home

anydesk.exe

AnyDesk

philandro Software GmbH

This is a setup program which is used to install the application. It runs as a separate (within the context of its own process) windows Service named “AnyDesk”. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
philandro Software GmbH  (signed and verified)

Product:
AnyDesk

Version:
1.0.3.0

MD5:
75c454e146c5a522e2e06b1eb0026d91

SHA-1:
f2a4a1439e20f46c385d40aa66fea58a9586d33d

SHA-256:
54b142aa616e959db18e789d187770897ba2cdaec1dfb1b081b260157d5b1359

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/15/2025 9:01:01 AM UTC  (today)

File size:
1.1 MB (1,196,128 bytes)

Product version:
1.0

Copyright:
(C) 2014 philandro Software GmbH

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\anydesk.exe

Digital Signature
Signed by:
philandro Software GmbH

Authority:
GlobalSign nv-sa

Valid from:
9/23/2013 10:08:33 AM

Valid to:
9/24/2015 10:08:33 AM

Subject:
E=cert@philandro.com, CN=philandro Software GmbH, O=philandro Software GmbH, L=Stuttgart, S=BW, C=DE

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112183F6AC0A7E594EA257BD986725A61ECF

File PE Metadata
Compilation timestamp:
6/18/2014 3:17:01 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:gcb1oxgKKUQrwZb0fEVKNqUT1R/VcDm7mbzF7rmuafoC:Zb1oxgKlQrwh0fEVKNqUTtqmoF7MfoC

Entry address:
0x2172

Entry point:
55, 8D, 6C, 24, 88, 81, EC, 50, 02, 00, 00, 56, 8D, 4D, 38, E8, B6, F9, FF, FF, 8D, 45, 38, 8B, C8, A3, 10, 64, 87, 00, E8, 74, F8, FF, FF, 84, C0, 75, 15, BE, E8, 03, 00, 00, 8D, 4D, 38, E8, 6A, FC, FF, FF, 8B, C6, 5E, 83, C5, 78, C9, C3, 8D, 45, 38, 50, 8D, 4D, D8, E8, 8A, F4, FF, FF, 8D, 45, D8, 8B, C8, A3, 14, 64, 87, 00, E8, F0, F3, FF, FF, 84, C0, 75, 0F, 8D, 4D, D8, E8, D5, F3, FF, FF, BE, E9, 03, 00, 00, EB, C2, 8D, 45, 38, 50, 8D, 4D, 6C, E8, BF, F2, FF, FF, 33, F6, 39, 75, 6C, 0F, 84, A9, 00, 00...
 
[+]

Code size:
11.5 KB (11,776 bytes)

Service
Display name:
AnyDesk

Description:
AnyDesk support service.

Type:
Win32OwnProcess

Depends on:
RpcSs


The file anydesk.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1427902570&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=MvqkZWh4cfwvxb4-V3Bmu8HWay7-1Dw8gbjmGdy16dcphkhx9WUlY~tM1YKxO3ZteTXuqJ~69OTzgLDUnTdykgG-Fb1gncphTC4vMIQDBTkU2Gwr1SJ50rij93HZKi7ywuxJJTZr1dKqKk3y6IWZ7Fu3iZv1qAGiqUi3UeKshlY_&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1450199628&Signature=cCaZDefE4-tdSZtRgcMtw7pGxDJdMFMotwrdvrR40NDffVKb7kwMEGVXGBQwdzwHtZk9RCJlbrbVDYxWlC1HTDQDvaO1eG6or9jD3gK1jOnrmO1lm2v2F~GFBokMHJyNagOExoQ8biYF0k9GRTV9OtyypCw6xH21LMZoRpXA9X8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1461971220&Signature=D3TKejQFL-Y4ArxxmA0H4UF9HOjCaKYkkrXGHRu8bTA1CM9G9xM9BXw2rR1FlBLV83rHj62UWp2ZLYEuzhupt8kQYFnMem~q1HR5mZ7RX~-rwp4AaR65NEnWNBfg2X8wp8srJO012GLp6khv90UWjebZTY7gF6-dy2er11x0vEw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_es&type=PROGRAM&Expires=1438473796&Signature=bPhxOpr753ckJD9~-W2MF7R-F6MAJ9l6NkuyvF3ZkBr55UZ2u7wVNPPjOqmxZKY6~nHso7hwgRdkUzvZY~HMzhfo27cL-1FIJAa-ZLKFFe8gfPpurFCXsBOuvE1q7Kt~h8LeTwE5ZNaF5G85uQQ4oOhs9RBEfh0yGjl6wPB0kak_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1455900306&Signature=J6b597nOXD9UfvAMY3uH5KjOf-XkrdJgPb49zrRC9ypn2Zf69maCpZASE0GrG1elEa2mjvbMc2ldDWEy216AJJi5t0n3i~5sjrJVqxjw1GwTTHQKS-HCQm1fSfDF-H8YWyWiqT3NV5dNhcWiW4jW6u5BsDZVkC~g0Mc~KS32f4Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1464922138&Signature=haFtxfzznVX0LL6Jds7eImzZpILqaGpfuFZDMJcPtC26pYYVxO2n9R3isEWKbXaDngpye3dfGhiybv64aAawHNDae55JUvq~KBLyfhQoUxs2eksHnFyB3pj~Wx7sIRraT15Yfz9oksjMG37ol4h1ubTUaDK9lXYzmsPTfHVPQeg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_es&type=PROGRAM&Expires=1446092666&Signature=K91vSSriP7UhvLxspPlFVFjykk6NcIUur9yRhgxz746FSHTeZLE9kFuLJ3zesBgS3wsUZx2JZnm4UJvObonXTEAFcwcPzf6753UXcFU7zF98rVgFo3AB9ngRlHuNSER4pwC5Th~P1WJoPxvbuWQQvs03AClTn-vJOAHR9AhPwFg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1465717138&Signature=YadD3wkalLhN3Z53CIRor7zPPt91TwdngQ8j0zEtxhrFlJbA-nO-hzdRajyYYQLRBtGn7tP7WPcNFA~bbgXV1a2ErF7UHzSKBklJhXuY8QkgKWTuP1kAtMmVxmEPnVN0VdxVroTFURRYGM1w-8hgDpBnEgP8x0buPY5lvY~W9S0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1446148992&Signature=gVPJlQrM-xmcmagztKAYVoCZFhU-sfkrLOvVNcljRpoc1nVm0irc98rchU4A-Grab95UQn5bFZdvNZn7gsASQUVxnY1Dh-ve7ddNQEBwOzr4dvqTOp0iyMq9qO86jGnCWMry197cMYkG0aXn9ACusJhTsqeg1RtgTRJzOEWbbZs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://zero-drive.net/usr/.../AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1444778991&Signature=AsOcsW57ZDorD43tbEfghNTOQc9zfNlh3OzCjhwMczHdwjnWAZIgtrJGxSJicibKVVb0aDMSrxbIJZ8KfFaKSYzbNP~tsnTHSf0tmwvhJ-XYanCPAHtmCQL5FIlh~Sg7QjjcZqBFE9FAqO625KRrEO4xGl~0J~SLDJL5mphpK~g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_es&type=PROGRAM&Expires=1446183497&Signature=BVgsdFUVYZ3Kb3irNCkq~3fNTsbmbd4W3FWJyX8Dv5Q5gR7D9sZTap7-g1LfdnXJlKJqPDG2M6IVtIgBjCM~o7IjLdQdFXnt9lMTpjyQ3EhrH8HA5rN14PFgX7seBPfLRNI5RKj-APPpmO2P0gorKM2-zzU4tfN9eCLEv6~Ix0Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1440258876&Signature=J7n9~dCT9yPeHbx17WmxCSDdW0IpPQiZiYnQrzbJrhv~Bt2KULrYYV71P6Du0aaPvEgC4sF-tJ0R66C4e7lPbmZsxuEs43kvKu~zbVaXbN9hWaMhSfHp0k0ASg7P~0f-P8Y0pt8G2e8uCm6QOQJNsptGE0GfM~QCt0DiUj0GxpM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_es&type=PROGRAM&Expires=1434398875&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=aN2XAnk6sScdpWxUdUFgidQO1oC5aL451F6ZlSO7WvPbY6WfvIsmF8ZJZhYm--ys0P~MYJJiRoQyZxXd86FTIRvNBJ4nE18gZ0M1RCLG~WwVNr5UKh91gVOSyD8qqhHAW59CUn032jW4PnufxwIauOCbMG-9XNEML3g7dru4Teg_&filename=AnyDesk.exe

http://www.bitsfarmclean.com/51CkoSpgy4EkU39OqQv yJMFCI6aa_kZStsGcfLyFBpbYJJt5ogOijeZHiXixyWJTX0S_OI_EA2IsGUZt45dheCI4rOuBHSjpuMrYK5I42ysMVMMG4iXeywutQXauR_vXlfEEQaefe68yQnk8blzOWGjAm2EBPVLQGsyuNUTsXi_uwOhmr_11T6hP3uD59V1gSlR4wxOIahoK30KlFsb_2CKGG1x7nt6dmOIR8AkuJrF1Gw1Uz5_JMFo6XDYbd264URKwMziA9D9OZSrhavTWNsRhzGmOcI69GcQ4ZbQMaDGl2nWljVUufdeaL0MY_nYkZ cyiUj9JUzTEiowphzT_4240_3ZYU7EZ2RfXSUkm9vZOA19gCtk asjVMHnHCuHMOK5ueTLIfSQRoNd3ej6nqdrvvAiv99y Uf23LlPzfvnsqzh22YJLi9PIAyXPlZm60y2ija6OecPTxDYZTKSC eiaF4IxbIRV52frz3g82vThLsvbfjef6sPfqFUsny8vBg5Sn7dHsDP zySE1aLezPFMs8M_F19HkKVPRSoya17tGF8xMNTnwskSLauK8HPue5vJFMBV4qpS2W0IONdgnmAwI7Tg==-G04AAGRwXmuLB5DEDLAJEWUWlWS2fXbXtS0BX6hflrWaip4kgvPlr pzhOqvls9LpFbLxIxv1zO3LNXiz7f5e1RQiyhBUwTO0igN-e

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1465568441&Signature=er2QYteg9tqg4GFJFyruY1PupJ-H5WQncifrOkgzwb6-A7GJiQM1cuJkIZzDJER2t1ABA~-BeCZtSqb-VHyFU-V7UgzXCHYqmNGlfcdUf-Jqq-KXQwqgn4NU3w979LCO3tnLERgH0GGWZ7dl9xf-5EVHTPUhxl6JiM7vkPhl4KA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

https://docs.google.com/uc?authuser=0&id=0B6lIDt-LkdiHNjZwR3FlaFVSYVk&export=download

http://eagleclaw-fx.com/.../AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1441378638&Signature=Xxw-biXUgW4MC0yv7XnI5C9N16H72g~53vf3SbHs8pz~EeiuPwTaR~EDI0k0ZULVrzAzq9JhhYNNYhmIUL2Lpzc1~0caSRKhpjQ39~ixyUov0IBdBxZjBIkdI9885l3jbmXZehd1H10xP3tWgPSPwy~~8ZSBEofo9B1LraaNHJg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1448094218&Signature=cAtBDzXIUv2aRHYNn7WLa-7KTfm1XiN7vRMk8a2URL7fG6SRe8sJhgFglhpXRKuqzd1ezCqkVcZ4sBsdKpFFoWLaIEa5ou3EXBT9TczYmII5A9e4JpvP2Ed3NRM1q-J88ewYOvM-9M3bf7Nqw0Ofc3UK57DKe7r4ULC0ac42wAA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1450132006&Signature=WuN0RJ42Eo~DpUYPfMn4j5ij~c6~ojEIXLHXvgJ5NY9aKzp9ofycSVi93vwrYaFvR9YKn6b6XMniKRqj8Gv0Qf1lFf0IxQq1IxGLqymiybb3LrJuvQbvV40Hw0R0bT8iL3LyUgR1D3hmc5Swl9l-wChoellDQ-CyMuXqMYJkFsQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1456964873&Signature=cmICqAax~vOEQosrCO3P3Pt09LoHjpWJBvUoFSnHWWmmlLL9WpXNySah25p0v5qlIltgwtCYYXKfxJbWHvIo0ZQ1y8ZO2-1TBhiw13tH9NmRIsNsF5K4~BaOrsB0Z~24ZSZQ-zAHA3MmMY2v7Jx-R05bEkn7-U9UA2VTJS-RaF0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1449157451&Signature=JqLv87bRK5WGu4hDgbB3HPyhmWaTsz1LncWELvNKTbHqNjbH5FsS1CZlupxtddBW9NTxDjRvQCEbWiXdeN33uanM2uPka41RIIYTACNyfoTSZ7qqEhmsZDFBXd-KgbF9pfekEWhxZND8uG273uAqd7MGz49eaaOXEkMkzQxn0O4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1464163306&Signature=f4sHJisYfMJTaTzuo1Hs7rOTaTXaE3h0nDae3QQBEMIM3EhoWGmUKPvEPNnADc7az~av5fyAd4TjtlChIhiLKYEoEiFTHWbSZGRw55Jr93FmKUB4I2WK2lLewTwnXR5kMcIVe1XRy5A2wc0PneDffF-zb-U7L3ASPEA2RDcfudk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_es&type=PROGRAM&Expires=1455595755&Signature=e96UsdIvv~amNmPSKX1BWDeOxUQGntYEuYJRTh5pi~6AstMR0g6Vu5~ALkhB~9Sq536DG4RpaXgrUTuvarT5R6PRKm55ob0GSCfTNBzJagQS87xbLG1GxgK3ofagtSVR7PUJ~Pe21Sz0IoqBzdGDg9U~i2axiBoBT-E2qQ461WU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1458313819&Signature=F5kw9-H2VIIUz8c9Pct2-Y9kH~NHrCePKJBRWTKp2Z7ZAczOibz~CMtcXGnY0gb4b2IDUvvxst6bmQU27M1Bt7DcQpoq5elB~gKTTRw5KjcrCKUtY8ABDcP49PCzqpLPPS9Q0GAEqquaTtPBF8MCozfoYbNTYvtF-YO0MBhU9aQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1465719041&Signature=XXt7qVviGZDLaJy-tvZNiCAe0zaRSX9ng32Bfn975Vd6O86g7PaXOJ-KKIGJ5D-nrA7bF9x1W1VLUnBDVBRRHl9XeQN42qkD0Kd5J7uNI2tFe99rmInJ5uxSwr1YnYm7ajTGBq1P5IJSoAvMSk~S2qZ8bGh0fYMJDH18mqqU5UY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1452975342&Signature=i1XKHW0p22MJUFOcQKtc3yesdQw-uyv9hNNXHUR~A4hPKOIhlJ4Dg0CF0seUe~Q6YbvY9O9Jz4DOBZgpLeQPtkTz6SffGff9FbCr-9SqInhyyhqRPYCvauZaihfVoX3fs-ksJuV~3YBBcLN89zBkv0usxzRAEcVMXY1XJlNOmyg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_es&type=PROGRAM&Expires=1464174144&Signature=A3PQTrm1bEU-PVr6ZXs8-5IltWOUd-3I5L2QP4k3xzMFJDL5FzeGeBuGSK9qfmvkqmit~DXqkewq1o8Y~HSsu7EPcbLE1kjwNcI2houcmoovPz1J77aQtKAwZXJJNIGEQd4mvcgGOWC7L1O45Of9dJF2BTPUdT2cnbGUkxoj6-Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

http://gsf-cf.softonic.com/f2a/4a1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=69685230&instance=softonic_en&type=PROGRAM&Expires=1437697218&Signature=ekWnVZSfUcMzefNCJNf5RtBAT71Uxemz0Nq0ASVUOGDWosTxIJYZ3sOA16RE5BxsNMGTjhTCi-uvlxA6VPgzUD8jgzJJglvKzA1C20Pr7kFoh4BAWFcv2i~0CyI1iyHVJXS6eseoFXyeaMhvUzBCyFJkDAcoxIpUVdH1TJw0cl0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AnyDesk.exe

Latest 30 of 74 download URLs

Scan anydesk.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.