Technical Information
To ensure autorun and distribution
Sets the following service settings
- [<HKLM>\System\CurrentControlSet\Services\LDrvSvc] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\LDrvSvc] 'ImagePath' = '<SYSTEM32>\svchost.exe -k LocalDriverService'
- [<HKLM>\SYSTEM\CurrentControlSet\Services\LDrvSvc\Parameters] 'ServiceDll' = '%ProgramFiles(x86)%\OSTotoSoft\DriverTalent\LDrvSvc.dll'
Creates the following services
- 'LDrvSvc' <SYSTEM32>\svchost.exe -k LocalDriverService
Malicious functions
Executes the following
- '%WINDIR%\syswow64\taskkill.exe' /f /im "DriverTalent.exe"
Modifies file system
Creates the following files
- %TEMP%\rarsfx0\replace.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\devcfg.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\difxapi.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\drivertalent.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\drv64\dev32.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\drv64\dev64.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\drv64\devcon32.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\drv64\devcon64.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\drv64\difxapi.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\drv64\difxapi64.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\drv64\drv32.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\drv64\drv64.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\drv64\drvsigner.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\drv64\drvsigner64.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\drv64\signfile.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\drvallrepair.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\drvbak.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\drvget.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtcleaner.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtl7z.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtl7z.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtlautosetup.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrvuninst.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtlmanualupdate.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtlplug.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtlsdkconfig.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\detoured.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtlui.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\cpuidsdk64.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\bios.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\spanish.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\systemlan.xml
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\turkish.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\userconfig.dat
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\andherewego.mp3
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\helper_res.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\lan\scp_english.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\lan\scp_korean.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\power_service\win10 32 power.reg
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\power_service\win10 64 power.reg
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\power_service\win7 32 power.reg
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\power_service\win7 64 power.reg
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\power_service\win8.1 32 power.reg
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\power_service\win8.1 64 power.reg
- %ProgramFiles(x86)%\ostotosoft\drivertalent\7z.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\appupdate\checkupdate.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\appupdate\dtlupdate.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\autosetup\difxapi.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\autosetup\difxapi64.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\autosetup\drv32.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\autosetup\drv64.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\autosetup\dtldevapi.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\autosetup\dtldevcon32.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\autosetup\dtldevcon64.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\autosetup\innoextract.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\cpuidsdk.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\amd_sysfile\amd_xata.sys
- %ProgramFiles(x86)%\ostotosoft\drivertalent\downloadinfo.db-journal
- %ProgramFiles(x86)%\ostotosoft\drivertalent\flpcclean.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\dtlui.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\gzipdll.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\helpcore.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\helper.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\soundcardrepair.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\sqlcache.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\sqlite3.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\traytool.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\uninstall.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\uninstall.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\usbenum.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\userfeedback.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\webad\dtlui.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\webad\webadshowtool.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\webad\wke.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\zlibwapi.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtinstui.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\substat.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\pcid.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\uninst.dar0
- %ProgramFiles(x86)%\ostotosoft\drivertalent\uninst.dar1
- C:\users\public\desktop\driver talent.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\driver talent\driver talent.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\driver talent\uninstall driver talent.lnk
- %APPDATA%\drivertalent\config\userconfig.dat
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\drvinst64.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\slovenian.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\drvinst32.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\amd_sysfile\amd_sata.sys
- %ProgramFiles(x86)%\ostotosoft\drivertalent\gamerepair.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\gamerepair\directs32.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\gamerepair\directs64.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\gzipdll.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\hardware.exe
- %ProgramFiles(x86)%\ostotosoft\drivertalent\hardware\hwinfo\cpuidsdk.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\hardware\hwinfo\cpuidsdk64.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\hardware\hwinfo\hardwareinfo.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\hwinfosdk.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\ldrvsvc.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\libcurl.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\libcurl_vs2015.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\libdriversearch.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\libnetwork.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\manualupdate.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\monreboot.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\netprtdrv.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\netprtenum.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\nvaudcap32v.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\nvaudcap64v.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\pcidetect.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\pcidrv.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\pcioffdrv.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\pnpdrv.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\soundcardrepair\7z.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtlzip.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\feedback.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\russian.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv2\drv0.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\config\externalapptemp.xml
- %ProgramFiles(x86)%\ostotosoft\drivertalent\config\gamelist.json
- %ProgramFiles(x86)%\ostotosoft\drivertalent\config\pricelist.json
- %ProgramFiles(x86)%\ostotosoft\drivertalent\config\toolbox_png_conquerorlive_1.png
- %ProgramFiles(x86)%\ostotosoft\drivertalent\config\toolbox_png_conquerorlive_2.png
- %ProgramFiles(x86)%\ostotosoft\drivertalent\config\toolbox_png_dtcleaner.png
- %ProgramFiles(x86)%\ostotosoft\drivertalent\config\toolbox_png_gamerepair.png
- %ProgramFiles(x86)%\ostotosoft\drivertalent\config\toolbox_png_hardwaredetection_1.png
- %ProgramFiles(x86)%\ostotosoft\drivertalent\config\toolbox_png_hardwaredetection_2.png
- %ProgramFiles(x86)%\ostotosoft\drivertalent\config\userconfig.dat
- %ProgramFiles(x86)%\ostotosoft\drivertalent\config\wps1.png
- %ProgramFiles(x86)%\ostotosoft\drivertalent\config\wps2.png
- %ProgramFiles(x86)%\ostotosoft\drivertalent\data\devicemanuf.db3
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtlconfig\dtlsetup.xml
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtlconfig\unsetup.xml
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtlconfig\wndconfigdata.xml
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv0\drv0.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv0\drv1.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv0\drv2.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv0\drv3.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv0\drv4.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv0\drv5.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv0\drv6.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv1\drv0.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv1\drv1.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\config\externalapp.xml
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv1\drv2.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\config\audio_repair_2.png
- %ProgramFiles(x86)%\ostotosoft\drivertalent\cleanconfig.dat
- %TEMP%\rarsfx0\cybermania.url
- %TEMP%\rarsfx0\drivertalent_setup.exe
- %TEMP%\hot8dbe.tmp\instlan\armenian.ini
- %TEMP%\hot8dbe.tmp\instlan\bulgarian.ini
- %TEMP%\hot8dbe.tmp\instlan\english.ini
- %TEMP%\hot8dbe.tmp\instlan\french.ini
- %TEMP%\hot8dbe.tmp\instlan\german.ini
- %TEMP%\hot8dbe.tmp\instlan\greek.ini
- %TEMP%\hot8dbe.tmp\instlan\japanese.ini
- %TEMP%\hot8dbe.tmp\instlan\korean.ini
- %TEMP%\hot8dbe.tmp\instlan\polish.ini
- %TEMP%\hot8dbe.tmp\instlan\portuguese.ini
- %TEMP%\hot8dbe.tmp\instlan\russian.ini
- %TEMP%\hot8dbe.tmp\instlan\spanish.ini
- %TEMP%\hot8dbe.tmp\instlan\turkish.ini
- %TEMP%\hot8dbe.tmp\dtinstui.dll
- %TEMP%\hot8dbe.tmp\pcid.dll
- %TEMP%\hot8dbe.tmp\substat.dll
- %ProgramFiles(x86)%\ostotosoft\drivertalent\autosetup\disablelogging.reg
- %ProgramFiles(x86)%\ostotosoft\drivertalent\autosetup\enablefulllogging.reg
- %ProgramFiles(x86)%\ostotosoft\drivertalent\autosetup\filter.proc
- %ProgramFiles(x86)%\ostotosoft\drivertalent\cache\softico\125-1.png
- %ProgramFiles(x86)%\ostotosoft\drivertalent\cache\softico\125-10.png
- %ProgramFiles(x86)%\ostotosoft\drivertalent\cache\softico\125-2.png
- %ProgramFiles(x86)%\ostotosoft\drivertalent\cache\softico\125-5.png
- %ProgramFiles(x86)%\ostotosoft\drivertalent\config\audio_repair_1.png
- %ProgramFiles(x86)%\ostotosoft\drivertalent\hardware\lan\language_hardware_spanish.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\portuguese.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv2\drv1.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\arabic.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\armenian.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\bulgarian.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\english.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\french.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\german.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\greek.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\japanese.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\korean.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\language_userfeedback.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\language_userfeedback_arabic.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\language_userfeedback_armenian.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\language_userfeedback_bulgarian.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\language_userfeedback_french.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\language_userfeedback_german.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\language_userfeedback_greek.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\language_userfeedback_japanese.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\language_userfeedback_korean.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\language_userfeedback_polish.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\language_userfeedback_portuguese.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\language_userfeedback_russian.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\language_userfeedback_spanish.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\language_userfeedback_turkish.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\persian.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\polish.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\key.dat
- %ProgramFiles(x86)%\ostotosoft\drivertalent\lan\readme.txt
- %ProgramFiles(x86)%\ostotosoft\drivertalent\hardware\vr_info.xml
- %ProgramFiles(x86)%\ostotosoft\drivertalent\hardware\lan\language_hardware_russian.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv2\drv2.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv2\drv3.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv3\drv0.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv3\drv1.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv3\drv2.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv3\drv3.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv3\drv4.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv3\drv5.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv3\drv6.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\wdmaudio\win7_x64\wdmaudio.inf
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\wdmaudio\win7_x86\wdmaudio.inf
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\wdmaudio\win8.1_x64\wdmaudio.inf
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\wdmaudio\win8.1_x86\wdmaudio.inf
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\wdmaudio\win8_x64\wdmaudio.inf
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\wdmaudio\win8_x86\wdmaudio.inf
- %ProgramFiles(x86)%\ostotosoft\drivertalent\filter.proc
- %ProgramFiles(x86)%\ostotosoft\drivertalent\hardware\hwinfo\devicemanuf.db3
- %ProgramFiles(x86)%\ostotosoft\drivertalent\hardware\lan\language_hardware.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\hardware\lan\language_hardware_arabic.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\hardware\lan\language_hardware_armenian.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\hardware\lan\language_hardware_french.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\hardware\lan\language_hardware_german.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\hardware\lan\language_hardware_japanese.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\hardware\lan\language_hardware_korean.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\hardware\lan\language_hardware_portuguese.ini
- %ProgramFiles(x86)%\ostotosoft\drivertalent\dtldrv\dtldrv1\drv3.7zz
- %ProgramFiles(x86)%\ostotosoft\drivertalent\downloadinfo.db
Deletes the following files
- %ProgramFiles(x86)%\ostotosoft\drivertalent\downloadinfo.db-journal
- %ProgramFiles(x86)%\ostotosoft\drivertalent\config\externalapptemp.xml
- %TEMP%\rarsfx0\cybermania.url
- %TEMP%\rarsfx0\drivertalent_setup.exe
- %TEMP%\rarsfx0\replace.exe
Substitutes the following files
- %ProgramFiles(x86)%\ostotosoft\drivertalent\downloadinfo.db-journal
- %ProgramFiles(x86)%\ostotosoft\drivertalent\config\externalapptemp.xml
Network activity
Connects to
- 'microsoft.com':80
- 'in#####.##tegrate.drivethelife.com':80
- 'localhost':49180
- 'in#.####ng.drivethelife.com':80
- 'localhost':49184
- 'localhost':49186
- 'li#####.drivethelife.com':80
- 'ge###toway.com':443
TCP
HTTP GET requests
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- http://in#####.##tegrate.drivethelife.com/common/IntegrateInstallStat.ashx?v=#####################
- http://in#.####ng.drivethelife.com/api/externalapp?v=#
HTTP POST requests
- http://in#.####ng.drivethelife.com/api/networkspeed
- http://in#.####ng.drivethelife.com/api/vinfo
- http://li#####.drivethelife.com/v2/activate
Other
- 'localhost':49180
- 'localhost':49181
- 'localhost':49184
- 'localhost':49186
- 'localhost':49185
- 'localhost':49187
- 'ge###toway.com':443
UDP
- DNS ASK microsoft.com
- DNS ASK di######.#ntegrate.drivethelife.com
- DNS ASK on#####.##tegrate.drivethelife.com
- DNS ASK be##########er.integrate.drivethelife.com
- DNS ASK in#####.##tegrate.drivethelife.com
- DNS ASK au#######er.drivethelife.com
- DNS ASK dt#######.#ileupdate.drivethelife.com
- DNS ASK in#.####ng.drivethelife.com
- DNS ASK li#####.drivethelife.com
- DNS ASK ge###toway.com
- 'di######.#ntegrate.drivethelife.com':3800
- 'di######.#ntegrate.drivethelife.com':6130
- 'di######.#ntegrate.drivethelife.com':7020
- 'au#######er.drivethelife.com':7700
- 'di######.#ntegrate.drivethelife.com':6000
Miscellaneous
Searches for the following windows
- ClassName: 'EDIT' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- ClassName: 'Static' WindowName: ''
Creates and executes the following
- '%TEMP%\rarsfx0\drivertalent_setup.exe' /silent
- '%ProgramFiles(x86)%\ostotosoft\drivertalent\drivertalent.exe'
- '%TEMP%\rarsfx0\replace.exe'
Executes the following
- '%WINDIR%\syswow64\svchost.exe' -k LocalDriverService
- '%WINDIR%\syswow64\reg.exe' add "HKLM\SOFTWARE\OSTotoSoft\DriverTalent" /v "BoundSerialNo" /t REG_SZ /d "11111-22222-33333-44444-55555" /f
- '%WINDIR%\syswow64\reg.exe' add "HKLM\SOFTWARE\OSTotoSoft\DriverTalent" /v "SerialNo" /t REG_SZ /d "123456789012345678901234567890123456789012345678901234567890" /f
