Suspicious 80% windows Download

RigSmith.ClaudeRig

Credential access, process injection APIs

Authenticode chain CN: Bright Shore Technologies, Inc.Platform or developer signing evidence
SHA-25685824be5d1bd967f3339581c11cb7aa66116162171b5dc071d9b04c6ad950214
URLhttps://github.com/rigsmith/rigsmith/releases/download/v1.14.0/clauderig_1.14.0_windows_arm64.zip
MaleculeK(Te)O₃(CaCoDy)H₆(Cm₈Cr₉Db₂F₈Os₈Po₁₁)Md₄(BkPaSi₄)

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.