3416d45c89416a1c3ffaeab70cd88fa4e9703dbf49197d559b0db4bc4747c932

Analysis

max time kernel
149s
max time network
151s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
02/08/2026, 03:59

Target
fragment.exe
Size 11.3MB
Sample260802-ej63tscr3z
SHA256 3416d45c89416a1c3ffaeab70cd88fa4e9703dbf49197d559b0db4bc4747c932
MD5 ef72c592e872798bd43c7e4b17e9b810
SHA1 ea2e255c054609230189d1fedbf57a4a7557d409
SHA512 ef3be870dc2d09ca653147cd98fbbdc9846ec3d96449e76bd6a5e1f62c807aa585e4726c51d5b353e65f6011a4c6794a6cdd11560586667d99a7b36847b20410
SSDEEP 49152:r1MKwx4odNKJEVe3ThIO2ZHY5ikV1ufbftGzcornqMB0HO3Jt/DnVTl:BwxphsVxzBrPt/
TLSH
T175C653E4F1262BA4E837FD35641D7579839A5900FB39E03788FEEF2225B4DB404253A6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
848	fragment.exe
848	fragment.exe

C:\Users\Admin\AppData\Local\Temp\fragment.exe
"C:\Users\Admin\AppData\Local\Temp\fragment.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:848