c24e23d2f128e8e14604611bd2ec42ce8c73f9e9efff80cddf62fab57a0989b0

Analysis

user interaction
yes
max time kernel
5s
max time network
7s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/10/2026, 19:43

Reason

Machine shutdown

Target
LauncherSetup.exe
Size 15KB
Sample261020-yfna4avvbx
SHA256 c24e23d2f128e8e14604611bd2ec42ce8c73f9e9efff80cddf62fab57a0989b0
MD5 6cee74bd788f655ff95eec9e57178287
SHA1 7e079eb7928ed7306a843b35dd22696ae7a845b4
SHA512 774b09367c003646485ddf5467174605f275c4f5f7bea4846df3d6c4d46cb58b97ad9fc8004387f48eb03cedc52b5804af8ecc549c65dd6633af9f3d6c14e639
SSDEEP 192:LLvBDn7X4jmfDywdzfeo3BZKx15ZPyVF6tXJTARtXJTAGM0LET:LlDkjmfWwhe48PAF6tXJTUtXJTb1i
TLSH
T1AA62A35F371349E9C25AD8B4C1E39F34BB70FD024E91473E4234EA720E747A66A2A719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = 99ebff004cc2ff000091f8000078d4000067c000003e9200001a6800f7630c00	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0"	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent	LogonUI.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4136	LauncherSetup.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4648	LogonUI.exe

C:\Users\Admin\AppData\Local\Temp\LauncherSetup.exe
"C:\Users\Admin\AppData\Local\Temp\LauncherSetup.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4136

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k CameraMonitor
1⤵
PID:3552