anydesk.exe

AnyDesk

philandro Software GmbH

This is a setup program which is used to install the application. The file has been seen being downloaded from www.remsystem.com.br and multiple other hosts.
Publisher:
philandro Software GmbH  (signed and verified)

Product:
AnyDesk

Version:
2.2.2.0

MD5:
3670ff40aa8b2c5441115fa04a3fd4ce

SHA-1:
ee41f6eff40eb6071c57d10d9f297f5f905dbcef

SHA-256:
7f96f42bb5b94cda9352cba1c49397d642f0e98e3af2a649a02232927050a813

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/5/2024 11:13:31 PM UTC  (a few moments ago)

File size:
1.4 MB (1,456,288 bytes)

Product version:
2.2

Copyright:
(C) 2016 philandro Software GmbH

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\programs\anydesk.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
8/17/2015 4:32:31 PM

Valid to:
10/24/2018 9:08:33 AM

Subject:
E=cert@philandro.com, CN=philandro Software GmbH, O=philandro Software GmbH, L=Stuttgart, S=BW, C=DE

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121EAA40803A9226F303743EE537D5CD62D

File PE Metadata
Compilation timestamp:
3/23/2016 6:00:46 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:FS6dGyJSehnz3N6A/BA63hH0XwBnfpLJZdrCPcE6FAe0Ya2JG6G08/RR3K+18Q3t:NoyJSqNdBA6xH0XKnfpN3i+CvYFVyRRP

Entry address:
0x2028

Entry point:
55, 8D, 6C, 24, 88, 81, EC, 58, 11, 00, 00, 56, 8D, 4D, 38, E8, 22, F9, FF, FF, 8D, 45, 38, 8B, C8, A3, C8, 63, 98, 00, E8, E0, F7, FF, FF, 84, C0, 75, 15, BE, E8, 03, 00, 00, 8D, 4D, 38, E8, CE, F7, FF, FF, 8B, C6, 5E, 83, C5, 78, C9, C3, 8D, 45, 38, 50, 8D, 4D, D8, E8, 5D, F4, FF, FF, 8D, 45, D8, 8B, C8, A3, CC, 63, 98, 00, E8, C3, F3, FF, FF, 84, C0, 75, 0F, 8D, 4D, D8, E8, A8, F3, FF, FF, BE, E9, 03, 00, 00, EB, C2, 8D, 45, 38, 50, 8D, 4D, 6C, E8, 25, F3, FF, FF, 33, F6, 39, 75, 6C, 0F, 84, A8, 00, 00...
 
[+]

Code size:
11.5 KB (11,776 bytes)

The file anydesk.exe has been seen being distributed by the following 28 URLs.

http://www.remsystem.com.br/.../SuporteRemSystem-AnyDesk.exe

http://105.co.il/.../AnyDesk.exe

http://ribfx.com/.../AnyDesk.exe

http://lb.cdn.m6web.fr/d/c/a/facae12fcca27ef4effcd4a90d4a4165/5720c984/soft/.../anydesk_2-2-2_fr_431427.exe

https://docs.google.com/uc?id=0B6H5s8h3nDxMV3NQODdDMV8wNEE&export=download

http://www.micromoney.com.br/help3.exe

http://dichvucong.nghean.gov.vn/tttl/.../AnyDesk.exe

http://www.compsaonline.com/.../stinou.exe

http://www.nac.com.tr/AnyDesk.exe

http://demodichvucong.daklak.gov.vn/tttl/.../AnyDesk.exe

http://lb.cdn.m6web.fr/d/c/a/e5bfb7d648572470ebab4a0a2d0e49cb/571d6429/soft/.../anydesk_2-2-2_fr_431427.exe

http://dl1.filehippo.com/.../AnyDesk.exe

http://www2.crmall.com/suporte/.../AnyDesk.exe

http://portall.com.br/remoto2

&onid=7240&oid=3001-7240_4-76158486&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=networking/remote-access&topicbrcrm=&pid=14504632&mfgid=10354825&merid=10354825&ctype=dm&cval=NONE&devicetype=desktop&pguid=e1a0b83a0a5ddc68d4fa8352&viewguid=cm910XlXALgh2Tq0R8YzKARf98Sdn6PPnDGC&destUrl=http://files.downloadnow.com/s/software/14/50/46/.../AnyDesk.exe

Scan anydesk.exe - Powered by Reason Core Security