anydesk.exe

AnyDesk

philandro Software GmbH

This is a setup program which is used to install the application. It runs as a separate (within the context of its own process) windows Service named “AnyDesk Service”. This is the uninstaller utility registered in the Windows Control Panel for the program AnyDesk by philandro Software GmbH. The file has been seen being downloaded from milllantas.com.mx and multiple other hosts.
Publisher:
philandro Software GmbH  (signed and verified)

Product:
AnyDesk

Version:
2.1.0.0

MD5:
3713fa48d8c31339bfc4ae57d5f423ae

SHA-1:
62286d151f24ea23d07511df113bbc27af6ae19d

SHA-256:
60f979e865107a8b640dbf778111ab646165dc3c38b028f7886a73fd296cf54b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 3:32:11 AM UTC  (today)

File size:
1.4 MB (1,417,856 bytes)

Product version:
2.1

Copyright:
(C) 2015 philandro Software GmbH

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\anydesk.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
9/23/2013 3:08:33 AM

Valid to:
9/24/2015 3:08:33 AM

Subject:
E=cert@philandro.com, CN=philandro Software GmbH, O=philandro Software GmbH, L=Stuttgart, S=BW, C=DE

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112183F6AC0A7E594EA257BD986725A61ECF

File PE Metadata
Compilation timestamp:
9/18/2015 6:54:32 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:OTKJsS/RavpKJSSTSLEJDtlLNhVKOCP7YPUC1I0JKK+mkJOPLQPqt5ebIGSlMjDh:Q0s3pAmLgplLNhVKOoYPGCKzBcsqzebu

Entry address:
0x2028

Entry point:
55, 8D, 6C, 24, 88, 81, EC, 58, 11, 00, 00, 56, 8D, 4D, 38, E8, 22, F9, FF, FF, 8D, 45, 38, 8B, C8, A3, 90, CF, 95, 00, E8, E0, F7, FF, FF, 84, C0, 75, 15, BE, E8, 03, 00, 00, 8D, 4D, 38, E8, CE, F7, FF, FF, 8B, C6, 5E, 83, C5, 78, C9, C3, 8D, 45, 38, 50, 8D, 4D, D8, E8, 5D, F4, FF, FF, 8D, 45, D8, 8B, C8, A3, 94, CF, 95, 00, E8, C3, F3, FF, FF, 84, C0, 75, 0F, 8D, 4D, D8, E8, A8, F3, FF, FF, BE, E9, 03, 00, 00, EB, C2, 8D, 45, 38, 50, 8D, 4D, 6C, E8, 25, F3, FF, FF, 33, F6, 39, 75, 6C, 0F, 84, A8, 00, 00...
 
[+]

Entropy:
7.9905  (probably packed)

Code size:
11.5 KB (11,776 bytes)

Program Uninstaller
Program name:
AnyDesk

Display publisher:
philandro Software GmbH

Display version:
ad 2.1.0

Uninstall string:
"C:\Program Files (x86)\AnyDesk\AnyDesk.exe" --uninstall


Service
Display name:
AnyDesk Service

Service name:
AnyDesk

Description:
AnyDesk support service.

Type:
Win32OwnProcess

Depends on:
RpcSs


Windows Firewall Allowed Program
Name:
D:\Mis_Documentos\Downloads\Programs\AnyDesk_4.exe


The file anydesk.exe has been seen being distributed by the following 15 URLs.

http://milllantas.com.mx/sistemas/.../AnyDesk.exe

http://faultlog.net/sw_download.php?id=793

https://docs.google.com/uc?authuser=0&id=0ByXeR826yRXBSTdLalc1UV9iTU0&export=download

http://www.compsaonline.com/.../stinou.exe

http://lb.cdn.m6web.fr/d/c/a/34f43bffd6349b51c5a8078dae64b0df/56220588/soft/.../anydesk_2-1-0_fr_431427.exe

Scan anydesk.exe - Powered by Reason Core Security