f4054cff11bed4262ce7f99fd3cb69c3358102cf3543ddc4428742b73745fde9

Analysis

max time kernel
0s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
11/10/2022, 07:32

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\HRSword-main\Drivers\hrwfpdrv.exe command="C:\Users\Admin\AppData\Local\Temp\HRSword-main\Drivers\hrwfpdrv.exe" wdir=C:\Users\Admin\AppData\Local\Temp\HRSword-main\Drivers Payload error: The %1 application cannot be run in Win32 mode.

Report Analysis Logs

General

Target

HRSword-main/Drivers/hrwfpdrv.exe
Size

114KB
MD5

a1046e14d0b388304b55d36898665d96
SHA1

ccc5a579a58a0ab730d168caaafee98827fd8cfd
SHA256

b09c9751ac0151d06d9dc39caf35cee7f07457867c9f23dac164bf830a498681
SHA512

067e312457b2885593a756d96907c7173aaf61389ea58a21049697ac23dbf45c254f11455dd22b9428731c07de068eb39a7f2c36c0a3087b6f51b7071107b95d
SSDEEP

3072:7usLCBAkordKZExYaPNKumDwb8Z9XRvjlDCk:7usLPY+kUwZRRJ

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\HRSword-main\Drivers\hrwfpdrv.exe
"C:\Users\Admin\AppData\Local\Temp\HRSword-main\Drivers\hrwfpdrv.exe"
1⤵
PID:1372

Windows 7 deprecation

Loading Replay Monitor...

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads