76199c26622c58fa0a22355d710ef06d86e3cce56def3d9a3c38ea395e48066d

Analysis

max time kernel
142s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
09-03-2023 14:46

Target

2023-03-08_e52021298206c71590c27392abb94691_kovter.exe
Size

362KB
MD5

e52021298206c71590c27392abb94691
SHA1

9f9dbed14bee77d30afe99fc7a395259a9cded27
SHA256

76199c26622c58fa0a22355d710ef06d86e3cce56def3d9a3c38ea395e48066d
SHA512

50408bf9c4276a4683a1e8bcbea142347dd82b20c21398c16391203dbb68094cb9198e9a9dc68bac7f81c54c27b71b1f0aa2478db1af339e4e1cc3dc7c7a7667
SSDEEP

6144:xii9gD+iITRy1fGN/ekNymaSszzRm663xjxc6BN/47Ar68SdQtqcK7:Hgi/GfGpJCR+3547Ar6tdb/

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1924 4244 WerFault.exe 2023-03-08_e52021298206c71590c27392abb94691_kovter.exe

pid	pid_target	process	target process
1924	4244	WerFault.exe	2023-03-08_e52021298206c71590c27392abb94691_kovter.exe

C:\Users\Admin\AppData\Local\Temp\2023-03-08_e52021298206c71590c27392abb94691_kovter.exe
"C:\Users\Admin\AppData\Local\Temp\2023-03-08_e52021298206c71590c27392abb94691_kovter.exe"
1⤵
PID:4244

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4244 -s 192
2⤵
- Program crash
PID:1924

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 460 -p 4244 -ip 4244
1⤵
PID:1684