a3e3bc087c206914f9d07b056ed58661339dcdacf9ac7af24fdc119300ebce31

Analysis

max time kernel
120s
max time network
103s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
12-05-2024 16:35

Target

2024-05-12_c6c46a0a70566fec92ce0a9bad73cc98_kovter.exe
Size

426KB
MD5

c6c46a0a70566fec92ce0a9bad73cc98
SHA1

4b166c929ebb49fd23de8ace8f6807016c128b1f
SHA256

a3e3bc087c206914f9d07b056ed58661339dcdacf9ac7af24fdc119300ebce31
SHA512

53372196a6341f538b45db4a0002e9bd31bf35545ff41bcf8e9c8ccaf4b4c819421b51dbdaa35bc8ba65fc3a772333ddf6238e28c5e307d89e88cfde0dbd89bb
SSDEEP

6144:ZSL8ORZiBiWCEpXoSASfnZAUTyHwQTzdZZGIsuDO2IgLUnyT+vzjTq:8LjiEaej0nyQQnDZGIFKRgLMvq

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

216 3080 WerFault.exe 2024-05-12_c6c46a0a70566fec92ce0a9bad73cc98_kovter.exe

pid	pid_target	process	target process
216	3080	WerFault.exe	2024-05-12_c6c46a0a70566fec92ce0a9bad73cc98_kovter.exe

C:\Users\Admin\AppData\Local\Temp\2024-05-12_c6c46a0a70566fec92ce0a9bad73cc98_kovter.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-12_c6c46a0a70566fec92ce0a9bad73cc98_kovter.exe"
1⤵
PID:3080

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 3080 -s 244
2⤵
- Program crash
PID:216

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 3080 -ip 3080
1⤵
PID:3988