094f1679afec5ba28beb2ff79e210f62a9b6583a3a443e040edff0cd02583487

Analysis

max time kernel
133s
max time network
452s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2023 07:53

Target

Geometry Dash/GeometryDash.exe
Size

6.5MB
MD5

47b4e0d8ab93a33cd20f902a387ac7e7
SHA1

89187e3a148e8ca063d0e0b008f3c7cd6a0a4729
SHA256

5db66b8f102b6914e752c404aebb2fe6af5a31ded5494a6a844c22077a8c75e0
SHA512

9fe8c85d3097162389a22cc0c204ca84c7c864fa4dbfc52988883dc2456f8474ceb81e95350a32d90520654bcb0c3596044ba5fae6d9a7eacdb9a38e61d0a547
SSDEEP

49152:Bug8dPHi2XXq8dWlHIuKO77iX+4LVoVNG+w6xfS+w6xfSExfSRaTQAYjzDTjE:QDnq8W9KO7epGVNVVxfS+VxfSgfSR

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4512 2856 WerFault.exe GeometryDash.exe
Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

GeometryDash.exe

pid process

2856 GeometryDash.exe
2856 GeometryDash.exe

pid	pid_target	process	target process
4512	2856	WerFault.exe	GeometryDash.exe

pid	process
2856	GeometryDash.exe
2856	GeometryDash.exe

C:\Users\Admin\AppData\Local\Temp\Geometry Dash\GeometryDash.exe
"C:\Users\Admin\AppData\Local\Temp\Geometry Dash\GeometryDash.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2856

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2856 -s 1060
2⤵
- Program crash
PID:4512

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 456 -p 2856 -ip 2856
1⤵
PID:4460