home

anydesk.exe

AnyDesk

philandro Software GmbH

This is a setup program which is used to install the application. The file has been seen being downloaded from download.wetransfer.com and multiple other hosts.
Publisher:
philandro Software GmbH  (signed and verified)

Product:
AnyDesk

Version:
2.3.0.0

MD5:
4d599c82708da5c8480cf2c0750ae16f

SHA-1:
94977c1a95b87cb01967ecd3d78ff82bc1173586

SHA-256:
ddc52162f393749c688951fcc10ec4c8c5d53d7272c50693dbe2e7b597b128b9

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/25/2024 4:33:13 AM UTC  (today)

Scan engine
Detection
Engine version

Baidu Antivirus
Win32.Trojan.WisdomEyes.151026.9950
4.0.3.16429

File size:
1.4 MB (1,490,592 bytes)

Product version:
2.3

Copyright:
(C) 2016 philandro Software GmbH

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\anydesk.exe

Digital Signature
Signed by:
philandro Software GmbH

Authority:
GlobalSign nv-sa

Valid from:
8/17/2015 5:32:31 PM

Valid to:
10/24/2018 10:08:33 AM

Subject:
E=cert@philandro.com, CN=philandro Software GmbH, O=philandro Software GmbH, L=Stuttgart, S=BW, C=DE

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121EAA40803A9226F303743EE537D5CD62D

File PE Metadata
Compilation timestamp:
4/29/2016 7:12:21 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:m3QZ1RByU1mMOX5ylBIxGJX66US8Sg0f5T5xsujxYp7B9LTGmDApI4xGrLebL:EWbBUhiBJmn0h1xsuc7vLTGmDP9rSH

Entry address:
0x2028

Entry point:
55, 8D, 6C, 24, 88, 81, EC, 58, 11, 00, 00, 56, 8D, 4D, 38, E8, 22, F9, FF, FF, 8D, 45, 38, 8B, C8, A3, 70, 68, 98, 00, E8, E0, F7, FF, FF, 84, C0, 75, 15, BE, E8, 03, 00, 00, 8D, 4D, 38, E8, CE, F7, FF, FF, 8B, C6, 5E, 83, C5, 78, C9, C3, 8D, 45, 38, 50, 8D, 4D, D8, E8, 5D, F4, FF, FF, 8D, 45, D8, 8B, C8, A3, 74, 68, 98, 00, E8, C3, F3, FF, FF, 84, C0, 75, 0F, 8D, 4D, D8, E8, A8, F3, FF, FF, BE, E9, 03, 00, 00, EB, C2, 8D, 45, 38, 50, 8D, 4D, 6C, E8, 25, F3, FF, FF, 33, F6, 39, 75, 6C, 0F, 84, A8, 00, 00...
 
[+]

Code size:
11.5 KB (11,776 bytes)

The file anydesk.exe has been discovered within the following program.

Santymed  by Santymed
www.Santymed.com
About 7% of users remove it
 
Powered by Should I Remove It?

The file anydesk.exe has been seen being distributed by the following 50 URLs.

https://download.wetransfer.com/eu2/.../AnyDesk.exe

https://docs.google.com/uc?authuser=2&id=0Bw_scnKW-uELSHBNMXRvTk5VSTA&export=download

https://mail.google.com/mail/u/.../?ui=2&ik=69a9dcac2f&view=att&th=15977eab34430527&attid=0.1&disp=safe&realattid=f_ixmxnr5m0&zw

http://unicontabil.com.br/.../Remoto.exe

http://www.cielmaroc.ma/AnyDesk.exe

http://209.126.105.214/.../conexao_anydesk.exe

http://27.54.171.236/.../AnyDesk.exe

http://filehippo.com/download/file/.../

http://filehippo.com/download/file/.../

http://softlineinfo.com.br/wp-content/.../AnyDesk.exe

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/.../AnyDesk.exe

https://docs.google.com/uc?id=0B3NP7GE_2V_seXBITXZMb1VWRDg&export=download

http://ivisionaute.com/AnyDesk.exe

https://www.paymentexpress.co.nz/.../PXRemote.exe

https://minecube.eu/.../AnyDesk.exe

http://pcesupport.net/.../AnyDesk.exe

http://filehippo.com/download/file/.../

https://api.asm.skype.com/v1/objects/0-ea-d1-75fb15d66448269652e1096cf59d8f3b/.../original

https://api.asm.skype.com/v1/objects/0-sa-d1-ff011446cb38acb4166847bf2e8c3b82/.../original

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_es&type=PROGRAM&Expires=1441157696&Signature=XlTF2A4Gi3lVYS0wVPa4OEyLTMvLGM9~WM0zcm-pmcFKQatJU51rjAW7fDnr1zMBDmH0D5ctspH9sn7KXZoCHSp0DmoLWOsU~Dbbq~x9j7oeK33lSsWEv2gmdali5s0EZ0RO0YXP0nryNriSxI0tVMzgCjfee8AVoBmsZF8noXs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://sap.rvpn.co.in/anydesk.exe

https://f.flockusercontent.com/899a9241479811445d255a1e

http://filehippo.com/download/file/.../

http://www.sarabanflow.net/.../AnyDesk.exe

https://dw.uptodown.com/dwn/pH96Mo2hGCZY2S_jW6u7VpGmM9VVBsTELp9skHQeGZIQRFEuch2aiKGNlEoXyV6CZmOdqQfdinyFqpBT-E7vgFA72OvXzD2YzM5OuJ8kK6FzQQjzPMcsqq18O5P6xiaH/wpul02mmVDqenD57jGpNdSGtBXxC5MrIycvUe9wt84KIaDuB3DOzWJyINunpIurdkyXDzrbk6m2NhfVIsJDjEN7RTU-MVicO9dizgTN7KdGmKO69By2P8JcTxRIaK4X2/.../

http://x.net/.../AnyDesk.exe

http://www.hunes.com.br/.../AnyDesk.exe

http://lb.cdn.m6web.fr/d/c/a/7ac1bf1673255407f0a8259dba0e6106/576bad74/soft/.../anydesk_2-3-0_fr_431427.exe

http://suportedesbravador.com.br/.../AnyDesk.exe

http://www.azainfo.es/.cm4all/.../AnyDesk.exe

Latest 30 of 88 download URLs

Scan anydesk.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.