77568c7d6f1e8dfed16ff6d7c94cd77ba5a0169fc3d2da3bf605ce92199ee8d2

Analysis

user interaction
yes
max time kernel
460s
max time network
454s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/08/2026, 07:56

Target
anydesk.exe
Size 37.6MB
Sample260825-jsrfysvvbt
SHA256 77568c7d6f1e8dfed16ff6d7c94cd77ba5a0169fc3d2da3bf605ce92199ee8d2
MD5 9ed7758ebd09d1c0a0c39b13cdb4acc7
SHA1 7a196cf537c55fb3ccc59f30624c55a29ea827a0
SHA512 7c6f78dfe3861e8c9b29e1c1e866711b5e4ee9045cc50746b974326441c4cc8bd49b885e631efcafd76aaa436b134e1f8fdab4d0c2b7a88fc8d79502eca7b894
SSDEEP 786432:2zFn/rb7q4bMCu4oHfOp1VleAzGlx6P7h9rF:2zFn/jqIoQe8Ph9x
TLSH
T1C087D022F910926EDAC501F1A9BCAF3D273D4FA413655BCB62CC1D6C7A324C25737A26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
6496	5220	WerFault.exe	90

C:\Users\Admin\AppData\Local\Temp\anydesk.exe
"C:\Users\Admin\AppData\Local\Temp\anydesk.exe"
1⤵
PID:5220
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 5220 -s 232
  2⤵
  - Program crash
  PID:6496

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 5220 -ip 5220
1⤵
PID:3192

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5544

memory/5220-0-0x0000000000400000-0x00000000029BC000-memory.dmp

Download