34c9bc34cb5a4c02c25327b102e0fded899ede2327873730880a4d440568da90

Analysis

max time kernel
68s
max time network
70s
platform
windows11-21h2_x64
resource
win11-20240611-en
resource tags

arch:x64arch:x86image:win11-20240611-enlocale:en-usos:windows11-21h2-x64system
submitted
25/06/2024, 16:18

Target

YouAreAnIdiot.exe
Size

424KB
MD5

e263c5b306480143855655233f76dc5a
SHA1

e7dcd6c23c72209ee5aa0890372de1ce52045815
SHA256

1f69810b8fe71e30a8738278adf09dd982f7de0ab9891d296ce7ea61b3fa4f69
SHA512

e95981eae02d0a8bf44493c64cca8b7e50023332e91d75164735a1d0e38138f358100c93633ff3a0652e1c12a5155cba77d81e01027422d7d5f71000eafb4113
SSDEEP

6144:XgasGR5rnK2Qh9lp2E9ThHZmnRRQh9lp2E9ThHZmf:XgasmWrjJ1ZmwjJ1Zmf

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
3136	4732	WerFault.exe	78

C:\Users\Admin\AppData\Local\Temp\YouAreAnIdiot.exe
"C:\Users\Admin\AppData\Local\Temp\YouAreAnIdiot.exe"
1⤵
PID:4732
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4732 -s 1452
  2⤵
  - Program crash
  PID:3136

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4732 -ip 4732
1⤵
PID:4556

memory/4732-0-0x0000000074D2E000-0x0000000074D2F000-memory.dmp

Filesize
4KB

Download
memory/4732-1-0x00000000005F0000-0x0000000000662000-memory.dmp

Filesize
456KB

Download
memory/4732-2-0x00000000050C0000-0x000000000515C000-memory.dmp

Filesize
624KB

Download
memory/4732-3-0x0000000005740000-0x0000000005CE6000-memory.dmp

Filesize
5.6MB

Download
memory/4732-4-0x0000000005230000-0x00000000052C2000-memory.dmp

Filesize
584KB

Download
memory/4732-5-0x00000000051B0000-0x00000000051BA000-memory.dmp

Filesize
40KB

Download
memory/4732-6-0x00000000053C0000-0x0000000005416000-memory.dmp

Filesize
344KB

Download
memory/4732-7-0x0000000074D20000-0x00000000754D1000-memory.dmp

Filesize
7.7MB

Download
memory/4732-8-0x0000000005460000-0x000000000546A000-memory.dmp

Filesize
40KB

Download
memory/4732-9-0x0000000074D20000-0x00000000754D1000-memory.dmp

Filesize
7.7MB

Download