.. /TeamViewer
Author: Splashtop
Website: https://www.teamviewer.com
TeamViewer is a remote desktop and remote support software that enables you to remotely access and control apps, files, and data
Artifacts
Windows
Privileges: User
Path(s):
- %PROGRAMFILES(X86)%$\TeamViewer\
- %PROGRAMFILES%$\TeamViewer\
Registry key(s):
- HKLM\SOFTWARE\TeamViewer
- HKLM\SOFTWARE\WOW6432Node\TeamViewer
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TeamViewer
- HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\TeamViewer
Domains
- *.dyngate.com
- *.teamviewer.com
Remediation
Blocking *.teamviewer.com and *.dyngate.com prevents TeamViewer connections and access to the product page.
Resources