Windows Golang / Default Windows Wallpaper Check
| Author | Issac Briones (1d8) | 
| Platform | Windows | 
| Language | Golang | 
| Technique | Default Windows Wallpaper Check | 
Code
package main
import (
	"golang.org/x/sys/windows/registry"
	"fmt"
)
func main() {
	k, err := registry.OpenKey(registry.CURRENT_USER, `CONTROL Panel\\Desktop`, registry.QUERY_VALUE)
	if err != nil {
		fmt.Println(err)
	}
	defer k.Close()
	s, _, err := k.GetStringValue("Wallpaper")
	if err != nil {
		fmt.Println(err)
	}
	if (s == "C:\\Windows\\web\\wallpaper\\Windows\\img0.jpg") {
		fmt.Println("[+] Default wallpaper detected! Possible sandbox/VM...")
	} else {
		fmt.Println("[+] Wallpaper isn't set to default. Continuing checks...")
	}
}Created
December 3, 2024
Last Revised
December 3, 2024