Overview
overview
8Static
static
3DriverEasy...00.rar
windows10-ltsc_2021-x64
1App/AppInf...om.nsh
windows10-ltsc_2021-x64
3App/AppInf...le.ini
windows10-ltsc_2021-x64
1App/AppInf...on.ico
windows10-ltsc_2021-x64
3App/AppInf...fo.ini
windows10-ltsc_2021-x64
1App/Defaul...se.xml
windows10-ltsc_2021-x64
3App/Defaul...gs.xml
windows10-ltsc_2021-x64
3App/Driver...7z.dll
windows10-ltsc_2021-x64
1App/Driver...86.dll
windows10-ltsc_2021-x64
3App/Driver...ve.dll
windows10-ltsc_2021-x64
3App/Driver...64.dll
windows10-ltsc_2021-x64
1App/Driver...fo.dll
windows10-ltsc_2021-x64
3App/Driver...64.dll
windows10-ltsc_2021-x64
1App/Driver...sy.exe
windows10-ltsc_2021-x64
4App/Driver...xe.xml
windows10-ltsc_2021-x64
3App/Driver...re.dll
windows10-ltsc_2021-x64
1App/Driver...on.exe
windows10-ltsc_2021-x64
5App/Driver...ns.dll
windows10-ltsc_2021-x64
1App/Driver...on.dll
windows10-ltsc_2021-x64
1App/Driver...rp.dll
windows10-ltsc_2021-x64
1App/Driver...or.dll
windows10-ltsc_2021-x64
1App/Driver...on.dll
windows10-ltsc_2021-x64
1App/Driver...le.dll
windows10-ltsc_2021-x64
1App/Driver...ns.dll
windows10-ltsc_2021-x64
1App/Driver...ay.dll
windows10-ltsc_2021-x64
1App/Driver...Ui.dll
windows10-ltsc_2021-x64
1App/Driver...et.dll
windows10-ltsc_2021-x64
1DriverEasy...le.exe
windows10-ltsc_2021-x64
8Analysis
- max time kernel
149s - max time network
142s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-fr - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-frlocale:fr-fros:windows10-ltsc_2021-x64systemwindows - submitted
06/09/2026, 23:54
Static task
static1
Behavioral task
behavioral1
Sample
DriverEasyPortable_7.1.3.5200.rar
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral2
Sample
App/AppInfo/Launcher/Custom.nsh
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral3
Sample
App/AppInfo/Launcher/DriverEasyPortable.ini
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral4
Sample
App/AppInfo/appicon.ico
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral5
Sample
App/AppInfo/appinfo.ini
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral6
Sample
App/DefaultData/Easeware/DriverEasy/license.xml
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral7
Sample
App/DefaultData/Easeware/DriverEasy/settings.xml
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral8
Sample
App/DriverEasy/Dependency/7z.dll
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral9
Sample
App/DriverEasy/Dependency/7z86.dll
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral10
Sample
App/DriverEasy/Dependency/DeNative.dll
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral11
Sample
App/DriverEasy/Dependency/DeNative64.dll
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral12
Sample
App/DriverEasy/Dependency/HardwareInfo.dll
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral13
Sample
App/DriverEasy/Dependency/HardwareInfo64.dll
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral14
Sample
App/DriverEasy/DriverEasy.exe
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral15
Sample
App/DriverEasy/DriverEasy.exe.xml
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral16
Sample
App/DriverEasy/Easeware.Driver.Core.dll
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral17
Sample
App/DriverEasy/Easeware.Driver.UI.Notification.exe
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral18
Sample
App/DriverEasy/Microsoft.Toolkit.Uwp.Notifications.dll
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral19
Sample
App/DriverEasy/Newtonsoft.Json.dll
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral20
Sample
App/DriverEasy/SevenZipSharp.dll
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral21
Sample
App/DriverEasy/SimpleInjector.dll
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral22
Sample
App/DriverEasy/System.Management.Automation.dll
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral23
Sample
App/DriverEasy/System.ValueTuple.dll
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral24
Sample
App/DriverEasy/Wpf.Ui.Abstractions.dll
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral25
Sample
App/DriverEasy/Wpf.Ui.Tray.dll
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral26
Sample
App/DriverEasy/Wpf.Ui.dll
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral27
Sample
App/DriverEasy/log4net.dll
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
Behavioral task
behavioral28
Sample
DriverEasyPortable.exe
Resource
win10ltsc2021-20260513-fr
windows10-ltsc_2021-x64
General
- Target App/DriverEasy/DriverEasy.exe
- Size 2.6MB
- Sample260906-3x6afssyet
- SHA256 9e5bff160910c1d2fa186e25d0cc878f5d98e91a66103e912202abb0ae5976ab
- MD5 f41875924d0446fc516321146dcae65b
- SHA1 380a9bbe89287871fac50d659b141deaf29c90c0
- SHA512 34b76161ff0894c3148e6e32a86f0e94c68a57f6532764adc24a33cdaef6f16130080490bfaf6acf33acdd87f600026885035165bb2b966ebeb37e943fe5dc88
- SSDEEP 24576:7Kb2dH5ZFU0fEDRrMOJZUtwCfDx8fp1/HwCfMbNKqFrxk:W2dH5ZFZfEJMludqFe
- TLSH T17BC50626B2774DB9CC0D02779066F55C3F943F8953A1A6E4F8CFCF1A60CA10986E5A36
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Drops file in Windows directory 7 IoCs
description ioc Process File created C:\Windows\INF\c_processor.PNF DriverEasy.exe File created C:\Windows\INF\c_monitor.PNF DriverEasy.exe File created C:\Windows\INF\c_media.PNF DriverEasy.exe File created C:\Windows\INF\c_display.PNF DriverEasy.exe File created C:\Windows\INF\c_diskdrive.PNF DriverEasy.exe File created C:\Windows\Tasks\Driver Easy Scheduled Scan.job DriverEasy.exe File opened for modification C:\Windows\Tasks\Driver Easy Scheduled Scan.job DriverEasy.exe - Checks SCSI registry key(s) 3 TTPs 56 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs DriverEasy.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 DriverEasy.exe Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ClassGUID DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Class DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ParentIdPrefix DriverEasy.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001 DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\LocationInformation DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\ClassGUID DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Driver DriverEasy.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000 DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Mfg DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Mfg DriverEasy.exe Key enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A DriverEasy.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Driver DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Mfg DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Service DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Driver DriverEasy.exe Key enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Mfg DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Service DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Service DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID DriverEasy.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI DriverEasy.exe Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\FriendlyName DriverEasy.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002 DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\ParentIdPrefix DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ClassGUID DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Class DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\LocationInformation DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\LocationInformation DriverEasy.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A DriverEasy.exe Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\LocationInformation DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ParentIdPrefix DriverEasy.exe Key enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI DriverEasy.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs DriverEasy.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Driver DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\ParentIdPrefix DriverEasy.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 DriverEasy.exe Key enumerated \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\Service DriverEasy.exe Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\ClassGUID DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\FriendlyName DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID DriverEasy.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName DriverEasy.exe - Suspicious behavior: EnumeratesProcesses 7 IoCs
pid Process 3836 DriverEasy.exe 3836 DriverEasy.exe 3836 DriverEasy.exe 3836 DriverEasy.exe 3836 DriverEasy.exe 3836 DriverEasy.exe 3836 DriverEasy.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3836 DriverEasy.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 3836 DriverEasy.exe 3836 DriverEasy.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 3836 DriverEasy.exe 3836 DriverEasy.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\App\DriverEasy\DriverEasy.exe"C:\Users\Admin\AppData\Local\Temp\App\DriverEasy\DriverEasy.exe"1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:3836
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Windows\Tasks\Driver Easy Scheduled Scan.job
- Size 468B
- SHA256 43c3a8cac27ac44a777a6e18746e019918e296e219172b0ab9835068faee2ed6
- MD5 3eea9d3bc9a0bba941ee28eb460120f9
- SHA1 828a5478881595eabccce3a213e29675eda5524b
- SHA512 01e99a25a61e8e76b0f4d63b4acab05c97525a0172903ea9bae757fdd3b312836d315fb266f060d60e39f0ab98c747c37f010948a23b00d7bb8f3d4b97cc09a9
- TLSH T188F01A56E7FD1400F7BB2B71ABF2A0240ABDBCB0ADA2A21D440491484D76E218BA1725
- MD5 SHA1 SHA512 TLSH