f4054cff11bed4262ce7f99fd3cb69c3358102cf3543ddc4428742b73745fde9

Analysis

max time kernel
0s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
11/10/2022, 07:32

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\HRSword-main\Drivers\sysdiag_win10.exe command="C:\Users\Admin\AppData\Local\Temp\HRSword-main\Drivers\sysdiag_win10.exe" wdir=C:\Users\Admin\AppData\Local\Temp\HRSword-main\Drivers Payload error: The %1 application cannot be run in Win32 mode.

Report Analysis Logs

General

Target

HRSword-main/Drivers/sysdiag_win10.exe
Size

391KB
MD5

84ee73ab5074449c1f732508b259ec49
SHA1

0db80f225d165f54fb20305e5265aae5215dfd0e
SHA256

418689701aa8a13564cc4d7437fbd24e47f36ea079d4aa655174de24a94a8171
SHA512

cfc1af32030caf94733958e26c7963341055b245a402ae8960d94a4b4e94f8d692bc647a5515c7c46cf835b413e4a5e57ac014fc7ddcd27afac2805ac4ad7934
SSDEEP

6144:K1k26QgF3qZsZm6q9pkkKbJk9NXsWym3c4yg/yHYVTMI3hbNK4P:K1gJFaGmX98kQWM4yP4VJhL

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\HRSword-main\Drivers\sysdiag_win10.exe
"C:\Users\Admin\AppData\Local\Temp\HRSword-main\Drivers\sysdiag_win10.exe"
1⤵
PID:1064

Windows 7 deprecation

Loading Replay Monitor...

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads