Overview

overview

7

Static

static

3

account switcher.exe

windows10-2004-x64

7

account switcher.exe

windows11-21h2-x64

7

Analysis

  • max time kernel
    96s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    15/08/2026, 19:05

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    account switcher.exe
  • Size 17.4MB
  • Sample260815-xrzb3asydz
  • SHA256 b3e117a784a1ea2cb0e702d7c293ab60cfa428d0324263d002a236850f8cfc1f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 41 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\account switcher.exe
    "C:\Users\Admin\AppData\Local\Temp\account switcher.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4488
    • C:\Users\Admin\AppData\Local\Temp\account switcher.exe
      "C:\Users\Admin\AppData\Local\Temp\account switcher.exe"
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:3204

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        SDL2_image.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\SDL2_image.dll
        • Size 154KB
        • SHA256 71607e840f462799652023d394fad7aed1f348a3cd52f88a8b3b7842fa7a3147
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SDL2_mixer.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\SDL2_mixer.dll
        • Size 416KB
        • SHA256 0edd228575842920848b204cf7b9707d4159366d8ed7cee74c592462a3a503fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SDL2_ttf.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\SDL2_ttf.dll
        • Size 1.7MB
        • SHA256 86febaf2ca137e417808a646b5920cdd10d7093b30a2071abde40b012c923c3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 6a99bc0128e0c7d6cbbf615fcc26909565e17d4ca3451b97f8987f9c6acbc6c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\_bz2.pyd
        • Size 85KB
        • SHA256 d28c3dd1c22bfb8a6e8a6a9c2359842b797d08e878ecb7805f60e86a45589d11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\_ctypes.pyd
        • Size 139KB
        • SHA256 25d9b0be550d428fecc697ca20450343a7c3ce77c9f5283e9aecfd188d609250
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _decimal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\_decimal.pyd
        • Size 283KB
        • SHA256 8d41a84db20a9b985e98c802ad6833cf9625c744ad35478dd346f54f81488706
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\_hashlib.pyd
        • Size 67KB
        • SHA256 36ce760b9fac53fe51755f30a68d86f5fde89bf1b66c65c19e04aa3afa404ac2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\_lzma.pyd
        • Size 157KB
        • SHA256 5f7003f9f0256e36351ca2810b3485db28579b08e4d1d65f6f211fcd1136f395
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\_socket.pyd
        • Size 85KB
        • SHA256 25ac83cac32ed0d67b2cc9672ce64cb53f0a29a75b14c276e901023ff43da5f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\_ssl.pyd
        • Size 186KB
        • SHA256 5c07572df2913618cfb851b608cb5f74d740fcce5c3f2e63dc0a2ba39ab35dad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\_wmi.pyd
        • Size 39KB
        • SHA256 0ab1fbcf18c95d70343012feb1aad61e1ba95aaed5b4a08e57fc5990e8a9a452
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _zstd.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\_zstd.pyd
        • Size 491KB
        • SHA256 262aea62a994920daf152a10bdc0ca83a8b1c0874e71db23734862431de182c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\base_library.zip
        • Size 1.3MB
        • SHA256 347de726f251f59b4ad576b664b93df6bdc6f1d8e0b4b1b5416a02abd657ef66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        freetype.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\freetype.dll
        • Size 639KB
        • SHA256 1c487392d6d06970ba3c7b52705881f1fb069f607243499276c2f0c033c7df6f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\libcrypto-3.dll
        • Size 6.0MB
        • SHA256 53c529145339fb042a3dcd3a09c2d7753204f8b4fc79d99e0d31e69a33985958
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libjpeg-62.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\libjpeg-62.dll
        • Size 1.1MB
        • SHA256 207c139e6029741b786d08942dbad54127520b361dda56228e660e4d556d8ca1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libogg-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\libogg-0.dll
        • Size 32KB
        • SHA256 76344182f53695db65fca5921ab4e478cdf2f954d86628b27dab0fb9327bf2e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libopus-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\libopus-0.dll
        • Size 359KB
        • SHA256 064aaa2aee76ac93df0f9ec78a670a49954e3f4ac1bc1fd70ebda2f035ccc073
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libopusfile-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\libopusfile-0.dll
        • Size 47KB
        • SHA256 31f695d1e45596aa29a3fa4e694ce3a5355216ddc74d15f1b3739cc09bbda529
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libpng16-16.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\libpng16-16.dll
        • Size 243KB
        • SHA256 fb243cedb9b55b9095596be133636f7681f31a4b0d2ab54607551addb1f60902
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\libssl-3.dll
        • Size 1.3MB
        • SHA256 b17a87979862d19241edc4318f967e24c3ec356ed6c2368f561179fab2311001
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libtiff-5.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\libtiff-5.dll
        • Size 376KB
        • SHA256 32a7816d6480f06bc5b8b030f134852b0e2d9f07fc3a4c06e0419a7f3b77671b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libwavpack-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\libwavpack-1.dll
        • Size 167KB
        • SHA256 eb288e9e8d18e5477dcaffd49712daa393bcb58f8dbd988027a53a8684654ee7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libwebp-7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\libwebp-7.dll
        • Size 434KB
        • SHA256 6f9a53679ef7b9b55cd479bc5ef840e196368630e7930b8669bd3a1a6c0ddc75
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libwebpdemux-2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\libwebpdemux-2.dll
        • Size 23KB
        • SHA256 53645d4daf4379e8e454d28d6eaaf2949ab0f1686b2fc3edf529b5f2560dd971
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libxmp.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\libxmp.dll
        • Size 404KB
        • SHA256 53e9650b772fc510f70d5e307e8c7802fb205124113c1f1d994d2142b2b39d05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        plugin.mp3
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\plugin.mp3
        • Size 2.2MB
        • SHA256 5bb3bd54a567f3f0be877536edfd124eb1c27967e328fac25d79b79643735d43
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        portmidi.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\portmidi.dll
        • Size 41KB
        • SHA256 c9f8d9043ac1570b10f104f2d00aec791f56261c84ee40773be73d0a3822e013
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SDL2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\pygame\SDL2.dll
        • Size 1.5MB
        • SHA256 b37740a72a7a9706216df9f0134894bb7a850b356fd149398c67d874cbcfacb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base.cp314-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\pygame\base.cp314-win_amd64.pyd
        • Size 30KB
        • SHA256 9976a480dbd7ffcd1557a3a6a26d3c5a632faf0aaf1493686107b5b2ace07b9d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bufferproxy.cp314-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\pygame\bufferproxy.cp314-win_amd64.pyd
        • Size 17KB
        • SHA256 6e3ca0d592b5dc2e160937d78e62b813ae32bcb03438a17e349e276a2faf9a7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        color.cp314-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\pygame\color.cp314-win_amd64.pyd
        • Size 40KB
        • SHA256 c31843681df0bf16d1bfc655fb5949fa08027c1ac83e0e566495e9aa27540bc6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        constants.cp314-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\pygame\constants.cp314-win_amd64.pyd
        • Size 50KB
        • SHA256 64a9a264a08557608c186293863ce3e95aa5dc4c236967fbfd43732b9fcfadf7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        display.cp314-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\pygame\display.cp314-win_amd64.pyd
        • Size 48KB
        • SHA256 ab639341fa0ba074e86b12e9740f2fa932d1e2d7f53c7556d0b7a8acc7194815
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        math.cp314-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\pygame\math.cp314-win_amd64.pyd
        • Size 72KB
        • SHA256 90fac5458d66ea8c6d7f0706dc3a537d9f83e5b54a6da70265af569ffa223ab8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rect.cp314-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\pygame\rect.cp314-win_amd64.pyd
        • Size 70KB
        • SHA256 19cfe725daf3696109bbfe58b37c8c10c1d117852164e97c60ad0335a13eada2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rwobject.cp314-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\pygame\rwobject.cp314-win_amd64.pyd
        • Size 18KB
        • SHA256 b3e21348dfe9c4c4c810cb040af09fd7ccd8069c415b0134862bc7f2548a3821
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        surface.cp314-win_amd64.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\pygame\surface.cp314-win_amd64.pyd
        • Size 237KB
        • SHA256 d767e9b20b408bd5897054146d7d241a4b185d12cc33b8fae91576713faec0a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python314.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\python314.dll
        • Size 6.5MB
        • SHA256 fde89cdb5c2d08ae65de7ef4abca1876c93ba3796002f5ac0bf7e4d4f5a94da0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\select.pyd
        • Size 32KB
        • SHA256 fab1b4cee101359d82d72061b83cff1855337b3677b9fe01cd69f7548f4c496e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI000011882\unicodedata.pyd
        • Size 741KB
        • SHA256 0d4f124b2d6622d276d777f7106972219f9b310edb5df8149c253da7c013d6d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download