Account Unknown(S-1-15-3-65536-1888954469-739942743-1668119174-2468466756-4239452838-1296943325-355587736-700089176)

sometimes Windows System would look more sus, also its account unknown because it doesn't have a name

I've discovered the same account associated with "Special Permissions" on my OS Drive. Just removed it, but in the process made a connection back to a strange occurance around a month ago where the entire size of all of my harddrives were downloaded within two hours on the same day. Here are all of the logs from that day including a picture I took shortly after the discovery. Eventually "MSFT 5.0" masked itself with my Computer Name too.

It will not allow me to post the raw images on this thread so you can find all related logs in this google share drive.

Main folder with logs included from Norton Security/Windows/ASUS Router at time of occurance: https://drive.google.com/drive/folders/1DlowoBjYtDrfV7EydHf3lNqYUsj4Zk-5?usp=drive_link

SSID Before Spoof: https://drive.google.com/file/d/18EZ9NHzZpjISMOF1JHuJvvnOTta8wiPm/view?usp=drive_link

SSID After Spoof: https://drive.google.com/file/d/1r9JBJyKg67No-jEn61qXZJcAdn5KoU5O/view?usp=drive_link

You'll notice in the logs that Windows Update and General were the specified downloading applications, a little further digging and diahost.exe was responsible for the 1.3TB+ DL to who knows where.

hi dave

why microsoft named it like that,"unknown account" , not something friendly name like "windows background program" or some thing like that,it kind a suspicious for me :V, but thnks god i got the answer before i reset my windows back

This has been a plague on me since January to the tune of nearly $300 and a new drive since my system has been just eating its self due to these errors and what not. Not to mention dumping hours into manually scanning through the registry finding hundreds of inf issues and entries that do not belong 😭 Microsoft really does need to fix these issues

By labelling users this way (or rather "unlabelling" them), Microsoft is normalizing the viewing of information that should make us suspicious, increasing the likelihood of ignoring a real threat in the future. Cybersecurity threats will never be taken truly seriously until someone manages to hack and remotely ignite the launching of a nuclear bomb.