435844f4e1a57fbfa40edf039ac0b29fab6c4115adbaba2ff2907c921a6aac2b

Analysis

max time kernel
79s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
15-02-2023 05:20

Target

2023-02-14_75ad544ceac0f47859e0f5417b950889_kovter.exe
Size

1.1MB
MD5

75ad544ceac0f47859e0f5417b950889
SHA1

5e4976f34abe798ec40087d4a4831e60040cd7dc
SHA256

435844f4e1a57fbfa40edf039ac0b29fab6c4115adbaba2ff2907c921a6aac2b
SHA512

cd9b17097d4f3d878966ef3f6f8269db3cf96ae517d593b3521761de4ee0fc3b8c8a2e1f603b90ffe73f6426bd5648f9d2f0dbecf6904f96568909745cb9db95
SSDEEP

24576:BiIxSqmMEiPPHxXaUHtauiIxLmKPPH3paUS:NSqmKPvxqUHIOLmKPvgUS

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4576 4692 WerFault.exe 2023-02-14_75ad544ceac0f47859e0f5417b950889_kovter.exe

pid	pid_target	process	target process
4576	4692	WerFault.exe	2023-02-14_75ad544ceac0f47859e0f5417b950889_kovter.exe

C:\Users\Admin\AppData\Local\Temp\2023-02-14_75ad544ceac0f47859e0f5417b950889_kovter.exe
"C:\Users\Admin\AppData\Local\Temp\2023-02-14_75ad544ceac0f47859e0f5417b950889_kovter.exe"
1⤵
PID:4692

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4692 -s 216
2⤵
- Program crash
PID:4576

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4692 -ip 4692
1⤵
PID:1216