8cdb4a6406dce9eb74a98f7cc5abc80ce471a850ef2c3d1dd964d3195c10a2ad

Analysis

max time kernel
43s
max time network
51s
platform
windows7_x64
resource
win7-20231025-en
resource tags

arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
submitted
16-11-2023 15:51

Target

Geometry Dash/GeometryDash.exe
Size

6.5MB
MD5

47b4e0d8ab93a33cd20f902a387ac7e7
SHA1

89187e3a148e8ca063d0e0b008f3c7cd6a0a4729
SHA256

5db66b8f102b6914e752c404aebb2fe6af5a31ded5494a6a844c22077a8c75e0
SHA512

9fe8c85d3097162389a22cc0c204ca84c7c864fa4dbfc52988883dc2456f8474ceb81e95350a32d90520654bcb0c3596044ba5fae6d9a7eacdb9a38e61d0a547
SSDEEP

49152:Bug8dPHi2XXq8dWlHIuKO77iX+4LVoVNG+w6xfS+w6xfSExfSRaTQAYjzDTjE:QDnq8W9KO7epGVNVVxfS+VxfSgfSR

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

2544 2740 WerFault.exe GeometryDash.exe

pid	pid_target	process	target process
2544	2740	WerFault.exe	GeometryDash.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

GeometryDash.exe

description	pid	process	target process
PID 2740 wrote to memory of 2544	2740	GeometryDash.exe	WerFault.exe
PID 2740 wrote to memory of 2544	2740	GeometryDash.exe	WerFault.exe
PID 2740 wrote to memory of 2544	2740	GeometryDash.exe	WerFault.exe
PID 2740 wrote to memory of 2544	2740	GeometryDash.exe	WerFault.exe

C:\Users\Admin\AppData\Local\Temp\Geometry Dash\GeometryDash.exe
"C:\Users\Admin\AppData\Local\Temp\Geometry Dash\GeometryDash.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2740

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 2740 -s 320
2⤵
- Program crash
PID:2544