Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '6a19a54ecf275d094e4f1a91c78db2cb' = '"%APPDATA%\AnyDesk.exe" ..'
- [<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '6a19a54ecf275d094e4f1a91c78db2cb' = '"%APPDATA%\AnyDesk.exe" ..'
- %HOMEPATH%\start menu\programs\startup\6a19a54ecf275d094e4f1a91c78db2cb.exe
- [<HKLM>\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%APPDATA%\AnyDesk.exe' = '%APPDATA%\AnyDesk.exe:*:Enabled:AnyDesk....
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%APPDATA%\AnyDesk.exe" "AnyDesk.exe" ENABLE
- %APPDATA%\anydesk.exe
- DNS ASK al####12.ddns.net
- '%APPDATA%\anydesk.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%APPDATA%\AnyDesk.exe" "AnyDesk.exe" ENABLE' (with hidden window)