95f758a8cd8a89601398c4f43d3fe7f27c287d2d116a2846714d6805b5396a4e

Resubmissions

20/08/2026, 10:10

20/08/2026, 10:09

user interaction
yes
max time kernel
49s
max time network
53s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 10:10

Reason

Machine shutdown

Target
WASD - Tweak - V2.zip
Size 2KB
Sample260820-l7hhpscf49
SHA256 95f758a8cd8a89601398c4f43d3fe7f27c287d2d116a2846714d6805b5396a4e
MD5 b31aea60313ddc052428a37d4a85ccae
SHA1 1e9a84a02894439eede007e3b107d8cbdf8f0e46
SHA512 81dd879e97139d15d0009fff99193dbcb25fc60105372c0170fe03d8e3ff4e48a1a297d2cd9070abed4ab6d8353f7a6dfa70d1ca8dea41bd67c033cc4de4460d
TLSH
T1C5410A06C5B59285D417DB3A6450838F405C5FF3A4D85B3F268A29B01883BF9CF23699
MD5 SHA1 SHA512 TLSH

Score

1^/10

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent	LogonUI.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = 99ebff004cc2ff000091f8000078d4000067c000003e9200001a6800f7630c00	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0"	LogonUI.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4416	LogonUI.exe

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\WASD - Tweak - V2.zip"
1⤵
PID:5256

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1428

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k CameraMonitor
1⤵
PID:2192