AnySend

By GoldSparrow in Adware

Threat Scorecard

Ranking: 5,076
Threat Level: 10 % (Normal)
Infected Computers: 56,601
First Seen: May 23, 2014
Last Seen: September 20, 2023
OS(es) Affected: Windows

The AnySend software from ClickMeIn Limited is promoted as a reliable file sharing application, but security researchers noticed that it came embedded with adware. The AnySend app can be downloaded from its official website and could be acquired through freeware installers as well. The AnySend software comes along with the Install Core Click application distribution platform that may install additional software on your PC. The AnySend software adds a Windows shell option to facilitate its features and may add a Browser Helper Object, an add-on, and an extension to your web browser that could be used to display marketing materials. The AnySend software may perform as promised, but its free features require you to tolerate numerous pop-ups, ads, and in-text hyperlinks. The functionality mentioned above provides reason to classify AnySend as a Potentially Unwanted Program (PUP) with adware capabilities. You might want to scan your PC for PUPs and adware with the services of a trusted anti-spyware tool.

Aliases

12 security vendors flagged this file as malicious.

Anti-Virus Software Detection
McAfee Artemis!3B24AC33A909
Symantec WS.Reputation.1
GData NSIS.Application.Vopackage.A
AntiVir TR/Fraud.Gen7
DrWeb Adware.Downware.1411
McAfee Artemis!77726F336234
McAfee Artemis!254935C4969E
AVG Clickmein.046
McAfee-GW-Edition Artemis
Sophos AnyProtect
K7AntiVirus Unwanted-Program ( 004ae67e1 )
McAfee Artemis!58879E11D7BD

SpyHunter Detects & Remove AnySend

File System Details

AnySend may create the following file(s):
# File Name MD5 Detections
1. anysend.exe 60e6148759c4dec05cc313dd63c730d0 74
2. ASPackage.exe bc3cb98a4872617e9ef3f2408922e434 52
3. ASPackage.exe b60199c4b03e7cd1b747018c6fd9662f 28
4. ASPackage.exe 9c79e53a7cfeeeccbc0c958841f38635 27
5. ASPackage.exe 86cf2ad90b892ce388f3776e36a374b2 26
6. ASPackage.exe 3099504794fa40193a6d5e68d1934a61 25
7. AnySend.exe 2d495ad0f35292d7cd82e5d0033dc677 24
8. ASPackage.exe e004a57faaeaf04d7c6dcc4d50340606 19
9. ASPackage.exe ee83d51191e9ae1d623205e4f610f701 19
10. ASPackage.exe 43972b9b1fe215b1acc7f5b438bfe83e 18
11. ASPackage.exe ee220a9bc4142f3113744ed13b320165 16
12. ASPackage.exe ece206de96c3f6afbe2a8806b5ac2ab3 15
13. ASPackage.exe ec2859e84d912d2a1dab36c1871b7198 14
14. ASPackage.exe fb6b3fccafc63e2aaa923f239c842a08 14
15. ASPackage.exe bdd7c3a4bbca055848f86c853c9eac74 14
16. ASPackage.exe e2380b73a90a188f678a68586179f7aa 14
17. ASPackage.exe e758b61e20ff2d788dc54a0b0178428a 14
18. ASPackage.exe 29e8549c43e367069b40a0483d91c9ab 14
19. ASPackage.exe ba78c4ef2aa7b5b88124dc5feca7ab54 13
20. ASPackage.exe ce53f6e477ccaf0792b2c48c43f69160 13
21. ASPackage.exe f9ca559f325e3184b1eb7a09f5c77c78 13
22. ASPackage.exe 50a79cfb21ec230edd3378504c5d23da 12
23. ASPackage.exe be448685ec9f5f46ae242a5a8175fa8e 12
24. ASPackage.exe 06dcf8a7413f798d00b0d46bf8953d18 12
25. ASPackage.exe 08f9b83ecc3d76a1764ebcf76d764e31 11
26. ASPackage.exe 689f77db50980942ac7caafe4cf5e50e 11
27. ASPackage.exe d4150797a55401162be6e6a32c1f0965 11
28. AnySend.exe 62c194286205c2c2ea520ff4c1e5daee 4
29. C:\Program Files\anysend\AnySendUI.exe 0f2992cbf2612076c7c402526b3492ff
30. AnySendShellExtension.dll
31. AnySendUpdater.exe
32. AnySendSvc.exe
More files

Registry Details

AnySend may create the following registry entry or registry entries:
CLSID
{61628E2A-4FF9-4454-992D-D92A8CD27399}
{7BFFA5F9-047F-4732-93B5-B9FE731DE96D}
File name without path
http_www.anysend.com_0.localstorage
http_www.anysend.com_0.localstorage-journal
Regexp file mask
%WINDIR%\System32\Tasks\AnySendUpdate
SOFTWARE\AnySend
SOFTWARE\Classes\*\shellex\ContextMenuHandlers\AnySend
SOFTWARE\Classes\AnySend.Connect
SOFTWARE\Classes\AnySend.Connect.1
Software\Microsoft\Internet Explorer\DOMStorage\anysend.com
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{61628E2A-4FF9-4454-992D-D92A8CD27399}
SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AnySend User Interface
SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{61628E2A-4FF9-4454-992D-D92A8CD27399}
SOFTWARE\Wow6432Node\AnySend
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\AnySend User Interface
SYSTEM\ControlSet001\services\AnySendService
SYSTEM\ControlSet002\services\AnySendService
SYSTEM\CurrentControlSet\services\AnySendService

Directories

AnySend may create the following directory or directories:

%ALLUSERSPROFILE%\AnySend
%ALLUSERSPROFILE%\Application Data\AnySend
%APPDATA%\ASPackage
%APPDATA%\Microsoft\Windows\Start Menu\Programs\ASPackage
%APPDATA%\Microsoft\Windows\Start Menu\Programs\AnySend
%PROGRAMFILES%\AnySend
%PROGRAMFILES(x86)%\AnySend
%appdata%\AnySend

URLs

AnySend may call the following URLs:

AnySend.com

Trending

Most Viewed

Loading...