e5a4734d26b0a93e6408039d97caea714f343d3e1888cfb99094e2d7d20678a4

Analysis

max time kernel
95s
max time network
109s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
09-03-2023 14:50

Target

2023-03-08_39f2751c7958770c341a1d95869fe4da_kovter.exe
Size

362KB
MD5

39f2751c7958770c341a1d95869fe4da
SHA1

c3d9fec8791bd77c3aa2fb5a8cc7248818b5898d
SHA256

e5a4734d26b0a93e6408039d97caea714f343d3e1888cfb99094e2d7d20678a4
SHA512

c3d40732b67b3443330c8089cdc8d790d0f360e81393dc6f3daaae259daa1f535be162917ca723b14b2fec95f3994b66ab1b5d0b467279754951c2a432126187
SSDEEP

6144:Ue9EV2vjQtuJxtH58AkeEf6sy4IV97isv9tv34Fu/ZZRDveQM8QRq+R5:R9EVgjhTP+K99vnZvveX8bW

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4652 1084 WerFault.exe 2023-03-08_39f2751c7958770c341a1d95869fe4da_kovter.exe

pid	pid_target	process	target process
4652	1084	WerFault.exe	2023-03-08_39f2751c7958770c341a1d95869fe4da_kovter.exe

C:\Users\Admin\AppData\Local\Temp\2023-03-08_39f2751c7958770c341a1d95869fe4da_kovter.exe
"C:\Users\Admin\AppData\Local\Temp\2023-03-08_39f2751c7958770c341a1d95869fe4da_kovter.exe"
1⤵
PID:1084

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 1084 -s 216
2⤵
- Program crash
PID:4652

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 424 -p 1084 -ip 1084
1⤵
PID:2372