1e2897e81f954e536ec0fd59a517ac29db440b115741e4c8d67c1f038b82bd07

Analysis

max time kernel
130s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
10/03/2023, 20:50

Target

Aseprite.v1.2.40/Aseprite.v1.2.40/Aseprite.exe
Size

17.6MB
MD5

d0b60498c0b38bf245b574a09fb0512f
SHA1

77e6d027f2c8a627f995abfabe2dde33eb33e910
SHA256

012d903c0be77f2ed0fa76fe3f75a6ea173d235d478f10814199e70832b2d5f0
SHA512

d9fd0f49d2cd3832b8c5da308c7f623b57fae660e336de2bcfbbefadae38776958341ca04e70e4f7abd7e7ec84a79335779f478ca938b4d8009136c552ae4b20
SSDEEP

98304:f/0fOcvjVIIl7po6QeLN2uX0zDMvdalOD4KE2x9rwV67rQIVvL5FiRzM6svMA3H2:ELJVCRI6svMAXc6o9tYaEIZhZH

Score

1^/10

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2212	Aseprite.exe
2212	Aseprite.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 2212 wrote to memory of 632	2212	Aseprite.exe	85
PID 2212 wrote to memory of 632	2212	Aseprite.exe	85

C:\Users\Admin\AppData\Local\Temp\Aseprite.v1.2.40\Aseprite.v1.2.40\Aseprite.exe
"C:\Users\Admin\AppData\Local\Temp\Aseprite.v1.2.40\Aseprite.v1.2.40\Aseprite.exe"
1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2212
- C:\Users\Admin\AppData\Local\Temp\Aseprite.v1.2.40\Aseprite.v1.2.40\aseprite_crashpad_handler.exe
  C:\Users\Admin\AppData\Local\Temp\Aseprite.v1.2.40\Aseprite.v1.2.40\aseprite_crashpad_handler.exe --no-rate-limit --database=C:\Users\Admin\AppData\Roaming\Aseprite\crashdb --metrics-dir=C:\Users\Admin\AppData\Roaming\Aseprite\crashdb --url=https://o952035.ingest.sentry.io:443/api/5901269/minidump/?sentry_client=sentry.native/0.5.0&sentry_key=c5ddc970388d4c0a94db6e5d50d384ed --attachment=C:\Users\Admin\AppData\Roaming\Aseprite\crashdb\25bc8025-2201-4a52-2cf1-fa5516ab58f6.run\__sentry-event --attachment=C:\Users\Admin\AppData\Roaming\Aseprite\crashdb\25bc8025-2201-4a52-2cf1-fa5516ab58f6.run\__sentry-breadcrumb1 --attachment=C:\Users\Admin\AppData\Roaming\Aseprite\crashdb\25bc8025-2201-4a52-2cf1-fa5516ab58f6.run\__sentry-breadcrumb2 --initial-client-data=0x32c,0x330,0x334,0x308,0x338,0x7ff7b228e1c0,0x7ff7b228e1e0,0x7ff7b228e1f8
  2⤵
  PID:632