Analysis
- max time kernel
149s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
26/10/2026, 16:38
General
- Target DisplaySwitch.exe
- Size 1.8MB
- Sample261026-t5mnmsfs41
- SHA256 775296b6dd6bfbb3684d272a70606f40c2311a5c144f1328b37117e3b3ff074c
Score
3/10
Malware Config
Signatures
- Event Triggered Execution: Accessibility Features 1 TTPs
Windows contains accessibility features that may be used by adversaries to establish persistence and/or elevate privileges.
Processes
-
C:\Users\Admin\AppData\Local\Temp\DisplaySwitch.exe"C:\Users\Admin\AppData\Local\Temp\DisplaySwitch.exe"1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k DevicesFlow -s DevicesFlowUserSvc1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k DevicesFlow -s DevicePickerUserSvc1⤵
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k DevicesFlow -s DevicesFlowUserSvc1⤵