Overview

overview

3

Static

static

3

UsbTreeView.exe

windows10-2004-x64

3

UsbTreeView.exe

windows11-ltsc_2024-x64

3

Analysis

  • user interaction
    yes
  • max time kernel
    36s
  • max time network
    39s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    22/07/2026, 13:10

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    UsbTreeView.exe
  • Size 995KB
  • Sample260722-qel3msfa87
  • SHA256 509d73111e460ed0490dfce95f1a8eed4b4a7b660f3546654b0e7c1a9671c21b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks SCSI registry key(s) 3 TTPs 40 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\UsbTreeView.exe
    "C:\Users\Admin\AppData\Local\Temp\UsbTreeView.exe"
    1⤵
    • Checks SCSI registry key(s)
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:5216

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        UsbTreeView.ini
        • Path C:\Users\Admin\AppData\Local\Temp\UsbTreeView.ini
        • Size 245B
        • SHA256 e65f894f98f7bb0304ce4d7370c7411ebedea7d5ab79a639f255ab5fefeda6da
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        UsbTreeView.ini
        • Path C:\Users\Admin\AppData\Local\Temp\UsbTreeView.ini
        • Size 28B
        • SHA256 55c118e0d9f8ad9caac28d1c1a4c5fc564c69c82838b3beaab25f3ef8ef60633
        • MD5 SHA1 SHA512
        Submit Download