AnyDesk.exe Bundled Inside Compromised UBP-Asset HTS Directory
Detects the execution or presence of AnyDesk.exe within directories containing 'UBP-Asset' that are outside of known, legitimate installation paths. This behavior often indicates an adversary attempting to use remote access software for persistent access or command and control, commonly disguised within unconventional directories.
Microsoft Sentinel (KQL)
