17dbb090f75edfc9eaa6cc061aab1fe9fb697859bb46cd8749f813a9e672b6e1

Analysis

max time kernel
98s
max time network
117s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
15-02-2023 05:19

Target

2023-02-14_da213e9356c6d03be271ca210c8996a9_kovter.exe
Size

1.1MB
MD5

da213e9356c6d03be271ca210c8996a9
SHA1

02ab4b909c50f7eb0467f4db3f8ced1459bd1047
SHA256

17dbb090f75edfc9eaa6cc061aab1fe9fb697859bb46cd8749f813a9e672b6e1
SHA512

ec9c07480cd56a6a85a09bd45ad54c8b4b9721ba18bea59279bd6709204398293af51358d7d3ecae2a5bd6d95586127c0fa1361be8147edff3f654a4727aade5
SSDEEP

12288:JBd0laUjFAE90XxIw8k8omnpDAEPGZHRW+RuZT4ay:Hd05jFz90XxIa8oKpDAEeZHRHRuZTFy

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

632 3640 WerFault.exe 2023-02-14_da213e9356c6d03be271ca210c8996a9_kovter.exe

pid	pid_target	process	target process
632	3640	WerFault.exe	2023-02-14_da213e9356c6d03be271ca210c8996a9_kovter.exe

C:\Users\Admin\AppData\Local\Temp\2023-02-14_da213e9356c6d03be271ca210c8996a9_kovter.exe
"C:\Users\Admin\AppData\Local\Temp\2023-02-14_da213e9356c6d03be271ca210c8996a9_kovter.exe"
1⤵
PID:3640

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3640 -s 216
2⤵
- Program crash
PID:632

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 3640 -ip 3640
1⤵
PID:4788