Trojan.Siggen32.9907

Technical Information

To ensure autorun and distribution

Sets the following service settings

[HKLM\SYSTEM\CurrentControlSet\Services\ToDesk_Service] 'ImagePath' = '"%TEMP%\todesk\Todesk.exe" --runservice'

Creates the following services

'ToDesk_Service' C:�sers�ser\AppData\Local\Temp odesk\Todesk.exe" --runservic

Modifies file system

Creates the following files

%TEMP%\todesk\config.ini
%TEMP%\todesk\td.ini
%TEMP%\todesk\drivers\tdgamepad\tdgamepad.cat
%TEMP%\todesk\drivers\tdscreen\tdidd.cat
%TEMP%\todesk\drivers\cameramic\todeskaudio.cat
%TEMP%\todesk\drivers\vhid\todeskvhid.cat
%TEMP%\todesk\drivers\tdgamepad\tdgamepad.inf
%TEMP%\todesk\drivers\tdscreen\tdidd.inf
%TEMP%\todesk\drivers\cameramic\todeskaudio.inf
%TEMP%\todesk\drivers\vhid\todeskvhid.inf
%TEMP%\todesk\drivers\cameramic\devcon.exe
%TEMP%\todesk\drivers\tdscreen\devcon.exe
%TEMP%\todesk\drivers\vhid\devcon.exe
%TEMP%\todesk\drivers\tdgamepad\devcon.exe
%TEMP%\todesk\td.exe
%TEMP%\todesk\todesk.exe
%TEMP%\todesk\drivers\tdscreen\tdidd.dll
%TEMP%\todesk\drivers\vhid\todeskvhid.dll
%TEMP%\todesk\drivers\cameramic\virtual_camera_x64.dll
%TEMP%\todesk\drivers\cameramic\virtual_camera_x86.dll
%TEMP%\todesk\zrtc.dll
%TEMP%\todesk\drivers\tdgamepad\tdgamepad.sys
%TEMP%\todesk\drivers\cameramic\todeskaudio.sys
%TEMP%\todesk\logs\servicexmsuwdkl_2025_11_25.log
%LOCALAPPDATA%\todesk\logs\clientphqghume_2025_11_25.log
%TEMP%\virtual_camera\virtual_camera_4804.log
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\0install-win.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\101ppt.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\115chrome.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\123pan.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\2345pichome.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\360chrome.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\360enterprisediskui.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\360huabao.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\360mobilemgr.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\360safe.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\360se.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\360zip.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\3dhomelogin.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\7zfm.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\acad.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\adrive.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\aimeetingmanager.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\aippt.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\aliim.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\alimail.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\aliworkbench.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\apowermirror.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\axurerp11.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\baidu.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\baidunetdisk.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\bcut.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\bdcam.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\birdwp.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\bitcomet.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\blender-launcher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\boardmix.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\boss-zhipin.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\cadreader.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\calc.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\canva.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\cbox.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\chatbox.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\chrome.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\classin.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\cloudmusic.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\cmclient.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\code.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\computerztray.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\cpuz.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\cxketang.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\cxstudy.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\d5launcher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\desktopmgr64.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\devcpp.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\dingtalklauncher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\dnplayer.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\doubao.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\douyin_launcher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\douyulive.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\drivergenius.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\drvmain.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\dubbingvc.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\dwgdraw.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\dwgview.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\dyclientlancher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\easicare.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\easyconnect.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\ecloud.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\edrawmax.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\endnote.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\espc.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\eudic.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\evavedit.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\evcapture.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\evernote.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\everything.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\fastpdf.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\feishu.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\fenbizhiboke.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\ffwallpaper.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\flashcenter.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\formatfactory.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\foxitpdfreader.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\foxitphantom.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\foxmail.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\gameassistlauncher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\gamepp.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\gcstart.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\geeplayer.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\git-bash.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\haozip.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\happ.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\hbuilder.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\hbuilderx.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\hexinlauncher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\hidatarecovery.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\himirage.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\hipsmain.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\hirecmaster.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\hiseels_online.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\hisuite.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\honeyview.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\huawei cloud.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\huya.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\i4launcher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\icloud.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\idea64.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\iflyrecclient.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\ifonts字体助手.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\ima.copilot.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\imageshow.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\imeconfig.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\ipslauncher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\islidetools.app.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\itunes.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\jianying.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\jianyingpro.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\jlwp.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\jmaccountcenter.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\jxedt.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\jzaudiomasterlx.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\kimi 智能助手.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\kismain.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\kk.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\kmplayer.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\kook.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\krita.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\ksolaunch.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\kugou.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\kwailive.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\kwallpaper.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\kwmusic.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\learning_launcher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\lecloud.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\lefile.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\leigod_launcher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\lenovobaiying.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\lenovopcmanager.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\letv_desktop_client.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\lghub_system_tray.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\liebao.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\listen1.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\livehime.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\lively.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\livestart.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\mailmaster.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\mainfree.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\masterpdf.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\mathtype.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\mcloud.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\mediaeditor.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\mindmaster.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\mockitt.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\ms-teams.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\msedge.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\mtxxpcl.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\mumunxmain.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\mysqlsh.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\mysqlworkbench.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\namiai.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\neoimaging4.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\netease cloud music xstudio.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\netpowerplayer.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\netpowerwincleaner.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\notion.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\nvidia app.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\obs64.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\obsidian.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\octopus.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\officeclicktorun.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\ollama.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\onedrive.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\onenote.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\opera.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\pcsuite.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\pddworkbench.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\pixcake.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\pixpin.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\postman.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\potplayermini64.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\pptv.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\pwlauncher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\pycharm64.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\pythonw.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\qidian.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\qiyou.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\qnapp.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\qq.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\qqbrowser.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\qqlive.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\qqmusic.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\qqpctray.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\qqsclauncher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\quark.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\quarkclouddrive.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\qyclient.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\rainclassroom.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\razerappengine.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\repairtool.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\resolve.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\robloxstudiobeta.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\rrclient.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\rsmain.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\scratch 3.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\screenrecorder.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\sdaudioconverter.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\shalou.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\shplayer.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\slbrowser.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\smartconnect.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\snipaste.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\sodamusiclauncher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\sogouexplorer.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\stellarplayer.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\stormplayer.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\studio64.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\sublime_text.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\swenlauncher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\tencentdocs.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\thunderstart.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\ticktick.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\ting_en.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\tmeliveloader.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\todesk.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\ttvoice.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\typeeasy.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\typora.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\uc.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\ucclouddrive.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\uedit64.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\unity hub.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\updateloader.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\upupoo-main.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\uu_launcher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\uv4.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\videoplayer.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\vlc.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\vmware.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\weixin.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\weiyunapp.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\welink.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\wemeetapp.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\wesing.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\wetype_update.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\wink.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\winrar.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\wireshark.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\wondershare filmora launcher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\woptmain.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\wpmain.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\wxwork.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\wzmain.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\xdcadviewer.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\xfplay.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\xhs-live-helper.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\xiuxiu.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\xlauncher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\xmind.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\xmpstart.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\xunjieaiwrite.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\xunjieppt.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\xunyou.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\xywinqt.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\xzdesktop.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\youdaodict.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\youku.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\yuanbao.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\yy.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\yyanchor.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\zhiyuntranslator.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\zoom.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\创客贴设计.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\千千音乐.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\博思aippt.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\即时设计.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\哔哩哔哩.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\喜马拉雅.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\字由.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\小米云服务.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\小绿鲸英文文献阅读器.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\幕布.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\微信开发者工具.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\抖店工作台.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\智慧中小学.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\有道云笔记.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\淘宝桌面版.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\淘宝直播主播工作台.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\猿辅导素养课.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\玩家动力.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\百度文库.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\百度翻译.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\直播伴侣 launcher.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\知网研学.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\稿定设计.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\美团外卖商家版.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\腾讯新闻.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\芒果tv.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\讯飞同传.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\语雀.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\酷家乐.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\金山文档.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\饿了么零售商家版.png
%LOCALAPPDATA%\todesk\imageresources\appicon\appicon0\驾考宝典.png
%LOCALAPPDATA%\todesk\apps.json
%LOCALAPPDATA%\todesk\infos.dat-journal
%LOCALAPPDATA%\todesk\infos.dat
%APPDATA%\microsoft\spelling\en-us\default.dic
%APPDATA%\microsoft\spelling\en-us\default.exc
%APPDATA%\microsoft\spelling\en-us\default.acl

Deletes following files that it created itself

%LOCALAPPDATA%\todesk\infos.dat-journal

Substitutes the following files

%LOCALAPPDATA%\todesk\infos.dat-journal

Network activity

Connects to

'localhost':35600
'13#.#75.254.188':443
'localhost':49694

TCP

Other

'localhost':49694
'localhost':35600
'localhost':49696
'localhost':49695

UDP

DNS ASK au####.todesk.com
DNS ASK to######nspeed.todesk.com
DNS ASK au####.kylinlot.com
DNS ASK fi#####.###tings.services.mozilla.com

Miscellaneous

Creates and executes the following

'%TEMP%\todesk\td.exe'
'%TEMP%\todesk\todesk.exe'
'%TEMP%\todesk\todesk.exe' --runservice
'%TEMP%\todesk\todesk.exe' --hide --localPort=35600

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical Information

Curing recommendations

Free trial