxk-lt8OQtB/6FHFyl0JdNww11XBidWVLIF0-Z9Mbxxguw6VKE-wIjVhVyHGNAIA6gAS0PDKLphZ6Qq1lu4q1cgzedNocwq1J6fq4PEnaYLFALSl2g3zF7A9ZeImqQ-ucYDUh5P-EO3x/.../

https://dw.uptodown.com/dwn/0rWz30BNcZVQAP5JdGxEnhuc7IRDQBRbdz3yMLUsm_EdOt8blmvZ3SexNAHPh6QZexskGSDU8gH9a9SbWWw26-lsJCQJQWvGp_MTQbbvqsyU--KwqYGbi0B9JiCYkqcL/4rtmtFx2FryfeZ6u7872JvJ3n1EwsDk9jPTW_JIk1W5DYhShrl5P2tecKXKbkn-RuCjYXrGXC5CaUKt7rwm6le0OOIUo3Z_4HorYOmwg9F3jxcJbM8AuuxHZldddojlf/Uc3YxRO58VY1SejdAfQyGo7THcd-tr4ZbMloy2pF0C4f_TxE0V835qpKz5pxVnCn8vP6qQQ5_FUgXhd82dGzaSxI1zTF0XUxhTP23l58lmTHGzAgUZ3kabvMxRl2kTEB/.../

https://dw.uptodown.com/dwn/9iXuSvyIrq4bGp7GaE4yFzw6xGQdLuisV7h8h30cJd89qYFYmTzAa3VtKaRPZOQqBK4HAI6V18zcBG-FQk3G_xl58-4iInqCNG4c00CZ3Fnas3guUGNwA9wCVSw4UH4D/7u4hK53OnALq8ajJFRnP_vhus0ql89y2XPhqm_fByRG6mKUPyLSqWBzsSJKquTEg0PJT10i27_xL3-culS_7qt8eKu4L7LZ3JHDp6GKAIcJQrsH1MQscTlNaLLm2GCYw/W24eNByZiU0UNzsz5xGBhqCOI8gH7KOVDpy1b6_RXpkP_akwTYhbVCI1UDeL_eX-WQ22uO3y5_cnJnkez67AAbHa6J_EeOzm7Kr4JDkGgtAht0mfpSOaAsjJX5AL7Jwl/.../

http://dw.uptodown.com/dwn/tTbXHF7GLMtdxXRtyQpAkwSY6eQrZs3VINkvU8JmpHWUH3rtHiWrOHLRfstVAYg26TsY14P8oGwnN_lnsk26rNJNN7PT9DCUblx8LFPYCP-9UfneYeVmjiWlspuNbe6S/YMkynzYiZv-sDNOHfPlVwThGIs-Dx50nviH07GmbiDbPdNDFeRuwKskeVPZIc3QUEGxKTr8B64vucORSN8LTUw78dVC4ZDFdvOAASLTHfMxWghD4ScIOrWBS-aOrsSK4/Vbqf5vYcLLf-55Za_CTHHHSCZhEIPBRe-vtzlJS7DrzQYaDMaInJcz6ZwX9J7WcF_9vgRlnJk8XAeqX_tZlQqTG2rnaDb7XGaj8Pn1MLahVw-dHWM6xvYJZeOkFVitv4/.../

http://dw.uptodown.com/dwn/8vlNMMSFUBVPl9FGUNeCanXs27QyJyfB-LjGdOaJdKFkFH-v0xd8A92i5GA9SMg3N26QY5_Gsy6vuYzoQsaQvlAmS95nh0PxH6lbymvyDCA1BMNlQFtzlRBTZxq_YNVU/0C4pdrV6z32x5mpUZmhf-w1fL1n65ngYHWElzdaopZOt4Fg2TiAEXWGh6Qhq1UwS6ixerg-jteOY9T4Gg3JEApMq131LRlNOtIaKmoQ8jnLVJ3G5v1j9sqyyvMBbJUIl/.../

http://dw.uptodown.com/dwn/keU3xfXJkzutClFCIJ1YELbl-skHMVolHkcQrgUjNRJQ6hajU2Vo6nhMrajMnw8Cz8Hd_qVTEjdrAy1ZrDn-rawXNoxTVrU2CcnpXyn-V2ycnNDu4B_0c6lCjv48Ng_C/9euHm81LKBRLQeV0RQe4t1_Pq5FpZB3gVto6JX_LOWvmTR0I86Y-oPg7obV8AAh5xrZYwhhLk8gqzeygSl2CC2s5WKZT4fpRzChQ1o7OFFbsTWjym5qm2TuAIssWPdmP/deawOveFaZL3wmappVKlbu2yLo37vUgXQYZ9G_HbrF3tJY7ZWR83EDaFXVYjpspvt4O0XJZDOOiKiEI3g8EY0GSFevCMdN3UDiOcbgo1Tm98vtpaSOYOcAbz5qCblegP/.../

https://srv3.airdroid.com/p14/.../getbinaryredirect?type=exe&channel=all&use_https=1&use_s3=0

https://dw.uptodown.com/dwn/WUL-KSeK02Ugnhjaf17_B59YEtKTXqkycnjXaXeZic-N1nTC356yQ5botf7YiR0nGcEY-w5oOjFBgTmAT1_KsqPx8eENhvAPhffzCK_OUTqh3ElUrX9q9DfU00phgTDz/Kh8J10mgb8wxDrhmBl5DYUMWxDnKWPIEB-fS8MvnLG0mDU9pBufz6hAUrAn6fYpupc7r_WhAehPZe11RIGlOyW-OFtfYs3Y4itOmERI47Cqj7ghe4apNET1Lq1vPF2Q1/miNCD4ITjySHcpfcXYuVkNRuYzC2lyKjX_YymVWjinyHTS_imxPeVLeBiWLIm884M7DUOvkTuGdd1Zb51gHdMyWPoLM64GiwOmS95C9HYH1nyNDZZLBmScoPPA4vatG0/.../

https://dw.uptodown.com/dwn/WdEaK46pOMvEGwYsEfZjpCJcG59fpximKLoJVo9rstqPFcDy2A54TjoW0Rx8itWggPPxo-W7eN9cFEh1__E8DsbP4ird3FjCpIPuvcwvZSjpmPhjhdSzrvTNDEO3y1d5/NbzOiMOUoDf-VHfiNK3By-RcmAQCeIviJ7oHcjSHaFYYkEqXloBQLwbVH42NX0MFZY8oJaaBqh8XSEwNo3kOAafKbDf9Y1tXgCHZROgN78cgPCjdJTqfGdgisaLfP6iW/iMEYaA-halHkW66fR-g31RnxPlIAE0T1dV8Swt1XnN6rkDmYpVvEB-n3ZzG6X_tYNIFS2KjDhj8tjKAhN4EHKJ_-zExdZSWQZFTOQhOZ0WwuCXpanzGPVhzRnLDMcAJC/.../

http://dl.airdroid.com/AirDroid_Desktop_Client.exe

https://srv3.airdroid.com/p14/.../getbinaryredirect?type=exe&channel=tb_www&version=

https://dw.uptodown.com/dwn/ksbddqlWLCUcwoPdtSmlV9EpADl1Wq7ZRysR5Od6uBS9mLB4KWRN_nzVOH7Y10QADW8SkcjGrSH_iNNuyu5uUCLJ1m6sNoMFugf2nwdGDWANOiw29an7swi3su5nOisQ/oEpRGalwbj4gPLHzfId97pEZuNDO2bcbjG0yJElKNU3IAFx9x_LUmn33OM-I5xD2bUq4IBER2JDLdedct76f6srQdmqTtStFbUMDVqwJb4TkREKWtE1jI_p1UGT1hsAE/.../

https://s3.amazonaws.com/.../AirDroid_Desktop_Client.exe

http://downloads.pcauthority.com.au/?act=software.download&id=34833&t=1465915568&c=99b891b004a0b41b14ef7c65f083fd14cf478f7f

https://srv3.airdroid.com/p14/.../getbinaryredirect?type=exe&channel=&version=

http://dw.uptodown.com/dwn/9KOfSGu3IkYjX7thsr_sPX_c3SDLy-sQIABjTmd-Vi_MOn5IxsUxkPvUzX8eAnpdewvrpKT94jltmMq92qaRrWa6lNsqAPVlp58PkYwqnWBNIi4PZizDQ-qOQbCtpYEG/K6fkuzGwJ5eRDsWUeIjmh2enK4qX3v3VM7_xLj6BXqgwUscKVqQIqTmkFwIqOjiO6-XvaiaI-juF7W1TKqMzKNBjey0bnW7aWZAFvlZndowBKM72Q7pRZ3aMBWk42pJN/.../

https://s3.amazonaws.com/.../AirDroid_Desktop_Client_3.3.2.0.exe

https://srv3.airdroid.com/p14/.../getbinaryredirect?type=exe&channel=

https://srv3.airdroid.com/p14/.../getbinaryredirect?type=exe&channel=all&use_https=1&use_s3=1

http://dl.airdroid.com/AirDroid_Desktop_Client_3.3.2.0.exe

Scan airdroid_desktop_client_3.3.2.0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.