Analysis

  • user interaction
    yes
  • max time kernel
    22s
  • max time network
    45s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/08/2026, 13:54

General

  • Target
    spacedesk_driver_Win_11_64_v2228.msi
  • Size 4.9MB
  • Sample260812-q7j4rawthy
  • SHA256 f2d2a5b1a79ff0dd39ed65c87a5c2182261d12c333ef6e42885d3bcf9d12ef63
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Badlisted process makes network request 1 IoCs

    Network request originating from process or tool commonly abused by malware.

  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Event Triggered Execution: Installer Packages 2 TTPs 1 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Windows\system32\msiexec.exe
    msiexec.exe /I C:\Users\Admin\AppData\Local\Temp\spacedesk_driver_Win_11_64_v2228.msi
    1⤵
    • Badlisted process makes network request
    • Enumerates connected drives
    • Event Triggered Execution: Installer Packages
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    PID:2932
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:940
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding E6F13D1A6EBBD3699A68937BBD850978 C
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:3696
    • C:\Windows\system32\srtasks.exe
      C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
      2⤵
        PID:4928
      • C:\Windows\Installer\MSICC31.tmp
        "C:\Windows\Installer\MSICC31.tmp" -preInstallCheck_64onArm64
        2⤵
          PID:3656
        • C:\Windows\Installer\MSICC8F.tmp
          "C:\Windows\Installer\MSICC8F.tmp" -preInstallCheck_W10
          2⤵
            PID:1436
          • C:\Windows\Installer\MSICDF8.tmp
            "C:\Windows\Installer\MSICDF8.tmp" -qWaveCheck
            2⤵
              PID:5080
            • C:\Windows\Installer\MSICE66.tmp
              "C:\Windows\Installer\MSICE66.tmp" -install_android_control,C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles\
              2⤵
                PID:5924
              • C:\Windows\Installer\MSID145.tmp
                "C:\Windows\Installer\MSID145.tmp" -install_android_usb,C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles\
                2⤵
                  PID:5344
                • C:\Windows\Installer\MSID2AE.tmp
                  "C:\Windows\Installer\MSID2AE.tmp" -install_ktm,C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles\
                  2⤵
                    PID:1992
                  • C:\Windows\Installer\MSID455.tmp
                    "C:\Windows\Installer\MSID455.tmp" -install_hid,C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles\
                    2⤵
                      PID:4284
                    • C:\Windows\Installer\MSID58E.tmp
                      "C:\Windows\Installer\MSID58E.tmp" -install_iddcx,C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles\,0
                      2⤵
                        PID:5932
                      • C:\Windows\Installer\MSID764.tmp
                        "C:\Windows\Installer\MSID764.tmp" -install_audio,C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles\
                        2⤵
                          PID:5536
                        • C:\Windows\Installer\MSID8BD.tmp
                          "C:\Windows\Installer\MSID8BD.tmp" -install_videocap,C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles\
                          2⤵
                            PID:2580
                          • C:\Windows\Installer\MSID9E7.tmp
                            "C:\Windows\Installer\MSID9E7.tmp" -install_bus,C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles\
                            2⤵
                              PID:4780
                            • C:\Windows\Installer\MSIDBBC.tmp
                              "C:\Windows\Installer\MSIDBBC.tmp" -install_server,C:\Program Files\datronicsoft\spacedesk\
                              2⤵
                                PID:4532
                              • C:\Windows\Installer\MSIDC98.tmp
                                "C:\Windows\Installer\MSIDC98.tmp" -openFirewall,C:\Program Files\datronicsoft\spacedesk\
                                2⤵
                                  PID:4172
                                • C:\Windows\Installer\MSIDDE1.tmp
                                  "C:\Windows\Installer\MSIDDE1.tmp" -spacedeskProgramFilesDelete,C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles\
                                  2⤵
                                    PID:3948
                                  • C:\Windows\Installer\MSIE092.tmp
                                    "C:\Windows\Installer\MSIE092.tmp" -otherFirewallCheck
                                    2⤵
                                      PID:932
                                  • C:\Windows\system32\vssvc.exe
                                    C:\Windows\system32\vssvc.exe
                                    1⤵
                                    • Checks SCSI registry key(s)
                                    PID:4684
                                  • C:\Windows\system32\DrvInst.exe
                                    DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{b6291b5e-8ded-254e-a619-06b1059f3d51}\spacedeskDriverAndroidControl.inf" "9" "44282f7e3" "00000000000000EC" "WinSta0\Default" "0000000000000170" "208" "C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles"
                                    1⤵
                                      PID:4244
                                    • C:\Windows\system32\DrvInst.exe
                                      DrvInst.exe "2" "1" "ROOT\SPACEDESK_ANDROID_CONTROL\0000" "C:\Windows\System32\DriverStore\FileRepository\spacedeskdriverandroidcontrol.inf_amd64_2bce1b73c1f63491\spacedeskdriverandroidcontrol.inf" "oem1.inf:*:*:1.0.481.12:ROOT\VID_DATRONICSOFT_PID_SPACEDESK_DRIVER_USB_ANDROID_0001," "44282f7e3" "00000000000000EC" "fb7e"
                                      1⤵
                                        PID:5792
                                      • C:\Windows\system32\DrvInst.exe
                                        DrvInst.exe "4" "1" "C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles\spacedeskDriverAndroidUsb.inf" "9" "4c4c2d17b" "0000000000000180" "WinSta0\Default" "0000000000000170" "208" "C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles"
                                        1⤵
                                          PID:5804
                                        • C:\Windows\system32\DrvInst.exe
                                          DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{c7b2eb52-23df-1c40-b83e-20507b55034d}\spacedeskKtmInputmouse.inf" "9" "431da1b7b" "0000000000000170" "WinSta0\Default" "000000000000019C" "208" "C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles"
                                          1⤵
                                            PID:5760
                                          • C:\Windows\system32\DrvInst.exe
                                            DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{5061f62a-722d-864e-8748-3b93533ab518}\spacedeskDriverHid.inf" "9" "4427793e7" "000000000000019C" "WinSta0\Default" "0000000000000180" "208" "C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles"
                                            1⤵
                                              PID:3068
                                            • C:\Windows\system32\DrvInst.exe
                                              DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{7a57cb32-04a8-3f45-a07f-ff68bbe558bc}\spacedeskdisplay.inf" "9" "442436977" "0000000000000180" "WinSta0\Default" "0000000000000198" "208" "C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles"
                                              1⤵
                                                PID:712
                                              • C:\Windows\system32\DrvInst.exe
                                                DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{b684f77e-0070-7247-877f-2945ac77f07b}\spacedeskDriverAudio.inf" "9" "447268673" "000000000000018C" "WinSta0\Default" "000000000000017C" "208" "C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles"
                                                1⤵
                                                  PID:2372
                                                • C:\Windows\system32\DrvInst.exe
                                                  DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{2bb718d1-3959-0d45-9dcb-1c78c4991ddb}\spacedeskVideoCapture.inf" "9" "434d37797" "000000000000017C" "WinSta0\Default" "0000000000000190" "208" "C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles"
                                                  1⤵
                                                    PID:5752
                                                  • C:\Windows\system32\DrvInst.exe
                                                    DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{0c20b1d7-db98-f94b-9844-0ae25369c8f8}\spacedeskDriverBus.inf" "9" "4522ade83" "00000000000000EC" "WinSta0\Default" "0000000000000178" "208" "C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles"
                                                    1⤵
                                                      PID:1112
                                                    • C:\Windows\system32\DrvInst.exe
                                                      DrvInst.exe "2" "1" "ROOT\SPACEDESK_VIRTUAL_BUS\0000" "C:\Windows\System32\DriverStore\FileRepository\spacedeskdriverbus.inf_amd64_a444cd27146e207e\spacedeskdriverbus.inf" "oem8.inf:*:*:1.0.491.50:Root\VID_DATRONICSOFT_PID_SPACEDESK_VIRTUAL_BUS_0001," "4522ade83" "00000000000000EC" "fb7e"
                                                      1⤵
                                                        PID:904
                                                      • C:\Program Files\datronicsoft\spacedesk\spacedeskService.exe
                                                        "C:\Program Files\datronicsoft\spacedesk\spacedeskService.exe"
                                                        1⤵
                                                          PID:5412
                                                          • C:\Program Files\datronicsoft\spacedesk\spacedeskServiceTray.exe
                                                            This is spacedesk Service calling.
                                                            2⤵
                                                              PID:468
                                                          • C:\Windows\system32\svchost.exe
                                                            C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                            1⤵
                                                              PID:5280

                                                            Network

                                                                  MITRE ATT&CK Enterprise v16

                                                                  Replay Monitor

                                                                  Loading Replay Monitor...

                                                                  Downloads

                                                                  e59c26d.rbs

                                                                  • Path C:\Config.Msi\e59c26d.rbs
                                                                  • Size 562KB
                                                                  • SHA256 1d3136c6e4a7211ce7a2a009cba51eef1a7959c3e4827e6b3f15fff90814b420
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskDisplayUmode1_0.dll

                                                                  • Path C:\PROGRA~1\DATRON~1\SPACED~1\SPACED~1\amd64\spacedeskDisplayUmode1_0.dll
                                                                  • Size 131KB
                                                                  • SHA256 7a22adc212b46c0dcdec394de126776341e5f1c561d1f2e7f1e089c3f6ab42f5
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskDisplayUmode1_4.dll

                                                                  • Path C:\PROGRA~1\DATRON~1\SPACED~1\SPACED~1\amd64\spacedeskDisplayUmode1_4.dll
                                                                  • Size 132KB
                                                                  • SHA256 f4acd48d2ff9b1ba17e6cf7bd4ac4a3819deba2b8e2dfd431c0058d7c4487efa
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskDriverAndroidControl.sys

                                                                  • Path C:\PROGRA~1\DATRON~1\SPACED~1\SPACED~1\amd64\spacedeskDriverAndroidControl.sys
                                                                  • Size 51KB
                                                                  • SHA256 61fb72840fccacdadcd60f86441153f009786257b4479a80a562b8cecf88a0a0
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskDriverAndroidUsb.sys

                                                                  • Path C:\PROGRA~1\DATRON~1\SPACED~1\SPACED~1\amd64\spacedeskDriverAndroidUsb.sys
                                                                  • Size 43KB
                                                                  • SHA256 d4b4037da983411ac8f2c617833680f2ec546a8fc39339fdc51be116b6c79b88
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskDriverAudio.sys

                                                                  • Path C:\PROGRA~1\DATRON~1\SPACED~1\SPACED~1\amd64\spacedeskDriverAudio.sys
                                                                  • Size 125KB
                                                                  • SHA256 913630dd2bacebda06fd30a832cca6aba29bc703700a857663254e383deeb5aa
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskDriverBus.sys

                                                                  • Path C:\PROGRA~1\DATRON~1\SPACED~1\SPACED~1\amd64\spacedeskDriverBus.sys
                                                                  • Size 120KB
                                                                  • SHA256 28a166708326144c8f451af1da52dcc0681d1375915fcd6c8b37664e2d257c95
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskDriverHid.dll

                                                                  • Path C:\PROGRA~1\DATRON~1\SPACED~1\SPACED~1\amd64\spacedeskDriverHid.dll
                                                                  • Size 93KB
                                                                  • SHA256 5dd16671ae6ef9acac404f0ee6eb1d5caa02abc5ad33819826b25612714c3668
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskKtmInput.sys

                                                                  • Path C:\PROGRA~1\DATRON~1\SPACED~1\SPACED~1\amd64\spacedeskKtmInput.sys
                                                                  • Size 41KB
                                                                  • SHA256 3a8501f0eb0d0cc46ceb83f82775fb85ac60209f5fd8b4e54fed5ae45eeeee01
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskVideoCapture.sys

                                                                  • Path C:\PROGRA~1\DATRON~1\SPACED~1\SPACED~1\amd64\spacedeskVideoCapture.sys
                                                                  • Size 87KB
                                                                  • SHA256 86d6afc68cc135685217a5ea13fe64505e145fc079d0dee922cbdbedb3b94790
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskDisplay.cat

                                                                  • Path C:\PROGRA~1\DATRON~1\SPACED~1\SPACED~1\spacedeskDisplay.cat
                                                                  • Size 14KB
                                                                  • SHA256 d2fff70eff8342a191809ccc68b857f2b772056763b33849fc59ec88b61b08cf
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskDriverAndroidControl.cat

                                                                  • Path C:\PROGRA~1\DATRON~1\SPACED~1\SPACED~1\spacedeskDriverAndroidControl.cat
                                                                  • Size 13KB
                                                                  • SHA256 1321395683a3902518c9aaf5492b443492884478363630e040d1424fef247b70
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskDriverAndroidUsb.cat

                                                                  • Path C:\PROGRA~1\DATRON~1\SPACED~1\SPACED~1\spacedeskDriverAndroidUsb.cat
                                                                  • Size 13KB
                                                                  • SHA256 a88742e0c3721a629ca54d451af3bcd4844ec2c35160c257c88d416bb25925ac
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskDriverBus.cat

                                                                  • Path C:\PROGRA~1\DATRON~1\SPACED~1\SPACED~1\spacedeskDriverBus.cat
                                                                  • Size 13KB
                                                                  • SHA256 8620615689614b19b50d34aef1ad97719915d96cb5e530c3d14c8da807e88329
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskDriverHid.cat

                                                                  • Path C:\PROGRA~1\DATRON~1\SPACED~1\SPACED~1\spacedeskDriverHid.cat
                                                                  • Size 13KB
                                                                  • SHA256 c4fcd710306842ddcbdb77fb2867fe46d8262761491021f3f56cba3b711cbe68
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskKtmInputmouse.cat

                                                                  • Path C:\PROGRA~1\DATRON~1\SPACED~1\SPACED~1\spacedeskKtmInputmouse.cat
                                                                  • Size 13KB
                                                                  • SHA256 cb463f773916e3c3a9ac54baf7b492a046982d8ede2f1a2c28e43ce3e703dfa3
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskdriveraudio.cat

                                                                  • Path C:\PROGRA~1\DATRON~1\SPACED~1\SPACED~1\spacedeskdriveraudio.cat
                                                                  • Size 17KB
                                                                  • SHA256 567984e144c87a6e130ab78786d7a459ed55c635dc9fe70c78d7d58e126ddc37
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskvideocapture.cat

                                                                  • Path C:\PROGRA~1\DATRON~1\SPACED~1\SPACED~1\spacedeskvideocapture.cat
                                                                  • Size 13KB
                                                                  • SHA256 fc586a54475c50ba3ede57ce1b16af5c47531d7495796b1c728de9c80ebf667f
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskService.exe

                                                                  • Path C:\Program Files\datronicsoft\spacedesk\spacedeskService.exe
                                                                  • Size 4.7MB
                                                                  • SHA256 7b644c359c13b54330887c7d1c760971fa7c35e26be35e520d6f1c6f4fbd5107
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskServiceTray.exe

                                                                  • Path C:\Program Files\datronicsoft\spacedesk\spacedeskServiceTray.exe
                                                                  • Size 444KB
                                                                  • SHA256 5272e6a44840bd117a2b9eb19ee43267989523c1cd4e4420441b8c1401eb752d
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskDriverAndroidControl.inf

                                                                  • Path C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles\spacedeskDriverAndroidControl.inf
                                                                  • Size 3KB
                                                                  • SHA256 7373901762a18e9b6a85afc8506d4a09c8f2314c8ceea62a165eae5f919b5b74
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  spacedeskDriverAndroidUsb.inf

                                                                  • Path C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles\spacedeskDriverAndroidUsb.inf
                                                                  • Size 4KB
                                                                  • SHA256 141ed600b37231bb2909e93ca36301bd45a862b93203a43d00d12a4728e3e19f
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskDriverAudio.inf

                                                                  • Path C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles\spacedeskDriverAudio.inf
                                                                  • Size 22KB
                                                                  • SHA256 21adb4cf5e36899372945cd08ccf9ebfa2fca9928dd04d57f902842be288b6ce
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskDriverBus.inf

                                                                  • Path C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles\spacedeskDriverBus.inf
                                                                  • Size 2KB
                                                                  • SHA256 b129f5e1e6c89da8dc0741067586530f3743f4d41a2297c0bf3e9705beb4d5c9
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  spacedeskDriverHid.inf

                                                                  • Path C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles\spacedeskDriverHid.inf
                                                                  • Size 10KB
                                                                  • SHA256 fd960b29efcf52f0bbf30dc767ee11f131f0b1978fe9c3738358133a749c4c01
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskKtmInputmouse.inf

                                                                  • Path C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles\spacedeskKtmInputmouse.inf
                                                                  • Size 2KB
                                                                  • SHA256 7b5650555802f6369936acea3a16f81840b4f153cb3429c317057e1b6baa1596
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  spacedeskVideoCapture.inf

                                                                  • Path C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles\spacedeskVideoCapture.inf
                                                                  • Size 16KB
                                                                  • SHA256 f61a34a7269c4f23660aeb34bdf9b0bb92b394aa315808abcb3a8be042e56498
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskdisplay.inf

                                                                  • Path C:\Program Files\datronicsoft\spacedesk\spacedeskTemporarySetupFiles\spacedeskdisplay.inf
                                                                  • Size 6KB
                                                                  • SHA256 a0febd7ab68e8c752bc56a8f0fe52b552fb371520ccf7526543c4db6dd12af8c
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  MSI742C.tmp

                                                                  • Path C:\Users\Admin\AppData\Local\Temp\MSI742C.tmp
                                                                  • Size 132KB
                                                                  • SHA256 7f47d98ab25cfea9b3a2e898c3376cc9ba1cd893b4948b0c27caa530fd0e34cc
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskSetup.log

                                                                  • Path C:\Users\Public\spacedeskSetup.log
                                                                  • Size 11KB
                                                                  • SHA256 e1168075b97a1ca6906c422338d360a45890e74af4385063e9645765d3476b79
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskSetup.log

                                                                  • Path C:\Users\Public\spacedeskSetup.log
                                                                  • Size 11KB
                                                                  • SHA256 8df47637ea5e83f9a0fd4afea76cc76bfdab7bd37d3648712ade46b4eaf080e1
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskSetup.log

                                                                  • Path C:\Users\Public\spacedeskSetup.log
                                                                  • Size 12KB
                                                                  • SHA256 a372a80b51dd14bbc1b929d69b5e6093b27c6d8ef8bf1223340a4fefcfd91806
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskSetup.log

                                                                  • Path C:\Users\Public\spacedeskSetup.log
                                                                  • Size 12KB
                                                                  • SHA256 6fd14d7601888f9fb7cab44afab692b7357371998e65acea254cc7dd3ec803d4
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskSetup.log

                                                                  • Path C:\Users\Public\spacedeskSetup.log
                                                                  • Size 13KB
                                                                  • SHA256 aa931048a433b089c02695bf55af7de069b820da9777c76529636e0156ab9072
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskSetup.log

                                                                  • Path C:\Users\Public\spacedeskSetup.log
                                                                  • Size 13KB
                                                                  • SHA256 5cccaee925a38f7d5eeedbdcf730ae5404b81c894517c9e04a0aba98ddb7602e
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskSetup.log

                                                                  • Path C:\Users\Public\spacedeskSetup.log
                                                                  • Size 14KB
                                                                  • SHA256 8bbdfd88b37a1930e017934ff9bb038fd7c17cf4ad25da6a107b0ab09afe9a83
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskSetup.log

                                                                  • Path C:\Users\Public\spacedeskSetup.log
                                                                  • Size 14KB
                                                                  • SHA256 7a70cf91489401e3c47aa39d5d7e6b0c6dcac42711b811d1685dc77f94c43470
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskSetup.log

                                                                  • Path C:\Users\Public\spacedeskSetup.log
                                                                  • Size 15KB
                                                                  • SHA256 b60a55f1f56129adae6d5aca47bb87f8fb92c3c930393f0b113f17454e9968f7
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskSetup.log

                                                                  • Path C:\Users\Public\spacedeskSetup.log
                                                                  • Size 16KB
                                                                  • SHA256 b7ed82288af81c9afe368a10339438857ea7d38608065142a328d5b1915b6efd
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskSetup.log

                                                                  • Path C:\Users\Public\spacedeskSetup.log
                                                                  • Size 173B
                                                                  • SHA256 9acfef87b989eb7caffec0349be348eed1d290efdc4700b6185d276b2a0cb429
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  spacedeskSetup.log

                                                                  • Path C:\Users\Public\spacedeskSetup.log
                                                                  • Size 16KB
                                                                  • SHA256 6e307ac6e58daf00e943ad9f3db2dbe931a3bc7d40734c1e79296d203e837d91
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskSetup.log

                                                                  • Path C:\Users\Public\spacedeskSetup.log
                                                                  • Size 740B
                                                                  • SHA256 77d5403d48e869e1e1f2488bfe80ebfc1ddcf35e94cf0a3e1045aaff8a8fbfe5
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  spacedeskSetup.log

                                                                  • Path C:\Users\Public\spacedeskSetup.log
                                                                  • Size 6KB
                                                                  • SHA256 90af335713e78b037164753427e143eaa91eb52663e4a28f0044234b99281e2b
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  oem0.PNF

                                                                  • Path C:\Windows\INF\oem0.PNF
                                                                  • Size 6KB
                                                                  • SHA256 b650e0614a8388cbf3425d84911eab50471117881c17fc200ba0497b853e1c04
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  MSICC31.tmp

                                                                  • Path C:\Windows\Installer\MSICC31.tmp
                                                                  • Size 545KB
                                                                  • SHA256 83289a983a04c835e2897b1f97f8a220cfd86a053fd62d95891251aaa3b91d9f
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  e59c26c.msi

                                                                  • Path C:\Windows\Installer\e59c26c.msi
                                                                  • Size 4.9MB
                                                                  • SHA256 f2d2a5b1a79ff0dd39ed65c87a5c2182261d12c333ef6e42885d3bcf9d12ef63
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  dberr.txt

                                                                  • Path C:\Windows\System32\CatRoot2\dberr.txt
                                                                  • Size 63KB
                                                                  • SHA256 528ae4a383aa9514d744a1fba5c996ad0f0d462c3da088df10edd88ea90fc45b
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  dberr.txt

                                                                  • Path C:\Windows\System32\CatRoot2\dberr.txt
                                                                  • Size 64KB
                                                                  • SHA256 4c3bf04f969dba2199e6e368d533a90e5d9e6515e37bf1e382e4c1f417d606a4
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  dberr.txt

                                                                  • Path C:\Windows\System32\CatRoot2\dberr.txt
                                                                  • Size 64KB
                                                                  • SHA256 b7881830efff1c130e0efb0d67e16407e90678cdb751cbffbc567b83250ebec1
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  dberr.txt

                                                                  • Path C:\Windows\System32\CatRoot2\dberr.txt
                                                                  • Size 64KB
                                                                  • SHA256 84b303416d6751c216894ee220648cfcc95398b6ce9cc1c935df352ca1d01aba
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  dberr.txt

                                                                  • Path C:\Windows\System32\CatRoot2\dberr.txt
                                                                  • Size 64KB
                                                                  • SHA256 6dd99b7fc1a83d6f918c5116136384a117842ae17235978a7978ccf040540dfb
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  dberr.txt

                                                                  • Path C:\Windows\System32\CatRoot2\dberr.txt
                                                                  • Size 64KB
                                                                  • SHA256 1f7c97e9bedb5c641078bd83a34156890f1c47982d554bacfe6a16ecb0638f7d
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  dberr.txt

                                                                  • Path C:\Windows\System32\CatRoot2\dberr.txt
                                                                  • Size 64KB
                                                                  • SHA256 006da5ee2292e3ed96c744b80253693645c4391be42bfdbb89b6886fb84adc57
                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                  spacedeskdisplay.inf_amd64_2646e9eadb9a5429.ini

                                                                  • Path C:\Windows\System32\DriverStore\FileRepository\spacedeskdisplay.inf_amd64_2646e9eadb9a5429.ini
                                                                  • Size 604B
                                                                  • SHA256 86b85202f54749d7ed0619f415e19cd863f9b928d2d74f2daeb80872f78ba8c7
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  spacedeskdriverandroidcontrol.inf_amd64_2bce1b73c1f63491.ini

                                                                  • Path C:\Windows\System32\DriverStore\FileRepository\spacedeskdriverandroidcontrol.inf_amd64_2bce1b73c1f63491.ini
                                                                  • Size 510B
                                                                  • SHA256 84ad4a1eb04ff0e750e2ef203fa684af56bc83b31afa5bbe26e00414b9467b21
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  spacedeskdriverandroidusb.inf_amd64_a4f3ef355b307846.ini

                                                                  • Path C:\Windows\System32\DriverStore\FileRepository\spacedeskdriverandroidusb.inf_amd64_a4f3ef355b307846.ini
                                                                  • Size 494B
                                                                  • SHA256 c85be75e8d36071dd5f6401d2c111e98d68daebe5e0d8ec79c7cc56fb4746d56
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  spacedeskdriveraudio.inf_amd64_c3421bce8309f8c6.ini

                                                                  • Path C:\Windows\System32\DriverStore\FileRepository\spacedeskdriveraudio.inf_amd64_c3421bce8309f8c6.ini
                                                                  • Size 476B
                                                                  • SHA256 56519ce190cd4642ae810fd5db506ae26f6fd8e6fd5d83a058f11ae052bec3a0
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  spacedeskdriverbus.inf_amd64_a444cd27146e207e.ini

                                                                  • Path C:\Windows\System32\DriverStore\FileRepository\spacedeskdriverbus.inf_amd64_a444cd27146e207e.ini
                                                                  • Size 467B
                                                                  • SHA256 780a87265b98b9958860e20c2635c9233f272db625870cf15e33d8858f224d64
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  spacedeskdriverhid.inf_amd64_588de31f3ca05fbf.ini

                                                                  • Path C:\Windows\System32\DriverStore\FileRepository\spacedeskdriverhid.inf_amd64_588de31f3ca05fbf.ini
                                                                  • Size 467B
                                                                  • SHA256 3ea93be4246fc33a437607fd1a99364ba7fa3d43f33cd5ae5a928c4126b92fcf
                                                                  • MD5 SHA1 SHA512 TLSH

                                                                  spacedeskvideocapture.inf_amd64_c1d259a2eb99096b.ini

                                                                  • Path C:\Windows\System32\DriverStore\FileRepository\spacedeskvideocapture.inf_amd64_c1d259a2eb99096b.ini
                                                                  • Size 479B
                                                                  • SHA256 d6820abab70a7ab2dc225b1fad3e45070f78fb8154223fce80f287ca7ff58446
                                                                  • MD5 SHA1 SHA512 TLSH