Technical Information
- crypted.exe
- %TEMP%\crypted.exe
- %TEMP%\anydesk.exe
- %APPDATA%\anydesk\ad.trace
- %APPDATA%\anydesk\user.conf
- %APPDATA%\anydesk\service.conf
- %APPDATA%\anydesk\system.conf
- %APPDATA%\logs\07-21-2019
- '78.#6.49.23':443
- '78.#6.49.23':80
- '85.##.103.30':443
- '85.##.103.30':80
- '<LOCALNET>.49.128':1338
- DNS ASK bo#####.net.anydesk.com
- DNS ASK ip##pi.com
- DNS ASK fr###eoip.net
- DNS ASK ap#.#pify.org
- '%TEMP%\crypted.exe'
- '%TEMP%\anydesk.exe'
- '%TEMP%\anydesk.exe' --local-service
- '%TEMP%\anydesk.exe' --local-control