EchoTrail

spacedesk Windows DRIVER 2.2.35.0

by datronicsoft Inc.installer signed by Datronicsoft Inc.Valid

Sources: observed in the EchoTrail lab on Windows 11 on November 11, 2026.

The install

Installer
spacedesk_driver_win_11_64_v2235.msi
Installer type
msi
Installed through
a type-detected silent switch
Install directory
C:\Program Files\datronicsoft
Launched
spacedeskConsole.exe
Windows
Windows 11
Date
November 11, 2026
Executables dropped
3

installer sha256 7c27db729fb66aa64843e5ba21d4793631e52743a7ad58ae9654d444465ca641

The lab used spacedesk Windows DRIVER for 2 minutes, changed a setting, then rebooted and watched what came back.

On screen

Frames from the lab session, cropped to spacedesk Windows DRIVER's own windows.

spacedesk Windows DRIVER 2.2.35.0: Main window
Main window. The spacedesk Driver Console main window is open on the CONTROL page, showing the driver ON, boot-time and password options, and delay settings.
spacedesk Windows DRIVER 2.2.35.0: Worth a look
Worth a look. The Incompatible Software Products page is shown in the Driver Console, with a Windows Security notification about the firewall in the corner.
spacedesk Windows DRIVER 2.2.35.0: Worth a look
Worth a look. The Incompatible Software Products page is shown in the Driver Console, with a Windows Security toast notification about threats found overlapping the desktop outside the app.

What it dropped

Executables

  • spacedeskservice.exesigned by CN=Datronicsoft Inc., O=Datronicsoft Inc., L=Pasig, C=PH, SERIALNUMBER=CS200615903, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.3=PHValidran during the lab session
    C:\Program Files\datronicsoft\spacedesk\spacedeskService.exe
    sha256 d2a7f15ffb0a49abe8716b118412c69170bdbd72d9ed5a9d5f9af511aed81508
  • spacedeskconsole.exesigned by CN=Datronicsoft Inc., O=Datronicsoft Inc., L=Pasig, C=PH, SERIALNUMBER=CS200615903, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.3=PHValidran during the lab session
    C:\Program Files\datronicsoft\spacedesk\spacedeskConsole.exe
    sha256 654a7e69295615958c5634f35fdffc3dda23f6e96dc6c2775b57c14d8b5a34ff
  • spacedeskservicetray.exesigned by CN=Datronicsoft Inc., O=Datronicsoft Inc., L=Pasig, C=PH, SERIALNUMBER=CS200615903, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.3=PHValidran during the lab session
    C:\Program Files\datronicsoft\spacedesk\spacedeskServiceTray.exe
    sha256 5996e6b209a76732446e7b258cd73bb8f04441a8543111048e0d7727b743dd54

Drivers

  • spacedeskDriverAndroidControl
  • spacedeskDriverBus

Services

  • spacedeskService (Auto)"C:\Program Files\datronicsoft\spacedesk\spacedeskService.exe"

After the reboot

Autostart entries

  • service: spacedeskService"C:\Program Files\datronicsoft\spacedesk\spacedeskService.exe"

What it talked to

Destinations

  • 217.160.0.102:443asked by spacedeskconsole.exe

DNS

  • spacedesk.netasked by spacedeskconsole.exe